last executing test programs: 20m23.449737937s ago: executing program 3 (id=254): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff03, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061120400000000009500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x5, 0x10010, 0xffffffffffffffff, 0x20000000) r4 = mmap$IORING_OFF_PBUF_RING(0x0, 0x4, 0x4, 0x4000010, 0xffffffffffffffff, 0x806877d9) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$ARCH_GET_CPUID(0x1e, r5, 0x0, 0x1011) syz_io_uring_setup(0x6e9, &(0x7f0000000080)={0x0, 0x7125, 0x800, 0x1, 0x40, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000240)=0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000500), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000580)={0x1d, r9}, 0x10) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, 0x0, 0x0) syz_io_uring_submit(r3, r4, r6, &(0x7f0000000400)=@IORING_OP_SEND_ZC={0x2f, 0x10, 0x1, 0xffffffffffffffff, &(0x7f0000000280)="2c389ef38d88ba9955a101a26de6175288573a38061d6a0a14c5183424a79984cbcb2190981d0133750e3a4fe72a30852305e3c9e5f2b955d69b67ac07a4b71bb8d56f54ac3c99c75cbc29db83a3a4bf2b350252a27690807f5918ae46b83f35fcee7cda7f4f98da78e7394b5ca4939768210f6c2f98f72fb7010e13901afa7063e784bce036719dcb0111992250b475560f", &(0x7f00000003c0)={&(0x7f0000000340)="f6f734979eba3cdeb5857b4888e7d06a719d0b298107b9615128b2c57d75f448ff0ec858bfbd94fa9ad7c70362810911fb25e7498308fd91142dc486a2c7441fbf671ca089c18e47c53d1c35c0ec6306af5cfa9a8cfd4cf985094c8d94ecbbe6152fcd4fae5a6fda516963891f17", 0x6e}, 0xfffffff9, 0x8000, 0x0, {0x0, 0x0, 0x92}}) 20m22.847384124s ago: executing program 3 (id=257): r0 = fsopen(&(0x7f0000000280)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='gid', &(0x7f0000000340)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x0) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xf8) fchdir(r2) (async) fchdir(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='net/connector\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='net/connector\x00') syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') (async) syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="95", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18a) open(&(0x7f00000000c0)='./file0\x00', 0x410083, 0x2) rmdir(&(0x7f0000000100)='./file0\x00') getpeername(r3, &(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x80) r4 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xf, 0x0, 0x65900, 0x65f40}) 20m21.996417525s ago: executing program 3 (id=263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x18, 0x12, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x0, 0x2, 0xde, &(0x7f0000001780)=""/222, 0x0, 0xc}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x494, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000018c0)) syz_usb_ep_write(r1, 0x6, 0x94, &(0x7f0000001c00)="f01904272e2ff72ef0d6f0f7150808b5d28a51bfe7bdf1219637997e4a55d94195373b5a559180600a72b36eb0724f5a91aec6343535c40e08cfbd52ecc174d79d43935a5218ecc7be507b2c869030240ee6adafc10fac0a150b9a4953b9e422f31926d51554ed4a948c27ad82fba91236d92fd59f1a36e7ba9597a88b2eab97aced9690d7c8ab18564d119d8d3d9c842f67cc4b") ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) close_range(r3, r0, 0x0) 20m19.229067905s ago: executing program 3 (id=271): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000009c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000ac0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000b00), 0x10106, 0x2, 0x0) syz_create_resource$futex(&(0x7f0000000b80)=0x1) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close_range(r1, r1, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000440)={0x0, 'bridge0\x00', {0x101}, 0x2}) 20m18.630546542s ago: executing program 3 (id=275): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000000a40)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000019a40)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000019a80)=0x1f00, 0x12) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000540)={0x200000, 0x200000, 0x2, 0x0, 0x400000}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000580)={0x1f, 0xffff, 0x2}, 0x6) sendmmsg$inet6(r6, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="da3bffa613264e5df261c85d20952fd77814e6c450d7ab28a8be14c6318456cbb5a644d6e9d7105ef3cc6a61121f9a6b753b401cd0744af9b77e0b81", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000005c0)="5e2c4b3a53483b8307484604e499c790267ab5adc27f848a595c3cb7f13bc7a1e88d4dfb7679dc71641ceae6df8668e8b417c276f32f9431f32aac962447e9edd66f55f37f2855b9fb57ad3684bd5e935c52b6f60453db6fd8e6807b6086ba27bb695e7388203308f31bef1c3509faad87f81ae3ade2a826061371f9de3107615132d2454ddd0da747b27f41fe4ff6c54349a32336df4949c9ecb56f557eeb69bb46", 0xa2}], 0x1}}], 0x2, 0x4000000) shutdown(r6, 0x1) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) r9 = socket(0x2d, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, 0x0, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000840), 0x111}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0xd, r6, 'id1\x00'}) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r10, 0x84, 0x83, &(0x7f0000000340)={r8, 0x1}, &(0x7f0000000380)=0x8) 20m16.804012744s ago: executing program 3 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x1ff, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="d599752d477218000000ffff000000000000ffffffff9500"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_names\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000000000000c450000008000"/24]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth1\x00', 0x0}) socket$phonet(0x23, 0x2, 0x1) 20m1.753575536s ago: executing program 32 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x1ff, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="d599752d477218000000ffff000000000000ffffffff9500"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_names\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000000000000c450000008000"/24]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth1\x00', 0x0}) socket$phonet(0x23, 0x2, 0x1) 19m36.407426059s ago: executing program 2 (id=348): open(&(0x7f0000000480)='./bus\x00', 0x143a42, 0xc6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, 0x6e) openat(0xffffffffffffffff, &(0x7f0000000100)='./config/nullb/nullb1/file0\x00', 0x159002, 0x8e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) execve(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001680), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r1, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000001740)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_pidfd_open(0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000017c0)=0x14) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./config\x00', 0x1ff) mount(&(0x7f0000001840)=@filename='configfs\x00', &(0x7f0000001880)='./config\x00', &(0x7f00000018c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001940)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r3, &(0x7f0000001980)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000019c0)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r4, &(0x7f0000001a00)='1', 0x1) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) truncate(&(0x7f0000000840)='./bus\x00', 0x10001) 19m36.276148352s ago: executing program 2 (id=349): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff03, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061120400000000009500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x5, 0x10010, 0xffffffffffffffff, 0x20000000) r4 = mmap$IORING_OFF_PBUF_RING(0x0, 0x4, 0x4, 0x4000010, 0xffffffffffffffff, 0x806877d9) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$ARCH_GET_CPUID(0x1e, r5, 0x0, 0x1011) syz_io_uring_setup(0x6e9, &(0x7f0000000080)={0x0, 0x7125, 0x800, 0x1, 0x40, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000240)=0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000500), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000580)={0x1d, r9}, 0x10) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, 0x0, 0x0) syz_io_uring_submit(r3, r4, r6, &(0x7f0000000400)=@IORING_OP_SEND_ZC={0x2f, 0x10, 0x1, 0xffffffffffffffff, &(0x7f0000000280)="2c389ef38d88ba9955a101a26de6175288573a38061d6a0a14c5183424a79984cbcb2190981d0133750e3a4fe72a30852305e3c9e5f2b955d69b67ac07a4b71bb8d56f54ac3c99c75cbc29db83a3a4bf2b350252a27690807f5918ae46b83f35fcee7cda7f4f98da78e7394b5ca4939768210f6c2f98f72fb7010e13901afa7063e784bce036719dcb0111992250b475560f6f87", &(0x7f00000003c0)={&(0x7f0000000340)="f6f734979eba3cdeb5857b4888e7d06a719d0b298107b9615128b2c57d75f448ff0ec858bfbd94fa9ad7c70362810911fb25e7498308fd91142dc486a2c7441fbf671ca089c18e47c53d1c35c0ec6306af5cfa9a8cfd4cf985094c8d94ecbbe6152fcd4fae5a6fda516963891f17", 0x6e}, 0xfffffff9, 0x8000, 0x0, {0x0, 0x0, 0x94}}) 19m35.269940077s ago: executing program 2 (id=351): socket$key(0xf, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000280), 0x7b, 0x400000) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x2}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000640)="62603751255053ac7e81e3ae273473cc2db9f9ea5035d129608cb6ad759683a3762350bf61835a5f3c49ac0d9961aac0395398f644d8dda76415ad8c3d5eae90b8c1dc2d19ca81b1383d9a0dc840df7f96c2cc486ff6d78475f0bb4166e5f6468f03811d8bdffb470d2bb7f373f771c1398111041d8957590f36940ad63a710f9b6ced4c4a2c4b2f341b541ab9c8", 0x8e}, {&(0x7f0000000700)="bb9c190d9b943636182de1cddaed8230cdad014491e59c9a3e0bd96ef1c142cb54a0b9a3349ea892f160d7920800a06f51de8007857aeabba60c86047b0ca8c0e74134fa32702b3c12e6fdc347d34e36a025732f4e0db92b4e65b7abbf683dfb281b718a4772cb0ef40b28e890d7763b513f551585033613d45efea8723a98e272994b1bec3c158b4506f04856dd9d6881d742eb1833bf94f13e5b48c8293a4a66fab4d319360164896ccc628dfe7698ab7fb38228a2648de1624bb4f17fc44bd95c63f839fbae", 0xc7}, {&(0x7f0000000800)="38e06615d1064f0bdd99567dd66df8b2a4187fbb592be4390c9a3c497e10a6c3418db11e6ddaa902d139f231e4153063d10f3bf7e5c61b34f6e0f651817ac31fc65fd831c3aed1ce444a2bf7cdb59c0a8cc37d8ddd53b1fddf87128822a3db77f778f4c7ce3b48ec5fe101350f082207eca307f46ceb", 0x76}, {&(0x7f0000000880)="9d9cbeabe91b514335eff6cafbe9519573eb16dcf01690189b65cf924f78005c769cf23cad9e8e0f041802982288475918d6d84f26adf2a39854e4f7f27aaa2209eabf74ae18dd0d9a287d916b83ca7b5d97f363c9ea6bcc", 0x58}, {&(0x7f0000000900)="06c9393e16e2c53bbc1547cb0fbc57655fc0619e5a0961ddc99bc5c3ef2bd96dfb4c294495ae9700b55818c35c76fe3a19a1c6a61156d6e3a7402002088023dc7fcbdf1942fc49952a5491f5ededd6bf87", 0x51}], 0x5, 0x0, 0x0, 0x810}, 0x4040010) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000980)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000009c0)={'veth1_to_batadv\x00', 0x8000}) r5 = socket(0x400000000010, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'pimreg0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) gettid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000b80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x34}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x3c, 0xf7, 0x0, 0x9}, {0x6, 0x0, 0x6, 0x9}]}) 19m33.720662285s ago: executing program 2 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000380)={r6, 0x80000000}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000400)={r6, 0x9}, &(0x7f0000000440)=0x8) 19m32.567133126s ago: executing program 2 (id=357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f00000004c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1e}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xff7ff00c}, {0x6, 0x10}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="3e34a7a3", 0x343e}], 0x1}}], 0x1, 0x200040c4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, r4}, 0xc) r5 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x1, 0x48400) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6, 0x300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0xffffffff}}}}]}, 0x38}}, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x82002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000380)=0x9) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) 19m29.485022162s ago: executing program 2 (id=362): socket$key(0xf, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000280), 0x7b, 0x400000) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x2}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000640)="62603751255053ac7e81e3ae273473cc2db9f9ea5035d129608cb6ad759683a3762350bf61835a5f3c49ac0d9961aac0395398f644d8dda76415ad8c3d5eae90b8c1dc2d19ca81b1383d9a0dc840df7f96c2cc486ff6d78475f0bb4166e5f6468f03811d8bdffb470d2bb7f373f771c1398111041d8957590f36940ad63a710f9b6ced4c4a2c4b2f341b541ab9c8", 0x8e}, {&(0x7f0000000700)="bb9c190d9b943636182de1cddaed8230cdad014491e59c9a3e0bd96ef1c142cb54a0b9a3349ea892f160d7920800a06f51de8007857aeabba60c86047b0ca8c0e74134fa32702b3c12e6fdc347d34e36a025732f4e0db92b4e65b7abbf683dfb281b718a4772cb0ef40b28e890d7763b513f551585033613d45efea8723a98e272994b1bec3c158b4506f04856dd9d6881d742eb1833bf94f13e5b48c8293a4a66fab4d319360164896ccc628dfe7698ab7fb38228a2648de1624bb4f17fc44bd95c63f839fbae6b351fcb4e79a0", 0xce}, {&(0x7f0000000800)="38e06615d1064f0bdd99567dd66df8b2a4187fbb592be4390c9a3c497e10a6c3418db11e6ddaa902d139f231e4153063d10f3bf7e5c61b34f6e0f651817ac31fc65fd831c3aed1ce444a2bf7cdb59c0a8cc37d8ddd53b1fddf87128822a3db77f778f4c7ce3b48ec5fe101350f082207eca307f46ceb", 0x76}, {&(0x7f0000000880)="9d9cbeabe91b514335eff6cafbe9519573eb16dcf01690189b65cf924f78005c769cf23cad9e8e0f041802982288475918d6d84f26adf2a39854e4f7f27aaa2209eabf74ae18dd0d9a287d916b83ca7b5d97f363c9ea6bcc", 0x58}, {&(0x7f0000000900)="06c9393e16e2c53bbc1547cb0fbc57655fc0619e5a0961ddc99bc5c3ef2bd96dfb4c294495ae9700b55818c35c76fe3a19a1c6a61156d6e3a7402002088023dc7fcbdf1942fc49952a5491f5ededd6bf87", 0x51}], 0x5, 0x0, 0x0, 0x810}, 0x4040010) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000980)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000009c0)={'veth1_to_batadv\x00', 0x8000}) r5 = socket(0x400000000010, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'pimreg0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) gettid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000b80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x34}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x3c, 0xf7, 0x0, 0x9}, {0x6, 0x0, 0x6, 0x9}]}) 19m14.045746989s ago: executing program 33 (id=362): socket$key(0xf, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000280), 0x7b, 0x400000) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x2}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000640)="62603751255053ac7e81e3ae273473cc2db9f9ea5035d129608cb6ad759683a3762350bf61835a5f3c49ac0d9961aac0395398f644d8dda76415ad8c3d5eae90b8c1dc2d19ca81b1383d9a0dc840df7f96c2cc486ff6d78475f0bb4166e5f6468f03811d8bdffb470d2bb7f373f771c1398111041d8957590f36940ad63a710f9b6ced4c4a2c4b2f341b541ab9c8", 0x8e}, {&(0x7f0000000700)="bb9c190d9b943636182de1cddaed8230cdad014491e59c9a3e0bd96ef1c142cb54a0b9a3349ea892f160d7920800a06f51de8007857aeabba60c86047b0ca8c0e74134fa32702b3c12e6fdc347d34e36a025732f4e0db92b4e65b7abbf683dfb281b718a4772cb0ef40b28e890d7763b513f551585033613d45efea8723a98e272994b1bec3c158b4506f04856dd9d6881d742eb1833bf94f13e5b48c8293a4a66fab4d319360164896ccc628dfe7698ab7fb38228a2648de1624bb4f17fc44bd95c63f839fbae6b351fcb4e79a0", 0xce}, {&(0x7f0000000800)="38e06615d1064f0bdd99567dd66df8b2a4187fbb592be4390c9a3c497e10a6c3418db11e6ddaa902d139f231e4153063d10f3bf7e5c61b34f6e0f651817ac31fc65fd831c3aed1ce444a2bf7cdb59c0a8cc37d8ddd53b1fddf87128822a3db77f778f4c7ce3b48ec5fe101350f082207eca307f46ceb", 0x76}, {&(0x7f0000000880)="9d9cbeabe91b514335eff6cafbe9519573eb16dcf01690189b65cf924f78005c769cf23cad9e8e0f041802982288475918d6d84f26adf2a39854e4f7f27aaa2209eabf74ae18dd0d9a287d916b83ca7b5d97f363c9ea6bcc", 0x58}, {&(0x7f0000000900)="06c9393e16e2c53bbc1547cb0fbc57655fc0619e5a0961ddc99bc5c3ef2bd96dfb4c294495ae9700b55818c35c76fe3a19a1c6a61156d6e3a7402002088023dc7fcbdf1942fc49952a5491f5ededd6bf87", 0x51}], 0x5, 0x0, 0x0, 0x810}, 0x4040010) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000980)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000009c0)={'veth1_to_batadv\x00', 0x8000}) r5 = socket(0x400000000010, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'pimreg0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) gettid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000b80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x34}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x3c, 0xf7, 0x0, 0x9}, {0x6, 0x0, 0x6, 0x9}]}) 13m37.070755872s ago: executing program 6 (id=1247): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) llistxattr(&(0x7f0000000840)='./file0\x00', 0x0, 0xfffffdf3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m25.406417748s ago: executing program 6 (id=1270): pipe2(&(0x7f0000003040)={0x0, 0x0}, 0x84000) prlimit64(0x0, 0xe, &(0x7f0000003080)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000030c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000003100)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003200), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000be00)=[{{&(0x7f0000002140)=@generic, 0x80, &(0x7f00000087c0)=[{&(0x7f0000007600)=""/4096, 0x1000}, {&(0x7f0000008600)=""/154, 0x9a}, {&(0x7f00000086c0)=""/207, 0xcf}], 0x3}}, {{&(0x7f0000008800)=@ax25={{0x3, @netrom}, [@netrom, @bcast, @rose, @default, @default, @netrom, @rose, @default]}, 0x80, &(0x7f0000008ac0)=[{&(0x7f0000008880)=""/255, 0xff}, {&(0x7f0000008980)=""/125, 0x7d}, {&(0x7f0000008a00)=""/134, 0x86}], 0x3, &(0x7f0000008b00)=""/223, 0xdf}, 0x4}, {{&(0x7f0000008c00)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f000000a940)=[{&(0x7f0000008c80)=""/131, 0x83}, {&(0x7f0000008d40)=""/148, 0x94}, {&(0x7f0000008e00)=""/143, 0x8f}, {&(0x7f0000008ec0)=""/26, 0x1a}, {&(0x7f0000008f00)}, {&(0x7f0000008f40)=""/152, 0x98}, {&(0x7f0000009000)=""/96, 0x60}, {&(0x7f0000009080)=""/153, 0x99}, {&(0x7f0000009140)=""/117, 0x75}, {&(0x7f000000bf40)=""/4100, 0x1004}], 0xa, &(0x7f000000aa00)=""/10, 0xa}, 0x8}, {{&(0x7f000000aa40)=@nfc, 0x80, &(0x7f000000abc0)=[{&(0x7f000000aac0)=""/217, 0xd9}], 0x1, &(0x7f000000ac00)=""/4096, 0x1000}, 0xffff6000}, {{&(0x7f000000bc00)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f000000bdc0)=[{&(0x7f000000bc80)=""/35, 0x23}, {&(0x7f000000bcc0)=""/246, 0xf6}], 0x2}, 0xa0}], 0x5, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000003200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000097c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009800)={0x8, 0x0, &(0x7f0000009840)=[@increfs]}) ppoll(&(0x7f0000009880)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000098c0)={0x20, 0x0, &(0x7f0000009900)=[@request_death, @clear_death], 0x0, 0x1000000}) 13m23.521627963s ago: executing program 6 (id=1275): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000080), 0x4) r1 = syz_usb_connect(0x3, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff0007050302000200070584020002"], 0x0) syz_usb_ep_read(r1, 0x3, 0x0, 0x0) 13m18.381245122s ago: executing program 6 (id=1281): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r5) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0) listen(0xffffffffffffffff, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000006c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) bind$inet6(r4, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000740)='X', 0x34000, 0x0, &(0x7f0000000780)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 13m16.009792564s ago: executing program 6 (id=1283): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./trace\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./trace/set_event\x00', 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000780)=0x3) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000007c0)={0x283, 0x3}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 13m14.496346489s ago: executing program 6 (id=1285): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1, 0xfffffff8, 0x7, 0x80, 0x4, 0xffffffffffffffff}) prlimit64(r2, 0x5, &(0x7f0000000080)={0x5, 0x8}, &(0x7f0000000240)) connect$pptp(r1, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 12m59.412750475s ago: executing program 34 (id=1285): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1, 0xfffffff8, 0x7, 0x80, 0x4, 0xffffffffffffffff}) prlimit64(r2, 0x5, &(0x7f0000000080)={0x5, 0x8}, &(0x7f0000000240)) connect$pptp(r1, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 8m13.532886518s ago: executing program 1 (id=1862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001780)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f00000017c0)=ANY=[@ANYBLOB="7f454c4600040400010000000000000003003e00f32e00009b010000000000008500000000000000fcffffffffffffff004000007db8380001"], 0x78) close(r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000001740)=ANY=[@ANYBLOB="ac141415b114143c000000000a00000064010100e0000002ac14140000010100ac141430ac1414bbe00000017f000001e000000100000000"], 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x11, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000030000000000003b04000062e32bd39074cd05c4", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007df32000100000008500000094000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xffe, &(0x7f0000001e80)=""/4094, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000001c80)={0xc, 0x0, [{0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x3}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0x0, 0x0, 0x9, 0x1, 0x80000001, 0x2}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x1, 0x110, 0x3}, {0x2, 0x1, 0x2, 0x9, 0x8, 0x9, 0x40}, {0x80000008, 0x3, 0x7, 0x7fffffff, 0x8000, 0x180000, 0x40000000}, {0xb, 0x8, 0x1, 0x6, 0x10001, 0x1, 0x8001}, {0xb, 0x9, 0x1, 0x1, 0x9, 0x2, 0xffffffff}, {0x0, 0x8, 0x5, 0x8, 0x4, 0x3, 0x5}, {0x80000007, 0xb388, 0x2, 0x1000, 0x1, 0x7, 0x2}, {0x2, 0x73de, 0x4, 0xa, 0x40, 0x0, 0x4}, {0x80000001, 0x2, 0x4, 0x0, 0x3, 0x0, 0x4}]}) 8m13.020352101s ago: executing program 1 (id=1865): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000440)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, 0x0, &(0x7f00000004c0), &(0x7f0000000500)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000540)={0x0, 0xd17, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) r6 = signalfd4(r0, &(0x7f0000000840), 0x8, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'batadv_slave_0\x00', 0x0}) r8 = syz_io_uring_complete(0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e80)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000ec0), 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000f80)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000fc0)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, 0x0, &(0x7f0000001000)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r14 = signalfd(r0, &(0x7f0000001280)={[0x1]}, 0x8) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r16 = dup2(r0, r0) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0), &(0x7f0000001400), 0xa7c, r17}, 0x36) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_tracing={0x1a, 0x42, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xd, 0x3, 0x3, 0x20, 0x10}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd9e}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x8c, &(0x7f0000000d00)=""/140, 0x40f00, 0x2b, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0xa, 0x5, 0x7}, 0x10, 0x22433, r0, 0x6, &(0x7f00000014c0)=[r8, r9, r10, r13, r14, 0x1, r15, r16, r17, r18], &(0x7f0000001500)=[{0x1, 0x1, 0xd, 0x4}, {0x1, 0x5, 0xe, 0x7}, {0x2, 0x1, 0xb}, {0x0, 0x5, 0x2, 0x7}, {0x3, 0x2, 0x0, 0xb}, {0x4, 0x3, 0xf, 0x8}], 0x10, 0x3ff}, 0x94) 8m12.454544759s ago: executing program 1 (id=1868): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='byd', 0x3) 8m10.039142415s ago: executing program 1 (id=1870): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x2fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001500)=""/121, 0x79}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/15, 0x15}, {&(0x7f00000025c0)=""/195, 0xc3}, {&(0x7f00000026c0)=""/183, 0xb7}, {&(0x7f0000002780)=""/138, 0x8a}, {&(0x7f0000002840)=""/85, 0x55}], 0x7}, 0x9}], 0x4000185, 0x0, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000340)={0x8, {"f3d59d9cccc5a9718090afad0c365acaee3e352fbf5c05036a94cef1f2198a46fa73c69792708859c7a2377c55cf1bcf7d76d71ab70b2403bdaf8fdc40ab5ac45cf2d1e66a568a0f7633c3a340a340d2318348529601551d7f5428aa7d974c5e94d80f3d120b0d09fdd85d8faf7b8f23da052b0b52138481f94675f483462200199ca08148212b046c657e7bb2630d6c8029c60c2a5101a8f05198a322fad32a6f480816fc809f6c3e1355e81d131de3a1619410edfa4fc3b92b78ccba463eedf81b29da2f801093772506be4c9ea7a18a832ed16eacf1a0312f87d35d3169539e6905249db647c8f79f8c69f7b36b8832d0cb2e55593ddb47ddb7cb34ee78b991ee942655e3511886716f53d5aee0f7d3f8f46b6901caf59b461388bd1108e9c59f65ba9c80e85761907c7953c3e0b35c40d8cade9a37b2599690efdc89a5287c64ce952f8a308268e75e4c1c9a41e7ef0753d7cf12c4a3ec9e46d42643617d7470d2e1a8cbc9ac3fe246393456134e5fe432a6fa9d9c7a81e3fe423553453aa8ac5c24a69e723cb6321828a7bab5d63d6c5e723811cc67663bc6b60cd5e8da47cd28ab2543336ce795671587592033884cf84019e7b0967787f948b684776287857d633ec7ed1afa6c09ef35daab92e43e8b6526411a4826d1e7efe9377c94afc4f0ad3ceecf1d4a4c7b11fed317c54a9aa826fb63d7413446dd9b29dcd0f0dc6ca0c34473ba31a302b5367370912da1abb518cc5811af22acab696ea7db36a43dea4e271707fee7d1c2e032ae367c2f0b3157f5fde982cd27aad444364e3227ff26e0e9b99175f1d63b6a85a741a79a1ee96502e3918bf418e4f8d1161235bc8da4209c798445349b4b530b800d50bcaa9f923eaecf34400dd33853be9c0dc1257bc41683f6631cb95f54125022c2b180c7142fcba130eb450e58d4017e12c80f53c8c8c321429a29de07594da71a5e8f1fbfad7b60b3c01040e4add3b7b50c97890b4c27f0ad6ed516a9c445a85268b291d076c348e7616f618d3557dbc42f85bfd386524687ada44d9a53f7a4fcbe76d01bfe3e97bf6ee2ef9d0cd2fd870e53b0a4a79acf15558a2efbaf47c07152707c8ebe9436735d1bce707db15e8a48ca86e498dcec89d4296af708164865b9d20f58fa19b7382e6fa420119b02d5e5342fcf0d3cc6e0215a91a187afbf8003f32d7b3a2794d952a8a16f59fd60d2962f443e4853fc18fd636cb9a7b20de52db0f90e22676e1f8c48240964136ad3f022653c13260530c5bc8727fc3372f84e9af05a5f4d354ffaada83cdeb7799e277f15f79e5f4e0a1749922af315e96e191ce723db8d670de0e0fe044bbbcb1c8a3071c88b7627a0950749743ac022179a3e3e84a9e8a171906d174cfc098050fec4d6376ee8fffe1979980948eb2e18318df7f8e553b9acc3745b596f3cd2eccae721f65e32aa7e55d5f877f72c0685d30794c98b5730469d4fd3e57f27a947f7cfd4bb55abaf31e0670b034a284442c8d330ac26b325125abc19542f84abf82aaa804b47ca360185a980a3f329614d6f8e5b2b32e57efa26fff6ba7e58a09ceca4b772eef45838db08de14e0eb2a017e4c4810965a021fc4a8cdda6182e8b22317ff20252a6656f04e2856b89b8f99df22795a3afca9d3586f90cb5d4a669af8757ada13f1c3262535182ee31f5f14bc10e417db30eb4222fc426441054aa5fbbe3c839c5fd39ba92c330985580c87c62ac3af765aaa68ad693f9d33d7cee33c150354089f4bbd2af0c2299d1ecc31d0c6d805021018eb4327d26c0ac7fdf6288556bfbb069553d6a17cb5a71656307beaa6ce71bee56b8e95b9a54aaee2121d5d12e0f07c049f1bb3f9972a277911fa889f4a7e9d9210a042f5415b25ed73c787a7b6fe6c3bd3b7a8566d4cd481696efbc57e89df89a4e475478c76f1b06fa1203203c502fad38555faa5023ecaf20d693275062568b654a9785bc63e7572cc0431e0ed83e3d7492ea0d6f1aae8a2843270fa3add6394c6956e3af2ba7175ce0ff1879600ddca2de910187b1dcb6a8d26f0b501a8ca16cfc6a5712b43f2f643014f2d6bd748e8a58eb6ea164feb7756f5cc5feb0b7f5fe3cd36981cf02cfcaa2b67d6d67c8b702534903cd1a6d01d7e2d6f63a23def466bd32ca0e116bdf3b1e6bd7765501a3035d552c582f33517130fa8314c22147634d4a6c7717232e161ecb33245995e7b72d80af4666dc57c515be2bbc991ed950d3300f5a0ab7878d6d0c00e337e9cab8a394b3d2c893e1e00bf7f8d0ab819fe471202c5a91ec04b5090f123b1345dde7adcec3eb97c76847635e9be5af6499823583a7accab86c1c1e1248720b656481e5fadc3840a813e46fcb1589412953e936283d05a9ca3124c057db8c470dfe83e473962635308e1032a3a246c14fb03c924a48e711bb9b70e4498dfa95ae0a51eaedb855c564570428b12e6876ef60c917369186cff010e8f5615f28951616fae0b24ee34ac890b1f2386a1d27f4fe3dfb600ee863840c892f80882546564157b830110bf412a7a0