last executing test programs: 15m47.591087473s ago: executing program 2 (id=579): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone(0x8000, &(0x7f00000000c0)="99713cc1f7b9c54922f189650f0c89ed4d911e3a5fe68796935409d4d1f4a7cecf7ed387a4791c636f8735a8c4dea903db579f6c558a988441092872ae215dbefa", 0x41, &(0x7f0000000200), &(0x7f0000000380), &(0x7f00000003c0)="88ba05c31ba1cce1c0d1050c2f0cdabdbc5e4005173919d8f786") r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x4030582b, &(0x7f00000006c0)={0x0, 0x1, 0x8ed3, 0x100000000, 0x7fffffff, 0xe}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x3c2c, 0x30, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{0x590, 0x1, [@m_skbedit={0x4c, 0x20, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xd}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x9}}]}, {0xf, 0x6, "e611dfeb2f21f5d36edbae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x144, 0x0, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x7, 0x5, 0x2, 0x40}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb4e6, 0xdfc, 0xffffffffffffffff, 0x3, 0x8}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x101, 0x7, 0x3, 0x80}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xfff, 0x3, 0x9, 0x38}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0xffffffffffffffff, 0x7, 0xffffff3d}, 0xb}}]}, {0x8b, 0x6, "29cb15380e0a0e9ee2c585aea63753abc39b0bab2878425436b5ab8b2997f4e0e2cc1356e5757540d46d788334420983eb6bbb3cb26392d8fe8c2d5dddb17b6ef58a5bd07c145453da08454959ed1ab6272409d3b599ef078cf6a8cace699e55f959060c03cc0b32e86c01224a195c0ee49433611bb636d24af38cecd96084cc4f48f774eb286a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x104, 0x1d, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0xb8, 0x6, "61033ffacbe4eea2df3af32d15c4a0b8f5632b35ca894377a31da952e21c8a06156a04645ee2abde57113c2f3c1220695d50eb1da11cf25796b186234c00105258623d76c09d9f62995e14b2438c9325ffaa3b9b1c19955350e772c1f9d1cd9f6ecc65da4eeaf21390a7ea67f4e7419316c92090c61b6d039c4f6d9de9a26c2d10ad291c745ff900c8070f39f4ab6d5ee33bb35919b73d87108c413125651dee08629e2234f028d57f696cb1d1f6a0102ac26750"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_bpf={0x138, 0x14, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x1, 0xffffffffffffffff, 0x3, 0x4}}]}, {0xed, 0x6, "0ccceca89ff2772df2bacb493ad62a188f5e63faf8ff2e69c82be05e1f04516efa8acc18f9f521a2204d0aa549865dd8add5dc161a9cbadb78277b78f913524ddcb36ea900362c1705e8f544720af4d62b447e400358bdddaccf6ac91b1d939c59b088063273d928d1ae6f3c4fb4f215ac0e67afad262f1a55a396cfb1877ba7f7404ef2955bcf53c80abc9cd3b237b136ffa4138ec7dcf10d97205323e326a79aa5f25b80e6d2653d7413403aa61e1563ce9e9d571f45027c83936689448dab3641a8c8b5875e6c87ccc92e49043845cc48d662c2de4752602a405883e9ea96156d3fcc5d4d8be73f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_sample={0xb4, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffff, 0xb1, 0x5, 0x7ff, 0x8f}}]}, {0x6f, 0x6, "4cd7c60a546058d861fb6b8462e2a467eb901472e9fb021106a8c830379f20b976e43ae16b39224721237388726effaf2760c5f30a96d1bcd4af0680787ef10436156bb79acbc84b0cad3a4855d5d37cb74999b02f0c1b6cf22aa41bb085f6c4445cfe4e4f2ae3f68661e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ct={0x10c, 0x6, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xff06, 0x0, 0x10000000, 0x80000001, 0xf74}}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x3, 0x2, 0x80, 0xce4}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xa9d}]}, {0x94, 0x6, "f37c5fac8cb4763940db30021b375767f48b59eecbb133d839b4656029f4cbd1f1030762b8af17d9de32e09aa3eb720182938cc3dcfa3af379bfe92c39f209de554f06d6579eda122c865454a740738825345ba822b02f26f39ae75c242155e86f1625a55b2108c39c02a60c088fc5f02a0425598136a9fd4045329a83066bc78d546f1db74614bea6938fed023a0405"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x1478, 0x1, [@m_skbmod={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="90d337a428bc"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1ff, 0x1, 0x6, 0x8001, 0x6}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x5, 0x8000, 0x9}, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x1d, 0x6, "62b764dfbe9d9e6b7f4ec36f113f563575960c7341a475a01d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x1050, 0x14, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x4, 0x4, 0x10001, 0x80}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x58, 0xb, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x9}}]}, {0x1c, 0x6, "0a04a1a6c452e4fb2bb2b82773e076df9f37e50e1a015195"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x44, 0x8, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "ab3f8dfb32361d055d259dc5f67fe94d29"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xb4, 0x16, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}]}, {0x6e, 0x6, "6809251f6f46e503e7103179750b74999984b921f7a1c25f6b2d0e184533e0a7e0b78c5396743886c3dfa492a3b56a1b7f6a1d30f011b3367cc175000a17501d8d0588aabc4baffe1f937404189cc566649e223f36c1c125553db9e41c1c818a9733693fa83e911b9d9e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x21c, 0xd, 0x0, 0x0, {{0x7}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8000}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x91, 0x6, {0xe0, 'raw\x00', 0x2, 0x0, "b0f07e47e482321c1fc25a585d3404ad0dd5c5f523eac875dbe508cf5033d239e5c7b23372f62910eeda439b29539e2e9ff6244a8a8a934ea4d7c7f50fb349583f2d244881931a7b55256b6c6d8311cb9b579b71655573e742b3bd803d1adaff5117884128b4b9"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xff, 0x6, "97fddf186f61473c830f2cd79861a9d14b70882f7b1a18d4645708011170cb47d3c4a44da9a7d7cb2ba3a8a7f15806e343aceb767227c8fc7231f851012ae82bb483efa0c264901ac99fc34b391f8a127bb8c489571bfe44ce86111547b67a512ea209f61e9e3ff38864a0b7a2675bf97f13d7b4d95c60639427665f3c21d2e803f3ab977d3006b37db5384d2a8d929f96fe98483617f5773d5a2c1371479679ce6bb4ebb8c50352d98844e8fb6695089a79db8b40412e1d824a8240c344b0dadf841f7cc0a898acc9758deb8f9c9681be466fcca070a01ed1ac53c3ca6d6909bd931496d48c6247e5065a57dd954bf6ad016854e077f863538d5c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x19b8, 0x1, [@m_police={0x544, 0x4, 0x0, 0x0, {{0xb}, {0x448, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0xd74f3af, 0x100, 0x5, 0x7, 0x0, 0x3ff, 0x3, 0x10, 0x32, 0x8df, 0x100, 0x9, 0x2, 0x9, 0x80, 0xaa5, 0xffffff27, 0x0, 0x0, 0x5, 0x6, 0x200006, 0x1, 0x3ff, 0x3968, 0x0, 0x8, 0x3, 0x0, 0x5, 0x3, 0xe62d, 0x2, 0x64e, 0x0, 0x1, 0xd, 0xb, 0x8000, 0xf, 0xe57, 0x5, 0x9, 0x3, 0x8001, 0x8, 0x6, 0x8, 0x1, 0x46, 0x1000, 0x63, 0x80, 0xa5d, 0x7fff, 0xffffffff, 0x7, 0x4, 0x6c, 0x3, 0x2, 0x3, 0x4, 0xfffffffe, 0x9, 0x883, 0x9, 0x2, 0x8, 0x81, 0x0, 0x80000001, 0x4af, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x5, 0x200, 0x9, 0x6, 0x3, 0x2, 0x6, 0x10000, 0x7ff, 0x1000, 0x2, 0xe, 0x8, 0xffffff5d, 0x10, 0x4, 0x1000, 0x9, 0x99, 0x400, 0x8, 0x1, 0xf, 0x9f6, 0x1, 0x100, 0x0, 0x2, 0x4, 0x4, 0x81, 0x11, 0x1, 0x9, 0x1, 0x5, 0x1, 0x7, 0x7, 0xc, 0x4, 0x16, 0x2, 0x8, 0x4bb8, 0x6, 0x7, 0x10000, 0x0, 0x8, 0x2000000, 0x8, 0xd49, 0x80000001, 0x8, 0x5, 0x8, 0x12d, 0xad, 0x8, 0x9e9d, 0x3, 0x6, 0x5, 0x3ff, 0x1, 0xa, 0x8, 0xfffffffa, 0x0, 0x0, 0x4, 0x2, 0xf, 0xd5, 0x2cf2, 0x7fffffff, 0x4, 0x8001, 0xd1, 0x0, 0x2, 0x38, 0x401, 0xabb, 0x4, 0xfffff424, 0x6, 0x7fff, 0x7, 0xffff7fff, 0xe2e, 0xfff, 0x4, 0xffffffff, 0xfffffff9, 0x5, 0x543, 0x8000, 0xa, 0x5, 0xdb3, 0xbb50, 0x1000, 0x8, 0x83, 0xe3b3, 0xfff, 0x5, 0x1, 0x6, 0x10001, 0x7f, 0x5, 0x1000, 0x90cb, 0x3, 0x3c24, 0xe, 0xc17d, 0x9, 0x8, 0x8, 0x8001, 0xff, 0x101, 0xfffffdc8, 0x1ff, 0x14, 0xbb02, 0x4, 0x9, 0x9, 0x5, 0x401, 0x1, 0x8, 0x2, 0x6, 0x0, 0x9, 0x7, 0x401, 0xfffffff7, 0x4c, 0xb, 0x9, 0x7fff, 0x6078, 0x9, 0xa26, 0x85ee, 0x6, 0x6, 0x642cdf83, 0x0, 0x51, 0x9, 0x2, 0x800, 0x10000, 0x1f, 0x2a0, 0x2, 0x8, 0x9, 0x7, 0xfffffffe, 0x2, 0x7f, 0x9, 0x6b48, 0x3ca, 0x1]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb63}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0xd1, 0x6, "f18ae82868fdf0766b6dfab64a9b5cd0ff0610f228ceeb777526ab4056ec573f4e78e59dc56e461e0773098fd3525f713b0b6c0b9bc8c5e4628b9ea35895f808192f6f23b2a69c8b80eba23c24ef3c89c9333ee986f907d0ec3e3cd79164f46a28c983a47fbea9ff1502aeac68c61b1a419cdbdad9fe3821cd6bafd8919e2a08628d9a61ef7cf6758779e5bfaf8fd94dd85547d2981de102e05b37a436aa0474c514c188489435a2db39ec5624a70e2744e0f2f4897543b4e3d254698145e3bbc76f446cf6e002408755c9a89e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x100, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7253, 0x2, 0x1, 0xd48a, 0xc7}}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}]}, {0xb3, 0x6, "52066e474ec61517a05713eb6bbf0be9ed1896a4e5c8d78539645e2f61ae408c010eb7f4594fa8f6038e4ac242c84c9d0fe97957d5152436b26c1bd07638860bfcd367a01d6212a107ec091bd423b5bae99e124df3697e287f70f238ab8a9e7be37cc2e65c598552d4c01222f57c225786a854dedf7f760afa6af808fd9640b1b2fccc7061693b1c27297d271148f994aebe348c0f078391693dc7c51fbe6fe741808a1aefc244d3ea52b5221fa225"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xac, 0x12, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x10001, 0x2, 0x9, 0x7fffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x268e, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x195}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x141d, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x262e63a5, 0x5, 0x3, 0x9c75, 0x10}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbcf, 0x8}}]}, {0x1d, 0x6, "a71afe9551c6aa5bfa7a6a0061ac378ee745876073ef9c82c5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x1090, 0x13, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf52c, 0x9, 0xe, 0x80000000, 0x4}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfffffffd, 0x4, 0x2}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd50e, 0x0, 0x5, 0x0, 0x10000000}, 0x2, r7}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xd8, 0xe, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0xba9, 0x4, 0x71a6e504}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x84, 0x6, "edb9eb84e35d5d2fdb23889b14cc02f9e89ac3a5663c287d223a5dd25c8a188860a0ee4b927f2f1c225b6cc1881aa091e0724f03624e1b358b2390c2a1461ebe4f8b1ea6a69071ac5b7fc6082d45c127f26358c7fe6364bdfebcce0d4a7030fa3051e8997f9d4c29e72c250551d8fc9af990120101099566df1d5bf404f48032"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x15c, 0x8, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xff, 0x9, 0x2000000b, 0x3, 0xfff}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x8001, 0xd, 0x80, 0x19ff1cf6}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xe7, 0x6, "d164486b4560df441816d83d92d794343f345c7b26a560a648a425b66b8a2688e9ddbf1d3f2c338e8a5689f83694b3dfe60bc8d8dbabbc0a146102ab58218c898f1c0f9039951b874889b16dd57f18880c3c8a5531d13692dc3129ee1e41d3e5c7bb21d74a895908c9972737c1f0acb5acfd238e59348929bf8d3f95de6de3afcdbd3140c1870831a1cf5f930fb345717771e109132203ccbbfd8b920533acdd73d63b5adaaeb827c1276e3b6cb2dc818c00ed1946136e5f7b2dffe6dfcd98806e5daed549ea2393509a7a8a7ae9c3f24e534de22dbcfa3da665ece5eaf26dd30f069a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x858, 0x1, [@m_vlan={0x100, 0x1c, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x82c}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x768, 0x17c, 0x8, 0x4, 0xe700}, 0x3}}]}, {0x98, 0x6, "3ab4b45031ecd200bcd1d13b77cb2195febf43d73fec3f908d3f042e0bf60e2e32fa4f28d10cd6872dffc4bede74dfd0c0b9cc141cc61bef6daa51796d632849a7c14c2faacc96551e673d47ad8b92c83c6a4c8e58794f60c1d9088af30a2b3f6df5ffb7bc57e6cde52861e750e4c370c30ee10ae7d41f6d6e7c8f17c5635e747ffca3914913ec3819b9d89b8e5909bbee5c270b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xa0, 0x17, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xc0ef, 0x4, 0x20000000, 0x1, 0x59}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xb7f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffffb}]}, {0x1c, 0x6, "221aab2a1c00d29e26fc14a5b55913caef69653c65220646"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x188, 0x1c, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0xffffffffffffffff, 0x8, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x5, 0xa, 0x4}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x9, 0x6, 0xe, 0xd379}, 0x101}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x1c0, 0xc, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x8, 0x4, 0xfff}, @loopback, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3f, 0x1, 0x1, 0x26b1, 0x6}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x652, 0x9, 0x3, 0xe1e, 0x4}, @broadcast, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0xffffffffffffffff, 0x800, 0x6}, @private=0xa010102, @multicast2, 0xff}}]}, {0xf7, 0x6, "5cf38f65f16c6de5f5202339f6f6a904c4b4820bb2564f32e0ee86365a7d9aea0d82aacec98b62d10eff62cec96b23b274c05dafb034c227be04519616429f2404fcc0280dae3aabd9e2fde66568969b2f42c599f51c4e50da703b69833ee016456a1f476e5ef242806adc61977adf4f543526b9fdad2a54ae246fb491bbf63ef4eaaefdd2ebe08affaa0762bfffb86d23d7b87b4479f69d3b8d86881381ff6aad79664f36a3555c0698aac31f0bfb68ab7928e433639c2d216fa25c8d2520a1df7a50c5db5fb11a345fe5b7e888df2ffef09427af6c1bb7784edebb6821704edb0fb3120b4a994215c0ae7df7cb2777856e90"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mirred={0xe4, 0x7, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x0, 0x4, 0x7}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0x3, 0x4, 0x9}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x6, 0x6, 0x7fff}, 0x2, r7}}]}, {0x56, 0x6, "1018862a8bea1e492ad6d71bd8e4195996e05034fb1fc221eb8c9b61cd8b25f7a62cff5140aba73afc6b7f9fa59ae45c082af6ca06db1e4c576f95b7ac2a71fff3b7dd1c4c4e4ccc8bed7bc4c2b11b2ace7f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x13c, 0x11, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x1, 0x8, 0x4, {0x9, 0x0, 0x9, 0xfff8, 0x4, 0x81}, {0x9b, 0x0, 0x0, 0x9, 0x5, 0x4}, 0x3, 0x3ff, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0xb7, 0x6, "9d2e2758b14c258687ad49363dcc85d0f70a7d47a82cf3156c8ff481b9796c9c7110f4326934061bb9b839ffd86756abe3d02b7e6877110960e9ba8af78e3192389c52c4380b2c99ab5cc2d15d40421e9389970bfcfe9ebe3fdb4c07b9ef62a5f7083ca7b8665b0640667a60e65841ad65b4442dcdff359d98d999cb8153f4c726ca26a01d5d6dd46ac684834231c05a793b982ef9bdd1ee1a355d54c0b51d9a746e7403d6e724062b45e14a16feb7639c32c5"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_mirred={0x14c, 0x2, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x6, 0x9, 0x7}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x461, 0x1, 0x6, 0x3, 0x5}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x1, 0x0, 0xfa0, 0x6}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x53, 0x3ff, 0x0, 0x4, 0x4}, 0x1, r7}}]}, {0x9e, 0x6, "ed3a69822adfad31e25c26899fd156a076008cc08c125d15350574a2bfc9c1ddae200ce09669274cc046bce68235c0fa77baaa37acd3c61974aeea295dda3c01ca75496546f60b41ea9ec71981413539dc24fb40277b80cc9569a37310ddb20a07fbbc02f91b129188f7a182c5712f2cb99429f706d93d4289f242828d5a533ea4475165e54d0dec9d6ca49c261a8a0c53711e9fa567a67d8c1c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x3c2c}}, 0x44080) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r7, @ANYBLOB="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", @ANYRES64=r1, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRESHEX=r6, @ANYBLOB="9a5007951ec09b7acf55d93711b77ad279235bb9132d183009cda5db55e1fc35c5ff767d23ab02af580e0059bc3961d4ad399ba9714fa6892700d13fec263597aa9110968026f8446e1997e806eda7257bc0c2dae4ef3569013591387daa2505a72581732cd38271eccab92d7390876f4fc7ac3880c8852f497523afa4e852f7f44d5d94e311546ae47cd03c780f311c", @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000005}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a30000000030a01ae04000000000000000200000308000540fffffffe08000b40000000020900010073797a3000000000140000001100010000000000000000000300000a"], 0x58}}, 0x0) write$tcp_mem(r0, &(0x7f0000000400)={0x19, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) 15m45.506768171s ago: executing program 2 (id=591): r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x2002, 0x2) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000025c0), 0x800) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x40, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x84) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r8 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x26, 0x3}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x1, [0x0, 0x0, 0x3, 0x2, 0x1, 0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x302, 0x1, 0x3, 0xd, 0x7, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0xd7, 0x3, 0x3, 0x0, 0x75cd, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xd3, &(0x7f00000000c0)=@string={0xd3, 0x3, "20bfe43509b09be426727e8f039aaf14093dba3dff3951ea8674c098f07d46f23529800a27df74fd00af36bc02145c76a2bec1a5956f8df6b0ab4e1b497a0f7367d3b456f3c78bf73f155a80e7b836c6279a88f5d2058c77ea67c2a56ec8f23aa3fdf77b77fa29e0378a9bf9a39eaf50a6d5e69fbedc76874ddee42800b94d89d54ce01824e9b9803ecd584b39dbf8697a4b7cf4c67817112020f71cb041c2ebc9c9293e20dc45dcabb2345e3c7d8794f543578ecc3cdd819449970cb21136da04b364f7f6792ce7cae0e72a9ca2ba1bba"}}, {0x45, &(0x7f0000000300)=@string={0x45, 0x3, "b1823ae370c773fc8b6707999fadf27e62813c0d45fe3eef29f14766f68a0ca3de0318175d3fb50fef4e1331950a926c979f749c65588da411709f69b84f34ffc55873"}}, {0x9c, &(0x7f0000000480)=ANY=[@ANYBLOB="9c039d3bfe0084b16fbcbf4c73895a18ce821f32c9cb437e50a1ef26daaa372b51bf61a5504596c115f5d46eda4878ccd00a08af209a29e49930d8f5385edf2de7094ae2d2f746d7594184279807d2ba47f639d8ccf4d7717f5eed18bc46595b5ae63b94c7e46c5846571c143aeb27f79fa23a70a192425de334c7fbf29f9e1754e072526a2ec4116327fb3032d81e1f6f36b12768551189387609be"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1401}}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x31, 0x0]}}}, 0x4e}]}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x1, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 15m39.895426408s ago: executing program 2 (id=598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd0) 15m38.890777048s ago: executing program 2 (id=600): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730481e4ec2364aaaa98c6c3e2047e50b632250f585", 0x60}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20004004}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}], 0x2}, 0x0) 15m38.416941982s ago: executing program 2 (id=603): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f00000000c0)=0x7f, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd4) write(r0, &(0x7f0000000100)="7e7d87d63138fe7d4c699a771eb11fcf36f96fad", 0x14) 15m38.097266016s ago: executing program 2 (id=606): socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) 15m22.43244699s ago: executing program 32 (id=606): socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) 12m13.458818783s ago: executing program 3 (id=1263): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) r4 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB='@\x00z'], 0x5c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r7, r7, 0x0, 0x200000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r8, 0xf03, 0x0, 0x200, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40) r9 = io_uring_setup(0x73d2, &(0x7f0000000100)={0x0, 0x3c21, 0x2000, 0x0, 0x22e, 0x0, r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000003, 0x810, r9, 0x0) 12m13.204812337s ago: executing program 3 (id=1264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}]}]}, 0xa0}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x1, 0xf000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000004}, {0x6, 0x24, 0x1a, 0x1, 0x30}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x1}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = syz_usb_connect$uac3(0x6, 0x13c, &(0x7f0000000040)={{0x12, 0x1, 0xf2ad6802d989df34, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12a, 0x3, 0x1, 0x1, 0x20, 0x6, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x5b, 0x10000}, [@mixer_unit={0x6, 0x24, 0x5, 0x5, 0x7, 'V'}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x304, 0x4, 0x2, 0x63, 0x2, 0x9, 0x7fff, 0x1000}, @mixer_unit={0x9, 0x24, 0x5, 0x2, 0x7, "97615ff5"}, @extension_unit={0x1d, 0x24, 0xa, 0x1, 0x2, [0x2, 0x0, 0x3, 0x900df60701b9962, 0x2, 0x0]}, @source_unit={0xc, 0x24, 0xb, 0xd, 0x1, 0x2, 0x1, 0x1}, @cluster_info_segment={0x6, 0x20, 0x1, 0x84, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x14, 0x4, 0x9, "98233889f71b7b5ec6"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x80, 'o', "faa8f8"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3b, 0x4, 0x9, 0x9, "f063e85d538bff"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0x6, "4697c22ca5"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0xf, 0x7, 0x6}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0xd2, "94df0219f5fe479333"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0xfa, 0x3, {0xa, 0x25, 0x25, 0x3f5, 0xc7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x5, 0x10, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x6, 0x4, "33041e602a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0xc8, 0x6, {0xa, 0x25, 0x25, 0x3, 0x5, 0x426}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x8, 0x4, 0x71, 0xff, 0x61}, 0xa3, &(0x7f00000001c0)={0x5, 0xf, 0xa3, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xfe, 0x8, 0x4}, @generic={0x7c, 0x10, 0x0, "82ae1e20d7ab20f1746fe80a0e6f666485ceca9e35750f206814c192de2f23219702bd94ad5932ff0b751123d0b417493423c6feb37115596db1d609ced1de8e45d20a31ab0698bcefc5e41d03d9f2180cdd5ef0ff88b6c52e58c6fce9c3c00f6747bd8eb79a47ddda254f33cd64bc08807fae3127d6ae5c2d"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0xe, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0x14, 0xfc6}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x0, 0x3}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1801}}, {0x7a, &(0x7f00000002c0)=@string={0x7a, 0x3, "6698f0df1c089e8f72a817f41cdb32f16d5051fb2807e611de9902fa466053f56e18e1cd2dd3b7f3728b2e2fdeb735064d7610c6e682e66ecd3e2fe064003ef06e5e6e775cb3b0d2600a1d72e041ed8207249e821cbd6144afc9b6df483bde53b2f189020e303a5e056c4f0199a632de947616d8cff5f678"}}, {0x15, &(0x7f0000000340)=@string={0x15, 0x3, "6e31d4e425bc4937e131bd8474b41c5f43c909"}}, {0xee, &(0x7f0000000380)=@string={0xee, 0x3, "c4ba7d406cf421c63b6003b190991d488a512134b97aab570d344e1875297d054cb2078c1489937fdd997ad55c038a3d4277967451f499a0f47ab69bb336e63881a1e7e3f1220c0d32b0567bcf68e64e2fd91664bf6906af52d949c9d8443d7fe81d7efccfea97cbf201738f39bc13b162c4db9959da5407be3fcf7ed7cda1bc593bebad5db659830feaa60c12013605e0b1d37fc1dab64405edd9e592ea9b4ff785044bd1fc852747434919aa6e18f8667383d9e89d8190416c819fc69cc93137fb8ea110308da5b41c3fbe2beecf70fd1c0a400f63d0a1610039b04e3cbc00f96873b60828a3a2c510b90f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1004}}, {0x79, &(0x7f0000000900)=@string={0x79, 0x3, "36b9086da46e3c4af5498dfd4e9d84f52c9e66585395808ccfb8b686efdc9c52f12f4812564711b9669c285106ba37a68d9009d853517ab3965046fa4403162e61fc1b692aee1960e963abccbdccee46f7348a20ed84020015a5f868d90b2331e0ad0d0e9cd58a782d475541a9c93cea140000000000ee"}}, {0x95, &(0x7f0000000b40)=@string={0x95, 0x3, "61247083343328acd8cdccc28bc77ea3c0a76a26c7a7744a815de351ffcb9b23783214bbc77e1c15c4fdaaec4bcba61ae6e439edf7d46d3d576c699d61316281207c6c84c4f7d4ec6ab8c1a7e619b9b6140f3317f064aebb9e17ca96f02f75b51661bfa2cbfddbc8a706ee0da9fb74da9bbc78530f2d53911d01868e8f0d0e509230799713f0437c8e064eb800ac6169f821a3"}}, {0x11, &(0x7f0000000540)=@string={0x11, 0x3, "ccccd31df27675b620217d692e1218"}}]}) syz_usb_control_io$uac3(r6, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x0, 0x5, 0x7a, {0x7a, 