495fd98a751923d2d783a93cbcd9931d6509344911fbdbda368de2b207dfaf90b249c298cf0010ce5b2763ecb3450029155b0ea5b154f1885cf5d9d146ddc483eafd6c21e4c69dfd35da656042a8067a4577e3b94a00bf0a0c3c8a9dbff4e3c36f75f63e2979fec74338137ed9b8f94e28916da3a5e95654b1cef65a246bd8049612ca325b3c6f78a13a008e8727d49c6eeb3b0c4d0e64ce7e9cfcfa4dc05110e118307974d15c35e85d3b05314c3a901352dff2767e88059c4c9a6cd3b0ec72140ba9f051211354f970aa1c4d2c81174746cff696b45403b31495ac355a2864100504fcfece628051d4516a9a521581a11ab1ca1af4a7dcdf0ce7b0c52a2ceee83ae0a2b1e7c33dc20f42d54b1376e7b53c36970f03938cbe36250e2b645f026a3af7e4f107fa08ad900fb1b4c7aa42572fa73a51860264175ee47e49b51cf3001b852284b5bbaecb26f3fb3d1608d2efc263c13397c9fb52523284a3a4293774c89cb5da81640c5468b391c0ee0af29e929a4fc411311c57e28e7a4b318e0efc445df6c28f4a2984c1290101abe945009705f21c15e5130d651cd9227917e08467bbd68decf2d5fe9af78ee652756a1ff35353bf52c8f9f4bc48d2cc9993adfebf487f570ff0cd8933e965253fdcfa845c8da555b5a2f94fc5a8eac46110f0e26cc0112ffaad9a2bf01a4f66667ee8bbeb814c0afd5246f3f7fa969b1862483543617319cb314a1727e4096c609b013876258640bc39ae2b7a6518399217af98d3a4bd767fdcbac34fccf50e4c5d5463c9538d0b1802dacafc835a7a55899c7ab14cdf3f5fb40dc4164757f2563e4c739840cb88c60d63dedc22f80de4c64232c94ce8da676aa17efb9eef6e36b18e40a901bea1b66b9a8a372abb61608ecd4c512b694fd4df8c33bbcf31cf5b6aa359fafa1f5bb417a72f6e926fded63fc4327cc8fab8ba132afd62c55f7128e35d587810f5e74cf6ff127938b783da15e4d006217ccdae2a0c32083b129bc5e7bc4f5c52ee68bd54b28c8f9e1dc10d34731d4e8ed8e1c52e542350543002990d8fdc2d691d1f84b91c3728ea680fc7776000fc65062d67234aa43efd2be2d5a885ab0545d7f191d0dd86a184c7ba48d2bf0cd26676a75411232ec596b244bab96ee668da3b71da739fdf58fbf24f26a06d5978c6525b6da864bf2c572dbc9fe72ab72c8b57d3d72c930abbc70c721f452677643af2a34c03df7321a16e0b84cc7b8e69605bfc7df428e79409ca53bd492bb9389e02c6abbf193a99e8ef831ba2e5fcf39b8cef5248f6db283a18e6dc4e6abeef2d7ec50762d2ce1369df85d7a91f96963e0c8282a5658d2ff769039a605815f52dfb874b494b67d60af9958edca4776a55f59dfeca71feb082864429d4d4009d53157db2e6e973b5809fc9aa42451a1340aaeed6d83bc9402976a91a8981f78803e6fa126ab7a72eb7d0ba8531975364402458e65117f6ed11c9c57673a734f384acd7f26f5a017016b9f78743570b9a87bc3c5a5d50f8c7b05b2365bb9bcba67a0a261f64af8ff9a86258ce1f6c58dab4c14fadb49c5ca9c2f2361ee81c7e18afa523151133bafeb5336d1d207d9cacea7bbeecfa2f59e849db002334655f3326d6cbc928b778a4990806b101bce51cc5992ac9868a05bde463451ca81da739c2cadca3501d0d22703c7f2518c2030faab634d27b41bef11b77b44c29ebe8d38f0873fd2414611c1f55afc528b10127a3dfa1e2e5d37292917c5a245c1905a2c395ca6d7afe3dcde241e1aecd3edefabcaed9855a065816156f65f97e74b1d31df954f1f1c5ae8eafaaaf9c67e1fa088deb33e1118d20dfd63baad06a01ad84e10dd272f2832021ffbd8fad22b2f397d1fd5a3ca4ebe99f8dd7b72bfa60a59a6369816abe80b14d07c2f420e587c924b3999eef3babc87a61a839d02e1058cde0e22862e858db59d5a5c7eea48321b3e09146f3e297e54fb67f7c4fcc3d50032381dfc01018f4f09a8e95b9922ace396e98b13f58f81064a6d82eb72e5b25bb6f20f6c33e35b65ceb90f32c376f4a2291a69209365ac8d43ee25bb45b90363e025e0248b1ee73606f170c70c7b855492f7b7668161bb86ad67302e8e0d1e99f2a6a7b60fc206d6b721487fd0a490ca13fa2e81354561677e6d92e30198c1dfc6981b64c581829b1e5ab371f19050aefef908bfa677ef595e7a3351fe48dd7280405367d3c79533bd97bca7784d17bf37a7f0c9cf4e143a2b843d75481335056ad5fa0311628916a3f4781f9710483e635423059a677c0eac3b0dd8db2dd1fcd1bbdbc0996d2ca804b1c2d6b67818498e239c8898aef45ed13ab1c3b85d976a650b893a65df417fbf9ae06cf96c7c7d7bf5fdc3d2108e0a55bcde451556dd1483394a825ded8f1b8c70fa63e137735ea8cbeceab6f9adf794f21bfdb38b577f9c7b4bbb34cf1498e07abff7c31e83d10b9c13afc680bd6bd4b6f4a30e626eb7c2ffb34af2f8eb04172ed341495d5eebf285533f1eaf1ee51deb721301aa182df6c0c464820617896a4560e36f21c8bb8a2ae64218e1719352999f7610af1e899f8539db01ec88b04eb87685dc0e5a58af7a5e81c40bf0be4a8239026909a844f9944ec779b32af25f499f29493502e0d0586d4fa376e4eb6d9a530f06e22e791ef9a44322f44f66085634d457fbce59da84faecd86c7b2a0cbe5fc976d151665a6b4bccb0cab11459aa3484efe896158a3baf54892379395d3a0da01203c622b4130ca9abde255f8684feed9d91e9294e1d283d3c1a7435360f0dfc45e7c4516cca521b7043ae4b52f1700646e5a79589b0ea8ae5b2231000d73ebcba981eb50a299815b156cfc714be128ec6ba4505a04d12a9da73ff3672991a4527fcb815dd01f187227a15ec9f2c1d3689f64d414760e158c92f935b778f00a59c7384a9e06a4e7161ff177885c261acf29503b18056ecba3cbc7336187fe70593fba74cfe56316e43cbe1a7e093020aa6f9d3bb3f2716840ddb1aa860f12ca0c10a15c978ebbc33d126120246200b45a057912d7326b84aba124daee03ca7331c356d4e9a2deccdb36e9f39c2c866d7178e90880d4b351b1ac505dc9896207d9724ee01eb853ec0b6123a1c2ed559a4b15a422a77d719a61028ecd19a945dd91a6f8ebae429ddc1ab68c279e7f9e5c4745d3152750953eaca64a17f8504b52963de500da112ea4f692632e2aae044372936", 0x1000}}, 0x1006) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x2, 0x1, 0x1}, &(0x7f0000000200)=[{}]) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) 8m8.300495614s ago: executing program 1 (id=1873): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000280)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000f00), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a40)={0x1, &(0x7f0000001a80)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8m4.148442551s ago: executing program 1 (id=1880): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x80000004, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2=0xac1414aa}}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8m1.653368711s ago: executing program 35 (id=1880): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x80000004, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2=0xac1414aa}}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 19.614104467s ago: executing program 4 (id=2562): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000200)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) 11.721922568s ago: executing program 4 (id=2572): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) capset(&(0x7f0000000600)={0x20080522}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x20400, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) llistxattr(&(0x7f0000000840)='./file0\x00', 0x0, 0xfffffdf3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.212738081s ago: executing program 5 (id=2574): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/vrf/strict_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) write(r0, 0x0, 0x0) write$nbd(r0, &(0x7f0000000400)=ANY=[], 0x5c) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000000440)={0x0, 0x0, 0x0, @raw}) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000b40)=""/102392, 0x18ff8) r5 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r5) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @loopback, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 9.764028621s ago: executing program 4 (id=2575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_io_uring_setup(0x1fc7, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) io_setup(0xde1, &(0x7f0000000240)=0x0) io_submit(r4, 0x2, &(0x7f0000000280)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1004, r3, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000000340)='W%', 0x2, 0x7ffffffffffffffe}]) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x1}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r6, &(0x7f0000000440)=[{&(0x7f0000000480)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x6c, r7}, 0x38) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000200)={0x2, 0x3, 0xe7d}) r9 = socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_io_uring(0x523b, &(0x7f0000000700)={0x0, 0x6719, 0x40, 0x1, 0x12a, 0x0, r2}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000540)=0x9, 0x4) r10 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000600)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000640)={0x11, 0x0, r11}, 0x14) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000040)={'pcl812\x00', [0x140, 0x2, 0x1, 0x2, 0x1, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x1, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9a, 0x101, 0x400, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0x81, 0x200000, 0xae, 0x100000, 0x9, 0x0, 0x8]}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000680)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 8.346569573s ago: executing program 0 (id=2577): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = dup(0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5c01000010000100fefff7ff00010000fe8800000000000000000000000000016401010000000000000000000000000000017fff44230025000000003a0000009fb91c7f899dc15d45dc40a9e20002bfeb09ae105c44db1674e3e07a781a14b5ecdc595ec6c32a245c8a6cfbe3aef84a53ac22af1d150375b17592012da7f6f1c52f8afe4c23c9927195733f69b3055fa60c624712092bddf1509c7d6445b2fcc70c25c3d5651a35ae8f155b07a9705585da33fccd3ffcd3347209251aa14ebd28065e5d3272aca2cd4716102392c72f5ab51b0d2013303682b044562a5289f340b84ff86b23babe8683ec4e0fbc3c9a839887d719e69e14664c68e02a158e6f423ab80ac7952a9aff7153d5040d95c2d8461a1592e7826024d152fcc8b01213434b734aa508c2559f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e23, 0x71c, 0x4e24, 0xfff6, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x400006, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) write$binfmt_elf32(r5, &(0x7f0000000500)=ANY=[], 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r7, 0x84, 0x1, &(0x7f0000000540)=""/4052, &(0x7f0000001540)=0xfd4) r8 = syz_open_dev$vim2m(&(0x7f0000001580), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000015c0)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000001600)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x20000006}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) landlock_restrict_self(r0, 0x0) 8.167953269s ago: executing program 5 (id=2578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x2400) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 6.935505104s ago: executing program 0 (id=2579): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="20c81e0000004d61501d010000000000000010000034242d2e5e8bd75e0000003804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000480), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000940)={0x1, @pix={0x4, 0x5e2, 0x34524742, 0x6, 0x55, 0x150, 0x1, 0x5, 0x1, 0x1, 0x1, 0x2}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r4, 0x80000000}, &(0x7f0000000280)=0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="001773000000a2f5006a0a97aa5c75e8e9704f4cc19904f9bbeb2096288b1318b98faae19a4a103c775c456d1d8d5d804677d48b7f99c746a540b2ec6ac4980000000000000000d50ba506d2a2274b5506f49328bde2d2ac524182daa4915416c4d45995f9bb3e063f5d8e0361389b158d27badbd9db8c5391"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, &(0x7f00000002c0)={0x40, 0x11, 0xc8, {0xc8, 0x33, "ef5c9bd616a4c4563191f123f4d77774526a0f5e33595c4545c5fdfa7594a9435516b11860ece8c4140a4e3211acd3ce8c322713cf5f8ff76020f2c7af80b73facd73955e73586b7591e4235116010940797d82cf6b82d7eddd881532d3f5bd5c7e9b3fae448407291daf930255017e9c883461dd9226668e10add7909c23f9d22f6097cd3155e846dd2a9d7d5060e0f215aef2b0f839816ec7b846f1da159832fc8a4f9230f7d5fe3eef8dd7378d417bc7026e94a9ef7be6ed438142cc2ad7d8564cacc3260"}}, &(0x7f00000003c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "0c2bf5a392cce9613ae96f8154043aff7987f34e6efe65eacc5f0f250b8ac6e2eaa2d0f01a36e91a887aac0818a409c4756404df88a95dc30db85886"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000580)={0x20, 0x17, 0xcc, "482a5e614eb556b7ff78602c8415335a6fa61111ec87027a3b2a079d2ecacd6ef9347bf576205d2ede93b283d4f7010b5ac30fa226cef47e4b1d7d5473e288f3b3e2e520b8bb95896b32b227b6e0a0ba22b6be19f17497450a2bc771863c0347e1a4622128513c66133fb3ac98466f90c776b9145b9e784ed848407d8ddcff2469a6c6583c9cb9f8727da7d0423ee2c1a9af9cbdae4eb98109a004fe0ad03da8da852affa0b368784e7e7d9138689487652eb648e2eaa624d2ea607b7fdb9b6d6c836fea46016a9ca377151e"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x76}, &(0x7f0000000800)={0x20, 0x0, 0x47, {0x45, "d9ba09bc713305127590457c98f396edfbd4731735aeccf69ac92e3991ef81a3300c2fee98b949a83a87a297445788bba7598d040c615f35f6e55661db87afc78d83c702dc"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x3e}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0xf}}) 6.032299579s ago: executing program 4 (id=2580): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000002c80)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001bcc0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f000001bd00)='./tracefs\x00', &(0x7f000001bd40)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000001bd80)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r5, &(0x7f000001bdc0)="653a6d7967726f75702f6d796576656e742073636865642e73636865645f737769746368e80c4dee74f7cec9ec93624925b8e167b66d", 0x36) 4.482816911s ago: executing program 4 (id=2581): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000840)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x3) socket$unix(0x1, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.968611446s ago: executing program 5 (id=2582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x101}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x20, 0x80, 0x6, 0x6, {{0x2b, 0x4, 0x3, 0x1, 0xac, 0x64, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_prespec={0x44, 0xc, 0xbd, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @cipso={0x86, 0x2e, 0x3, [{0x2, 0xf, "0bd3e14adede374545a55d5ed1"}, {0x5, 0x9, "bba3fc7dc54fa5"}, {0x5, 0x6, "8907d09d"}, {0x2, 0xa, "5bd13de7cabcec33"}]}, @cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}, @timestamp_prespec={0x44, 0x54, 0x25, 0x3, 0xe, [{@private=0xa010101, 0x3}, {@multicast1, 0x1}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x27e}, {@remote, 0x2}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x7}, 0x3}, {@private=0xa010101, 0xec0}, {@multicast1}, {@multicast2, 0x3}]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@remote, 0x51, r3}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 2.967539662s ago: executing program 0 (id=2583): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) capset(&(0x7f0000000600)={0x20080522}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x20400, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) llistxattr(&(0x7f0000000840)='./file0\x00', 0x0, 0xfffffdf3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.476492933s ago: executing program 5 (id=2584): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000200)=0x2, 0x4) unshare(0x22020600) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000380), 0x8) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) syz_emit_ethernet(0x479, &(0x7f0000000d40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x443, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @ndisc_ns={0x87, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x3, 0x16, "1a369eb8fe93e60e0ad8b23681fa755551b76326dc2a88695a3d5a0ecf2314b281a45595b6dd245094bfefa326c69bbbd33d37658c48be296396a3ed8a9fe3e70e06557f0a660bf8f37bf16909117e08bf903cb45389e9951ac36be42abc3e977eee95992680d0ab3fce032347243952055f820b4fe6c79b346ff99a5499c069cd6e1a7998aac97c25e76d8913399e5c86b61352521e13101490c065dc1a8e970d4d5c52c41243db2efb3324db21fcf0"}, {0x9, 0xb, "0154ac081fe5a8cf9972f65f5de79af09a62892c5091a6dab2e1f5673e79a48b8238095abbe884638cc1a1c31642124feca1bc7bfc9ac4edcbbe1079e076ce844fd28d77a2d1c27b8be74560f6f16c968da206ab2af261265b"}, {0x1f, 0x9, "5af89cfc46f83b071a7efb92d61817025fe2c4fd69429539be0ebff2a2f0a1936629cb95992641a6d5eeb39eb5c2790d5719dc96d521d4251b0cb58535514a4de2e201c27a196d3df3cd77"}, {0x18, 0x1f, "f8f5b7a7a0b4eb6348c2aa1c154522cd82817217f56c295464925f621b2dd0dff7a6d4c4653b25af75832fd394f604e4711dc14e7c70093498a382189e474c506f9eeb8ecc8de4d75bd33dc0761b0ff33889d02278f1a390fb714c4c83256cf6d7fc7ce16e5e8ce52ae8ef62f544784fc180594d99f5829a9027f5623a5d289407a988b873e7071c3a794d76af5e6ff954a1aa8d4e70d761ccb3dc7ea6377ce993d20a6fbc405681794ce159de3d80e343ff17bf942dd3db2dbd4915c3cde238c227fefe845f20f3ea303a77550122825486eaef2af4cd8e45ef894a63f5ebf95a281e3046ed8581362e4d7a8aee89b64cc0a2349964e957"}, {0x19, 0x1e, "8d443e5246b410df44fb3ed8897c2fbf93b18ae5d81a78ac07ec0db3b833ad6d6568801e4aec34bb6f8b53dd0d96d9f175ae9454a2ef78385e184996ffdb2fa1afb4403c11092fb5684ec1e7a16a9374a8f0f1ee4e9933bd226f722f70b6648df9f29e91926b3c3ac4ed7133f1ae7f307558039782b1df043ef803f3b6a9556a5018679bf54747acd402245e6e8203b604999ce7be3e520337a56c2c0e76bd48aea2ff3a56283e430bfdff22af95f58e1e55427916fc3f05dcd8a3faa254c3f693ecb97b0f2a6e9f1a8908253dad58074777d08bfb01f2b665bb21bcbef814eeea148cf6d51ec0f06b4a5acb122b"}, {0x19, 0xa, "4a8a258ad71fe0181679b90ea6b83e30e05d245e5e74a2e0e1e9828c4e70093bbc8849499e52a214c63d1ae4810cbee2feb4b04dcedb1128bf6eb91b8376b74da1ed35722a21c7a7125fe026d358b056cfbb"}, {0x2, 0x12, "957dc4654ed1b4028fffebb893173b6b04db6a802bb74cb6997862fdcd37ea73cceaf19248fcbe2c2c664e2aa8cb03716c30fd1d99fabdb926654d6c04bb8be2a773376fc21aacaa8b4cf4685caf727a8415a8a3364991a0ce7137b2b08df9a0d7183e0613b8c8e139b3bda5d3232364c0a4abb631c9aba1c908f1154026ff525b79376111dab9e2059db0ec14a6f26dd69e5a7116"}]}}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000880)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000540)="02", 0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000002c0)=0x8a4, 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000380), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000005c0)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000600)=0x1, 0x4) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000640)={0x1d, r7, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(r6, &(0x7f0000000680)=[{{0x0, 0xfffffffffffffd0f, &(0x7f00000006c0)=[{&(0x7f0000000700)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r3, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="35afc9e1502d21fe3ee2526120a01075246a32ffe4edc6640a03e602b5993256d72eb0376aa88acccff9400af707ed8f3bcda5929959c212deacae9efc049f2d4ca6a3dda1228572bada34874b4b24d8ae60272bcf93a410a89158e2048ee46bcd50affffef3af4ffe85c485c307d5bd5bfa2641d042658394bc3aa023befc5116b548e9962b9c89a74cbdf67e6a2d1e55360745b40687e0e8e8d56b60bb961ce257df6ac330b8487c15350f276ddb3fd6eed507ad38d3efe68c20"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x0, 0x4, 0x2}]}]}}, &(0x7f0000002d00)=""/4079, 0x32, 0xfef, 0x8}, 0x28) 1.915279981s ago: executing program 0 (id=2585): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = dup(0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e23, 0x71c, 0x4e24, 0xfff6, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x400006, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) write$binfmt_elf32(r6, &(0x7f0000000500)=ANY=[], 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r8, 0x84, 0x1, &(0x7f0000000540)=""/4052, &(0x7f0000001540)=0xfd4) r9 = syz_open_dev$vim2m(&(0x7f0000001580), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f00000015c0)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000001600)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x20000006}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) landlock_restrict_self(r0, 0x0) 624.028732ms ago: executing program 0 (id=2586): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x8) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000020000004000ea"], 0x20, 0x4855}, 0x24000052) 442.129616ms ago: executing program 5 (id=2587): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1f2) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e89296", 0x61}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x440c1) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000500)=""/221, 0xdd}], 0x2}, 0x10001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='27', 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000600), 0x7fff, 0x2) ppoll(&(0x7f0000000680)=[{r3, 0x1044}], 0x1, 0x0, 0x0, 0x0) 339.792407ms ago: executing program 4 (id=2588): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_io_uring_setup(0x1fc7, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) io_setup(0xde1, &(0x7f0000000240)=0x0) io_submit(r4, 0x2, &(0x7f0000000280)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1004, r3, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000000340)='W%', 0x2, 0x7ffffffffffffffe}]) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x1}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r6, &(0x7f0000000440)=[{&(0x7f0000000480)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x6c, r7}, 0x38) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000200)={0x2, 0x3, 0xe7d}) r9 = socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_io_uring(0x523b, &(0x7f0000000700)={0x0, 0x6719, 0x40, 0x1, 0x12a, 0x0, r2}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000540)=0x9, 0x4) r10 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000600)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000640)={0x11, 0x0, r11}, 0x14) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000040)={'pcl812\x00', [0x140, 0x2, 0x1, 0x2, 0x1, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x1, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9a, 0x101, 0x400, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0x81, 0x200000, 0xae, 0x100000, 0x9, 0x0, 0x8]}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000680)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 266.820428ms ago: executing program 0 (id=2589): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) readv(r0, &(0x7f0000000b80), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000440)={0x0, 0x6, 0x9, 0x8000, 0xc7b7, 0x4, 0x4, 0x8, 0x7ff, 0x100, 0x3}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 0s ago: executing program 5 (id=2590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f0000000100)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) kernel console output (not intermixed with test programs): driver ttusb-dec failed with error -22 [ 1226.143862][ T9011] usb 1-1: USB disconnect, device number 91 [ 1226.348983][ T5827] bridge_slave_0: left allmulticast mode [ 1226.349017][ T5827] bridge_slave_0: left promiscuous mode [ 1226.349264][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.922531][ T9011] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1227.051418][ T9011] usb 5-1: device descriptor read/64, error -71 [ 1227.222695][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.311599][ T9011] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1227.316355][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.423318][ T5827] bond0 (unregistering): Released all slaves [ 1227.472473][ T9011] usb 5-1: device descriptor read/64, error -71 [ 1227.605928][ T9011] usb usb5-port1: attempt power cycle [ 1227.877552][T16101] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1227.920786][T16101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1227.956979][ T9011] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1227.979585][ T9011] usb 5-1: device descriptor read/8, error -71 [ 1227.980308][T16101] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1228.173684][T16101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1228.193537][T16101] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1228.249531][ T9011] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1228.316163][ T9011] usb 5-1: device descriptor read/8, error -71 [ 1228.396564][T16101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1228.401410][ T5712] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1228.403317][T16101] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1228.421709][ T9011] usb usb5-port1: unable to enumerate USB device [ 1228.507166][T16101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1228.571925][ T5712] usb 6-1: Using ep0 maxpacket: 32 [ 1228.572665][ T5712] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1228.573786][ T5712] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1228.573800][ T5712] usb 6-1: config 0 has no interface number 0 [ 1228.573825][ T5712] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1228.575772][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.575787][ T5712] usb 6-1: Product: syz [ 1228.575794][ T5712] usb 6-1: Manufacturer: syz [ 1228.575802][ T5712] usb 6-1: SerialNumber: syz [ 1228.659174][ T5712] usb 6-1: config 0 descriptor?? [ 1228.938562][ T5712] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1228.938625][ T5712] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1228.938641][ T5712] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1228.938730][ T5712] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1229.035942][ T5712] usb 6-1: USB disconnect, device number 71 [ 1231.375910][ T5827] hsr_slave_0: left promiscuous mode [ 1231.415197][ T5827] hsr_slave_1: left promiscuous mode [ 1231.425118][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.464224][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.521437][ T5599] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1231.760147][ T5599] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1231.774531][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.774555][ T5599] usb 5-1: Product: syz [ 1231.774568][ T5599] usb 5-1: Manufacturer: syz [ 1231.774582][ T5599] usb 5-1: SerialNumber: syz [ 1231.847138][T16451] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2357'. [ 1232.392749][ T5599] rtl8150 5-1:1.0: couldn't reset the device [ 1232.393160][ T5599] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1232.429503][ T5599] usb 5-1: USB disconnect, device number 65 [ 1232.671719][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 1232.721757][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 1232.924495][T16459] FAULT_INJECTION: forcing a failure. [ 1232.924495][T16459] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1232.924535][T16459] CPU: 1 UID: 0 PID: 16459 Comm: syz.5.2360 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1232.924563][T16459] Tainted: [L]=SOFTLOCKUP [ 1232.924570][T16459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1232.924583][T16459] Call Trace: [ 1232.924591][T16459] [ 1232.924601][T16459] dump_stack_lvl+0xe8/0x150 [ 1232.924636][T16459] should_fail_ex+0x46b/0x600 [ 1232.924665][T16459] get_futex_key+0x1ab/0x1410 [ 1232.924704][T16459] ? __pfx_get_futex_key+0x10/0x10 [ 1232.924743][T16459] futex_wake+0x119/0x600 [ 1232.924766][T16459] ? vfs_write+0x9e0/0xbb0 [ 1232.924790][T16459] ? __pfx_futex_wake+0x10/0x10 [ 1232.924808][T16459] ? __sys_bpf+0xd0d/0xd90 [ 1232.924849][T16459] ? vfs_write+0x9e0/0xbb0 [ 1232.924871][T16459] ? __pfx___sys_bpf+0x10/0x10 [ 1232.924900][T16459] do_futex+0x458/0x4e0 [ 1232.924934][T16459] ? __pfx_do_futex+0x10/0x10 [ 1232.924970][T16459] __se_sys_futex+0x3a8/0x450 [ 1232.925004][T16459] ? __pfx___se_sys_futex+0x10/0x10 [ 1232.925031][T16459] ? rcu_is_watching+0x16/0xb0 [ 1232.925064][T16459] ? __x64_sys_futex+0x21/0xf0 [ 1232.925094][T16459] do_syscall_64+0x166/0x520 [ 1232.925122][T16459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.925143][T16459] ? clear_bhb_loop+0x70/0xc0 [ 1232.925168][T16459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.925188][T16459] RIP: 0033:0x7f6f172ef559 [ 1232.925206][T16459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.925222][T16459] RSP: 002b:00007f6f155460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1232.925243][T16459] RAX: ffffffffffffffda RBX: 00007f6f17575fa8 RCX: 00007f6f172ef559 [ 1232.925257][T16459] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6f17575fac [ 1232.925269][T16459] RBP: 00007f6f17575fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1232.925283][T16459] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1232.925295][T16459] R13: 00007f6f17576038 R14: 00007ffc4888c290 R15: 00007ffc4888c378 [ 1232.925338][T16459] [ 