0x23, "19257754faac3658a2fe8016f4ff25c077a2d7e38a9cf787c0c2c648d242617ef95814421566bda5baff400537b24a4fcb97bdad4c80f9ec897949cbe432a15c4a1589b216b8eec666febaacf34142e85ad8f0bb45ea38b5a4add075243916ea678d00cd1366314b5a1f74c922fd85f482f8b2834023d789"}}, &(0x7f0000000600)=ANY=[@ANYBLOB="00ef03d300000403fff8"]}, &(0x7f0000000ac0)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="2013b500007aded90f240d0a7e2d00a3c80d05beda6e74fd055e8da84d3f9a1e13b94782c2904f302b7c3fca9904021c1ea865cbe8c2542e1e66519a69abe01c752356d3817c45c05dbcb0ed3cc9e25f373765996c6de25eaba864c0eab1fefcc6eb68e547cf631f3edf95146e57038d73db2c051508b170a568ffb92f52b7c7337f676c4587f6d811e853ff35bd033a932fe58ab94bf95b7ab7f56e39d3bb048ba81c850440acf76c0e66bb413e02323cf3089cdffd09a5db33af"], &(0x7f0000000840)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x53}, &(0x7f00000008c0)={0x20, 0x81, 0x3, "f6c4eb"}, &(0x7f00000009c0)={0x20, 0x82, 0x3, "313ffc"}, &(0x7f0000000a00)={0x20, 0x83, 0x3, "e13663"}, &(0x7f0000000a40)={0x20, 0x84, 0x3, "2c22b9"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "973046"}}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f000001a240)=""/4112, 0x1010) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) 12m11.329075863s ago: executing program 3 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x20008890}, 0x448c5) 12m10.296282382s ago: executing program 3 (id=1275): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x3, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x7, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6f, 0x81, 0x7f}, @as_header={0x7, 0x24, 0x1, 0x3, 0xfe}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xff, 0x4, 0xfa, {0x7, 0x25, 0x1, 0x4, 0x4, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x56, 0x2, 0x6, 0x2}, @as_header={0x7, 0x24, 0x1, 0xe8, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf, 0xf8, 0x0, {0x7, 0x25, 0x1, 0x4, 0x1, 0x38d8}}}}}}}}]}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [{0x5ed, 0x0, 0x1}, {0x290}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x14000, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000300)=0x8) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x2, 0x1}, 0x10) socket$unix(0x1, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x7, 0x60, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "0b27b598f0d3"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8000, 0xf, 0x2}, {0x6, 0x24, 0x1a, 0x6, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x25, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x68, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0xf, 0x24}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xb2, 0x6, 0x5, 0x10, 0x2}, 0x31, &(0x7f0000000240)={0x5, 0xf, 0x31, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xf, 0x5, 0xfc01}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x81, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x88, 0x67, 0x5, 0x9, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0xff, 0x79}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x40, &(0x7f0000000500)=@string={0x40, 0x3, "70f21704a43e37afbc25d64fc74e8856c6a049b3e30a440151ec2d0d5156eced7e25d7345208bebc524e952c4f8b6197891b62e5f958c2e695a1313c460b"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0xd5, &(0x7f00000006c0)=@string={0xd5, 0x3, "0d977c29220e4dc9123834697df079de803eb9d9ae5bd8fa5655a27086f1f6d52bb2d71fed4bf2e06162740e24dac504bc687fa7a6620f9157797c9b6c7529bf7b393ed4f91e4f493c3c2d8b7a9941917bcd899b7a4d1950940e33a056b2eb02013098708dd8a8c9f4ff55120a23951a42c5170588b9c9c836d7747e6a4ab93cefc38e676a67cfb2d0e51434a9d3701e181ee478c7a611eb612c401066f3c40da417125745e1c174ad7e4f7c52914df4da2f2c1801c8ee49313a0044168bf8ebd9464cf1c601d358556f8ef84ca9a5ae89d0e2"}}]}) 12m9.152417354s ago: executing program 3 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008"], 0x40}}, 0x0) (fail_nth: 2) 12m7.084814524s ago: executing program 3 (id=1288): socket$key(0xf, 0x3, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0xff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x1, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8885}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000440)) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 12m6.727249106s ago: executing program 33 (id=1288): socket$key(0xf, 0x3, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0xff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x1, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8885}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000440)) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 9m39.21962639s ago: executing program 4 (id=1706): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000058c0)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000280)=[r3], &(0x7f00000001c0), 0x0, 0x1}) 9m37.511244376s ago: executing program 4 (id=1710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x158, 0x0, 0x148, 0x158, 0x148, 0x280, 0x240, 0x240, 0x280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000540)={0x2c}) 9m37.273216392s ago: executing program 4 (id=1713): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616a733d66642c4164a6cfd6b475ecdfab2c72667f6e6f3d1cd4e5d757b1ee06986bafeb53c36106fbb6fedece65540914f3ffd0d1295519716ea88d2d79568975f579dfbcb223d6371bc2f462ecf012c6b3ff9f30d706dd2298f41d8b087ac749a55afe0a3e613a2ec9920a902e2954a19d2255a163c510d5f7fa8ddb8c518c4a876d166c91c1405582e605a167809bdb715e82bce4370dcd9c6715333c01", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$msr(r5, &(0x7f00000001c0)=""/177, 0xb1) 9m35.558436329s ago: executing program 4 (id=1716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x4000, 0x0) 9m35.179857258s ago: executing program 4 (id=1718): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000001, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r8, &(0x7f0000000240), 0xfdef) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000040), 0x4) read$FUSE(r8, &(0x7f0000002540)={0x2020}, 0xfdef) ioctl$DRM_IOCTL_GET_STATS(r8, 0x80f86406, &(0x7f0000000000)=""/138) syz_usb_connect(0x2, 0x2d, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010102eed06e40880c2100600c0102020109021b00010103c0040904"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) 9m29.356978287s ago: executing program 4 (id=1739): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) (fail_nth: 1) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e273a2f3909399dcfc7b53660e2", 0x62, 0xfffffffffffffff9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x21, 0x0, 0x0) process_mrelease(r7, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) unshare(0x24020400) 9m14.225735094s ago: executing program 34 (id=1739): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) (fail_nth: 1) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e273a2f3909399dcfc7b53660e2", 0x62, 0xfffffffffffffff9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x21, 0x0, 0x0) process_mrelease(r7, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) unshare(0x24020400) 6m1.229053419s ago: executing program 7 (id=2201): socket$inet6_mptcp(0xa, 0x1, 0x106) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000040)={0x0}) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x100000000000f7) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0xa, 0x0, 0x0) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) socket(0x2, 0x80805, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000019380)}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="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", 0x124}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e1068156dac8258affc0c16197fccc58", 0x77}], 0x4) 5m54.437427261s ago: executing program 7 (id=2215): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40242) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, &(0x7f00000030c0)={0x2020}, 0x2020) write$uinput_user_dev(r4, &(0x7f00000008c0)={'syz1\x00', {0x3, 0x10, 0x5, 0x7}, 0x2d, [0x1, 0x3, 0x8000, 0x200, 0x5, 0x4, 0x7fffffff, 0x40, 0x81, 0x1, 0x3ff, 0x0, 0xfff, 0x10001, 0xf1, 0xf, 0x2eae, 0x3ff, 0x7ff, 0x34d, 0x1, 0xda, 0x2, 0x8, 0x30ad, 0x9, 0x6, 0x6, 0xd, 0x678, 0x0, 0x9, 0x3, 0xba, 0x80000000, 0x4, 0xfffffff4, 0x1ff, 0x0, 0x4, 0x2, 0x542b02e5, 0x37f7, 0x6, 0x5, 0x9, 0x54b4, 0x8, 0x400, 0x0, 0xfffffffc, 0x81, 0xfffffffc, 0x6, 0xab, 0x8, 0x10000, 0xfffffffd, 0xd, 0x0, 0x2, 0x5, 0x81, 0xff], [0x80000000, 0x8, 0x9, 0x5, 0x6, 0x9, 0x5, 0x9, 0x0, 0x6, 0xf33, 0x9, 0xc, 0x7, 0x5, 0x4, 0x7, 0x8, 0x0, 0x2, 0xc38, 0xb, 0x3, 0x8, 0xffff, 0x1, 0x4, 0x3, 0xfff, 0x2, 0x1, 0x6, 0x70, 0x3, 0x4, 0x10000, 0x401, 0xf, 0x4, 0xf, 0x1, 0xffff, 0x9, 0xc, 0x6, 0x9ca, 0x1, 0x4, 0x5, 0xcd47, 0xc, 0x9, 0x3, 0xffffffff, 0x5, 0x3, 0x8, 0x2, 0x2, 0xb, 0xb, 0x6, 0xdc2, 0x3], [0xfff, 0x3, 0xa, 0x3, 0xffff, 0x5, 0xfffffffe, 0x17cf, 0x465, 0xe, 0xfc, 0xb6, 0x8, 0x3, 0x0, 0x8001, 0x8978, 0x6, 0x0, 0x1, 0xfffffffb, 0x34b, 0x7fffffff, 0x7fff, 0x10001, 0xe, 0x5, 0xc70e3ce, 0x9, 0x0, 0x80000000, 0x1, 0x10000, 0x4, 0xffffff80, 0x0, 0x6, 0x7, 0xe0, 0x6, 0xfffffff4, 0x2, 0xb0b87ab, 0xfffffff7, 0x2, 0x7fffffff, 0x2, 0xfffffffb, 0x10, 0xfffffffc, 0x0, 0x3, 0x6, 0x0, 0xc00000, 0x3, 0x5, 0x9, 0x1, 0x0, 0x0, 0x7, 0x7, 0x800], [0xff, 0x0, 0x9, 0x1, 0xfffffff9, 0xa, 0x1, 0x7f, 0x0, 0x90, 0xc00a838, 0x5e, 0x80000001, 0x4, 0x7, 0x2, 0x3, 0x6, 0x18, 0x500, 0xdc, 0x5, 0x6, 0x9, 0x9f59, 0x6, 0x9, 0x0, 0x28, 0x3, 0x7, 0x0, 0x200, 0x0, 0x0, 0x2, 0xfffffffa, 0x2, 0x9, 0x3, 0x5, 0x3, 0xff, 0x6, 0x3, 0x2, 0x7, 0xfffff800, 0x10, 0x0, 0x8, 0x7ff, 0x3ff, 0xf, 0xc, 0x2, 0x9, 0x81, 0x101, 0x9, 0x8, 0x7, 0x7f, 0x7f]}, 0x45c) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0x8008976) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf18047c0000080001f6a20400dd8008000380040001"], 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r6, 0x0) accept4$rose(r4, &(0x7f0000000000)=@short={0xb, @remote, @bcast}, &(0x7f00000000c0)=0x1c, 0x80000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m52.535163753s ago: executing program 7 (id=2217): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3}}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x40, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x0, 0xd3, 0x2, 0x1, 0xe2}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 5m49.331374999s ago: executing program 7 (id=2220): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3}}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x40, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x0, 0xd3, 0x2, 0x1, 0xe2}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 5m47.143593089s ago: executing program 5 (id=2229): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xd0, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x20, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x81}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pwrite64(r1, 0x0, 0x0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb807ca007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000ffff28bd7000fedbdf2500000000", @ANYRES16=r1, @ANYBLOB="20ba01006f1000005000128009000100f66c616e0000000040000280340004800c000100fdffffffa00e00000c000100040000005c0000000c0001000a0000000180e6ff0b0001000000000005f8ef392b0001000300000008000500", @ANYRES32=r4, @ANYBLOB="c5a09a1cda80a8f0493d2c1f4d4f505c7c03bc41808a9b4857a8646fdb3c0f9473c7af6b6406238ba12e0364754e74d33bf8b246ef63a7f0383349c0ce28809ded8b9dd8c45704a873ed153b74a4c00fd4"], 0x78}}, 0x8004002) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r5, &(0x7f0000000540)=[{&(0x7f00000005c0)='\b', 0x1}], 0x1) syz_fuse_handle_req(r5, &(0x7f0000000600)="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", 0x2000, &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m45.670171656s ago: executing program 7 (id=2230): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3}}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) statx(0xffffffffffffffff, 0x0, 0x800, 0x40, &(0x7f0000000480)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x0, 0xd3, 0x2, 0x1, 0xe2}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 5m41.532276513s ago: executing program 5 (id=2236): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002}}}}}, 0x0) 5m41.29390782s ago: executing program 5 (id=2237): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000c80)=""/167, 0xa7}], 0x6, &(0x7f0000000540)=""/25, 0x19}, 0x4}, {{&(0x7f0000000800)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/119, 0x77}, {&(0x7f0000000dc0)=""/153, 0x99}, {&(0x7f00000008c0)=""/182, 0xb6}, {&(0x7f0000000980)=""/61, 0x3d}, {&(0x7f00000009c0)=""/170, 0xaa}, {&(0x7f0000000a80)=""/126, 0x7e}], 0x8, &(0x7f0000000b80)=""/72, 0x48}, 0x4}], 0x2, 0x12140, 0x0) 5m41.048871921s ago: executing program 5 (id=2239): r0 = socket(0x18, 0x4, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'netpci0\x00'}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="78b7c471f4f8b9635d65dc708600c83e1cb7c48636f6cd99ecf3e686874173d7a6d3128c49013d2e71fc0d01c2cd23d1a8e977472e48da0815f22bd5cd25ff197f1d3d7e0eb25422a9a6cdd81988dcd0fe01e3dfc021c9f5c9c2ba6fc35e99f7c394e2e87915cade586559ffb417565685dfc60660711f76a2251e70f02e97402e19c7877c31877c621757f0e9afd96bf38fb2bd9bd3e9d143dd125547b1d623aa0dd7815dcf0e4307366216571706", @ANYBLOB="46583be14a764cb23d7826c95d82f37e573c2b93e4ddcec7fd2751e33a78b58a3b12aab8a8a696269b8e32a2f3c464bbcb80a8d52fbc2857bf9dac5f68"], 0x2d4}}, 0x4048010) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f00000001c0)=""/25, 0x19}], 0x3, &(0x7f0000000280)=""/61, 0x3d}, 0x20) 5m40.732905727s ago: executing program 5 (id=2242): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40242) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, &(0x7f00000030c0)={0x2020}, 0x2020) write$uinput_user_dev(r4, &(0x7f00000008c0)={'syz1\x00', {0x3, 0x10, 0x5, 0x7}, 0x2d, [0x1, 0x3, 0x8000, 0x200, 0x5, 0x4, 0x7fffffff, 0x40, 0x81, 0x1, 0x3ff, 0x0, 0xfff, 0x10001, 0xf1, 0xf, 0x2eae, 0x3ff, 0x7ff, 0x34d, 0x1, 0xda, 0x2, 0x8, 0x30ad, 0x9, 0x6, 0x6, 0xd, 0x678, 0x0, 0x9, 0x3, 0xba, 0x80000000, 0x4, 0xfffffff4, 0x1ff, 0x0, 0x4, 0x2, 0x542b02e5, 0x37f7, 0x6, 0x5, 0x9, 0x54b4, 0x8, 0x400, 0x0, 0xfffffffc, 0x81, 0xfffffffc, 0x6, 0xab, 0x8, 0x10000, 0xfffffffd, 0xd, 0x0, 0x2, 0x5, 0x81, 0xff], [0x80000000, 0x8, 0x9, 0x5, 0x6, 0x9, 0x5, 0x9, 0x0, 0x6, 0xf33, 0x9, 0xc, 0x7, 0x5, 0x4, 0x7, 0x8, 0x0, 0x2, 0xc38, 0xb, 0x3, 0x8, 0xffff, 0x1, 0x4, 0x3, 0xfff, 0x2, 0x1, 0x6, 0x70, 0x3, 0x4, 0x10000, 0x401, 0xf, 0x4, 0xf, 0x1, 0xffff, 0x9, 0xc, 0x6, 0x9ca, 0x1, 0x4, 0x5, 0xcd47, 0xc, 0x9, 0x3, 0xffffffff, 0x5, 0x3, 0x8, 0x2, 0x2, 0xb, 0xb, 0x6, 0xdc2, 0x3], [0xfff, 0x3, 0xa, 0x3, 0xffff, 0x5, 0xfffffffe, 0x17cf, 0x465, 0xe, 0xfc, 0xb6, 0x8, 0x3, 0x0, 0x8001, 0x8978, 0x6, 0x0, 0x1, 0xfffffffb, 0x34b, 0x7fffffff, 0x7fff, 0x10001, 0xe, 0x5, 0xc70e3ce, 0x9, 0x0, 0x80000000, 0x1, 0x10000, 0x4, 0xffffff80, 0x0, 0x6, 0x7, 0xe0, 0x6, 0xfffffff4, 0x2, 0xb0b87ab, 0xfffffff7, 0x2, 0x7fffffff, 0x2, 0xfffffffb, 0x10, 0xfffffffc, 0x0, 0x3, 0x6, 0x0, 0xc00000, 0x3, 0x5, 0x9, 0x1, 0x0, 0x0, 0x7, 0x7, 0x800], [0xff, 0x0, 0x9, 0x1, 0xfffffff9, 0xa, 0x1, 0x7f, 0x0, 0x90, 0xc00a838, 0x5e, 0x80000001, 0x4, 0x7, 0x2, 0x3, 0x6, 0x18, 0x500, 0xdc, 0x5, 0x6, 0x9, 0x9f59, 0x6, 0x9, 0x0, 0x28, 0x3, 0x7, 0x0, 0x200, 0x0, 0x0, 0x2, 0xfffffffa, 0x2, 0x9, 0x3, 0x5, 0x3, 0xff, 0x6, 0x3, 0x2, 0x7, 0xfffff800, 0x10, 0x0, 0x8, 0x7ff, 0x3ff, 0xf, 0xc, 0x2, 0x9, 0x81, 0x101, 0x9, 0x8, 0x7, 0x7f, 0x7f]}, 0x45c) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0x8008976) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf18047c0000080001f6a20400dd8008000380040001"], 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r6, 0x0) accept4$rose(r4, &(0x7f0000000000)=@short={0xb, @remote, @bcast}, &(0x7f00000000c0)=0x1c, 0x80000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m39.283022452s ago: executing program 7 (id=2243): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3}}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x0, 0xd3, 0x2, 0x1, 0xe2}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 5m38.123246829s ago: executing program 5 (id=2244): r0 = eventfd(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000001f80)={{0xa, 0x4e23, 0x21, @mcast1}, {0xa, 0x4e21, 0x7, @empty, 0x200003}, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x7fff, 0x1, 0x4]}}, 0x5c) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x18, r2, 0xf2ff96e223395e37, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1f, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x4, 0x3, 0x7fff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910280000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5m22.362887791s ago: executing program 35 (id=2243): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3}}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x0, 0xd3, 0x2, 0x1, 0xe2}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 5m20.464071871s ago: executing program 36 (id=2244): r0 = eventfd(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000001f80)={{0xa, 0x4e23, 0x21, @mcast1}, {0xa, 0x4e21, 0x7, @empty, 0x200003}, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x7fff, 0x1, 0x4]}}, 0x5c) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x18, r2, 0xf2ff96e223395e37, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1f, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x4, 0x3, 0x7fff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910280000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1m50.265525867s ago: executing program 1 (id=2773): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SET_NAME(0x4, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r1, 0x0, 0x0, 0x19, 0x0) close(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x1ff, 0x6, 0x0, 0xf7, "21bc8f", 0x82}}) 1m49.993138031s ago: executing program 1 (id=2774): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x1, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x800000000000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x3, 0x2, 0x10, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x30, r3, 0x4, 0x70bd2a, 0x25dbdbfe, {{}, {}, {0x14, 0x19, {0x4, 0x810000, 0x80000000, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x24048081) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="7700000a0a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000feffffff000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf2f11d9c26e3e06c20900000000000055090100000000009500000000000000bf91000000000000b56ab55fa4b702000002641d565700000084000000b7000000000000009500000004000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x5, &(0x7f00000001c0)=""/5, 0x41000, 0x40, '\x00', r7, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) 1m48.98156365s ago: executing program 1 (id=2777): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x14000, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) 1m48.794070519s ago: executing program 1 (id=2780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bff6000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x87, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m48.240268521s ago: executing program 1 (id=2787): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x1, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x800000000000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x3, 0x2, 0x10, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x30, r3, 0x4, 0x70bd2a, 0x25dbdbfe, {{}, {}, {0x14, 0x19, {0x4, 0x810000, 0x80000000, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x24048081) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="7700000a0a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000feffffff000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf2f11d9c26e3e06c20900000000000055090100000000009500000000000000bf91000000000000b56ab55fa4b702000002641d565700000084000000b7000000000000009500000004000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x5, &(0x7f00000001c0)=""/5, 0x41000, 0x40, '\x00', r7, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) 1m47.100890106s ago: executing program 1 (id=2796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bff6000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x87, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 59.147642089s ago: executing program 9 (id=2922): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x40, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000001c0)={0x0, 0xd3, 0x2, 0x1, 0xe2}) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 57.016954099s ago: executing program 9 (id=2923): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x2400) close$fd_v4l2_buffer(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x100004}) 56.85109006s ago: executing program 0 (id=2924): r0 = socket$inet(0x2, 0x1, 0x6) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002"], 0x18) 53.863893573s ago: executing program 9 (id=2930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x3}, 0x8) 53.53286962s ago: executing program 9 (id=2932): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)=0x1) prlimit64(r1, 0x5, &(0x7f0000000300)={0x6, 0x1}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000440), 0x4000) ptrace$setregset(0x4205, r1, 0x200, &(0x7f0000000080)={0x0}) r4 = socket(0x10, 0x6, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x7, 0x2, 0x2}]}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a00000004900200026bd7000ffdbdf250a002000", @ANYRES32=0x0, @ANYBLOB="090000001400010000000000000000000000ffffac1e00010800020006000000080002000400000014000100fe0000000000002b080002000600000014000100fe88000002000000000000000000000114000100fe8000000000000000000000000000300000000000010800020007000000"], 0xa0}}, 0x20008080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8}}, 0x240440c0) socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$media(&(0x7f0000000040), 0x80000007fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="9fd44edb", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250100000014000c00ff02000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e0101060006000200000008000700", @ANYRES32=r7, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000e00000000000000fdffffff05000600000000000a0000000000000000006400000000000000000400000001eb0000000000000002000100000000000000200c0200006005000500000000000a004e2200000000000000000000000000000000000000010000000000000000"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x9000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x5, &(0x7f0000000380)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x26be96ba}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000180)={0xc, 0x1}) 51.520990528s ago: executing program 9 (id=2934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x2b1e}, 0x10000084) openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 48.840852737s ago: executing program 0 (id=2936): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) 42.123860864s ago: executing program 0 (id=2942): r0 = socket$inet(0x2, 0x1, 0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002"], 0x18) 40.994021647s ago: executing program 0 (id=2943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000380)={0x2, 0x3, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) kexec_load(0x8, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = msgget$private(0x0, 0x3ac) msgsnd(r3, &(0x7f0000000000)=ANY=[], 0x8, 0x800) 40.056913954s ago: executing program 9 (id=2945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r1, 0x5, &(0x7f0000000200)={0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x5, 0x1100, 0x1, 0x0, '\x00', 0x0, r1}, 0x50) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000000)="4f14fe", &(0x7f0000000300)=""/208}, 0x20) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r7, 0xae80, 0x0) 39.229023082s ago: executing program 0 (id=2947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x108) socket(0x84000000002a, 0x1, 0xff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x2, 0x0) 37.991791963s ago: executing program 0 (id=2948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x9, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0x8b, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delchain={0x24, 0x64, 0x1, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 35.424669194s ago: executing program 8 (id=2951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.021596998s ago: executing program 8 (id=2952): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000040)) 32.892252346s ago: executing program 8 (id=2954): gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)=0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x40800) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/109, 0x6d}], 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000280)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 28.588996842s ago: executing program 8 (id=2960): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000000)={0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x4e20, @local}}) setuid(r6) 27.103473753s ago: executing program 8 (id=2961): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 26.90645316s ago: executing program 8 (id=2962): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000280)={0xa0000001}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) write$ppp(r6, &(0x7f00000008c0)="00003be032c6a4", 0x7) r7 = fsopen(&(0x7f00000002c0)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='\xe7id', &(0x7f0000000380)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050028bd7000ffdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="3400238005000f000200000005001f000000000008000b"], 0x5c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0x501c4814, &(0x7f00000000c0)={0x2, 0x200, 0x1000000, 0x8, 0x0, 0xfffffffc}) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) write$bt_hci(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="ab9a1e1df31a37d900"], 0x9) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x0, 0xffffffff}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0xf4d21588c0c961ea) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc0075fbdb1c010200000000e5c7d5d300280000fe800026001e00000007000000030000bb0000000000000000028be150e50000000000000000000000000000206c48f2b20b0c3004725074a70d7ff3e4130490939772e924e36a9d8d5db401ece6cc24a2b34864588c59c9824fff231ec420a1a16c2217e368e19ed4bcf39703201fc831e3e502551661b13066d917e7bba2fabecb774211dd642f9ac0ddb284678691544fb0b9a602faf48ce9", @ANYRES32=0x0, @ANYRESOCT=r13], 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 24.727427579s ago: executing program 37 (id=2945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r1, 0x5, &(0x7f0000000200)={0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x5, 0x1100, 0x1, 0x0, '\x00', 0x0, r1}, 0x50) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000000)="4f14fe", &(0x7f0000000300)=""/208}, 0x20) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r7, 0xae80, 0x0) 21.882170238s ago: executing program 38 (id=2948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x9, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0x8b, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delchain={0x24, 0x64, 0x1, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 21.702826506s ago: executing program 6 (id=2970): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x0, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0xb}) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0xa4) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x77, 0x29c680}) (async) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) (async) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050403020602020000000700100002000d24090202020000ffff"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 17.586063511s ago: executing program 6 (id=2971): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 17.458466483s ago: executing program 6 (id=2972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) socket(0x84000000002a, 0x1, 0xff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000240)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x8}, &(0x7f0000000280)=0x7, &(0x7f0000000300), 0x8, 0x7, 0x0, 0x2, 0x40, 0x8}}], 0xa0}, 0x0) 16.280973716s ago: executing program 6 (id=2973): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) sendmsg$unix(r1, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0xfb}, {&(0x7f0000000380)="d53811fd86825319644d170ec89d934fdd0df1b380e4875e99a05025b5218182d4b7494db4a3749f1236027eabb7835ea1149e69667289aafbaa1d29ca28446e3364415e9a2d60e96401bf7e86ef4a330dfd63f52f22122b46b85e11343ce8a6cab3682203a18cdd857dc75d8805b1bf7eedbdfc4d7b778ef060d172a15b2d6c5a58b68d2103a8bb9c507356100a4c2f9a4f00767a997e18a2e73a9347d5e5e340b784a089e37775e68f5c0eddb6295db144e008578f09da2f0a57fa0b926557a2898a66a4b528eba0f83107e97504580c3d30fd72c3277b0289ef7666d2f70065c002f311779b0009f91872cdbb032d852b9de2ae7f", 0xf6}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="31aaaf79aa10faa5f64b9697f04f0328cf845c0c0e427d9ffe03de1362cba90a2c29d61c946e6f3837445c11e9e5972c73f4618bdd5ea112f1a0d6c5eb30dfa3287824987b28b53a8f3e897b5adfbf5693a29cc2023d79856188db82e998df52a4431364d30a11952218e7cf527a0ca51dc1cc128b66f262743d8c109f9d8564e5139f54f187bfaeee2f6e4f", 0x8c}], 0x4, &(0x7f0000003840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="47532848fce147611dc06e27e73811a71854478f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0xa709a42b93f85d0e}, 0x8000) 16.166612417s ago: executing program 6 (id=2974): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) 15.155202296s ago: executing program 6 (id=2975): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 11.023030227s ago: executing program 39 (id=2962): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000280)={0xa0000001}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) write$ppp(r6, &(0x7f00000008c0)="00003be032c6a4", 0x7) r7 = fsopen(&(0x7f00000002c0)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='\xe7id', &(0x7f0000000380)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050028bd7000ffdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="3400238005000f000200000005001f000000000008000b"], 0x5c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0x501c4814, &(0x7f00000000c0)={0x2, 0x200, 0x1000000, 0x8, 0x0, 0xfffffffc}) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) write$bt_hci(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="ab9a1e1df31a37d900"], 0x9) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x0, 0xffffffff}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0xf4d21588c0c961ea) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc0075fbdb1c010200000000e5c7d5d300280000fe800026001e00000007000000030000bb0000000000000000028be150e50000000000000000000000000000206c48f2b20b0c3004725074a70d7ff3e4130490939772e924e36a9d8d5db401ece6cc24a2b34864588c59c9824fff231ec420a1a16c2217e368e19ed4bcf39703201fc831e3e502551661b13066d917e7bba2fabecb774211dd642f9ac0ddb284678691544fb0b9a602faf48ce9", @ANYRES32=0x0, @ANYRESOCT=r13], 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 0s ago: executing program 40 (id=2975): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) kernel console output (not intermixed with test programs): T15688] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1114.958465][T15688] ? lockdep_hardirqs_on+0x7a/0x110 [ 1114.958490][T15688] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1114.958517][T15688] ? mutex_lock_nested+0x152/0x1d0 [ 1114.958537][T15688] ? fdget_pos+0x252/0x320 [ 1114.958566][T15688] ksys_write+0x156/0x270 [ 1114.958595][T15688] ? __pfx_ksys_write+0x10/0x10 [ 1114.958632][T15688] do_syscall_64+0x14d/0xf80 [ 1114.958660][T15688] ? trace_irq_disable+0x3b/0x150 [ 1114.958681][T15688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.958700][T15688] ? clear_bhb_loop+0x40/0x90 [ 1114.958723][T15688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.958743][T15688] RIP: 0033:0x7fd2f7c6cfce [ 1114.958762][T15688] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1114.958788][T15688] RSP: 002b:00007fd2f5ee4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1114.958810][T15688] RAX: ffffffffffffffda RBX: 00007fd2f5ee56c0 RCX: 00007fd2f7c6cfce [ 1114.958824][T15688] RDX: 0000000000000001 RSI: 00007fd2f5ee50a0 RDI: 0000000000000004 [ 1114.958837][T15688] RBP: 00007fd2f5ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.958849][T15688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.958860][T15688] R13: 00007fd2f7f26128 R14: 00007fd2f7f26090 R15: 00007ffe9191c638 [ 1114.958892][T15688] [ 1115.058182][T15691] FAULT_INJECTION: forcing a failure. [ 1115.058182][T15691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.058217][T15691] CPU: 1 UID: 0 PID: 15691 Comm: syz.0.2657 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1115.058244][T15691] Tainted: [L]=SOFTLOCKUP [ 1115.058251][T15691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1115.058264][T15691] Call Trace: [ 1115.058271][T15691] [ 1115.058279][T15691] dump_stack_lvl+0xe8/0x150 [ 1115.058340][T15691] should_fail_ex+0x46b/0x600 [ 1115.058371][T15691] _copy_from_user+0x2d/0xb0 [ 1115.058401][T15691] kstrtouint_from_user+0xd6/0x180 [ 1115.058426][T15691] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1115.058454][T15691] ? __lock_acquire+0x6b5/0x2cf0 [ 1115.058483][T15691] proc_fail_nth_write+0x8e/0x210 [ 1115.058508][T15691] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1115.058536][T15691] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1115.058562][T15691] vfs_write+0x2a3/0xba0 [ 1115.058599][T15691] ? __pfx_vfs_write+0x10/0x10 [ 1115.058628][T15691] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1115.058658][T15691] ? lockdep_hardirqs_on+0x7a/0x110 [ 1115.058686][T15691] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1115.058714][T15691] ? mutex_lock_nested+0x152/0x1d0 [ 1115.058736][T15691] ? fdget_pos+0x252/0x320 [ 1115.058775][T15691] ksys_write+0x156/0x270 [ 1115.058804][T15691] ? __pfx_ksys_write+0x10/0x10 [ 1115.058842][T15691] do_syscall_64+0x14d/0xf80 [ 1115.058870][T15691] ? trace_irq_disable+0x3b/0x150 [ 1115.058891][T15691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.058912][T15691] ? clear_bhb_loop+0x40/0x90 [ 1115.058936][T15691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.058956][T15691] RIP: 0033:0x7f6c4ab6cfce [ 1115.058975][T15691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1115.058991][T15691] RSP: 002b:00007f6c48de4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1115.059012][T15691] RAX: ffffffffffffffda RBX: 00007f6c48de56c0 RCX: 00007f6c4ab6cfce [ 1115.059026][T15691] RDX: 0000000000000001 RSI: 00007f6c48de50a0 RDI: 0000000000000005 [ 1115.059038][T15691] RBP: 00007f6c48de5090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.059050][T15691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.059062][T15691] R13: 00007f6c4ae26128 R14: 00007f6c4ae26090 R15: 00007ffcb3e26f18 [ 1115.059092][T15691] [ 1115.796888][T15698] fuse: Bad value for 'rootmode' [ 1115.825204][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.825273][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.070311][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2662'. [ 1116.070333][T15706] netlink: 'syz.6.2662': attribute type 1 has an invalid length. [ 1116.595859][ T5945] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1116.643545][T15730] fuse: Unknown parameter 'use00000000000000000003' [ 1116.748231][ T5945] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.751369][ T5945] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1116.751399][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.751420][ T5945] usb 7-1: Product: syz [ 1116.751435][ T5945] usb 7-1: Manufacturer: syz [ 1116.751451][ T5945] usb 7-1: SerialNumber: syz [ 1117.016166][T15740] FAULT_INJECTION: forcing a failure. [ 1117.016166][T15740] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.016202][T15740] CPU: 0 UID: 0 PID: 15740 Comm: syz.8.2675 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1117.016229][T15740] Tainted: [L]=SOFTLOCKUP [ 1117.016236][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1117.016248][T15740] Call Trace: [ 1117.016256][T15740] [ 1117.016265][T15740] dump_stack_lvl+0xe8/0x150 [ 1117.016298][T15740] should_fail_ex+0x46b/0x600 [ 1117.016331][T15740] should_failslab+0xa8/0x100 [ 1117.016353][T15740] __kmalloc_noprof+0xdf/0x7b0 [ 1117.016381][T15740] ? kfree+0x4d/0x6c0 [ 1117.016405][T15740] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1117.016435][T15740] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1117.016466][T15740] ? tomoyo_path_number_perm+0x219/0x630 [ 1117.016494][T15740] tomoyo_path_number_perm+0x246/0x630 [ 1117.016525][T15740] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1117.016556][T15740] ? __lock_acquire+0x6b5/0x2cf0 [ 1117.016608][T15740] ? __fget_files+0x2a/0x420 [ 1117.016633][T15740] ? __fget_files+0x2a/0x420 [ 1117.016656][T15740] ? __fget_files+0x3a6/0x420 [ 1117.016677][T15740] ? __fget_files+0x2a/0x420 [ 1117.016713][T15740] security_file_ioctl+0xc3/0x2a0 [ 1117.016737][T15740] __se_sys_ioctl+0x47/0x170 [ 1117.016770][T15740] do_syscall_64+0x14d/0xf80 [ 1117.016798][T15740] ? trace_irq_disable+0x3b/0x150 [ 1117.016822][T15740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.016842][T15740] ? clear_bhb_loop+0x40/0x90 [ 1117.016866][T15740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.016886][T15740] RIP: 0033:0x7fd2f7cac799 [ 1117.016905][T15740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.016921][T15740] RSP: 002b:00007fd2f5f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.016941][T15740] RAX: ffffffffffffffda RBX: 00007fd2f7f25fa0 RCX: 00007fd2f7cac799 [ 1117.016956][T15740] RDX: 0000200000000000 RSI: 000000008010aa01 RDI: 0000000000000003 [ 1117.016967][T15740] RBP: 00007fd2f5f06090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.016980][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.016992][T15740] R13: 00007fd2f7f26038 R14: 00007fd2f7f25fa0 R15: 00007ffe9191c638 [ 1117.017022][T15740] [ 1117.017030][T15740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1117.123581][T15743] FAULT_INJECTION: forcing a failure. [ 1117.123581][T15743] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.123615][T15743] CPU: 1 UID: 0 PID: 15743 Comm: syz.9.2676 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1117.123643][T15743] Tainted: [L]=SOFTLOCKUP [ 1117.123650][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1117.123662][T15743] Call Trace: [ 1117.123670][T15743] [ 1117.123678][T15743] dump_stack_lvl+0xe8/0x150 [ 1117.123714][T15743] should_fail_ex+0x46b/0x600 [ 1117.123744][T15743] should_failslab+0xa8/0x100 [ 1117.123766][T15743] __kmalloc_noprof+0xdf/0x7b0 [ 1117.123795][T15743] ? tomoyo_encode+0x28b/0x550 [ 1117.123822][T15743] tomoyo_encode+0x28b/0x550 [ 1117.123851][T15743] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1117.123884][T15743] ? tomoyo_path_number_perm+0x219/0x630 [ 1117.123912][T15743] tomoyo_path_number_perm+0x246/0x630 [ 1117.123943][T15743] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1117.123975][T15743] ? __lock_acquire+0x6b5/0x2cf0 [ 1117.124026][T15743] ? __fget_files+0x2a/0x420 [ 1117.124053][T15743] ? __fget_files+0x2a/0x420 [ 1117.124075][T15743] ? __fget_files+0x3a6/0x420 [ 1117.124097][T15743] ? __fget_files+0x2a/0x420 [ 1117.124124][T15743] security_file_ioctl+0xc3/0x2a0 [ 1117.124146][T15743] __se_sys_ioctl+0x47/0x170 [ 1117.124178][T15743] do_syscall_64+0x14d/0xf80 [ 1117.124212][T15743] ? trace_irq_disable+0x3b/0x150 [ 1117.124234][T15743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.124254][T15743] ? clear_bhb_loop+0x40/0x90 [ 1117.124278][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.124298][T15743] RIP: 0033:0x7efed765c799 [ 1117.124317][T15743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.124334][T15743] RSP: 002b:00007efed58b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.124354][T15743] RAX: ffffffffffffffda RBX: 00007efed78d5fa0 RCX: 00007efed765c799 [ 1117.124369][T15743] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1117.124382][T15743] RBP: 00007efed58b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.124394][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.124405][T15743] R13: 00007efed78d6038 R14: 00007efed78d5fa0 R15: 00007fffc822b0a8 [ 1117.124436][T15743] [ 1117.131009][T15743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1117.714425][ T5945] cdc_ncm 7-1:1.0: SET_CRC_MODE failed [ 1117.714875][ T5945] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 1117.735472][ T5945] cdc_ncm 7-1:1.0: bind() failure [ 1117.783617][ T5945] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1117.783644][ T5945] cdc_ncm 7-1:1.1: bind() failure [ 1117.829902][ T5945] usb 7-1: USB disconnect, device number 39 [ 1117.933277][T15761] fuse: Unknown parameter 'use00000000000000000003' [ 1119.292561][T15777] FAULT_INJECTION: forcing a failure. [ 1119.292561][T15777] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.292595][T15777] CPU: 0 UID: 0 PID: 15777 Comm: syz.6.2688 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1119.292622][T15777] Tainted: [L]=SOFTLOCKUP [ 1119.292629][T15777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1119.292641][T15777] Call Trace: [ 1119.292649][T15777] [ 1119.292659][T15777] dump_stack_lvl+0xe8/0x150 [ 1119.292693][T15777] should_fail_ex+0x46b/0x600 [ 1119.292723][T15777] should_failslab+0xa8/0x100 [ 1119.292746][T15777] __kmalloc_noprof+0xdf/0x7b0 [ 1119.292776][T15777] ? io_cache_alloc_new+0x40/0x100 [ 1119.292897][T15777] ? __memcg_slab_post_alloc_hook+0x3e4/0xa20 [ 1119.292958][T15777] io_cache_alloc_new+0x40/0x100 [ 1119.292994][T15777] io_msg_alloc_async+0x212/0x380 [ 1119.293019][T15777] io_recvmsg_prep+0x7da/0x10f0 [ 1119.293050][T15777] ? percpu_ref_get_many+0x18c/0x1e0 [ 1119.293109][T15777] ? __pfx_io_recvmsg_prep+0x10/0x10 [ 1119.293132][T15777] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1119.293167][T15777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1119.293202][T15777] ? io_task_refs_refill+0xba/0x180 [ 1119.293232][T15777] io_submit_sqes+0xb6d/0x2400 [ 1119.293283][T15777] __se_sys_io_uring_enter+0x2d2/0x18c0 [ 1119.293304][T15777] ? lockdep_hardirqs_on+0x7a/0x110 [ 1119.293335][T15777] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1119.293366][T15777] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1119.293387][T15777] ? fput+0xa0/0xd0 [ 1119.293410][T15777] ? ksys_write+0x248/0x270 [ 1119.293440][T15777] ? __pfx_ksys_write+0x10/0x10 [ 1119.293471][T15777] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1119.293495][T15777] do_syscall_64+0x14d/0xf80 [ 1119.293522][T15777] ? trace_irq_disable+0x3b/0x150 [ 1119.293543][T15777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.293563][T15777] ? clear_bhb_loop+0x40/0x90 [ 1119.293588][T15777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.293607][T15777] RIP: 0033:0x7f516040c799 [ 1119.293627][T15777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.293644][T15777] RSP: 002b:00007f515e666028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1119.293666][T15777] RAX: ffffffffffffffda RBX: 00007f5160685fa0 RCX: 00007f516040c799 [ 1119.293681][T15777] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1119.293693][T15777] RBP: 00007f515e666090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.293706][T15777] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1119.293719][T15777] R13: 00007f5160686038 R14: 00007f5160685fa0 R15: 00007ffe2d3d5ef8 [ 1119.293751][T15777] [ 1119.625015][T15785] FAULT_INJECTION: forcing a failure. [ 1119.625015][T15785] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.625050][T15785] CPU: 0 UID: 0 PID: 15785 Comm: syz.8.2690 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1119.625076][T15785] Tainted: [L]=SOFTLOCKUP [ 1119.625083][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1119.625095][T15785] Call Trace: [ 1119.625103][T15785] [ 1119.625112][T15785] dump_stack_lvl+0xe8/0x150 [ 1119.625146][T15785] should_fail_ex+0x46b/0x600 [ 1119.625174][T15785] should_failslab+0xa8/0x100 [ 1119.625195][T15785] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1119.625224][T15785] ? __alloc_skb+0x1d0/0x7d0 [ 1119.625251][T15785] ? lockdep_hardirqs_on+0x7a/0x110 [ 1119.625292][T15785] __alloc_skb+0x1d0/0x7d0 [ 1119.625323][T15785] netlink_sendmsg+0x5d4/0xb40 [ 1119.625359][T15785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1119.625387][T15785] ? unwind_get_return_address+0x4d/0x90 [ 1119.625410][T15785] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1119.625441][T15785] ____sys_sendmsg+0x94c/0x9c0 [ 1119.625467][T15785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1119.625495][T15785] ? import_iovec+0x73/0xa0 [ 1119.625523][T15785] ___sys_sendmsg+0x2a5/0x360 [ 1119.625547][T15785] ? __pfx____sys_sendmsg+0x10/0x10 [ 1119.625598][T15785] ? __fget_files+0x2a/0x420 [ 1119.625621][T15785] ? __fget_files+0x3a6/0x420 [ 1119.625653][T15785] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1119.625674][T15785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1119.625700][T15785] ? __pfx_ksys_write+0x10/0x10 [ 1119.625735][T15785] do_syscall_64+0x14d/0xf80 [ 1119.625760][T15785] ? trace_irq_disable+0x3b/0x150 [ 1119.625780][T15785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.625800][T15785] ? clear_bhb_loop+0x40/0x90 [ 1119.625822][T15785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.625840][T15785] RIP: 0033:0x7fd2f7cac799 [ 1119.625858][T15785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.625875][T15785] RSP: 002b:00007fd2f5f06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.625902][T15785] RAX: ffffffffffffffda RBX: 00007fd2f7f25fa0 RCX: 00007fd2f7cac799 [ 1119.625921][T15785] RDX: 0000000020040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1119.625934][T15785] RBP: 00007fd2f5f06090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.625947][T15785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.625959][T15785] R13: 00007fd2f7f26038 R14: 00007fd2f7f25fa0 R15: 00007ffe9191c638 [ 1119.625990][T15785] [ 1119.914459][T15789] FAULT_INJECTION: forcing a failure. [ 1119.914459][T15789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.914495][T15789] CPU: 0 UID: 0 PID: 15789 Comm: syz.0.2692 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1119.914522][T15789] Tainted: [L]=SOFTLOCKUP [ 1119.914530][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1119.914542][T15789] Call Trace: [ 1119.914550][T15789] [ 1119.914559][T15789] dump_stack_lvl+0xe8/0x150 [ 1119.914592][T15789] should_fail_ex+0x46b/0x600 [ 1119.914622][T15789] strncpy_from_user+0x36/0x2b0 [ 1119.914649][T15789] do_getname+0x77/0x250 [ 1119.914674][T15789] __x64_sys_execveat+0xad/0xf0 [ 1119.914783][T15789] do_syscall_64+0x14d/0xf80 [ 1119.914811][T15789] ? trace_irq_disable+0x3b/0x150 [ 1119.914834][T15789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.914855][T15789] ? clear_bhb_loop+0x40/0x90 [ 1119.914879][T15789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.914899][T15789] RIP: 0033:0x7f6c4abac799 [ 1119.914920][T15789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.914934][T15789] RSP: 002b:00007f6c48e06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1119.914955][T15789] RAX: ffffffffffffffda RBX: 00007f6c4ae25fa0 RCX: 00007f6c4abac799 [ 1119.914969][T15789] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 1119.914981][T15789] RBP: 00007f6c48e06090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.914992][T15789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.915002][T15789] R13: 00007f6c4ae26038 R14: 00007f6c4ae25fa0 R15: 00007ffcb3e26f18 [ 1119.915031][T15789] [ 1120.154356][T15792] fuse: Unknown parameter 'use00000000000000000003' [ 1120.484188][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2699'. [ 1121.515795][ T8827] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1121.677687][ T8827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1121.677724][ T8827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.677763][ T8827] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1121.677786][ T8827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.737257][ T8827] usb 7-1: config 0 descriptor?? [ 1121.835524][T15823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1122.159074][ T8827] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 1122.159105][ T8827] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 1122.159122][ T8827] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 1122.159137][ T8827] isku 0003:1E7D:319C.0014: unknown main item tag 0x1 [ 1122.159153][ T8827] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 1122.159168][ T8827] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 1122.159183][ T8827] isku 0003:1E7D:319C.0014: item fetching failed at offset 6/7 [ 1122.159614][ T8827] isku 0003:1E7D:319C.0014: parse failed [ 1122.159653][ T8827] isku 0003:1E7D:319C.0014: probe with driver isku failed with error -22 [ 1122.233889][T15827] fuse: Unknown parameter 'user_i00000000000000000003' [ 1122.352563][T15806] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2698'. [ 1122.354937][T14753] usb 7-1: USB disconnect, device number 40 [ 1122.712793][T14387] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1122.746187][T14387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1122.776047][T14387] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1122.796850][T14387] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1122.804141][T14387] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1122.994251][T15834] lo speed is unknown, defaulting to 1000 [ 1123.151068][T15839] kvm: kvm [15838]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1000 [ 1123.187039][T15839] kvm: kvm [15838]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfffe00000000 [ 1123.856482][T15854] FAULT_INJECTION: forcing a failure. [ 1123.856482][T15854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.856702][T15854] CPU: 0 UID: 0 PID: 15854 Comm: syz.9.2718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1123.856731][T15854] Tainted: [L]=SOFTLOCKUP [ 1123.856739][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1123.856752][T15854] Call Trace: [ 1123.856760][T15854] [ 1123.856768][T15854] dump_stack_lvl+0xe8/0x150 [ 1123.856802][T15854] should_fail_ex+0x46b/0x600 [ 1123.856832][T15854] _copy_from_user+0x2d/0xb0 [ 1123.856861][T15854] memdup_user+0x5e/0xd0 [ 1123.856887][T15854] strndup_user+0x68/0xd0 [ 1123.856911][T15854] __se_sys_mount+0x9d/0x420 [ 1123.856935][T15854] ? ksys_write+0x248/0x270 [ 1123.856964][T15854] ? __pfx___se_sys_mount+0x10/0x10 [ 1123.856993][T15854] ? __x64_sys_mount+0x20/0xc0 [ 1123.857017][T15854] do_syscall_64+0x14d/0xf80 [ 1123.857045][T15854] ? trace_irq_disable+0x3b/0x150 [ 1123.857067][T15854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.857086][T15854] ? clear_bhb_loop+0x40/0x90 [ 1123.857110][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.857130][T15854] RIP: 0033:0x7efed765c799 [ 1123.857146][T15854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.857161][T15854] RSP: 002b:00007efed58b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1123.857181][T15854] RAX: ffffffffffffffda RBX: 00007efed78d5fa0 RCX: 00007efed765c799 [ 1123.857196][T15854] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 0000200000000080 [ 1123.857210][T15854] RBP: 00007efed58b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.857222][T15854] R10: 0000000001a0c099 R11: 0000000000000246 R12: 0000000000000001 [ 1123.857233][T15854] R13: 00007efed78d6038 R14: 00007efed78d5fa0 R15: 00007fffc822b0a8 [ 1123.857262][T15854] [ 1124.558690][T15861] fuse: Unknown parameter 'user_i00000000000000000003' [ 1124.733098][T15863] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2722'. [ 1124.887383][T11449] Bluetooth: hci2: command tx timeout [ 1126.559545][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2720'. [ 1128.164990][T11449] Bluetooth: hci2: command tx timeout [ 1128.229894][T15834] chnl_net:caif_netlink_parms(): no params data found [ 1128.685451][T15901] fuse: Unknown parameter 'user_i00000000000000000003' [ 1129.002736][T15834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.008051][T15834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.008294][T15834] bridge_slave_0: entered allmulticast mode [ 1129.010745][T15834] bridge_slave_0: entered promiscuous mode [ 1129.033221][T15834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.040732][T15834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.040973][T15834] bridge_slave_1: entered allmulticast mode [ 1129.050706][T15834] bridge_slave_1: entered promiscuous mode [ 1129.173481][T15834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.185981][T14753] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1129.208040][T15834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.357965][T14753] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1129.358548][T14753] usb 7-1: not running at top speed; connect to a high speed hub [ 1129.359992][T14753] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.360016][T14753] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1129.363128][T14753] usb 7-1: string descriptor 0 read error: -22 [ 1129.363270][T14753] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1129.363296][T14753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.451483][T14753] usb 7-1: 0:2 : does not exist [ 1129.542269][T15834] team0: Port device team_slave_0 added [ 1129.557663][T15834] team0: Port device team_slave_1 added [ 1130.260571][T14387] Bluetooth: hci2: command tx timeout [ 1131.740798][T15923] lo speed is unknown, defaulting to 1000 [ 1131.753451][T15834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.753469][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.754017][T15834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.831144][T15834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.831376][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.831404][T15834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.134186][T15834] hsr_slave_0: entered promiscuous mode [ 1132.135211][T15834] hsr_slave_1: entered promiscuous mode [ 1132.135875][T15834] debugfs: 'hsr0' already exists in 'hsr' [ 1132.135898][T15834] Cannot create hsr debugfs directory [ 1132.335167][T14387] Bluetooth: hci2: command tx timeout [ 1133.070643][T14753] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1133.106717][T14753] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1133.112771][T14753] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 1133.188373][T14753] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1133.336253][T14753] usb 7-1: USB disconnect, device number 41 [ 1133.530218][T15930] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2736'. [ 1135.042249][T14753] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1135.205721][T14753] usb 9-1: Using ep0 maxpacket: 16 [ 1135.208205][T14753] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.208254][T14753] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1135.208279][T14753] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.213655][T14753] usb 9-1: config 0 descriptor?? [ 1136.251023][T15834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.391327][T15932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.391886][T15932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.425308][T14753] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1136.450358][T14387] Bluetooth: hci3: unexpected event for opcode 0x040e [ 1136.563163][T15944] fuse: Unknown parameter 'user_id00000000000000000003' [ 1136.850685][T15932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.851611][T15932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.019492][T15834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.273166][T14753] usb 9-1: USB disconnect, device number 2 [ 1137.862900][T15834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.018947][T15960] 9p: Bad value for 'wfdno' [ 1139.255243][T15834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.481831][T15979] fuse: Unknown parameter 'user_id00000000000000000003' [ 1139.923454][T15834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1140.194929][T15834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1140.237002][T15834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1140.762927][T15834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1141.118501][T15834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.151834][T15834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.173612][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.176116][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.223942][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.244208][T16015] fuse: Unknown parameter 'user_id00000000000000000003' [ 1141.245102][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.300756][T15834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.222719][T15834] veth0_vlan: entered promiscuous mode [ 1143.259742][T15834] veth1_vlan: entered promiscuous mode [ 1143.963116][T16057] fuse: Bad value for 'fd' [ 1143.987374][T15834] veth0_macvtap: entered promiscuous mode [ 1144.024005][T15834] veth1_macvtap: entered promiscuous mode [ 1144.060292][T15834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.083489][T15834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.112029][ T6470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.145042][ T6470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.186048][ T6470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.197061][ T6470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.956546][T16081] fuse: Bad value for 'fd' [ 1145.157654][ T6470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.157674][ T6470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.312857][T16090] FAULT_INJECTION: forcing a failure. [ 1145.312857][T16090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.312891][T16090] CPU: 0 UID: 0 PID: 16090 Comm: syz.9.2791 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1145.312927][T16090] Tainted: [L]=SOFTLOCKUP [ 1145.312935][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.312946][T16090] Call Trace: [ 1145.312953][T16090] [ 1145.312962][T16090] dump_stack_lvl+0xe8/0x150 [ 1145.312997][T16090] should_fail_ex+0x46b/0x600 [ 1145.313026][T16090] _copy_from_user+0x2d/0xb0 [ 1145.313055][T16090] snd_seq_write+0x314/0x830 [ 1145.313186][T16090] ? __pfx_snd_seq_write+0x10/0x10 [ 1145.313219][T16090] ? rw_verify_area+0x25b/0x4e0 [ 1145.313249][T16090] ? __pfx_snd_seq_write+0x10/0x10 [ 1145.313275][T16090] vfs_write+0x2a3/0xba0 [ 1145.313310][T16090] ? __pfx_vfs_write+0x10/0x10 [ 1145.313340][T16090] ? __fget_files+0x2a/0x420 [ 1145.313368][T16090] ? __fget_files+0x2a/0x420 [ 1145.313391][T16090] ? __fget_files+0x3a6/0x420 [ 1145.313413][T16090] ? __fget_files+0x2a/0x420 [ 1145.313442][T16090] ksys_write+0x156/0x270 [ 1145.313469][T16090] ? __pfx_ksys_write+0x10/0x10 [ 1145.313507][T16090] do_syscall_64+0x14d/0xf80 [ 1145.313535][T16090] ? trace_irq_disable+0x3b/0x150 [ 1145.313558][T16090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.313577][T16090] ? clear_bhb_loop+0x40/0x90 [ 1145.313598][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.313617][T16090] RIP: 0033:0x7efed765c799 [ 1145.313637][T16090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.313654][T16090] RSP: 002b:00007efed58b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1145.313674][T16090] RAX: ffffffffffffffda RBX: 00007efed78d5fa0 RCX: 00007efed765c799 [ 1145.313689][T16090] RDX: 000000000001001a RSI: 0000200000000000 RDI: 0000000000000003 [ 1145.313701][T16090] RBP: 00007efed58b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.313714][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.313725][T16090] R13: 00007efed78d6038 R14: 00007efed78d5fa0 R15: 00007fffc822b0a8 [ 1145.313757][T16090] [ 1145.625164][T11690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.625184][T11690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.876590][T16104] FAULT_INJECTION: forcing a failure. [ 1145.876590][T16104] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.876625][T16104] CPU: 1 UID: 0 PID: 16104 Comm: syz.9.2797 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1145.876651][T16104] Tainted: [L]=SOFTLOCKUP [ 1145.876657][T16104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.876667][T16104] Call Trace: [ 1145.876674][T16104] [ 1145.876682][T16104] dump_stack_lvl+0xe8/0x150 [ 1145.876715][T16104] should_fail_ex+0x46b/0x600 [ 1145.876742][T16104] should_failslab+0xa8/0x100 [ 1145.876765][T16104] __kmalloc_noprof+0xdf/0x7b0 [ 1145.876791][T16104] ? tomoyo_encode+0x28b/0x550 [ 1145.876816][T16104] tomoyo_encode+0x28b/0x550 [ 1145.876843][T16104] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1145.876872][T16104] ? tomoyo_path_number_perm+0x219/0x630 [ 1145.876907][T16104] tomoyo_path_number_perm+0x246/0x630 [ 1145.876937][T16104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1145.876966][T16104] ? __lock_acquire+0x6b5/0x2cf0 [ 1145.877015][T16104] ? __fget_files+0x2a/0x420 [ 1145.877042][T16104] ? __fget_files+0x2a/0x420 [ 1145.877064][T16104] ? __fget_files+0x3a6/0x420 [ 1145.877085][T16104] ? __fget_files+0x2a/0x420 [ 1145.877110][T16104] security_file_ioctl+0xc3/0x2a0 [ 1145.877132][T16104] __se_sys_ioctl+0x47/0x170 [ 1145.877162][T16104] do_syscall_64+0x14d/0xf80 [ 1145.877190][T16104] ? trace_irq_disable+0x3b/0x150 [ 1145.877212][T16104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.877232][T16104] ? clear_bhb_loop+0x40/0x90 [ 1145.877257][T16104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.877276][T16104] RIP: 0033:0x7efed765c799 [ 1145.877295][T16104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.877311][T16104] RSP: 002b:00007efed58b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1145.877332][T16104] RAX: ffffffffffffffda RBX: 00007efed78d5fa0 RCX: 00007efed765c799 [ 1145.877346][T16104] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1145.877359][T16104] RBP: 00007efed58b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.877371][T16104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.877383][T16104] R13: 00007efed78d6038 R14: 00007efed78d5fa0 R15: 00007fffc822b0a8 [ 1145.877414][T16104] [ 1145.877434][T16104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1145.921319][ T5804] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1146.162257][ T5804] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1146.162300][ T5804] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.162319][ T5804] usb 7-1: config 220 has no interface number 2 [ 1146.162394][ T5804] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1146.162421][ T5804] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1146.162437][ T5804] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1146.162455][ T5804] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1146.717357][T16113] overlayfs: missing 'workdir' [ 1147.536402][ T5804] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1147.536432][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.536452][ T5804] usb 7-1: Product: syz [ 1147.536466][ T5804] usb 7-1: Manufacturer: syz [ 1147.536482][ T5804] usb 7-1: SerialNumber: syz [ 1147.826630][T16118] fuse: Bad value for 'fd' [ 1148.548688][T13981] usb 2-1: USB disconnect, device number 21 [ 1149.674835][T11449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1149.713342][T11449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1149.723366][T11449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1149.747336][T11449] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1149.751187][T11449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1149.799672][ T5804] usb 7-1: selecting invalid altsetting 0 [ 1149.803123][ T5804] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1149.803177][ T5804] uvcvideo 7-1:220.0: No valid video chain found. [ 1149.925128][T16123] lo speed is unknown, defaulting to 1000 [ 1150.140975][ T5804] usb 7-1: selecting invalid altsetting 0 [ 1150.141012][ T5804] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1150.255803][ T5804] usb 7-1: USB disconnect, device number 42 [ 1152.529581][T16146] overlayfs: missing 'workdir' [ 1152.713811][T14387] Bluetooth: hci0: command tx timeout [ 1154.379523][T12873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.605147][T16175] fuse: Unknown parameter '00000000000000000003' [ 1154.928088][T16180] FAULT_INJECTION: forcing a failure. [ 1154.928088][T16180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.928139][T16180] CPU: 0 UID: 0 PID: 16180 Comm: syz.8.2823 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1154.928172][T16180] Tainted: [L]=SOFTLOCKUP [ 1154.928180][T16180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1154.928191][T16180] Call Trace: [ 1154.928199][T16180] [ 1154.928206][T16180] dump_stack_lvl+0xe8/0x150 [ 1154.928229][T16180] should_fail_ex+0x46b/0x600 [ 1154.928251][T16180] strncpy_from_user+0x36/0x2b0 [ 1154.928266][T16180] do_getname+0x77/0x250 [ 1154.928280][T16180] do_sys_openat2+0xca/0x200 [ 1154.928294][T16180] ? __pfx_do_sys_openat2+0x10/0x10 [ 1154.928308][T16180] ? ksys_write+0x248/0x270 [ 1154.928324][T16180] ? __pfx_ksys_write+0x10/0x10 [ 1154.928340][T16180] __x64_sys_openat+0x138/0x170 [ 1154.928355][T16180] do_syscall_64+0x14d/0xf80 [ 1154.928372][T16180] ? trace_irq_disable+0x3b/0x150 [ 1154.928384][T16180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.928395][T16180] ? clear_bhb_loop+0x40/0x90 [ 1154.928408][T16180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.928419][T16180] RIP: 0033:0x7fd2f7cac799 [ 1154.928431][T16180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.928441][T16180] RSP: 002b:00007fd2f5ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1154.928453][T16180] RAX: ffffffffffffffda RBX: 00007fd2f7f26090 RCX: 00007fd2f7cac799 [ 1154.928461][T16180] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1154.928472][T16180] RBP: 00007fd2f5ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.928482][T16180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.928495][T16180] R13: 00007fd2f7f26128 R14: 00007fd2f7f26090 R15: 00007ffe9191c638 [ 1154.928511][T16180] [ 1155.835155][T14387] Bluetooth: hci0: command tx timeout [ 1157.660572][T16190] overlayfs: missing 'workdir' [ 1158.319902][T11449] Bluetooth: hci0: command tx timeout [ 1158.351115][T12873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.705686][T13981] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1159.434838][T12873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.435692][T13981] usb 10-1: device not accepting address 3, error -71 [ 1159.555184][T16123] chnl_net:caif_netlink_parms(): no params data found [ 1159.788030][T16207] fuse: Unknown parameter '00000000000000000003' [ 1160.032963][T12873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.384138][T11449] Bluetooth: hci0: command tx timeout [ 1161.595940][T16225] overlayfs: missing 'workdir' [ 1162.492773][T16123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.494628][T16123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.523614][T16123] bridge_slave_0: entered allmulticast mode [ 1162.535332][T16123] bridge_slave_0: entered promiscuous mode [ 1162.562415][T16123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.562553][T16123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.562743][T16123] bridge_slave_1: entered allmulticast mode [ 1162.565466][T16123] bridge_slave_1: entered promiscuous mode [ 1162.892195][T16123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.909682][T16123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.595450][T16123] team0: Port device team_slave_0 added [ 1163.786290][T16123] team0: Port device team_slave_1 added [ 1164.099157][T16247] fuse: Unknown parameter '00000000000000000003' [ 1164.215343][T16123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.215359][T16123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.215384][T16123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.269858][T16123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.269874][T16123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.269900][T16123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.159789][T12873] bond0 (unregistering): Released all slaves [ 1167.171583][T12873] bond1 (unregistering): Released all slaves [ 1167.299061][T16123] hsr_slave_0: entered promiscuous mode [ 1167.300349][T16123] hsr_slave_1: entered promiscuous mode [ 1167.301211][T16123] debugfs: 'hsr0' already exists in 'hsr' [ 1167.301234][T16123] Cannot create hsr debugfs directory [ 1167.314169][T16265] lo speed is unknown, defaulting to 1000 [ 1167.455619][T12873] : left promiscuous mode [ 1167.455831][T16282] fuse: Unknown parameter '00000000000000000003' [ 1167.904925][T16294] FAULT_INJECTION: forcing a failure. [ 1167.904925][T16294] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.904983][T16294] CPU: 0 UID: 0 PID: 16294 Comm: syz.6.2858 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1167.905011][T16294] Tainted: [L]=SOFTLOCKUP [ 1167.905018][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1167.905031][T16294] Call Trace: [ 1167.905039][T16294] [ 1167.905048][T16294] dump_stack_lvl+0xe8/0x150 [ 1167.905081][T16294] should_fail_ex+0x46b/0x600 [ 1167.905112][T16294] should_failslab+0xa8/0x100 [ 1167.905134][T16294] kmem_cache_alloc_noprof+0x87/0x680 [ 1167.905163][T16294] ? dst_alloc+0x105/0x170 [ 1167.905272][T16294] dst_alloc+0x105/0x170 [ 1167.905297][T16294] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1167.905362][T16294] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1167.905391][T16294] ip_route_output_key_hash+0x18d/0x2a0 [ 1167.905417][T16294] ? lockdep_hardirqs_on+0x7a/0x110 [ 1167.905448][T16294] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1167.905491][T16294] ip_route_output_flow+0x2a/0x150 [ 1167.905513][T16294] ? security_sk_classify_flow+0x6d/0x150 [ 1167.905547][T16294] raw_sendmsg+0x1199/0x1a50 [ 1167.905581][T16294] ? __pfx_raw_sendmsg+0x10/0x10 [ 1167.905634][T16294] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 1167.905662][T16294] ? sock_rps_record_flow+0x19/0x400 [ 1167.905690][T16294] ? __pfx_inet_sendmsg+0x10/0x10 [ 1167.905717][T16294] ? inet_sendmsg+0x2f4/0x370 [ 1167.905743][T16294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1167.905771][T16294] ? __pfx_inet_sendmsg+0x10/0x10 [ 1167.905806][T16294] __sys_sendto+0x5f1/0x710 [ 1167.905840][T16294] ? __pfx___sys_sendto+0x10/0x10 [ 1167.905894][T16294] ? ksys_write+0x248/0x270 [ 1167.905925][T16294] ? __pfx_ksys_write+0x10/0x10 [ 1167.905958][T16294] __x64_sys_sendto+0xde/0x100 [ 1167.905989][T16294] do_syscall_64+0x14d/0xf80 [ 1167.906018][T16294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.906038][T16294] ? clear_bhb_loop+0x40/0x90 [ 1167.906063][T16294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.906083][T16294] RIP: 0033:0x7f516040c799 [ 1167.906103][T16294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.906121][T16294] RSP: 