1234.415086][T16344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1234.486554][T16344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1234.490971][T16344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1234.495140][T16344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1234.497952][T16344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1235.021831][T14489] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1235.121438][ T30] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1235.199457][T14489] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1235.202834][T14489] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.202884][T14489] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1235.202924][T14489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.253834][ T30] usb 1-1: device descriptor read/64, error -71 [ 1235.487176][T14489] ttusb_dec_send_command: result bulk message failed: error -22 [ 1235.487402][T14489] ttusb-dec 6-1:1.0: probe with driver ttusb-dec failed with error -22 [ 1235.501455][T14489] usb 6-1: USB disconnect, device number 72 [ 1235.542576][ T30] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1235.681366][ T30] usb 1-1: device descriptor read/64, error -71 [ 1235.794902][ T30] usb usb1-port1: attempt power cycle [ 1235.907374][T16101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.038593][T16101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.061043][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.076667][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.122915][T10337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.123057][T10337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.171000][ T30] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1236.192149][ T30] usb 1-1: device descriptor read/8, error -71 [ 1236.358654][T16469] rxe_eth0 speed is unknown, defaulting to 1000 [ 1236.472184][ T30] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1236.502976][ T30] usb 1-1: device descriptor read/8, error -71 [ 1236.551498][T12861] Bluetooth: hci3: command tx timeout [ 1236.622947][ T30] usb usb1-port1: unable to enumerate USB device [ 1236.798629][T16498] bond0: option arp_interval: invalid value () [ 1236.798655][T16498] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1236.911945][ T5599] corsair-cpro 0003:1B1C:0C10.000A: unbalanced collection at end of report description [ 1236.913029][ T5599] corsair-cpro 0003:1B1C:0C10.000A: probe with driver corsair-cpro failed with error -22 [ 1237.733337][T16513] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2368'. [ 1238.417668][T16521] FAULT_INJECTION: forcing a failure. [ 1238.417668][T16521] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.417708][T16521] CPU: 0 UID: 0 PID: 16521 Comm: syz.5.2370 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1238.417735][T16521] Tainted: [L]=SOFTLOCKUP [ 1238.417742][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1238.417754][T16521] Call Trace: [ 1238.417763][T16521] [ 1238.417773][T16521] dump_stack_lvl+0xe8/0x150 [ 1238.417808][T16521] should_fail_ex+0x46b/0x600 [ 1238.417852][T16521] should_failslab+0xa8/0x100 [ 1238.417881][T16521] ? do_getname_kernel+0x54/0x230 [ 1238.417901][T16521] kmem_cache_alloc_noprof+0x99/0x680 [ 1238.417928][T16521] ? do_getname_kernel+0x54/0x230 [ 1238.417953][T16521] do_getname_kernel+0x54/0x230 [ 1238.417970][T16521] ? kern_path+0x1b/0x150 [ 1238.417993][T16521] kern_path+0x25/0x150 [ 1238.418017][T16521] bdev_file_open_by_path+0xd5/0x4a0 [ 1238.418039][T16521] ? lock_acquire+0x115/0x350 [ 1238.418063][T16521] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 1238.418098][T16521] btrfs_scan_one_device+0xa8/0x680 [ 1238.418120][T16521] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1238.418149][T16521] ? mutex_lock_nested+0x14d/0x1d0 [ 1238.418177][T16521] btrfs_get_tree+0x4ec/0x19f0 [ 1238.418210][T16521] ? rcu_is_watching+0x16/0xb0 [ 1238.418236][T16521] ? cap_capable+0x123/0x460 [ 1238.418272][T16521] vfs_get_tree+0x92/0x2a0 [ 1238.418299][T16521] do_new_mount+0x325/0xb00 [ 1238.418318][T16521] ? cap_capable+0x123/0x460 [ 1238.418348][T16521] ? __pfx_do_new_mount+0x10/0x10 [ 1238.418371][T16521] ? ns_capable+0x84/0xe0 [ 1238.418396][T16521] ? path_mount+0x647/0x1050 [ 1238.418420][T16521] ? user_path_at+0xd4/0x160 [ 1238.418444][T16521] __se_sys_mount+0x31d/0x420 [ 1238.418479][T16521] ? __pfx___se_sys_mount+0x10/0x10 [ 1238.418507][T16521] ? __x64_sys_mount+0x20/0xc0 [ 1238.418531][T16521] do_syscall_64+0x166/0x520 [ 1238.418559][T16521] ? trace_irq_disable+0x3b/0x140 [ 1238.418582][T16521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.418603][T16521] ? clear_bhb_loop+0x70/0xc0 [ 1238.418626][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.418647][T16521] RIP: 0033:0x7f6f172ef559 [ 1238.418665][T16521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.418682][T16521] RSP: 002b:00007f6f15546028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1238.418704][T16521] RAX: ffffffffffffffda RBX: 00007f6f17575fa0 RCX: 00007f6f172ef559 [ 1238.418719][T16521] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000140 [ 1238.418733][T16521] RBP: 00007f6f17386b20 R08: 0000000000000000 R09: 0000000000000000 [ 1238.418746][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1238.418758][T16521] R13: 00007f6f17576038 R14: 00007f6f17575fa0 R15: 00007ffc4888c378 [ 1238.418792][T16521] [ 1238.641584][T12861] Bluetooth: hci3: command tx timeout [ 1238.680765][T16525] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2369'. [ 1238.730880][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.730948][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.084097][T16469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.084375][T16469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.084535][T16469] bridge_slave_0: entered allmulticast mode [ 1241.087141][T16469] bridge_slave_0: entered promiscuous mode [ 1241.096543][T16469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.096742][T16469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.096911][T16469] bridge_slave_1: entered allmulticast mode [ 1241.099386][T16469] bridge_slave_1: entered promiscuous mode [ 1241.158103][T16469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.166393][T16469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.208291][T16469] team0: Port device team_slave_0 added [ 1241.212941][T16469] team0: Port device team_slave_1 added [ 1241.231147][T12861] Bluetooth: hci3: command tx timeout [ 1241.293143][T16469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.293159][T16469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.293183][T16469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.295715][T16469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.295729][T16469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.295762][T16469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.457072][T16469] hsr_slave_0: entered promiscuous mode [ 1241.471766][T16469] hsr_slave_1: entered promiscuous mode [ 1241.476739][T16469] debugfs: 'hsr0' already exists in 'hsr' [ 1241.476762][T16469] Cannot create hsr debugfs directory [ 1243.271396][T12861] Bluetooth: hci3: command tx timeout [ 1244.274796][T16344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1244.322510][T16344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1244.330765][T16344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1244.382968][T16563] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2378'. [ 1244.387718][T16344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1244.424018][T16344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1246.456492][ T30] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1246.591341][ T30] usb 6-1: device descriptor read/64, error -71 [ 1246.721695][T12861] Bluetooth: hci1: command tx timeout [ 1246.843697][ T30] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1247.721846][ T9008] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1247.782882][ T30] usb 6-1: device descriptor read/64, error -71 [ 1248.806567][T12861] Bluetooth: hci1: command tx timeout [ 1248.818892][ T30] usb usb6-port1: attempt power cycle [ 1248.838831][ T9008] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1248.862820][ T9008] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1248.862837][ T9008] usb 5-1: Product: syz [ 1248.862845][ T9008] usb 5-1: Manufacturer: syz [ 1248.862853][ T9008] usb 5-1: SerialNumber: syz [ 1248.947657][ T9008] usb 5-1: config 0 descriptor?? [ 1248.965137][ T9008] ch341 5-1:0.0: ch341-uart converter detected [ 1249.407092][ T9008] usb 5-1: failed to receive control message: -71 [ 1249.407151][ T9008] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1249.431083][ T9008] usb 5-1: USB disconnect, device number 66 [ 1249.443863][ T9008] ch341 5-1:0.0: device disconnected [ 1249.558990][T16613] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2386'. [ 1249.799684][T16561] rxe_eth0 speed is unknown, defaulting to 1000 [ 1250.873046][T12861] Bluetooth: hci1: command tx timeout [ 1252.951377][T16344] Bluetooth: hci1: command tx timeout [ 1253.931382][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 1253.931410][ T36] audit: type=1326 audit(1792694990.622:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16633 comm="syz.5.2391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f172ef559 code=0x0 [ 1253.984452][ T126] bridge_slave_1: left allmulticast mode [ 1253.984598][ T126] bridge_slave_1: left promiscuous mode [ 1254.453592][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.643117][ T126] bridge_slave_0: left allmulticast mode [ 1256.643155][ T126] bridge_slave_0: left promiscuous mode [ 1256.644487][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.073093][T16650] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2388'. [ 1257.754572][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.327342][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.403945][ T126] bond0 (unregistering): Released all slaves [ 1259.458314][ T5245] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1261.061436][ T5932] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1261.216482][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 1261.222586][ T5932] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1261.234448][ T5932] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1261.234474][ T5932] usb 5-1: config 0 has no interface number 0 [ 1261.234519][ T5932] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1261.270406][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.270430][ T5932] usb 5-1: Product: syz [ 1261.270444][ T5932] usb 5-1: Manufacturer: syz [ 1261.270457][ T5932] usb 5-1: SerialNumber: syz [ 1261.334762][ T5932] usb 5-1: config 0 descriptor?? [ 1261.691417][ T9011] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1261.755676][ T5932] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1261.755728][ T5932] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1261.755745][ T5932] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1261.755831][ T5932] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1261.860492][ T5932] usb 5-1: USB disconnect, device number 67 [ 1261.876656][ T9011] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1261.896387][ T9011] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1261.896403][ T9011] usb 6-1: Product: syz [ 1261.896410][ T9011] usb 6-1: Manufacturer: syz [ 1261.896418][ T9011] usb 6-1: SerialNumber: syz [ 1261.961137][ T9011] usb 6-1: config 0 descriptor?? [ 1261.988198][ T9011] ch341 6-1:0.0: ch341-uart converter detected [ 1262.186386][ T9011] usb 6-1: failed to receive control message: -71 [ 1262.186445][ T9011] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1262.238456][ T9011] usb 6-1: USB disconnect, device number 76 [ 1262.260712][ T9011] ch341 6-1:0.0: device disconnected [ 1262.381425][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1262.492511][ T126] hsr_slave_0: left promiscuous mode [ 1262.534267][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1262.534869][ T126] hsr_slave_1: left promiscuous mode [ 1262.535277][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1262.537104][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1262.537127][ T10] usb 1-1: config 0 has no interface number 0 [ 1262.537172][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1262.540556][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.540580][ T10] usb 1-1: Product: syz [ 1262.540595][ T10] usb 1-1: Manufacturer: syz [ 1262.540609][ T10] usb 1-1: SerialNumber: syz [ 1262.578777][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.627576][ T10] usb 1-1: config 0 descriptor?? [ 1262.644423][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.957565][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1262.957618][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1262.957635][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1262.957723][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1262.996650][ T10] usb 1-1: USB disconnect, device number 96 [ 1263.078144][T16710] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2399'. [ 1264.612826][ T126] team0 (unregistering): Port device team_slave_1 removed [ 1264.672297][ T5599] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1264.781070][ T126] team0 (unregistering): Port device team_slave_0 removed [ 1264.804390][T16722] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2402'. [ 1264.852784][ T5599] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1264.854425][ T5599] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1264.854451][ T5599] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1264.854474][ T5599] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1264.858882][ T5599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1264.858907][ T5599] usb 6-1: Product: syz [ 1264.858922][ T5599] usb 6-1: Manufacturer: syz [ 1264.858936][ T5599] usb 6-1: SerialNumber: syz [ 1265.183377][ T5599] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1265.369528][ T5245] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1266.825568][ T10] usb 6-1: USB disconnect, device number 77 [ 1266.885062][ T10] usblp0: removed [ 1266.978459][T16561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.978672][T16561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.978834][T16561] bridge_slave_0: entered allmulticast mode [ 1267.005342][T16561] bridge_slave_0: entered promiscuous mode [ 1267.022490][T16561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.022729][T16561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.023908][T16561] bridge_slave_1: entered allmulticast mode [ 1267.029151][T16561] bridge_slave_1: entered promiscuous mode [ 1267.222149][T16561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.231127][T16561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.991065][T16561] team0: Port device team_slave_0 added [ 1268.143975][T16561] team0: Port device team_slave_1 added [ 1268.191477][ T10] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1268.268861][T16561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.268940][T16561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.268966][T16561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.322514][T16561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.322530][T16561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.322555][T16561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.352379][ T10] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1268.356312][ T10] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1268.356335][ T10] usb 6-1: Product: syz [ 1268.356348][ T10] usb 6-1: Manufacturer: syz [ 1268.356362][ T10] usb 6-1: SerialNumber: syz [ 1268.376546][ T10] usb 6-1: config 0 descriptor?? [ 1268.396891][ T10] ch341 6-1:0.0: ch341-uart converter detected [ 1269.516073][ T10] usb 6-1: failed to receive control message: -71 [ 1269.516128][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1269.519947][ T10] usb 6-1: USB disconnect, device number 78 [ 1269.540089][T16561] hsr_slave_0: entered promiscuous mode [ 1269.545363][ T10] ch341 6-1:0.0: device disconnected [ 1269.548845][T16561] hsr_slave_1: entered promiscuous mode [ 1270.109686][T16768] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2411'. [ 1272.559506][T16805] FAULT_INJECTION: forcing a failure. [ 1272.559506][T16805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1272.559542][T16805] CPU: 0 UID: 0 PID: 16805 Comm: syz.4.2418 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1272.559568][T16805] Tainted: [L]=SOFTLOCKUP [ 1272.559576][T16805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1272.559587][T16805] Call Trace: [ 1272.559595][T16805] [ 1272.559603][T16805] dump_stack_lvl+0xe8/0x150 [ 1272.559643][T16805] should_fail_ex+0x46b/0x600 [ 1272.559670][T16805] _copy_from_user+0x2d/0xb0 [ 1272.559692][T16805] __sys_bpf+0x2e7/0xd90 [ 1272.559722][T16805] ? vfs_write+0x9e0/0xbb0 [ 1272.559743][T16805] ? __pfx___sys_bpf+0x10/0x10 [ 1272.559794][T16805] ? ksys_write+0x202/0x270 [ 1272.559817][T16805] ? __pfx_ksys_write+0x10/0x10 [ 1272.559839][T16805] __x64_sys_bpf+0xba/0xd0 [ 1272.559861][T16805] do_syscall_64+0x166/0x520 [ 1272.559887][T16805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.559905][T16805] ? clear_bhb_loop+0x70/0xc0 [ 1272.559924][T16805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.559941][T16805] RIP: 0033:0x7f141e59f559 [ 1272.559959][T16805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.559972][T16805] RSP: 002b:00007f141c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1272.559990][T16805] RAX: ffffffffffffffda RBX: 00007f141e825fa0 RCX: 00007f141e59f559 [ 1272.560004][T16805] RDX: 0000000000000020 RSI: 0000200000002080 RDI: 0000000000000009 [ 1272.560016][T16805] RBP: 00007f141c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.560027][T16805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.560039][T16805] R13: 00007f141e826038 R14: 00007f141e825fa0 R15: 00007fffab310008 [ 1272.560068][T16805] [ 1274.478021][T16818] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2420'. [ 1276.471405][ T5599] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1278.218762][ T5599] usb 5-1: device descriptor read/all, error -71 [ 1278.386355][T16469] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1278.432380][T16469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1280.245773][T16469] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1280.325875][T16469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1280.420424][T16469] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1280.576096][T16469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1282.405556][T16469] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1282.454636][T16469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1282.695481][T16872] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2429'. [ 1285.701319][ T9008] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1285.858349][ T9008] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1285.863863][ T9008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.863887][ T9008] usb 5-1: Product: syz [ 1285.863901][ T9008] usb 5-1: Manufacturer: syz [ 1285.863914][ T9008] usb 5-1: SerialNumber: syz [ 1286.155067][T16469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.186364][ T9008] rtl8150 5-1:1.0: couldn't reset the device [ 1286.186711][ T9008] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1286.222140][T16469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.315702][ T9008] usb 5-1: USB disconnect, device number 70 [ 1286.339157][T10332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.339275][T10332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.404402][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.404620][T10332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.867008][ T9008] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1287.023814][ T9008] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1287.048821][ T9008] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1287.048848][ T9008] usb 6-1: Product: syz [ 1287.048863][ T9008] usb 6-1: Manufacturer: syz [ 1287.048877][ T9008] usb 6-1: SerialNumber: syz [ 1287.081540][ T9008] usb 6-1: config 0 descriptor?? [ 1287.105036][ T9008] ch341 6-1:0.0: ch341-uart converter detected [ 1287.286302][ T9008] usb 6-1: failed to receive control message: -71 [ 1287.286364][ T9008] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1287.313710][ T9008] usb 6-1: USB disconnect, device number 79 [ 1287.348306][ T9008] ch341 6-1:0.0: device disconnected [ 1287.471994][ T126] bridge_slave_1: left allmulticast mode [ 1287.472030][ T126] bridge_slave_1: left promiscuous mode [ 1287.472401][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.645470][ T126] bridge_slave_0: left allmulticast mode [ 1287.645506][ T126] bridge_slave_0: left promiscuous mode [ 1287.645748][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.884029][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.988926][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1293.027473][ T126] bond0 (unregistering): Released all slaves [ 1293.413106][T16934] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2438'. [ 1295.808156][ T10] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1295.821172][T12861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1295.944977][T12861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1295.962822][T12861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1295.968054][T12861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1295.971379][T12861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1295.986907][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1296.002988][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.003012][ T10] usb 1-1: Product: syz [ 1296.003026][ T10] usb 1-1: Manufacturer: syz [ 1296.003038][ T10] usb 1-1: SerialNumber: syz [ 1297.748257][ T10] rtl8150 1-1:1.0: couldn't reset the device [ 1297.748470][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1297.803387][ T10] usb 1-1: USB disconnect, device number 97 [ 1298.232055][T16344] Bluetooth: hci4: command tx timeout [ 1300.172053][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.172121][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.312734][T16344] Bluetooth: hci4: command tx timeout [ 1300.922408][ T126] hsr_slave_0: left promiscuous mode [ 1300.965823][ T126] hsr_slave_1: left promiscuous mode [ 1300.969056][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.021114][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.408562][T16983] comedi comedi3: comedi_config --init_data is deprecated [ 1301.722390][ T126] team0 (unregistering): Port device team_slave_1 removed [ 1301.805013][ T126] team0 (unregistering): Port device team_slave_0 removed [ 1301.963658][T16983] netlink: 'syz.5.2445': attribute type 10 has an invalid length. [ 1302.054272][ T5245] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1303.219315][T16344] Bluetooth: hci4: command tx timeout [ 1305.285345][T16344] Bluetooth: hci4: command tx timeout [ 1306.622473][T17005] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2451'. [ 1307.069474][T12861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1307.127018][T12861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1307.145889][T17013] FAULT_INJECTION: forcing a failure. [ 1307.145889][T17013] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.145926][T17013] CPU: 0 UID: 0 PID: 17013 Comm: syz.4.2449 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1307.145953][T17013] Tainted: [L]=SOFTLOCKUP [ 1307.145961][T17013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1307.145973][T17013] Call Trace: [ 1307.145982][T17013] [ 1307.145990][T17013] dump_stack_lvl+0xe8/0x150 [ 1307.146026][T17013] should_fail_ex+0x46b/0x600 [ 1307.146055][T17013] should_failslab+0xa8/0x100 [ 1307.146084][T17013] ? vm_area_dup+0x28/0x750 [ 1307.146112][T17013] kmem_cache_alloc_noprof+0x99/0x680 [ 1307.146138][T17013] ? vm_area_dup+0x28/0x750 [ 1307.146172][T17013] vm_area_dup+0x28/0x750 [ 1307.146199][T17013] ? dup_mmap+0x70e/0x1d80 [ 1307.146227][T17013] dup_mmap+0x8d6/0x1d80 [ 1307.146272][T17013] ? __pfx_dup_mmap+0x10/0x10 [ 1307.146296][T17013] ? reacquire_held_locks+0x117/0x1a0 [ 1307.146321][T17013] ? rt_spin_lock+0x1e2/0x400 [ 1307.146360][T17013] ? lock_acquire+0x115/0x350 [ 1307.146402][T17013] copy_mm+0x115/0x470 [ 1307.146429][T17013] copy_process+0x1ed1/0x44c0 [ 1307.146468][T17013] ? copy_process+0xd17/0x44c0 [ 1307.146511][T17013] ? __pfx_copy_process+0x10/0x10 [ 1307.146539][T17013] ? futex_wake+0x51e/0x600 [ 1307.146568][T17013] kernel_clone+0x2d2/0x8d0 [ 1307.146595][T17013] ? __pfx_kernel_clone+0x10/0x10 [ 1307.146617][T17013] ? security_file_alloc+0x34/0x310 [ 1307.146656][T17013] ? do_futex+0x458/0x4e0 [ 1307.146690][T17013] __x64_sys_clone+0x1b6/0x230 [ 1307.146718][T17013] ? __pfx___x64_sys_clone+0x10/0x10 [ 1307.146771][T17013] ? rcu_is_watching+0x16/0xb0 [ 1307.146812][T17013] do_syscall_64+0x166/0x520 [ 1307.146841][T17013] ? trace_irq_disable+0x3b/0x140 [ 1307.146865][T17013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.146885][T17013] ? clear_bhb_loop+0x70/0xc0 [ 1307.146910][T17013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.146930][T17013] RIP: 0033:0x7f141e59f559 [ 1307.146949][T17013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.146967][T17013] RSP: 002b:00007f141c7f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1307.146989][T17013] RAX: ffffffffffffffda RBX: 00007f141e825fa0 RCX: 00007f141e59f559 [ 1307.147004][T17013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1307.147017][T17013] RBP: 00007f141e636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1307.147030][T17013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1307.147043][T17013] R13: 00007f141e826038 R14: 00007f141e825fa0 R15: 00007fffab310008 [ 1307.147077][T17013] [ 1307.257336][T12861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1307.281615][T12861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1307.287043][T12861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1309.098487][T16944] rxe_eth0 speed is unknown, defaulting to 1000 [ 1309.194263][T17021] FAULT_INJECTION: forcing a failure. [ 1309.194263][T17021] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.194302][T17021] CPU: 1 UID: 0 PID: 17021 Comm: syz.4.2452 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1309.194328][T17021] Tainted: [L]=SOFTLOCKUP [ 1309.194336][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1309.194348][T17021] Call Trace: [ 1309.194357][T17021] [ 1309.194367][T17021] dump_stack_lvl+0xe8/0x150 [ 1309.194400][T17021] should_fail_ex+0x46b/0x600 [ 1309.194425][T17021] ? sock_alloc_inode+0x2c/0x1a0 [ 1309.194449][T17021] should_failslab+0xa8/0x100 [ 1309.194481][T17021] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 1309.194509][T17021] ? sock_alloc_inode+0x2c/0x1a0 [ 1309.194532][T17021] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1309.194558][T17021] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1309.194579][T17021] sock_alloc_inode+0x2c/0x1a0 [ 1309.194601][T17021] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1309.194630][T17021] alloc_inode+0x6a/0x1b0 [ 1309.194652][T17021] __sock_create+0x127/0xac0 [ 1309.194684][T17021] __sys_socket+0xd6/0x1b0 [ 1309.194711][T17021] __x64_sys_socket+0x7a/0x90 [ 1309.194735][T17021] do_syscall_64+0x166/0x520 [ 1309.194765][T17021] ? trace_irq_disable+0x3b/0x140 [ 1309.194787][T17021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.194807][T17021] ? clear_bhb_loop+0x70/0xc0 [ 1309.194832][T17021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.194851][T17021] RIP: 0033:0x7f141e59f559 [ 