002b:00007f515e624028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1167.906141][T16294] RAX: ffffffffffffffda RBX: 00007f5160686180 RCX: 00007f516040c799 [ 1167.906155][T16294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1167.906168][T16294] RBP: 00007f515e624090 R08: 0000200000000380 R09: 0000000000000010 [ 1167.906181][T16294] R10: 0000000004040004 R11: 0000000000000246 R12: 0000000000000001 [ 1167.906194][T16294] R13: 00007f5160686218 R14: 00007f5160686180 R15: 00007ffe2d3d5ef8 [ 1167.906226][T16294] [ 1168.517252][T16293] FAULT_INJECTION: forcing a failure. [ 1168.517252][T16293] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.517289][T16293] CPU: 0 UID: 0 PID: 16293 Comm: syz.9.2860 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1168.517317][T16293] Tainted: [L]=SOFTLOCKUP [ 1168.517324][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1168.517337][T16293] Call Trace: [ 1168.517345][T16293] [ 1168.517354][T16293] dump_stack_lvl+0xe8/0x150 [ 1168.517387][T16293] should_fail_ex+0x46b/0x600 [ 1168.517418][T16293] should_failslab+0xa8/0x100 [ 1168.517440][T16293] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 1168.517472][T16293] ? __get_vm_area_node+0x171/0x350 [ 1168.517517][T16293] __get_vm_area_node+0x171/0x350 [ 1168.517550][T16293] __vmalloc_node_range_noprof+0x372/0x1730 [ 1168.517580][T16293] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1168.517619][T16293] ? __lock_acquire+0x6b5/0x2cf0 [ 1168.517645][T16293] ? kernel_text_address+0xa5/0xe0 [ 1168.517673][T16293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1168.517700][T16293] ? arch_stack_walk+0xfb/0x150 [ 1168.517733][T16293] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1168.517762][T16293] __vmalloc_noprof+0xd2/0x120 [ 1168.517789][T16293] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1168.517817][T16293] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1168.517846][T16293] bpf_prog_alloc+0x3c/0x1a0 [ 1168.517874][T16293] bpf_prog_load+0x7ba/0x1ae0 [ 1168.517913][T16293] ? __pfx_bpf_prog_load+0x10/0x10 [ 1168.517958][T16293] ? bpf_lsm_bpf+0x9/0x20 [ 1168.517978][T16293] ? security_bpf+0x7e/0x2d0 [ 1168.518002][T16293] __sys_bpf+0x618/0x950 [ 1168.518028][T16293] ? __pfx___sys_bpf+0x10/0x10 [ 1168.518050][T16293] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1168.518091][T16293] ? ksys_write+0x248/0x270 [ 1168.518120][T16293] ? __pfx_ksys_write+0x10/0x10 [ 1168.518154][T16293] __x64_sys_bpf+0x7c/0x90 [ 1168.518178][T16293] do_syscall_64+0x14d/0xf80 [ 1168.518205][T16293] ? trace_irq_disable+0x3b/0x150 [ 1168.518227][T16293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.518248][T16293] ? clear_bhb_loop+0x40/0x90 [ 1168.518272][T16293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.518291][T16293] RIP: 0033:0x7efed765c799 [ 1168.518311][T16293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.518328][T16293] RSP: 002b:00007efed58b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1168.518349][T16293] RAX: ffffffffffffffda RBX: 00007efed78d5fa0 RCX: 00007efed765c799 [ 1168.518364][T16293] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 1168.518377][T16293] RBP: 00007efed58b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.518390][T16293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.518403][T16293] R13: 00007efed78d6038 R14: 00007efed78d5fa0 R15: 00007fffc822b0a8 [ 1168.518434][T16293] [ 1168.518444][T16293] syz.9.2860: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1168.518506][T16293] CPU: 0 UID: 0 PID: 16293 Comm: syz.9.2860 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1168.518532][T16293] Tainted: [L]=SOFTLOCKUP [ 1168.518540][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1168.518551][T16293] Call Trace: [ 1168.518559][T16293] [ 1168.518567][T16293] dump_stack_lvl+0xe8/0x150 [ 1168.518595][T16293] warn_alloc+0x263/0x3e0 [ 1168.518624][T16293] ? __pfx_warn_alloc+0x10/0x10 [ 1168.518643][T16293] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1168.518673][T16293] ? __get_vm_area_node+0x171/0x350 [ 1168.518704][T16293] ? __get_vm_area_node+0x2e1/0x350 [ 1168.518745][T16293] __vmalloc_node_range_noprof+0x397/0x1730 [ 1168.518791][T16293] ? __lock_acquire+0x6b5/0x2cf0 [ 1168.518817][T16293] ? kernel_text_address+0xa5/0xe0 [ 1168.518843][T16293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1168.518871][T16293] ? arch_stack_walk+0xfb/0x150 [ 1168.518903][T16293] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1168.518926][T16293] __vmalloc_noprof+0xd2/0x120 [ 1168.518954][T16293] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1168.518981][T16293] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1168.519017][T16293] bpf_prog_alloc+0x3c/0x1a0 [ 1168.519053][T16293] bpf_prog_load+0x7ba/0x1ae0 [ 1168.519091][T16293] ? __pfx_bpf_prog_load+0x10/0x10 [ 1168.519137][T16293] ? bpf_lsm_bpf+0x9/0x20 [ 1168.519155][T16293] ? security_bpf+0x7e/0x2d0 [ 1168.519178][T16293] __sys_bpf+0x618/0x950 [ 1168.519204][T16293] ? __pfx___sys_bpf+0x10/0x10 [ 1168.519224][T16293] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1168.519263][T16293] ? ksys_write+0x248/0x270 [ 1168.519291][T16293] ? __pfx_ksys_write+0x10/0x10 [ 1168.519326][T16293] __x64_sys_bpf+0x7c/0x90 [ 1168.519348][T16293] do_syscall_64+0x14d/0xf80 [ 1168.519374][T16293] ? trace_irq_disable+0x3b/0x150 [ 1168.519395][T16293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.519415][T16293] ? clear_bhb_loop+0x40/0x90 [ 1168.519438][T16293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.519458][T16293] RIP: 0033:0x7efed765c799 [ 1168.519474][T16293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.519490][T16293] RSP: 002b:00007efed58b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1168.519509][T16293] RAX: ffffffffffffffda RBX: 00007efed78d5fa0 RCX: 00007efed765c799 [ 1168.519524][T16293] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 1168.519536][T16293] RBP: 00007efed58b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.519549][T16293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.519561][T16293] R13: 00007efed78d6038 R14: 00007efed78d5fa0 R15: 00007fffc822b0a8 [ 1168.519592][T16293] [ 1168.519600][T16293] Mem-Info: [ 1168.519609][T16293] active_anon:273 inactive_anon:10968 isolated_anon:0 [ 1168.519609][T16293] active_file:27828 inactive_file:39314 isolated_file:0 [ 1168.519609][T16293] unevictable:768 dirty:349 writeback:0 [ 1168.519609][T16293] slab_reclaimable:13327 slab_unreclaimable:112264 [ 1168.519609][T16293] mapped:34545 shmem:4250 pagetables:1884 [ 1168.519609][T16293] sec_pagetables:0 bounce:0 [ 1168.519609][T16293] kernel_misc_reclaimable:0 [ 1168.519609][T16293] free:1264816 free_pcp:10193 free_cma:0 [ 1168.519663][T16293] Node 0 active_anon:1092kB inactive_anon:43872kB active_file:111100kB inactive_file:157256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138180kB dirty:1396kB writeback:0kB shmem:15464kB kernel_stack:14812kB pagetables:7404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1168.519709][T16293] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1168.519757][T16293] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1168.519813][T16293] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1168.519847][T16293] Node 0 DMA32 free:1113384kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1092kB inactive_anon:43872kB active_file:111100kB inactive_file:157256kB unevictable:1536kB writepending:1396kB zspages:0kB present:3129332kB managed:2566528kB mlocked:0kB bounce:0kB free_pcp:40772kB local_pcp:18044kB free_cma:0kB [ 1168.519907][T16293] lowmem_reserve[]: 0 0 0 0 0 [ 1168.519938][T16293] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1168.519992][T16293] lowmem_reserve[]: 0 0 0 0 0 [ 1168.520023][T16293] Node 1 Normal free:3930520kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1168.520081][T16293] lowmem_reserve[]: 0 0 0 0 0 [ 1168.520111][T16293] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1168.520240][T16293] Node 0 DMA32: 2116*4kB (UME) 3713*8kB (UME) 2526*16kB (UM) 338*32kB (UME) 193*64kB (UME) 251*128kB (UME) 266*256kB (UME) 184*512kB (UME) 114*1024kB (UM) 68*2048kB (UME) 137*4096kB (M) = 1113336kB [ 1168.520390][T16293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1168.520484][T16293] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 8*16kB (UM) 7*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (M) 958*4096kB (M) = 3930520kB [ 1168.520631][T16293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1168.520648][T16293] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1168.520664][T16293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1168.520681][T16293] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1168.520697][T16293] 71388 total pagecache pages [ 1168.520706][T16293] 0 pages in swap cache [ 1168.520713][T16293] Free swap = 124996kB [ 1168.520721][T16293] Total swap = 124996kB [ 1168.520729][T16293] 2097051 pages RAM [ 1168.520741][T16293] 0 pages HighMem/MovableOnly [ 1168.520748][T16293] 423699 pages reserved [ 1168.520756][T16293] 0 pages cma reserved [ 1169.623362][T12873] tipc: Disabling bearer [ 1169.623542][T12873] tipc: Left network mode [ 1170.355496][T16328] fuse: Unknown parameter '00000000000000000003' [ 1170.822026][T16338] overlayfs: workdir and upperdir must reside under the same mount [ 1174.283361][T16365] fuse: Unknown parameter '00000000000000000003' [ 1175.856329][ T8827] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1176.055893][ T8827] usb 9-1: Using ep0 maxpacket: 32 [ 1176.058260][ T8827] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.058292][ T8827] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.060329][ T8827] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1176.060357][ T8827] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1176.060379][ T8827] usb 9-1: Product: syz [ 1176.060394][ T8827] usb 9-1: Manufacturer: syz [ 1176.145670][ T8827] hub 9-1:4.0: USB hub found [ 1176.408056][ T8827] hub 9-1:4.0: 2 ports detected [ 1176.691556][ T8827] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 1176.691583][ T8827] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 1176.794320][ T8827] usb 9-1: USB disconnect, device number 3 [ 1177.493544][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.493612][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.137200][T16410] FAULT_INJECTION: forcing a failure. [ 1179.137200][T16410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.137231][T16410] CPU: 1 UID: 0 PID: 16410 Comm: syz.6.2889 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1179.137252][T16410] Tainted: [L]=SOFTLOCKUP [ 1179.137258][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.137267][T16410] Call Trace: [ 1179.137274][T16410] [ 1179.137280][T16410] dump_stack_lvl+0xe8/0x150 [ 1179.137309][T16410] should_fail_ex+0x46b/0x600 [ 1179.137332][T16410] _copy_to_user+0x31/0xb0 [ 1179.137355][T16410] simple_read_from_buffer+0xe1/0x170 [ 1179.137385][T16410] proc_fail_nth_read+0x1be/0x230 [ 1179.137410][T16410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1179.137435][T16410] ? rw_verify_area+0x2ac/0x4e0 [ 1179.137460][T16410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1179.137481][T16410] vfs_read+0x212/0xa80 [ 1179.137507][T16410] ? __pfx_vfs_read+0x10/0x10 [ 1179.137528][T16410] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1179.137551][T16410] ? lockdep_hardirqs_on+0x7a/0x110 [ 1179.137572][T16410] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1179.137592][T16410] ? mutex_lock_nested+0x152/0x1d0 [ 1179.137609][T16410] ? fdget_pos+0x252/0x320 [ 1179.137633][T16410] ksys_read+0x156/0x270 [ 1179.137655][T16410] ? __pfx_ksys_read+0x10/0x10 [ 1179.137683][T16410] do_syscall_64+0x14d/0xf80 [ 1179.137704][T16410] ? trace_irq_disable+0x3b/0x150 [ 1179.137730][T16410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.137746][T16410] ? clear_bhb_loop+0x40/0x90 [ 1179.137764][T16410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.137779][T16410] RIP: 0033:0x7f51603ccfce [ 1179.137795][T16410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1179.137809][T16410] RSP: 002b:00007f515e665fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1179.137826][T16410] RAX: ffffffffffffffda RBX: 00007f515e6666c0 RCX: 00007f51603ccfce [ 1179.137838][T16410] RDX: 000000000000000f RSI: 00007f515e6660a0 RDI: 0000000000000003 [ 1179.137848][T16410] RBP: 00007f515e666090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.137858][T16410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.137868][T16410] R13: 00007f5160686038 R14: 00007f5160685fa0 R15: 00007ffe2d3d5ef8 [ 1179.137894][T16410] [ 1179.207004][T16412] fuse: Unknown parameter 'fd00000000000000000003' [ 1179.495546][T16402] Bluetooth: hci4: command 0x0406 tx timeout [ 1179.575520][T16402] Bluetooth: hci6: command 0x0406 tx timeout [ 1179.873692][T12873] hsr_slave_0: left promiscuous mode [ 1180.035061][T12873] hsr_slave_1: left promiscuous mode [ 1180.319013][T16427] FAULT_INJECTION: forcing a failure. [ 1180.319013][T16427] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.319039][T16427] CPU: 0 UID: 0 PID: 16427 Comm: syz.8.2894 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1180.319056][T16427] Tainted: [L]=SOFTLOCKUP [ 1180.319060][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1180.319079][T16427] Call Trace: [ 1180.319084][T16427] [ 1180.319089][T16427] dump_stack_lvl+0xe8/0x150 [ 1180.319110][T16427] should_fail_ex+0x46b/0x600 [ 1180.319128][T16427] should_failslab+0xa8/0x100 [ 1180.319140][T16427] kmem_cache_alloc_noprof+0x87/0x680 [ 1180.319157][T16427] ? prepare_creds+0x30/0x820 [ 1180.319172][T16427] prepare_creds+0x30/0x820 [ 1180.319187][T16427] copy_creds+0x10e/0xa30 [ 1180.319203][T16427] copy_process+0x904/0x3cd0 [ 1180.319227][T16427] ? get_pid_task+0x20/0x1f0 [ 1180.319244][T16427] ? __pfx_copy_process+0x10/0x10 [ 1180.319265][T16427] kernel_clone+0x249/0x840 [ 1180.319283][T16427] ? __pfx_kernel_clone+0x10/0x10 [ 1180.319297][T16427] ? do_raw_spin_lock+0x12b/0x2f0 [ 1180.319321][T16427] __x64_sys_clone+0x1b6/0x230 [ 1180.319333][T16427] ? __pfx___x64_sys_clone+0x10/0x10 [ 1180.319351][T16427] ? __pfx_ksys_write+0x10/0x10 [ 1180.319372][T16427] do_syscall_64+0x14d/0xf80 [ 1180.319389][T16427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.319401][T16427] ? clear_bhb_loop+0x40/0x90 [ 1180.319414][T16427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.319424][T16427] RIP: 0033:0x7fd2f7cac799 [ 1180.319436][T16427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.319446][T16427] RSP: 002b:00007fd2f5ee4fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1180.319458][T16427] RAX: ffffffffffffffda RBX: 00007fd2f7f26090 RCX: 00007fd2f7cac799 [ 1180.319466][T16427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1180.319472][T16427] RBP: 00007fd2f5ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.319479][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.319485][T16427] R13: 00007fd2f7f26128 R14: 00007fd2f7f26090 R15: 00007ffe9191c638 [ 1180.319501][T16427] [ 1180.381956][T12873] veth1_macvtap: left promiscuous mode [ 1180.382063][T12873] veth0_macvtap: left promiscuous mode [ 1180.382226][T12873] veth1_vlan: left promiscuous mode [ 1180.382414][T12873] veth0_vlan: left promiscuous mode [ 1180.644146][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2897'. [ 1185.592917][T16467] FAULT_INJECTION: forcing a failure. [ 1185.592917][T16467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.592953][T16467] CPU: 0 UID: 0 PID: 16467 Comm: syz.0.2903 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1185.592980][T16467] Tainted: [L]=SOFTLOCKUP [ 1185.592988][T16467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1185.593000][T16467] Call Trace: [ 1185.593008][T16467] [ 1185.593018][T16467] dump_stack_lvl+0xe8/0x150 [ 1185.593051][T16467] should_fail_ex+0x46b/0x600 [ 1185.593081][T16467] _copy_from_user+0x2d/0xb0 [ 1185.593109][T16467] do_ipv6_getsockopt+0x2d9/0x2620 [ 1185.593232][T16467] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 1185.593260][T16467] ? kstrtoull+0x12f/0x1d0 [ 1185.593285][T16467] ? kstrtouint+0x6e/0xe0 [ 1185.593312][T16467] ? get_pid_task+0x20/0x1f0 [ 1185.593339][T16467] ? __lock_acquire+0x6b5/0x2cf0 [ 1185.593373][T16467] ? __lock_acquire+0x6b5/0x2cf0 [ 1185.593402][T16467] ipv6_getsockopt+0xbd/0x2b0 [ 1185.593429][T16467] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1185.593458][T16467] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1185.593486][T16467] do_sock_getsockopt+0x2d3/0x3f0 [ 1185.593520][T16467] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1185.593550][T16467] ? __fget_files+0x3a6/0x420 [ 1185.593575][T16467] ? __fget_files+0x2a/0x420 [ 1185.593606][T16467] __x64_sys_getsockopt+0x1aa/0x250 [ 1185.593643][T16467] do_syscall_64+0x14d/0xf80 [ 1185.593678][T16467] ? trace_irq_disable+0x3b/0x150 [ 1185.593700][T16467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.593721][T16467] ? clear_bhb_loop+0x40/0x90 [ 1185.593746][T16467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.593766][T16467] RIP: 0033:0x7f46bc51c799 [ 1185.593785][T16467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.593802][T16467] RSP: 002b:00007f46ba76e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1185.593822][T16467] RAX: ffffffffffffffda RBX: 00007f46bc795fa0 RCX: 00007f46bc51c799 [ 1185.593836][T16467] RDX: 0000000000000050 RSI: 0000000000000029 RDI: 0000000000000003 [ 1185.593849][T16467] RBP: 00007f46ba76e090 R08: 0000200000000100 R09: 0000000000000000 [ 1185.593862][T16467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.593874][T16467] R13: 00007f46bc796038 R14: 00007f46bc795fa0 R15: 00007fff21a1abb8 [ 1185.593905][T16467] [ 1186.801439][T16471] fuse: Unknown parameter 'fd00000000000000000003' [ 1186.835240][T12873] team0 (unregistering): Port device macvlan0 removed [ 1187.862080][ T1341] smc: removing ib device syz0 [ 1188.010491][ T8827] lo speed is unknown, defaulting to 1000 [ 1188.010542][ T8827] syz0: Port: 1 Link DOWN [ 1189.265003][T16501] fuse: Unknown parameter 'fd00000000000000000003' [ 1190.350887][T16123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1190.767855][T16510] rdma_op ffff8880612b4a70 conn xmit_rdma 0000000000000000 [ 1191.688776][T16499] trusted_key: encrypted_key: insufficient parameters specified [ 1191.715411][T16123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1193.758077][T16123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1194.280444][T16123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1194.932288][T16523] overlayfs: missing 'workdir' [ 1196.333630][T14921] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1196.484606][T14921] usb 9-1: Using ep0 maxpacket: 8 [ 1196.581534][T16123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.613883][T14921] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.613942][T14921] usb 9-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1196.613967][T14921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.692566][T16123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.748221][T14921] usb 9-1: config 0 descriptor?? [ 1196.774816][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.775073][T12878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.803103][T14921] uvcvideo 9-1:0.0: Found UVC 0.00 device (2833:0201) [ 1196.803136][T14921] uvcvideo 9-1:0.0: No valid video chain found. [ 1196.860473][T12858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.884073][T12858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.640167][T16545] trusted_key: encrypted_key: insufficient parameters specified [ 1198.382519][T16123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.514790][T16551] FAULT_INJECTION: forcing a failure. [ 1198.514790][T16551] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.514825][T16551] CPU: 0 UID: 0 PID: 16551 Comm: syz.6.2928 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1198.514852][T16551] Tainted: [L]=SOFTLOCKUP [ 1198.514859][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1198.514871][T16551] Call Trace: [ 1198.514879][T16551] [ 1198.514889][T16551] dump_stack_lvl+0xe8/0x150 [ 1198.514922][T16551] should_fail_ex+0x46b/0x600 [ 1198.514951][T16551] should_failslab+0xa8/0x100 [ 1198.514973][T16551] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1198.515003][T16551] ? __alloc_skb+0x1d0/0x7d0 [ 1198.515029][T16551] ? lockdep_hardirqs_on+0x7a/0x110 [ 1198.515063][T16551] __alloc_skb+0x1d0/0x7d0 [ 1198.515095][T16551] netlink_sendmsg+0x5d4/0xb40 [ 1198.515130][T16551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1198.515157][T16551] ? unwind_get_return_address+0x4d/0x90 [ 1198.515182][T16551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1198.515213][T16551] ____sys_sendmsg+0x94c/0x9c0 [ 1198.515239][T16551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1198.515268][T16551] ? import_iovec+0x73/0xa0 [ 1198.515299][T16551] ___sys_sendmsg+0x2a5/0x360 [ 1198.515325][T16551] ? __pfx____sys_sendmsg+0x10/0x10 [ 1198.515377][T16551] ? __fget_files+0x2a/0x420 [ 1198.515401][T16551] ? __fget_files+0x3a6/0x420 [ 1198.515442][T16551] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1198.515465][T16551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1198.515494][T16551] ? __pfx_ksys_write+0x10/0x10 [ 1198.515533][T16551] do_syscall_64+0x14d/0xf80 [ 1198.515561][T16551] ? trace_irq_disable+0x3b/0x150 [ 1198.515583][T16551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.515604][T16551] ? clear_bhb_loop+0x40/0x90 [ 1198.515628][T16551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.515647][T16551] RIP: 0033:0x7f516040c799 [ 1198.515666][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.515683][T16551] RSP: 002b:00007f515e666028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.515704][T16551] RAX: ffffffffffffffda RBX: 00007f5160685fa0 RCX: 00007f516040c799 [ 1198.515718][T16551] RDX: 0000000020000044 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1198.515732][T16551] RBP: 00007f515e666090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.515744][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.515756][T16551] R13: 00007f5160686038 R14: 00007f5160685fa0 R15: 00007ffe2d3d5ef8 [ 1198.515787][T16551] [ 1198.602203][T16123] veth0_vlan: entered promiscuous mode [ 1198.673347][T16123] veth1_vlan: entered promiscuous mode [ 1199.082447][T16123] veth0_macvtap: entered promiscuous mode [ 1199.136706][T16123] veth1_macvtap: entered promiscuous mode [ 1199.248020][T16123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.295959][T16123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.374884][T12856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.375117][T12856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.375347][T12856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.375782][T12856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.387490][ T809] usb 9-1: USB disconnect, device number 4 [ 1200.708706][T16567] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1201.400792][T12873] IPVS: stop unused estimator thread 0... [ 1202.413431][T16576] rdma_op ffff88805f2fd270 conn xmit_rdma 0000000000000000 [ 1205.014532][T12878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.014552][T12878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.618593][T16590] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1205.888769][ T6470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.888790][ T6470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.953907][T14387] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1213.122960][T14387] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1213.127929][T14387] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1213.144227][T14387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1213.161058][T14387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1215.017702][T16638] random: crng reseeded on system resumption [ 1215.491153][T14387] Bluetooth: hci3: command tx timeout [ 1217.507286][T14902] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1217.570915][T14387] Bluetooth: hci3: command tx timeout [ 1217.691689][T14902] usb 7-1: Using ep0 maxpacket: 32 [ 1217.710404][T14902] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1217.710434][T14902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.710455][T14902] usb 7-1: Product: syz [ 1217.710470][T14902] usb 7-1: Manufacturer: syz [ 1217.710485][T14902] usb 7-1: SerialNumber: syz [ 1217.724248][T14902] usb 7-1: config 0 descriptor?? [ 1217.729265][T14902] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1217.729661][T14902] dvb-usb: bulk message failed: -22 (4/0) [ 1217.729677][T14902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1217.729798][T14902] dvb-usb: bulk message failed: -22 (5/0) [ 1217.729812][T14902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1217.762761][T14902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1217.766873][T14902] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1217.766926][T14902] usb 7-1: media controller created [ 1217.810320][T14902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1218.100717][T14902] usb 7-1: selecting invalid altsetting 3 [ 1218.100735][T14902] ttusb2: set interface to alts=3 failed [ 1218.153440][T16649] dvb-usb: bulk message failed: -22 (7/0) [ 1218.153462][T16649] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1218.153594][T16649] ttusb2: i2c transfer failed. [ 1218.416821][T14902] DVB: Unable to find symbol tda10086_attach() [ 1218.416838][T14902] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1218.419924][T14902] dvb-usb: bulk message failed: -22 (4/0) [ 1218.419947][T14902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1218.420072][T14902] dvb-usb: bulk message failed: -22 (5/0) [ 1218.420086][T14902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1218.420154][T14902] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1218.500254][T14902] usb 7-1: USB disconnect, device number 43 [ 1218.531925][T16608] chnl_net:caif_netlink_parms(): no params data found [ 1218.613499][T13681] udevd[13681]: setting mode of /dev/dvb/adapter1/demux0 to 020660 failed: No such file or directory [ 1218.613670][T13681] udevd[13681]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory [ 1219.588572][T14902] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1219.650515][T11449] Bluetooth: hci3: command tx timeout [ 1219.959940][T16608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.969260][T16608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.969497][T16608] bridge_slave_0: entered allmulticast mode [ 1220.017769][T16608] bridge_slave_0: entered promiscuous mode [ 1220.038337][T16608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.039667][T16608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.039911][T16608] bridge_slave_1: entered allmulticast mode [ 1220.070690][T16608] bridge_slave_1: entered promiscuous mode [ 1220.129855][T16608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.149531][T16608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.204899][T16608] team0: Port device team_slave_0 added [ 1220.208240][T16608] team0: Port device team_slave_1 added [ 1220.258423][T16608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.258440][T16608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.258466][T16608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.304589][T16608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.304604][T16608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.304631][T16608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.425908][T16608] hsr_slave_0: entered promiscuous mode [ 1220.440127][T16608] hsr_slave_1: entered promiscuous mode [ 1220.468297][T16608] debugfs: 'hsr0' already exists in 'hsr' [ 1220.468324][T16608] Cannot create hsr debugfs directory [ 1220.800471][ T8827] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1220.904034][T16673] FAULT_INJECTION: forcing a failure. [ 1220.904034][T16673] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.904070][T16673] CPU: 0 UID: 0 PID: 16673 Comm: syz.6.2956 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1220.904097][T16673] Tainted: [L]=SOFTLOCKUP [ 1220.904105][T16673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1220.904118][T16673] Call Trace: [ 1220.904126][T16673] [ 1220.904135][T16673] dump_stack_lvl+0xe8/0x150 [ 1220.904170][T16673] should_fail_ex+0x46b/0x600 [ 1220.904201][T16673] should_failslab+0xa8/0x100 [ 1220.904223][T16673] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1220.904253][T16673] ? __alloc_skb+0x1d0/0x7d0 [ 1220.904279][T16673] ? lockdep_hardirqs_on+0x7a/0x110 [ 1220.904312][T16673] __alloc_skb+0x1d0/0x7d0 [ 1220.904343][T16673] netlink_sendmsg+0x5d4/0xb40 [ 1220.904378][T16673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.904406][T16673] ? unwind_get_return_address+0x4d/0x90 [ 1220.904430][T16673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1220.904463][T16673] ____sys_sendmsg+0x94c/0x9c0 [ 1220.904488][T16673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1220.904516][T16673] ? import_iovec+0x73/0xa0 [ 1220.904547][T16673] ___sys_sendmsg+0x2a5/0x360 [ 1220.904572][T16673] ? __pfx____sys_sendmsg+0x10/0x10 [ 1220.904625][T16673] ? __fget_files+0x2a/0x420 [ 1220.904649][T16673] ? __fget_files+0x3a6/0x420 [ 1220.904682][T16673] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1220.904704][T16673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1220.904732][T16673] ? __pfx_ksys_write+0x10/0x10 [ 1220.904771][T16673] do_syscall_64+0x14d/0xf80 [ 1220.904806][T16673] ? trace_irq_disable+0x3b/0x150 [ 1220.904828][T16673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.904848][T16673] ? clear_bhb_loop+0x40/0x90 [ 1220.904871][T16673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.904891][T16673] RIP: 0033:0x7f516040c799 [ 1220.904911][T16673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.904928][T16673] RSP: 002b:00007f515e666028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.904950][T16673] RAX: ffffffffffffffda RBX: 00007f5160685fa0 RCX: 00007f516040c799 [ 1220.904964][T16673] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1220.904978][T16673] RBP: 00007f515e666090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.904990][T16673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.905003][T16673] R13: 00007f5160686038 R14: 00007f5160685fa0 R15: 00007ffe2d3d5ef8 [ 1220.905033][T16673] [ 1220.980005][ T8827] usb 9-1: Using ep0 maxpacket: 32 [ 1221.080383][ T8827] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1221.080412][ T8827] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1221.080430][ T8827] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1221.080481][ T8827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1221.080504][ T8827] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1221.080530][ T8827] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1221.080572][ T8827] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1221.080594][ T8827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.322813][ T8827] usb 9-1: config 0 descriptor?? [ 1221.569432][ T8827] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1221.732187][T11449] Bluetooth: hci3: command tx timeout [ 1221.763721][T16675] FAULT_INJECTION: forcing a failure. [ 1221.763721][T16675] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.763756][T16675] CPU: 1 UID: 0 PID: 16675 Comm: syz.6.2957 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1221.763782][T16675] Tainted: [L]=SOFTLOCKUP [ 1221.763790][T16675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.763802][T16675] Call Trace: [ 1221.763810][T16675] [ 1221.763817][T16675] dump_stack_lvl+0xe8/0x150 [ 1221.763848][T16675] should_fail_ex+0x46b/0x600 [ 1221.763877][T16675] should_failslab+0xa8/0x100 [ 1221.763899][T16675] kmem_cache_alloc_noprof+0x87/0x680 [ 1221.763924][T16675] ? do_set_mempolicy+0x214/0x630 [ 1221.763948][T16675] do_set_mempolicy+0x214/0x630 [ 1221.763972][T16675] ? __pfx_do_set_mempolicy+0x10/0x10 [ 1221.764002][T16675] __se_sys_set_mempolicy+0x197/0x500 [ 1221.764030][T16675] ? fput+0xa0/0xd0 [ 1221.764047][T16675] ? ksys_write+0x248/0x270 [ 1221.764067][T16675] ? __pfx___se_sys_set_mempolicy+0x10/0x10 [ 1221.764089][T16675] ? __pfx_ksys_write+0x10/0x10 [ 1221.764116][T16675] do_syscall_64+0x14d/0xf80 [ 1221.764138][T16675] ? trace_irq_disable+0x3b/0x150 [ 1221.764155][T16675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.764169][T16675] ? clear_bhb_loop+0x40/0x90 [ 1221.764187][T16675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.764201][T16675] RIP: 0033:0x7f516040c799 [ 1221.764216][T16675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.764229][T16675] RSP: 002b:00007f515e666028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 1221.764246][T16675] RAX: ffffffffffffffda RBX: 00007f5160685fa0 RCX: 00007f516040c799 [ 1221.764257][T16675] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000004003 [ 1221.764267][T16675] RBP: 00007f515e666090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.764277][T16675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.764286][T16675] R13: 00007f5160686038 R14: 00007f5160685fa0 R15: 00007ffe2d3d5ef8 [ 1221.764321][T16675] [ 1222.537356][T16678] syz_tun: entered promiscuous mode [ 1223.956473][T13901] usb 9-1: USB disconnect, device number 5 [ 1223.983452][T13901] usblp0: removed [ 1225.816371][T16608] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.259748][ T8827] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1226.413270][ T8827] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1226.413334][ T8827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.413359][ T8827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.413382][ T8827] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1226.413425][ T8827] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1226.413448][ T8827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.500795][ T8827] usb 9-1: config 0 descriptor?? [ 1226.825748][T16693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1227.287762][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2962'. [ 1227.287804][T16695] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2962'. [ 1227.336680][ T8827] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 1227.394050][ T8827] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1228.583182][T16707] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2966'. [ 1229.700698][T14387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1229.725498][T14387] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1229.727861][T14387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1229.753031][T14387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1229.754220][T14387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1231.462286][T14387] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1231.492066][T14387] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1231.493735][T14387] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1231.498438][T14387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1231.531605][T14387] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1231.889211][T14387] Bluetooth: hci0: command tx timeout [ 1232.680196][ T809] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1232.710728][T16710] chnl_net:caif_netlink_parms(): no params data found [ 1233.574540][T14387] Bluetooth: hci5: command tx timeout [ 1233.968827][T14387] Bluetooth: hci0: command tx timeout [ 1234.106794][ T809] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1234.107864][ T809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.107887][ T809] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1234.144601][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.144746][T16710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.145005][T16710] bridge_slave_0: entered allmulticast mode [ 1234.149957][ T809] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1234.149985][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.150005][ T809] usb 7-1: Product: syz [ 1234.150019][ T809] usb 7-1: Manufacturer: syz [ 1234.150034][ T809] usb 7-1: SerialNumber: syz [ 1234.206175][T16710] bridge_slave_0: entered promiscuous mode [ 1234.302473][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.302627][T16710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.302860][T16710] bridge_slave_1: entered allmulticast mode [ 1234.314756][T16710] bridge_slave_1: entered promiscuous mode [ 1235.287974][ T809] usb 7-1: can't set config #1, error -71 [ 1235.648969][T14387] Bluetooth: hci5: command tx timeout [ 1235.673703][T16735] rdma_op ffff888050837a70 conn xmit_rdma 0000000000000000 [ 1236.052178][T14387] Bluetooth: hci0: command tx timeout [ 1236.391324][ T809] usb 7-1: USB disconnect, device number 44 [ 1237.251722][T16710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.267384][T16710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.409890][T16710] team0: Port device team_slave_0 added [ 1237.427382][T16710] team0: Port device team_slave_1 added [ 1237.560643][T16721] chnl_net:caif_netlink_parms(): no params data found [ 1237.600021][T16710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.600036][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.600057][T16710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.663013][T16710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.663029][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.663055][T16710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.728522][T14387] Bluetooth: hci5: command tx timeout [ 1238.122642][T16710] hsr_slave_0: entered promiscuous mode [ 1238.123460][T16710] hsr_slave_1: entered promiscuous mode [ 1238.124040][T16710] debugfs: 'hsr0' already exists in 'hsr' [ 1238.124055][T16710] Cannot create hsr debugfs directory [ 1238.128381][T14387] Bluetooth: hci0: command tx timeout [ 1238.696689][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.696784][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.808719][T14387] Bluetooth: hci5: command tx timeout [ 1242.749022][T11449] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1242.779271][T11449] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1242.780942][T11449] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1242.782770][T11449] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1242.783526][T11449] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1244.199826][T16721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.199964][T16721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.200228][T16721] bridge_slave_0: entered allmulticast mode [ 1244.202955][T16721] bridge_slave_0: entered promiscuous mode [ 1245.009939][T14387] Bluetooth: hci7: command tx timeout [ 1247.087374][T14387] Bluetooth: hci7: command tx timeout [ 1248.312363][T16721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.312490][T16721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.312693][T16721] bridge_slave_1: entered allmulticast mode [ 1248.316757][T16721] bridge_slave_1: entered promiscuous mode [ 1249.167094][T14387] Bluetooth: hci7: command tx timeout [ 1251.247138][T14387] Bluetooth: hci7: command tx timeout [ 1253.217973][T11449] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1253.253915][T11449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1253.269785][T11449] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1253.290729][T11449] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1253.304170][T11449] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1255.335278][T16721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.380728][T16721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.406333][T14387] Bluetooth: hci2: command tx timeout [ 1255.550656][T16721] team0: Port device team_slave_0 added [ 1255.601180][T16721] team0: Port device team_slave_1 added [ 1255.776407][T16721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.776423][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.776447][T16721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.850300][T16721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.850315][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.850338][T16721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.486199][T14387] Bluetooth: hci2: command tx timeout [ 1257.959340][T16721] hsr_slave_0: entered promiscuous mode [ 1257.960649][T16721] hsr_slave_1: entered promiscuous mode [ 1257.961625][T16721] debugfs: 'hsr0' already exists in 'hsr' [ 1257.961648][T16721] Cannot create hsr debugfs directory [ 1258.659070][T16758] chnl_net:caif_netlink_parms(): no params data found [ 1258.736735][T16753] chnl_net:caif_netlink_parms(): no params data found [ 1259.572211][T14387] Bluetooth: hci2: command tx timeout [ 1259.824472][T16758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.824670][T16758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.824871][T16758] bridge_slave_0: entered allmulticast mode [ 1259.858293][T16758] bridge_slave_0: entered promiscuous mode [ 1259.885604][T16758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.885696][T16758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.885868][T16758] bridge_slave_1: entered allmulticast mode [ 1259.888047][T16758] bridge_slave_1: entered promiscuous mode [ 1260.879818][T16753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.914913][T16753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.928708][T16753] bridge_slave_0: entered allmulticast mode [ 1260.995091][T16753] bridge_slave_0: entered promiscuous mode [ 1261.043803][T16753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.043956][T16753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.044154][T16753] bridge_slave_1: entered allmulticast mode [ 1261.046200][T16753] bridge_slave_1: entered promiscuous mode [ 1261.079281][T16758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.083427][T16758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.268934][T16758] team0: Port device team_slave_0 added [ 1261.272533][T16758] team0: Port device team_slave_1 added [ 1261.338073][T16753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.342432][T16753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.450753][T16758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.450771][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.450796][T16758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.455132][T16758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.455146][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.455172][T16758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.587045][T16753] team0: Port device team_slave_0 added [ 1261.647487][T14387] Bluetooth: hci2: command tx timeout [ 1262.005048][T16753] team0: Port device team_slave_1 added [ 1265.392400][T16753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.392419][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.392445][T16753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.475254][T16753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.475272][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.475299][T16753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.542829][T16758] hsr_slave_0: entered promiscuous mode [ 1265.544277][T16758] hsr_slave_1: entered promiscuous mode [ 1265.557961][T16758] debugfs: 'hsr0' already exists in 'hsr' [ 1265.557989][T16758] Cannot create hsr debugfs directory [ 1265.683952][T16753] hsr_slave_0: entered promiscuous mode [ 1265.691687][T16753] hsr_slave_1: entered promiscuous mode [ 1265.692806][T16753] debugfs: 'hsr0' already exists in 'hsr' [ 1265.692831][T16753] Cannot create hsr debugfs directory [ 1268.542831][T11449] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1268.573273][T11449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1268.599499][T11449] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1268.601473][T11449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1268.602281][T11449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1270.112234][T16776] chnl_net:caif_netlink_parms(): no params data found [ 1270.578662][T16776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.578868][T16776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.579110][T16776] bridge_slave_0: entered allmulticast mode [ 1270.581702][T16776] bridge_slave_0: entered promiscuous mode [ 1270.621474][T16776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.621680][T16776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.621936][T16776] bridge_slave_1: entered allmulticast mode [ 1270.660398][T16776] bridge_slave_1: entered promiscuous mode [ 1270.684620][T11449] Bluetooth: hci4: command tx timeout [ 1270.742734][T16776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.768606][T16776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.832139][T16776] team0: Port device team_slave_0 added [ 1270.842984][T16776] team0: Port device team_slave_1 added [ 1270.913809][T16776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.913826][T16776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.913852][T16776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.972115][T16776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.972132][T16776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.972159][T16776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.611732][T16776] hsr_slave_0: entered promiscuous mode [ 1272.613146][T16776] hsr_slave_1: entered promiscuous mode [ 1272.627684][T16776] debugfs: 'hsr0' already exists in 'hsr' [ 1272.627711][T16776] Cannot create hsr debugfs directory [ 1272.764252][T14387] Bluetooth: hci4: command tx timeout [ 1274.844286][T14387] Bluetooth: hci4: command tx timeout [ 1276.923869][T14387] Bluetooth: hci4: command tx timeout [ 1289.177412][T11449] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1289.181348][T11449] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1289.184756][T11449] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1289.187969][T11449] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1289.188645][T11449] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1289.729938][T16786] chnl_net:caif_netlink_parms(): no params data found [ 1289.941014][T16786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.941234][T16786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.941794][T16786] bridge_slave_0: entered allmulticast mode [ 1289.945191][T16786] bridge_slave_0: entered promiscuous mode [ 1289.948739][T16786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.948967][T16786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.949174][T16786] bridge_slave_1: entered allmulticast mode [ 1289.951567][T16786] bridge_slave_1: entered promiscuous mode [ 1290.011311][T16786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.016583][T16786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.072866][T16786] team0: Port device team_slave_0 added [ 1290.076750][T16786] team0: Port device team_slave_1 added [ 