1309.194869][T17021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1309.194886][T17021] RSP: 002b:00007f141c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1309.194908][T17021] RAX: ffffffffffffffda RBX: 00007f141e825fa0 RCX: 00007f141e59f559 [ 1309.194923][T17021] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 0000000000000002 [ 1309.194936][T17021] RBP: 00007f141e636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1309.194948][T17021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1309.194960][T17021] R13: 00007f141e826038 R14: 00007f141e825fa0 R15: 00007fffab310008 [ 1309.194992][T17021] [ 1309.195071][T17021] socket: no more sockets [ 1309.544628][T16344] Bluetooth: hci3: command tx timeout [ 1311.597111][T16344] Bluetooth: hci3: command tx timeout [ 1312.037085][T17031] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input47 [ 1314.762108][T16344] Bluetooth: hci3: command tx timeout [ 1314.928894][T17009] rxe_eth0 speed is unknown, defaulting to 1000 [ 1314.991361][ T5599] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1315.191969][ T5599] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1315.196554][ T5599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.196578][ T5599] usb 1-1: Product: syz [ 1315.196592][ T5599] usb 1-1: Manufacturer: syz [ 1315.196607][ T5599] usb 1-1: SerialNumber: syz [ 1316.800439][T16344] Bluetooth: hci3: command tx timeout [ 1316.914590][ T5599] rtl8150 1-1:1.0: couldn't reset the device [ 1316.914952][ T5599] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1317.070038][ T5599] usb 1-1: USB disconnect, device number 98 [ 1317.531172][T17071] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2461'. [ 1323.750518][T17095] comedi comedi3: comedi_config --init_data is deprecated [ 1323.900139][T17095] netlink: 'syz.4.2467': attribute type 10 has an invalid length. [ 1326.025976][T16944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.026099][T16944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.026616][T16944] bridge_slave_0: entered allmulticast mode [ 1326.042210][T16944] bridge_slave_0: entered promiscuous mode [ 1326.093391][T16944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.093523][T16944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.094125][T16944] bridge_slave_1: entered allmulticast mode [ 1326.100077][T16944] bridge_slave_1: entered promiscuous mode [ 1326.353702][T17123] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2470'. [ 1326.976103][T16944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.986052][T16944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.246269][T16944] team0: Port device team_slave_0 added [ 1327.247265][T17130] Option 'dnserror' to dns_resolver key: bad/missing value [ 1327.264465][ T36] audit: type=1326 audit(1792695063.962:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.264512][ T36] audit: type=1326 audit(1792695063.962:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.264969][ T36] audit: type=1326 audit(1792695063.962:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.265265][ T36] audit: type=1326 audit(1792695063.962:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.267725][ T36] audit: type=1326 audit(1792695063.962:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.274898][ T36] audit: type=1326 audit(1792695063.972:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.275153][ T36] audit: type=1326 audit(1792695063.972:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.275266][ T36] audit: type=1326 audit(1792695063.972:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.276137][ T36] audit: type=1326 audit(1792695063.972:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.291651][ T36] audit: type=1326 audit(1792695064.988:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17129 comm="syz.5.2472" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f172ef559 code=0x7ffc0000 [ 1327.562894][T16944] team0: Port device team_slave_1 added [ 1327.942501][ T9011] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1328.838575][T16944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.838594][T16944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.838620][T16944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.922630][ T9011] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1328.929574][ T9011] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1328.929598][ T9011] usb 1-1: Product: syz [ 1328.929612][ T9011] usb 1-1: Manufacturer: syz [ 1328.929625][ T9011] usb 1-1: SerialNumber: syz [ 1328.943512][ T9011] usb 1-1: config 0 descriptor?? [ 1328.967640][ T126] bridge_slave_1: left allmulticast mode [ 1328.967671][ T126] bridge_slave_1: left promiscuous mode [ 1328.967907][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.970453][ T9011] ch341 1-1:0.0: ch341-uart converter detected [ 1329.115121][ T126] bridge_slave_0: left allmulticast mode [ 1329.115157][ T126] bridge_slave_0: left promiscuous mode [ 1329.115966][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.172516][ T9011] usb 1-1: failed to receive control message: -71 [ 1329.172576][ T9011] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1329.189072][ T9011] usb 1-1: USB disconnect, device number 99 [ 1329.202617][ T9011] ch341 1-1:0.0: device disconnected [ 1330.596366][ T10] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1330.741380][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1330.742179][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1330.743316][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1330.743340][ T10] usb 6-1: config 0 has no interface number 0 [ 1330.743377][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1330.745791][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.745814][ T10] usb 6-1: Product: syz [ 1330.745828][ T10] usb 6-1: Manufacturer: syz [ 1330.745842][ T10] usb 6-1: SerialNumber: syz [ 1330.749882][ T10] usb 6-1: config 0 descriptor?? [ 1332.560993][ T10] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1332.561054][ T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1332.561070][ T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1332.561154][ T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1332.626904][ T10] usb 6-1: USB disconnect, device number 80 [ 1332.962762][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.063170][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.108160][T17165] FAULT_INJECTION: forcing a failure. [ 1333.108160][T17165] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.108198][T17165] CPU: 1 UID: 0 PID: 17165 Comm: syz.5.2480 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1333.108224][T17165] Tainted: [L]=SOFTLOCKUP [ 1333.108232][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1333.108244][T17165] Call Trace: [ 1333.108253][T17165] [ 1333.108262][T17165] dump_stack_lvl+0xe8/0x150 [ 1333.108297][T17165] should_fail_ex+0x46b/0x600 [ 1333.108325][T17165] should_failslab+0xa8/0x100 [ 1333.108358][T17165] __kmalloc_cache_node_noprof+0xa7/0x670 [ 1333.108387][T17165] ? kasan_save_track+0x4f/0x80 [ 1333.108411][T17165] ? __get_vm_area_node+0x155/0x2f0 [ 1333.108432][T17165] ? __get_vm_area_node+0x155/0x2f0 [ 1333.108455][T17165] ? vb2_core_reqbufs+0xc3f/0x1470 [ 1333.108480][T17165] __get_vm_area_node+0x155/0x2f0 [ 1333.108518][T17165] __vmalloc_node_range_noprof+0x343/0x1540 [ 1333.108544][T17165] ? vb2_vmalloc_alloc+0xef/0x360 [ 1333.108595][T17165] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1333.108621][T17165] ? __kasan_kmalloc+0x93/0xb0 [ 1333.108648][T17165] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1333.108677][T17165] vmalloc_user_noprof+0xad/0xe0 [ 1333.108701][T17165] ? vb2_vmalloc_alloc+0xef/0x360 [ 1333.108724][T17165] vb2_vmalloc_alloc+0xef/0x360 [ 1333.108748][T17165] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1333.108771][T17165] __vb2_queue_alloc+0xa0b/0x1660 [ 1333.108818][T17165] vb2_core_reqbufs+0xc3f/0x1470 [ 1333.108855][T17165] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1333.108880][T17165] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1333.108907][T17165] ? __vb2_init_fileio+0x1e2/0x1040 [ 1333.108936][T17165] __vb2_init_fileio+0x310/0x1040 [ 1333.108960][T17165] ? rt_spin_unlock+0x159/0x200 [ 1333.108993][T17165] vb2_core_poll+0x44b/0x7b0 [ 1333.109014][T17165] ? vb2_fop_poll+0xce/0x310 [ 1333.109040][T17165] vb2_fop_poll+0x19c/0x310 [ 1333.109062][T17165] ? __fget_files+0x3a8/0x420 [ 1333.109086][T17165] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1333.109109][T17165] v4l2_poll+0x14a/0x2c0 [ 1333.109130][T17165] ? __pfx_v4l2_poll+0x10/0x10 [ 1333.109150][T17165] do_sys_poll+0x940/0xfb0 [ 1333.109176][T17165] ? do_sys_poll+0x461/0xfb0 [ 1333.109202][T17165] ? __pfx_do_sys_poll+0x10/0x10 [ 1333.109224][T17165] ? lock_acquire+0x115/0x350 [ 1333.109247][T17165] ? futex_unqueue+0x22/0x240 [ 1333.109269][T17165] ? __pfx___pollwait+0x10/0x10 [ 1333.109301][T17165] ? __pfx_pollwake+0x10/0x10 [ 1333.109375][T17165] ? futex_wait+0x2a2/0x390 [ 1333.109400][T17165] ? __pfx_futex_wait+0x10/0x10 [ 1333.109448][T17165] ? set_user_sigmask+0xc6/0x230 [ 1333.109471][T17165] ? __pfx_set_user_sigmask+0x10/0x10 [ 1333.109499][T17165] ? kmem_cache_free+0x187/0x6d0 [ 1333.109526][T17165] ? do_sys_openat2+0x18d/0x200 [ 1333.109563][T17165] __se_sys_ppoll+0x209/0x2b0 [ 1333.109597][T17165] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1333.109635][T17165] ? __x64_sys_ppoll+0x20/0xc0 [ 1333.109665][T17165] do_syscall_64+0x166/0x520 [ 1333.109691][T17165] ? trace_irq_disable+0x3b/0x140 [ 1333.109713][T17165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.109733][T17165] ? clear_bhb_loop+0x70/0xc0 [ 1333.109757][T17165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.109776][T17165] RIP: 0033:0x7f6f172ef559 [ 1333.109795][T17165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.109811][T17165] RSP: 002b:00007f6f15525028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1333.109833][T17165] RAX: ffffffffffffffda RBX: 00007f6f17576090 RCX: 00007f6f172ef559 [ 1333.109848][T17165] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000680 [ 1333.109861][T17165] RBP: 00007f6f17386b20 R08: 0000000000000000 R09: 0000000000000000 [ 1333.109873][T17165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1333.109885][T17165] R13: 00007f6f17576128 R14: 00007f6f17576090 R15: 00007ffc4888c378 [ 1333.109919][T17165] [ 1333.139199][ T126] bond0 (unregistering): Released all slaves [ 1333.158265][T17165] syz.5.2480: vmalloc error: size 39260160, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1333.158434][T17165] CPU: 1 UID: 0 PID: 17165 Comm: syz.5.2480 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1333.158469][T17165] Tainted: [L]=SOFTLOCKUP [ 1333.158477][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1333.158497][T17165] Call Trace: [ 1333.158505][T17165] [ 1333.158515][T17165] dump_stack_lvl+0xe8/0x150 [ 1333.158548][T17165] warn_alloc+0x24d/0x270 [ 1333.158573][T17165] ? __kasan_kmalloc+0x22/0xb0 [ 1333.158602][T17165] ? __pfx_warn_alloc+0x10/0x10 [ 1333.158624][T17165] ? kasan_save_track+0x4f/0x80 [ 1333.158648][T17165] ? __get_vm_area_node+0x155/0x2f0 [ 1333.158670][T17165] ? vb2_core_reqbufs+0xc3f/0x1470 [ 1333.158693][T17165] ? __get_vm_area_node+0x2a9/0x2f0 [ 1333.158723][T17165] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1333.158775][T17165] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1333.158799][T17165] ? __kasan_kmalloc+0x93/0xb0 [ 1333.158825][T17165] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1333.158854][T17165] vmalloc_user_noprof+0xad/0xe0 [ 1333.158879][T17165] ? vb2_vmalloc_alloc+0xef/0x360 [ 1333.158901][T17165] vb2_vmalloc_alloc+0xef/0x360 [ 1333.158922][T17165] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1333.158944][T17165] __vb2_queue_alloc+0xa0b/0x1660 [ 1333.158988][T17165] vb2_core_reqbufs+0xc3f/0x1470 [ 1333.159022][T17165] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1333.159047][T17165] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1333.159072][T17165] ? __vb2_init_fileio+0x1e2/0x1040 [ 1333.159099][T17165] __vb2_init_fileio+0x310/0x1040 [ 1333.159122][T17165] ? rt_spin_unlock+0x159/0x200 [ 1333.159154][T17165] vb2_core_poll+0x44b/0x7b0 [ 1333.159174][T17165] ? vb2_fop_poll+0xce/0x310 [ 1333.159197][T17165] vb2_fop_poll+0x19c/0x310 [ 1333.159217][T17165] ? __fget_files+0x3a8/0x420 [ 1333.159241][T17165] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1333.159263][T17165] v4l2_poll+0x14a/0x2c0 [ 1333.159282][T17165] ? __pfx_v4l2_poll+0x10/0x10 [ 1333.159303][T17165] do_sys_poll+0x940/0xfb0 [ 1333.159328][T17165] ? do_sys_poll+0x461/0xfb0 [ 1333.159353][T17165] ? __pfx_do_sys_poll+0x10/0x10 [ 1333.159375][T17165] ? lock_acquire+0x115/0x350 [ 1333.159397][T17165] ? futex_unqueue+0x22/0x240 [ 1333.159419][T17165] ? __pfx___pollwait+0x10/0x10 [ 1333.159450][T17165] ? __pfx_pollwake+0x10/0x10 [ 1333.159528][T17165] ? futex_wait+0x2a2/0x390 [ 1333.159553][T17165] ? __pfx_futex_wait+0x10/0x10 [ 1333.159599][T17165] ? set_user_sigmask+0xc6/0x230 [ 1333.159623][T17165] ? __pfx_set_user_sigmask+0x10/0x10 [ 1333.159644][T17165] ? kmem_cache_free+0x187/0x6d0 [ 1333.159670][T17165] ? do_sys_openat2+0x18d/0x200 [ 1333.159704][T17165] __se_sys_ppoll+0x209/0x2b0 [ 1333.159736][T17165] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1333.159773][T17165] ? __x64_sys_ppoll+0x20/0xc0 [ 1333.159803][T17165] do_syscall_64+0x166/0x520 [ 1333.159828][T17165] ? trace_irq_disable+0x3b/0x140 [ 1333.159849][T17165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.159869][T17165] ? clear_bhb_loop+0x70/0xc0 [ 1333.159892][T17165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.159910][T17165] RIP: 0033:0x7f6f172ef559 [ 1333.159927][T17165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.159943][T17165] RSP: 