1290.129328][T16786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.129345][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.129371][T16786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.137545][T16786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.137561][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.137587][T16786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.260845][T16786] hsr_slave_0: entered promiscuous mode [ 1290.262399][T16786] hsr_slave_1: entered promiscuous mode [ 1290.263919][T16786] debugfs: 'hsr0' already exists in 'hsr' [ 1290.263942][T16786] Cannot create hsr debugfs directory [ 1291.322233][T11449] Bluetooth: hci6: command tx timeout [ 1291.564096][T14387] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1291.595117][T14387] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1291.610151][T14387] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1291.633172][T14387] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1291.633875][T14387] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1293.335159][T16796] chnl_net:caif_netlink_parms(): no params data found [ 1293.401801][T11449] Bluetooth: hci6: command tx timeout [ 1293.556273][T16796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.556498][T16796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.556725][T16796] bridge_slave_0: entered allmulticast mode [ 1293.559353][T16796] bridge_slave_0: entered promiscuous mode [ 1293.593214][T16796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.593411][T16796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.593688][T16796] bridge_slave_1: entered allmulticast mode [ 1293.596471][T16796] bridge_slave_1: entered promiscuous mode [ 1293.692917][T16796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.697236][T16796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.721770][T11449] Bluetooth: hci8: command tx timeout [ 1293.781200][T16796] team0: Port device team_slave_0 added [ 1293.793311][T16796] team0: Port device team_slave_1 added [ 1293.854843][T16796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.854859][T16796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.854885][T16796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.857698][T16796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.857711][T16796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.857737][T16796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.069863][T16796] hsr_slave_0: entered promiscuous mode [ 1294.071394][T16796] hsr_slave_1: entered promiscuous mode [ 1294.089650][T16796] debugfs: 'hsr0' already exists in 'hsr' [ 1294.089677][T16796] Cannot create hsr debugfs directory [ 1295.481485][T11449] Bluetooth: hci6: command tx timeout [ 1295.801477][T11449] Bluetooth: hci8: command tx timeout [ 1297.561242][T11449] Bluetooth: hci6: command tx timeout [ 1297.881141][T11449] Bluetooth: hci8: command tx timeout [ 1299.960946][T11449] Bluetooth: hci8: command tx timeout [ 1300.125824][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.125918][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.028942][T14387] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1303.054650][T14387] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1303.058760][T14387] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1303.060025][T14387] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1303.092306][T14387] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1303.322408][T14902] usb 9-1: USB disconnect, device number 6 [ 1305.160723][T14387] Bluetooth: hci9: command tx timeout [ 1306.675490][T16608] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.240558][T14387] Bluetooth: hci9: command tx timeout [ 1309.320283][T14387] Bluetooth: hci9: command tx timeout [ 1311.399678][T14387] Bluetooth: hci9: command tx timeout [ 1311.735049][T16807] chnl_net:caif_netlink_parms(): no params data found [ 1312.065964][T16807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.066167][T16807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.066395][T16807] bridge_slave_0: entered allmulticast mode [ 1312.069092][T16807] bridge_slave_0: entered promiscuous mode [ 1312.101838][T16807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.102034][T16807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.102276][T16807] bridge_slave_1: entered allmulticast mode [ 1312.104898][T16807] bridge_slave_1: entered promiscuous mode [ 1312.204764][T16807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.224136][T16807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.307833][T16807] team0: Port device team_slave_0 added [ 1312.319035][T16807] team0: Port device team_slave_1 added [ 1312.395209][T16807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.395227][T16807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.395252][T16807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.397845][T16807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.397860][T16807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.397885][T16807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.562816][T16807] hsr_slave_0: entered promiscuous mode [ 1312.564985][T16807] hsr_slave_1: entered promiscuous mode [ 1312.566334][T16807] debugfs: 'hsr0' already exists in 'hsr' [ 1312.566360][T16807] Cannot create hsr debugfs directory [ 1313.633450][T11449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1313.654574][T11449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1313.656468][T11449] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1313.658100][T11449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1313.672133][T11449] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1315.799317][T11449] Bluetooth: hci1: command tx timeout [ 1317.352460][T16821] chnl_net:caif_netlink_parms(): no params data found [ 1317.552845][T16821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.553048][T16821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.553282][T16821] bridge_slave_0: entered allmulticast mode [ 1317.555944][T16821] bridge_slave_0: entered promiscuous mode [ 1317.588900][T16821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.589094][T16821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.589408][T16821] bridge_slave_1: entered allmulticast mode [ 1317.592191][T16821] bridge_slave_1: entered promiscuous mode [ 1317.695432][T16821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.716228][T16821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.781701][T16821] team0: Port device team_slave_0 added [ 1317.787154][T16821] team0: Port device team_slave_1 added [ 1317.856370][T16821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.856388][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.856412][T16821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.887792][T11449] Bluetooth: hci1: command tx timeout [ 1317.929163][T16821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.929182][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.929208][T16821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.083412][T16821] hsr_slave_0: entered promiscuous mode [ 1318.084955][T16821] hsr_slave_1: entered promiscuous mode [ 1318.085981][T16821] debugfs: 'hsr0' already exists in 'hsr' [ 1318.086005][T16821] Cannot create hsr debugfs directory [ 1319.959987][T11449] Bluetooth: hci1: command tx timeout [ 1322.038523][T11449] Bluetooth: hci1: command tx timeout [ 1329.679650][T14387] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1329.711989][T14387] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1329.713599][T14387] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1329.747999][T14387] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1329.748804][T14387] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1330.264629][T16832] chnl_net:caif_netlink_parms(): no params data found [ 1330.447396][T16832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.447580][T16832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.447875][T16832] bridge_slave_0: entered allmulticast mode [ 1330.450580][T16832] bridge_slave_0: entered promiscuous mode [ 1330.454369][T16832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.454572][T16832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.454807][T16832] bridge_slave_1: entered allmulticast mode [ 1330.528824][T16832] bridge_slave_1: entered promiscuous mode [ 1330.595903][T16832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.623584][T16832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.688926][T16832] team0: Port device team_slave_0 added [ 1330.692957][T16832] team0: Port device team_slave_1 added [ 1330.774104][T16832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.774121][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.774147][T16832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.776532][T16832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.776547][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.776574][T16832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.032184][T16832] hsr_slave_0: entered promiscuous mode [ 1331.033703][T16832] hsr_slave_1: entered promiscuous mode [ 1331.034862][T16832] debugfs: 'hsr0' already exists in 'hsr' [ 1331.034886][T16832] Cannot create hsr debugfs directory [ 1331.877808][T14387] Bluetooth: hci10: command tx timeout [ 1333.957216][T14387] Bluetooth: hci10: command tx timeout [ 1336.036895][T11449] Bluetooth: hci10: command tx timeout [ 1338.036551][T11449] Bluetooth: hci3: command 0x0406 tx timeout [ 1338.116611][T11449] Bluetooth: hci10: command tx timeout [ 1349.630078][T11449] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1349.663490][T11449] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1350.000321][T11449] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1350.001831][T11449] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1350.002544][T11449] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1350.524170][T16845] chnl_net:caif_netlink_parms(): no params data found [ 1350.724021][T16845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.724233][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.743557][T16845] bridge_slave_0: entered allmulticast mode [ 1350.763090][T16845] bridge_slave_0: entered promiscuous mode [ 1350.776463][T16845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.776890][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.777173][T16845] bridge_slave_1: entered allmulticast mode [ 1350.780926][T16845] bridge_slave_1: entered promiscuous mode [ 1350.884491][T16845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.899234][T16845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.972265][T16845] team0: Port device team_slave_0 added [ 1350.991093][T16845] team0: Port device team_slave_1 added [ 1351.042248][T16845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.042266][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.042288][T16845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.099694][T16845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.099713][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.099740][T16845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.284363][T16845] hsr_slave_0: entered promiscuous mode [ 1351.292819][T16845] hsr_slave_1: entered promiscuous mode [ 1351.293922][T16845] debugfs: 'hsr0' already exists in 'hsr' [ 1351.293947][T16845] Cannot create hsr debugfs directory [ 1351.683929][T16402] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1351.708459][T16402] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1351.710042][T16402] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1351.711664][T16402] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1351.712368][T16402] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1352.275385][T16402] Bluetooth: hci11: command tx timeout [ 1353.402690][T16402] Bluetooth: hci0: command 0x0406 tx timeout [ 1353.795532][T16402] Bluetooth: hci12: command tx timeout [ 1354.355478][T11449] Bluetooth: hci11: command tx timeout [ 1355.798946][T16856] chnl_net:caif_netlink_parms(): no params data found [ 1355.895665][T11449] Bluetooth: hci12: command tx timeout [ 1355.995960][T16856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.996154][T16856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.996399][T16856] bridge_slave_0: entered allmulticast mode [ 1355.999075][T16856] bridge_slave_0: entered promiscuous mode [ 1356.050827][T16856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.051079][T16856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.051418][T16856] bridge_slave_1: entered allmulticast mode [ 1356.075134][T16856] bridge_slave_1: entered promiscuous mode [ 1356.135015][T16856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.140072][T16856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.230502][T16856] team0: Port device team_slave_0 added [ 1356.240819][T16856] team0: Port device team_slave_1 added [ 1356.317750][T16856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.317769][T16856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.317795][T16856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.320387][T16856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.320402][T16856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.320428][T16856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.439681][T11449] Bluetooth: hci11: command tx timeout [ 1357.960482][T16856] hsr_slave_0: entered promiscuous mode [ 1357.962118][T16856] hsr_slave_1: entered promiscuous mode [ 1357.963264][T16856] debugfs: 'hsr0' already exists in 'hsr' [ 1357.963288][T16856] Cannot create hsr debugfs directory [ 1357.966787][T14387] Bluetooth: hci12: command tx timeout [ 1358.524693][T14387] Bluetooth: hci5: command 0x0406 tx timeout [ 1358.524730][T14387] Bluetooth: hci11: command tx timeout [ 1360.034028][T11449] Bluetooth: hci12: command tx timeout [ 1361.571893][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.571969][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.120613][T16402] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1363.148734][T16402] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1363.150305][T16402] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1363.185270][T16402] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1363.212238][T16402] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1363.911710][T16866] chnl_net:caif_netlink_parms(): no params data found [ 1364.085688][T16866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.085885][T16866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.086135][T16866] bridge_slave_0: entered allmulticast mode [ 1364.091304][T16866] bridge_slave_0: entered promiscuous mode [ 1364.135128][T16866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.135327][T16866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.135632][T16866] bridge_slave_1: entered allmulticast mode [ 1364.138384][T16866] bridge_slave_1: entered promiscuous mode [ 1364.219957][T16866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.234310][T16866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.286587][T16866] team0: Port device team_slave_0 added [ 1364.290527][T16866] team0: Port device team_slave_1 added [ 1364.343536][T16866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.343553][T16866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.343578][T16866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.345958][T16866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.345972][T16866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.345997][T16866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.578508][T16866] hsr_slave_0: entered promiscuous mode [ 1364.580221][T16866] hsr_slave_1: entered promiscuous mode [ 1364.581332][T16866] debugfs: 'hsr0' already exists in 'hsr' [ 1364.581355][T16866] Cannot create hsr debugfs directory [ 1365.315036][T11449] Bluetooth: hci13: command tx timeout [ 1367.393141][T11449] Bluetooth: hci13: command tx timeout [ 1368.763073][T11449] Bluetooth: hci7: command 0x0406 tx timeout [ 1369.472892][T11449] Bluetooth: hci13: command tx timeout [ 1371.552611][T16402] Bluetooth: hci13: command tx timeout [ 1374.135160][T11449] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1374.163996][T11449] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1374.165576][T11449] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1374.171094][T11449] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1374.171806][T11449] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1374.746196][T16880] chnl_net:caif_netlink_parms(): no params data found [ 1374.926412][T16880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.926613][T16880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.926892][T16880] bridge_slave_0: entered allmulticast mode [ 1374.929584][T16880] bridge_slave_0: entered promiscuous mode [ 1374.974917][T16880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.975274][T16880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.975958][T16880] bridge_slave_1: entered allmulticast mode [ 1374.978685][T16880] bridge_slave_1: entered promiscuous mode [ 1375.055722][T16880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.059850][T16880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.119622][T16880] team0: Port device team_slave_0 added [ 1375.132346][T16880] team0: Port device team_slave_1 added [ 1375.184859][T16880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.184876][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.184901][T16880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.187283][T16880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.187296][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.187321][T16880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.376322][T16880] hsr_slave_0: entered promiscuous mode [ 1375.377939][T16880] hsr_slave_1: entered promiscuous mode [ 1375.379066][T16880] debugfs: 'hsr0' already exists in 'hsr' [ 1375.379090][T16880] Cannot create hsr debugfs directory [ 1376.273486][T11449] Bluetooth: hci14: command tx timeout [ 1378.361927][T11449] Bluetooth: hci14: command tx timeout [ 1378.996927][T11449] Bluetooth: hci2: command 0x0406 tx timeout [ 1380.431479][T16402] Bluetooth: hci14: command tx timeout [ 1382.511527][T16402] Bluetooth: hci14: command tx timeout [ 1391.257243][T11449] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1391.294513][T11449] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1391.307568][T11449] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1391.308827][T11449] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1391.331682][T11449] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1391.791361][T16893] chnl_net:caif_netlink_parms(): no params data found [ 1391.987625][T16893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.987833][T16893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.988086][T16893] bridge_slave_0: entered allmulticast mode [ 1392.012705][T16893] bridge_slave_0: entered promiscuous mode [ 1392.018373][T16893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.018570][T16893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.018863][T16893] bridge_slave_1: entered allmulticast mode [ 1392.058201][T16893] bridge_slave_1: entered promiscuous mode [ 1392.127875][T16893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.146182][T16893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.260415][T16893] team0: Port device team_slave_0 added [ 1392.264928][T16893] team0: Port device team_slave_1 added [ 1392.369767][T16893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.369785][T16893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.369810][T16893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.418246][T16893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.418262][T16893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.418289][T16893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.604245][T16893] hsr_slave_0: entered promiscuous mode [ 1392.609126][T16893] hsr_slave_1: entered promiscuous mode [ 1392.622367][T16893] debugfs: 'hsr0' already exists in 'hsr' [ 1392.622395][T16893] Cannot create hsr debugfs directory [ 1393.390509][T14387] Bluetooth: hci15: command tx timeout [ 1394.350340][T14387] Bluetooth: hci4: command 0x0406 tx timeout [ 1395.469998][T14387] Bluetooth: hci15: command tx timeout [ 1397.549776][T11449] Bluetooth: hci15: command tx timeout [ 1399.629425][T11449] Bluetooth: hci15: command tx timeout [ 1405.068704][ T38] INFO: task kworker/u8:30:12854 blocked for more than 143 seconds. [ 1405.068731][ T38] Tainted: G L syzkaller #0 [ 1405.068742][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1405.068751][ T38] task:kworker/u8:30 state:D stack:20736 pid:12854 tgid:1[ 1405.068751][ T38] task:kworker/u8:30 state:D stack:20736 pid:12854 tgid:12854 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1405.068800][ T38] Workqueue: netns cleanup_net [ 1405.068837][ T38] Call Trace: [ 1405.068845][ T38] [ 1405.068859][ T38] __schedule+0x1553/0x5240 [ 1405.068916][ T38] ? __pfx___schedule+0x10/0x10 [ 1405.068956][ T38] rt_mutex_schedule+0x76/0xf0 [ 1405.068982][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1405.069018][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1405.069042][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 1405.069066][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1405.069089][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1405.069153][ T38] ? devlink_pernet_pre_exit+0x117/0x3f0 [ 1405.069270][ T38] ? devlink_pernet_pre_exit+0x117/0x3f0 [ 1405.069292][ T38] mutex_lock_nested+0x168/0x1d0 [ 1405.069314][ T38] ? devlinks_xa_find_get+0x2b/0x310 [ 1405.069340][ T38] devlink_pernet_pre_exit+0x117/0x3f0 [ 1405.069366][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1405.069397][ T38] ? class_remove_file_ns+0x124/0x160 [ 1405.069475][ T38] ops_undo_list+0x187/0x940 [ 1405.069504][ T38] ? rt_spin_unlock+0x1f0/0x200 [ 1405.069528][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1405.069551][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1405.069576][ T38] ? idr_destroy+0x21b/0x2a0 [ 1405.069602][ T38] ? rt_spin_unlock+0x160/0x200 [ 1405.069627][ T38] cleanup_net+0x56e/0x800 [ 1405.069657][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1405.069691][ T38] ? process_scheduled_works+0xa8d/0x18c0 [ 1405.069717][ T38] ? process_scheduled_works+0xa8d/0x18c0 [ 1405.069745][ T38] process_scheduled_works+0xb6e/0x18c0 [ 1405.069802][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1405.069834][ T38] ? assign_work+0x3d5/0x5e0 [ 1405.069864][ T38] worker_thread+0xa53/0xfc0 [ 1405.069917][ T38] kthread+0x388/0x470 [ 1405.069936][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1405.069960][ T38] ? __pfx_kthread+0x10/0x10 [ 1405.069982][ T38] ret_from_fork+0x51e/0xb90 [ 1405.070013][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1405.070039][ T38] ? __switch_to+0xc7d/0x1450 [ 1405.070068][ T38] ? __pfx_kthread+0x10/0x10 [ 1405.070091][ T38] ret_from_fork_asm+0x1a/0x30 [ 1405.070134][ T38] [ 1405.070153][ T38] INFO: task syz-executor:14969 blocked for more than 143 seconds. [ 1405.070170][ T38] Tainted: G L syzkaller #0 [ 1405.070181][ T38] Blocked by coredump. [ 1405.070187][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1405.070195][ T38] task:syz-executor state:D stack:22496 pid:14969 tgid:14969 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1405.070246][ T38] Call Trace: [ 1405.070252][ T38] [ 1405.070263][ T38] __schedule+0x1553/0x5240 [ 1405.070295][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1405.070331][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1405.070352][ T38] ? __pfx___schedule+0x10/0x10 [ 1405.070393][ T38] rt_mutex_schedule+0x76/0xf0 [ 1405.070417][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1405.070459][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 1405.070485][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1405.070511][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1405.070552][ T38] ? rcu_barrier+0x4c/0x580 [ 1405.070582][ T38] ? rcu_barrier+0x4c/0x580 [ 1405.070603][ T38] mutex_lock_nested+0x168/0x1d0 [ 1405.070625][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1405.070653][ T38] rcu_barrier+0x4c/0x580 [ 1405.070687][ T38] netdev_run_todo+0x2e0/0xde0 [ 1405.070715][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1405.070736][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 1405.070763][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1405.070800][ T38] ? netdev_state_change+0x1ca/0x220 [ 1405.070829][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1405.070859][ T38] tun_chr_close+0x13f/0x1c0 [ 1405.070887][ T38] __fput+0x461/0xa90 [ 1405.070923][ T38] task_work_run+0x1d9/0x270 [ 1405.070948][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1405.070971][ T38] ? kmem_cache_free+0x185/0x6b0 [ 1405.070991][ T38] ? put_net+0x191/0x260 [ 1405.071021][ T38] do_exit+0x70f/0x23c0 [ 1405.071046][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1405.071077][ T38] ? __pfx_do_exit+0x10/0x10 [ 1405.071095][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1405.071119][ T38] ? reacquire_held_locks+0x104/0x190 [ 1405.071147][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1405.071183][ T38] do_group_exit+0x21b/0x2d0 [ 1405.071204][ T38] ? rt_spin_unlock+0x160/0x200 [ 1405.071231][ T38] get_signal+0x125c/0x1310 [ 1405.071278][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 1405.071303][ T38] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1405.071327][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1405.071371][ T38] exit_to_user_mode_loop+0x86/0x480 [ 1405.071399][ T38] ? rcu_is_watching+0x15/0xb0 [ 1405.071424][ T38] do_syscall_64+0x32d/0xf80 [ 1405.071452][ T38] ? trace_irq_disable+0x3b/0x150 [ 1405.071474][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.071496][ T38] ? clear_bhb_loop+0x40/0x90 [ 1405.071521][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.071541][ T38] RIP: 0033:0x7fd2f7c6cfce [ 1405.071558][ T38] RSP: 002b:00007ffe9191c938 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1405.071578][ T38] RAX: fffffffffffffe00 RBX: 0000555568996500 RCX: 00007fd2f7c6cfce [ 1405.071593][ T38] RDX: 0000000040000000 RSI: 00007ffe9191c9dc RDI: ffffffffffffffff [ 1405.071607][ T38] RBP: 00007ffe9191c9dc R08: 0000000000000000 R09: 0000000000000000 [ 1405.071620][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005c [ 1405.071631][ T38] R13: 00005555689a99f0 R14: 000000000012ba9e R15: 00007ffe9191ca30 [ 1405.071661][ T38] [ 1405.071697][ T38] INFO: task syz.0.2948:16632 blocked for more than 143 seconds. [ 1405.071713][ T38] Tainted: G L syzkaller #0 [ 1405.071724][ T38] Blocked by coredump. [ 1405.071730][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1405.071739][ T38] task:syz.0.2948 state:D stack:22048 pid:16632 tgid:16631 ppid:15834 task_flags:0x40054c flags:0x00080001 [ 1405.071786][ T38] Call Trace: [ 1405.071793][ T38] [ 1405.071805][ T38] __schedule+0x1553/0x5240 [ 1405.071836][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1405.071872][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1405.071892][ T38] ? __pfx___schedule+0x10/0x10 [ 1405.071933][ T38] rt_mutex_schedule+0x76/0xf0 [ 1405.071957][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1405.071997][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 1405.072024][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1405.072048][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1405.072088][ T38] ? rcu_barrier+0x4c/0x580 [ 1405.072117][ T38] ? rcu_barrier+0x4c/0x580 [ 1405.072143][ T38] mutex_lock_nested+0x168/0x1d0 [ 1405.072165][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1405.072194][ T38] rcu_barrier+0x4c/0x580 [ 1405.072227][ T38] netdev_run_todo+0x2e0/0xde0 [ 1405.072254][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1405.072275][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 1405.072301][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1405.072336][ T38] ? netdev_state_change+0x1ca/0x220 [ 1405.072364][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1405.072393][ T38] tun_chr_close+0x13f/0x1c0 [ 1405.072420][ T38] __fput+0x461/0xa90 [ 1405.072455][ T38] task_work_run+0x1d9/0x270 [ 1405.072480][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1405.072504][ T38] ? kmem_cache_free+0x185/0x6b0 [ 1405.072523][ T38] ? put_net+0x191/0x260 [ 1405.072553][ T38] do_exit+0x70f/0x23c0 [ 1405.072577][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1405.072609][ T38] ? __pfx_do_exit+0x10/0x10 [ 1405.072628][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1405.072652][ T38] ? reacquire_held_locks+0x104/0x190 [ 1405.072675][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1405.072710][ T38] do_group_exit+0x21b/0x2d0 [ 1405.072732][ T38] ? rt_spin_unlock+0x160/0x200 [ 1405.072757][ T38] get_signal+0x125c/0x1310 [ 1405.072804][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 1405.072829][ T38] ? __pfx_task_work_add+0x10/0x10 [ 1405.072852][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1405.072884][ T38] ? __fput_deferred+0x253/0x3e0 [ 1405.072916][ T38] exit_to_user_mode_loop+0x86/0x480 [ 1405.072941][ T38] ? rcu_is_watching+0x15/0xb0 [ 1405.072967][ T38] do_syscall_64+0x32d/0xf80 [ 1405.072993][ T38] ? trace_irq_disable+0x3b/0x150 [ 1405.073015][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.073035][ T38] ? clear_bhb_loop+0x40/0x90 [ 1405.073060][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.073079][ T38] RIP: 0033:0x7f46bc51c799 [ 1405.073096][ T38] RSP: 002b:00007f46ba76e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1405.073113][ T38] RAX: 0000000000000000 RBX: 00007f46bc795fa0 RCX: 00007f46bc51c799 [ 1405.073132][ T38] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 1405.073146][ T38] RBP: 00007f46bc5b2c99 R08: 0000000000000000 R09: 0000000000000000 [ 1405.073159][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1405.073171][ T38] R13: 00007f46bc796038 R14: 00007f46bc795fa0 R15: 00007fff21a1abb8 [ 1405.073203][ T38] [ 1405.073214][ T38] INFO: task syz-executor:16710 blocked for more than 143 seconds. [ 1405.073230][ T38] Tainted: G L syzkaller #0 [ 1405.073241][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1405.073250][ T38] task:syz-executor state:D stack:18976 pid:16710 tgid:16710 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1405.073293][ T38] Call Trace: [ 1405.073299][ T38] [ 1405.073311][ T38] __schedule+0x1553/0x5240 [ 1405.073361][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1405.073383][ T38] ? __pfx___schedule+0x10/0x10 [ 1405.073424][ T38] rt_mutex_schedule+0x76/0xf0 [ 1405.073448][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1405.073485][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1405.073510][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 1405.073536][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1405.073562][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1405.073603][ T38] ? del_device_store+0xd7/0x370 [ 1405.073727][ T38] ? del_device_store+0xd7/0x370 [ 1405.073754][ T38] mutex_lock_nested+0x168/0x1d0 [ 1405.073783][ T38] del_device_store+0xd7/0x370 [ 1405.073810][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1405.073894][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1405.073924][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1405.073945][ T38] ? sysfs_kf_write+0x166/0x260 [ 1405.073969][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1405.073989][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1405.074025][ T38] vfs_write+0x629/0xba0 [ 1405.074061][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1405.074093][ T38] ? kmem_cache_free+0x185/0x6b0 [ 1405.074111][ T38] ? do_sys_openat2+0x14c/0x200 [ 1405.074153][ T38] ksys_write+0x156/0x270 [ 1405.074185][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1405.074223][ T38] do_syscall_64+0x14d/0xf80 [ 1405.074251][ T38] ? trace_irq_disable+0x3b/0x150 [ 1405.074272][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.074292][ T38] ? clear_bhb_loop+0x40/0x90 [ 1405.074315][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.074335][ T38] RIP: 0033:0x7f4ef3e3cfce [ 1405.074352][ T38] RSP: 002b:00007ffd6f0f7fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1405.074370][ T38] RAX: ffffffffffffffda RBX: 000055558f511500 RCX: 00007f4ef3e3cfce [ 1405.074384][ T38] RDX: 0000000000000001 RSI: 00007ffd6f0f8060 RDI: 0000000000000005 [ 1405.074397][ T38] RBP: 00007f4ef3f1351c R08: 0000000000000000 R09: 0000000000000000 [ 1405.074410][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.074422][ T38] R13: 00007ffd6f0f8060 R14: 00007f4ef4c24620 R15: 0000000000000003 [ 1405.074454][ T38] [ 1405.074463][ T38] INFO: task syz-executor:16721 blocked for more than 143 seconds. [ 1405.074480][ T38] Tainted: G L syzkaller #0 [ 1405.074489][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1405.074498][ T38] task:syz-executor state:D stack:22528 pid:16721 tgid:16721 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1405.074543][ T38] Call Trace: [ 1405.074549][ T38] [ 1405.074561][ T38] __schedule+0x1553/0x5240 [ 1405.074592][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1405.074626][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1405.074648][ T38] ? __pfx___schedule+0x10/0x10 [ 1405.074689][ T38] rt_mutex_schedule+0x76/0xf0 [ 1405.074712][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1405.074753][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 1405.074778][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1405.074803][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1405.074842][ T38] ? del_device_store+0xd7/0x370 [ 1405.074876][ T38] ? del_device_store+0xd7/0x370 [ 1405.074900][ T38] mutex_lock_nested+0x168/0x1d0 [ 1405.074929][ T38] del_device_store+0xd7/0x370 [ 1405.074955][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1405.074975][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1405.075002][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1405.075023][ T38] ? sysfs_kf_write+0x166/0x260 [ 1405.075047][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1405.075066][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1405.075101][ T38] vfs_write+0x629/0xba0 [ 1405.075142][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1405.075173][ T38] ? kmem_cache_free+0x185/0x6b0 [ 1405.075189][ T38] ? do_sys_openat2+0x14c/0x200 [ 1405.075228][ T38] ksys_write+0x156/0x270 [ 1405.075258][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1405.075297][ T38] do_syscall_64+0x14d/0xf80 [ 1405.075325][ T38] ? trace_irq_disable+0x3b/0x150 [ 1405.075346][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.075367][ T38] ? clear_bhb_loop+0x40/0x90 [ 1405.075391][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.075411][ T38] RIP: 0033:0x7f371b26cfce [ 1405.075428][ T38] RSP: 002b:00007ffd0a5a01d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1405.075448][ T38] RAX: ffffffffffffffda RBX: 0000555562ea1500 RCX: 00007f371b26cfce [ 1405.075463][ T38] RDX: 0000000000000001 RSI: 00007ffd0a5a0260 RDI: 0000000000000005 [ 1405.075476][ T38] RBP: 00007f371b34351c R08: 0000000000000000 R09: 0000000000000000 [ 1405.075488][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.075501][ T38] R13: 00007ffd0a5a0260 R14: 00007f371c054620 R15: 0000000000000003 [ 1405.075531][ T38] [ 1405.075587][ T38] [ 1405.075587][ T38] Showing all locks held in the system: [ 1405.075599][ T38] 6 locks held by rcuc/1/28: [ 1405.075612][ T38] 1 lock held by khungtaskd/38: [ 1405.075622][ T38] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1405.075685][ T38] 2 locks held by kswapd0/96: [ 1405.075717][ T38] 2 locks held by getty/5559: [ 1405.075728][ T38] #0: ffff88802b2900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1405.075893][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1405.075940][ T38] 5 locks held by kworker/u8:18/6470: [ 1405.075957][ T38] 4 locks held by kworker/u8:30/12854: [ 1405.075968][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1405.076019][ T38] #1: ffffc90004377c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1405.076068][ T38] #2: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1405.076118][ T38] #3: ffff88805342a0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 1405.076177][ T38] 1 lock held by syz-executor/14969: [ 1405.076188][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1405.076242][ T38] 7 locks held by syz-executor/16608: [ 1405.076253][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.076308][ T38] #1: ffff888030ef9878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.076359][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.076415][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.076468][ T38] #4: ffff88805342a0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1405.076516][ T38] #5: ffff88802974e300 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1405.076565][ T38] #6: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1405.076612][ T38] 1 lock held by syz.9.2945/16616: [ 1405.076622][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1405.076669][ T38] 1 lock held by syz.0.2948/16632: [ 1405.076681][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1405.076728][ T38] 4 locks held by syz-executor/16710: [ 1405.076740][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.076794][ T38] #1: ffff888037d8c078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.076846][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.076901][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.076953][ T38] 4 locks held by syz-executor/16721: [ 1405.076964][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.077019][ T38] #1: ffff888037209478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.077066][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.077120][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.077180][ T38] 1 lock held by syz.6.2975/16744: [ 1405.077190][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1405.077237][ T38] 4 locks held by syz-executor/16753: [ 1405.077249][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.077301][ T38] #1: ffff88806346e478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.077352][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.077407][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.077460][ T38] 4 locks held by syz-executor/16758: [ 1405.077472][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.077526][ T38] #1: ffff88803a3fb878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.077575][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.077630][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.077683][ T38] 4 locks held by syz-executor/16776: [ 1405.077694][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.077748][ T38] #1: ffff888085c26878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.077797][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.077853][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.077906][ T38] 4 locks held by syz-executor/16786: [ 1405.077918][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.077988][ T38] #1: ffff888079addc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.078039][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.078093][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.078151][ T38] 4 locks held by syz-executor/16796: [ 1405.078162][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.078216][ T38] #1: ffff88805171d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.078268][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.078322][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.078376][ T38] 4 locks held by syz-executor/16807: [ 1405.078387][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.122895][ T38] #1: ffff88803c12b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.122951][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.123007][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.123063][ T38] 4 locks held by syz-executor/16821: [ 1405.123076][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.123129][ T38] #1: ffff888085c32078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.123181][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.123235][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.123289][ T38] 4 locks held by syz-executor/16832: [ 1405.123301][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.123354][ T38] #1: ffff8880550a6078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.123404][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.123459][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.123513][ T38] 4 locks held by syz-executor/16845: [ 1405.123525][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.123579][ T38] #1: ffff888056456478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.123635][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.123691][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.123742][ T38] 4 locks held by syz-executor/16856: [ 1405.123754][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.123807][ T38] #1: ffff88805fd2ac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.123857][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.123912][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.123964][ T38] 4 locks held by syz-executor/16866: [ 1405.123975][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.124027][ T38] #1: ffff8880592f8878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.124078][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.124132][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.124186][ T38] 4 locks held by syz-executor/16880: [ 1405.124197][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.124249][ T38] #1: ffff888060247478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.124299][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.124353][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.124406][ T38] 4 locks held by syz-executor/16893: [ 1405.124418][ T38] #0: ffff8880322f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1405.124471][ T38] #1: ffff888071ea0478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1405.124522][ T38] #2: ffff888028c1a698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1405.124576][ T38] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1405.124636][ T38] [ 1405.124641][ T38] ============================================= [ 1405.124641][ T38] [ 1405.124667][ T38] NMI backtrace for cpu 0 [ 1405.124685][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1405.124711][ T38] Tainted: [L]=SOFTLOCKUP [ 1405.124718][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1405.124730][ T38] Call Trace: [ 1405.124738][ T38] [ 1405.124747][ T38] dump_stack_lvl+0xe8/0x150 [ 1405.124776][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1405.124801][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1405.124830][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1405.124856][ T38] sys_info+0x135/0x170 [ 1405.124875][ T38] watchdog+0xfd9/0x1030 [ 1405.124904][ T38] ? watchdog+0x21a/0x1030 [ 1405.124933][ T38] kthread+0x388/0x470 [ 1405.124954][ T38] ? __pfx_watchdog+0x10/0x10 [ 1405.124975][ T38] ? __pfx_kthread+0x10/0x10 [ 1405.124996][ T38] ret_from_fork+0x51e/0xb90 [ 1405.125024][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1405.125049][ T38] ? __switch_to+0xc7d/0x1450 [ 1405.125076][ T38] ? __pfx_kthread+0x10/0x10 [ 1405.125097][ T38] ret_from_fork_asm+0x1a/0x30 [ 1405.125130][ T38] [ 1405.125137][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1405.125164][ C1] NMI backtrace for cpu 1 [ 1405.125182][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1405.125235][ C1] Tainted: [L]=SOFTLOCKUP [ 1405.125249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1405.125271][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1405.125399][ C1] Code: e8 5e 94 94 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f ab fa fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1405.125414][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 1405.125428][ C1] RAX: 1ffffffff332a600 RBX: 00000000000003fd RCX: 0000000000000000 [ 1405.125440][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1405.125451][ C1] RBP: ffffffff999537d0 R08: 0000000000000000 R09: 0000000000000000 [ 1405.125462][ C1] R10: dffffc0000000000 R11: ffffffff852fe270 R12: dffffc0000000000 [ 1405.125474][ C1] R13: 0000000000000000 R14: ffffffff99953540 R15: 0000000000000000 [ 1405.125485][ C1] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 1405.125499][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1405.125510][ C1] CR2: 00007f872d0607b0 CR3: 0000000011720000 CR4: 00000000003526f0 [ 1405.125525][ C1] Call Trace: [ 1405.125532][ C1] [ 1405.125540][ C1] wait_for_lsr+0x1aa/0x2f0 [ 1405.125560][ C1] serial8250_console_write+0x120d/0x1b90 [ 1405.125589][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1405.125614][ C1] ? console_flush_one_record+0x48f/0xb90 [ 1405.125640][ C1] console_flush_one_record+0x68b/0xb90 [ 1405.125666][ C1] ? console_flush_one_record+0xfa/0xb90 [ 1405.125691][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1405.125715][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1405.125741][ C1] legacy_kthread_func+0x1b6/0x250 [ 1405.125764][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1405.125787][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1405.125810][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1405.125836][ C1] kthread+0x388/0x470 [ 1405.125853][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1405.125874][ C1] ? __pfx_kthread+0x10/0x10 [ 1405.125891][ C1] ret_from_fork+0x51e/0xb90 [ 1405.125913][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1405.125934][ C1] ? __switch_to+0xc7d/0x1450 [ 1405.125954][ C1] ? __pfx_kthread+0x10/0x10 [ 1405.125971][ C1] ret_from_fork_asm+0x1a/0x30 [ 1405.125994][ C1] [ 1405.126168][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1405.126185][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1405.126211][ T38] Tainted: [L]=SOFTLOCKUP [ 1405.126218][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1405.126230][ T38] Call Trace: [ 1405.126238][ T38] [ 1405.126246][ T38] vpanic+0x56c/0xa60 [ 1405.126277][ T38] ? __pfx_vpanic+0x10/0x10 [ 1405.126313][ T38] panic+0xc5/0xd0 [ 1405.126339][ T38] ? __pfx_panic+0x10/0x10 [ 1405.126365][ T38] ? printk_trigger_flush+0x117/0x180 [ 1405.126392][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1405.126426][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1405.126454][ T38] watchdog+0x1023/0x1030 [ 1405.126481][ T38] ? watchdog+0x21a/0x1030 [ 1405.126511][ T38] kthread+0x388/0x470 [ 1405.126531][ T38] ? __pfx_watchdog+0x10/0x10 [ 1405.126552][ T38] ? __pfx_kthread+0x10/0x10 [ 1405.126573][ T38] ret_from_fork+0x51e/0xb90 [ 1405.126601][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1405.126632][ T38] ? __switch_to+0xc7d/0x1450 [ 1405.126659][ T38] ? __pfx_kthread+0x10/0x10 [ 1405.126680][ T38] ret_from_fork_asm+0x1a/0x30 [ 1405.126713][ T38] [ 1405.126971][ T38] Kernel Offset: disabled