002b:00007f6f15525028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1333.159963][T17165] RAX: ffffffffffffffda RBX: 00007f6f17576090 RCX: 00007f6f172ef559 [ 1333.159977][T17165] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000680 [ 1333.159990][T17165] RBP: 00007f6f17386b20 R08: 0000000000000000 R09: 0000000000000000 [ 1333.160002][T17165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1333.160013][T17165] R13: 00007f6f17576128 R14: 00007f6f17576090 R15: 00007ffc4888c378 [ 1333.160044][T17165] [ 1333.240908][T17165] Mem-Info: [ 1333.240923][T17165] active_anon:3073 inactive_anon:31108 isolated_anon:0 [ 1333.240923][T17165] active_file:35899 inactive_file:36077 isolated_file:0 [ 1333.240923][T17165] unevictable:0 dirty:68 writeback:0 [ 1333.240923][T17165] slab_reclaimable:13888 slab_unreclaimable:109598 [ 1333.240923][T17165] mapped:32361 shmem:27509 pagetables:1973 [ 1333.240923][T17165] sec_pagetables:0 bounce:0 [ 1333.240923][T17165] kernel_misc_reclaimable:0 [ 1333.240923][T17165] free:1224593 free_pcp:17141 free_cma:0 [ 1333.240976][T17165] Node 0 active_anon:12292kB inactive_anon:124432kB active_file:143396kB inactive_file:144308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129444kB dirty:272kB writeback:0kB shmem:110036kB kernel_stack:14188kB pagetables:7704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1333.241023][T17165] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1333.241067][T17165] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1333.241122][T17165] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 1333.241156][T17165] Node 0 DMA32 free:949476kB boost:0kB min:3896kB low:6404kB high:8912kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12292kB inactive_anon:124432kB active_file:143396kB inactive_file:144308kB unevictable:0kB writepending:272kB zspages:0kB present:3129332kB managed:2540212kB mlocked:0kB bounce:0kB free_pcp:68556kB local_pcp:32500kB free_cma:0kB [ 1333.245504][T17165] lowmem_reserve[]: 0 0 1 1 1 [ 1333.245541][T17165] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1540kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1333.245598][T17165] lowmem_reserve[]: 0 0 0 0 0 [ 1333.245631][T17165] Node 1 Normal free:3933552kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1333.245686][T17165] lowmem_reserve[]: 0 0 0 0 0 [ 1333.245718][T17165] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1333.252938][T17165] Node 0 DMA32: 3135*4kB (UME) 1144*8kB (UME) 433*16kB (UME) 167*32kB (UME) 144*64kB (UME) 163*128kB (UM) 159*256kB (UM) 48*512kB (UM) 25*1024kB (UME) 8*2048kB (ME) 190*4096kB (UM) = 949548kB [ 1333.253099][T17165] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1333.253195][T17165] Node 1 Normal: 2*4kB (M) 5*8kB (UM) 6*16kB (UM) 7*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 958*4096kB (UM) = 3933552kB [ 1333.253360][T17165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1333.253377][T17165] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1333.253393][T17165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1333.253408][T17165] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1333.253424][T17165] 99481 total pagecache pages [ 1333.253432][T17165] 0 pages in swap cache [ 1333.253439][T17165] Free swap = 124996kB [ 1333.253446][T17165] Total swap = 124996kB [ 1333.253454][T17165] 2097051 pages RAM [ 1333.253461][T17165] 0 pages HighMem/MovableOnly [ 1333.253468][T17165] 429997 pages reserved [ 1333.253475][T17165] 0 pages cma reserved [ 1333.732372][T16944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.732389][T16944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.732414][T16944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.733456][T16944] hsr_slave_0: entered promiscuous mode [ 1336.734912][T16944] hsr_slave_1: entered promiscuous mode [ 1336.736145][T16944] debugfs: 'hsr0' already exists in 'hsr' [ 1336.736172][T16944] Cannot create hsr debugfs directory [ 1336.743884][T17009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.744010][T17009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.744178][T17009] bridge_slave_0: entered allmulticast mode [ 1336.762954][T17009] bridge_slave_0: entered promiscuous mode [ 1336.798341][T17009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.803027][T17009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.803229][T17009] bridge_slave_1: entered allmulticast mode [ 1336.826967][T17009] bridge_slave_1: entered promiscuous mode [ 1338.022911][T10332] rpcbind: server 127.0.0.1 not responding, timed out [ 1338.681360][T17151] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1339.724243][T17009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.773071][T17151] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1339.791676][T17151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.791701][T17151] usb 1-1: Product: syz [ 1339.791715][T17151] usb 1-1: Manufacturer: syz [ 1339.791729][T17151] usb 1-1: SerialNumber: syz [ 1339.999086][T17151] rtl8150 1-1:1.0: couldn't reset the device [ 1339.999508][T17151] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1340.028158][T17151] usb 1-1: USB disconnect, device number 100 [ 1340.047307][T17125] udevd[17125]: setting owner of /dev/bus/usb/001/100 to uid=0, gid=0 failed: No such file or directory [ 1340.091472][ T126] hsr_slave_0: left promiscuous mode [ 1340.132265][ T126] hsr_slave_1: left promiscuous mode [ 1340.134099][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.184055][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.244440][ T126] team0 (unregistering): Port device team_slave_1 removed [ 1342.342243][ T126] team0 (unregistering): Port device team_slave_0 removed [ 1342.985911][T17009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.031518][T14489] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1343.108148][ T5245] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1343.192502][T14489] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1343.200942][T14489] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1343.200968][T14489] usb 1-1: Product: syz [ 1343.200982][T14489] usb 1-1: Manufacturer: syz [ 1343.200996][T14489] usb 1-1: SerialNumber: syz [ 1343.223461][T14489] usb 1-1: config 0 descriptor?? [ 1343.281948][T14489] ch341 1-1:0.0: ch341-uart converter detected [ 1343.326728][T17009] team0: Port device team_slave_0 added [ 1343.381124][T17009] team0: Port device team_slave_1 added [ 1343.429839][T14489] usb 1-1: failed to receive control message: -71 [ 1343.429875][T14489] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1343.449692][T14489] usb 1-1: USB disconnect, device number 101 [ 1343.475890][T14489] ch341 1-1:0.0: device disconnected [ 1343.660370][T17221] IPv4: Oversized IP packet from 127.202.26.0 [ 1343.675324][T17009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.675334][T17009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.675348][T17009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.679033][T17009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.679047][T17009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.679073][T17009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.968825][T17009] hsr_slave_0: entered promiscuous mode [ 1343.969685][T17009] hsr_slave_1: entered promiscuous mode [ 1343.983908][T17009] debugfs: 'hsr0' already exists in 'hsr' [ 1343.983933][T17009] Cannot create hsr debugfs directory [ 1345.345585][ T5827] rpcbind: server 127.0.0.1 not responding, timed out [ 1345.516673][T17246] ./dev/sda1: Can't open blockdev [ 1346.702802][T17261] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2495'. [ 1347.983146][T17276] ./dev/sda1: Can't open blockdev [ 1348.085602][T17277] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2499'. [ 1348.672103][ T126] bridge_slave_1: left allmulticast mode [ 1348.672141][ T126] bridge_slave_1: left promiscuous mode [ 1348.672435][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.882469][ T126] bridge_slave_0: left allmulticast mode [ 1348.882493][ T126] bridge_slave_0: left promiscuous mode [ 1348.882666][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.897262][ T5712] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1350.070599][T17287] ./dev/sda1: Can't open blockdev [ 1350.076873][ T5712] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1350.096876][ T5712] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1350.096901][ T5712] usb 1-1: Product: syz [ 1350.096915][ T5712] usb 1-1: Manufacturer: syz [ 1350.096929][ T5712] usb 1-1: SerialNumber: syz [ 1350.103999][ T5712] usb 1-1: config 0 descriptor?? [ 1350.131021][ T5712] ch341 1-1:0.0: ch341-uart converter detected [ 1350.234973][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.331092][ T5712] usb 1-1: failed to receive control message: -71 [ 1350.331150][ T5712] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1350.344925][ T5712] usb 1-1: USB disconnect, device number 102 [ 1350.356313][ T5712] ch341 1-1:0.0: device disconnected [ 1350.374832][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.470362][ T126] bond0 (unregistering): Released all slaves [ 1352.769067][T17303] comedi comedi3: comedi_config --init_data is deprecated [ 1352.860264][T17303] netlink: 'syz.5.2504': attribute type 10 has an invalid length. [ 1353.450520][T17307] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input48 [ 1354.895335][ T126] hsr_slave_0: left promiscuous mode [ 1354.940939][ T126] hsr_slave_1: left promiscuous mode [ 1354.942516][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.984581][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.186917][T16344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1355.248121][T16344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1355.255997][T16344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1355.257698][T16344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1355.258564][T16344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1355.311861][ T5712] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1355.642132][ T5712] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1355.643686][ T5712] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1355.643711][ T5712] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1355.643733][ T5712] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1355.647881][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1355.647905][ T5712] usb 6-1: Product: syz [ 1355.647919][ T5712] usb 6-1: Manufacturer: syz [ 1355.647933][ T5712] usb 6-1: SerialNumber: syz [ 1355.956047][T17340] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2512'. [ 1356.472287][ T5827] rpcbind: server 127.0.0.1 not responding, timed out [ 1357.371015][T16344] Bluetooth: hci1: command tx timeout [ 1357.993357][T10333] rpcbind: server 127.0.0.1 not responding, timed out [ 1358.018498][T17356] comedi comedi3: comedi_config --init_data is deprecated [ 1358.312334][ T126] team0 (unregistering): Port device team_slave_1 removed [ 1358.362389][ T126] team0 (unregistering): Port device team_slave_0 removed [ 1358.602300][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1358.736554][ T5712] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1358.752855][ T5712] usb 6-1: USB disconnect, device number 81 [ 1358.763846][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1358.788041][ T5712] usblp0: removed [ 1358.789339][ T10] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1358.789363][ T10] usb 5-1: Product: syz [ 1358.789376][ T10] usb 5-1: Manufacturer: syz [ 1358.789391][ T10] usb 5-1: SerialNumber: syz [ 1358.915728][T17356] netlink: 'syz.0.2514': attribute type 10 has an invalid length. [ 1358.916920][ T10] usb 5-1: config 0 descriptor?? [ 1358.942048][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 1359.130809][ T10] usb 5-1: failed to receive control message: -71 [ 1359.130870][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1359.177125][ T10] usb 5-1: USB disconnect, device number 71 [ 1359.193920][ T10] ch341 5-1:0.0: device disconnected [ 1359.431324][T16344] Bluetooth: hci1: command tx timeout [ 1360.138176][T17386] FAULT_INJECTION: forcing a failure. [ 1360.138176][T17386] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.139120][T17386] CPU: 0 UID: 0 PID: 17386 Comm: syz.5.2519 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1360.139150][T17386] Tainted: [L]=SOFTLOCKUP [ 1360.139157][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1360.139170][T17386] Call Trace: [ 1360.139178][T17386] [ 1360.139188][T17386] dump_stack_lvl+0xe8/0x150 [ 1360.139226][T17386] should_fail_ex+0x46b/0x600 [ 1360.139255][T17386] should_failslab+0xa8/0x100 [ 1360.139288][T17386] __kmalloc_cache_node_noprof+0xa7/0x670 [ 1360.139317][T17386] ? __get_vm_area_node+0x155/0x2f0 [ 1360.139339][T17386] ? __get_vm_area_node+0x155/0x2f0 [ 1360.139360][T17386] ? finish_task_switch+0x40e/0xc60 [ 1360.139384][T17386] __get_vm_area_node+0x155/0x2f0 [ 1360.139404][T17386] ? rcu_is_watching+0x16/0xb0 [ 1360.139435][T17386] __vmalloc_node_range_noprof+0x343/0x1540 [ 1360.139460][T17386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1360.139511][T17386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1360.139534][T17386] ? futex_unqueue+0x22/0x240 [ 1360.139566][T17386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1360.139589][T17386] __vmalloc_noprof+0xd2/0x120 [ 1360.139613][T17386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1360.139650][T17386] bpf_prog_alloc_no_stats+0x47/0x560 [ 1360.139675][T17386] ? bpf_prog_alloc+0x2a/0x1a0 [ 1360.139703][T17386] bpf_prog_alloc+0x3c/0x1a0 [ 1360.139730][T17386] bpf_prog_load+0x7f8/0x1c20 [ 1360.139764][T17386] ? __pfx_bpf_prog_load+0x10/0x10 [ 1360.139807][T17386] ? vfs_write+0x9e0/0xbb0 [ 1360.139832][T17386] __sys_bpf+0xd0d/0xd90 [ 1360.139862][T17386] ? vfs_write+0x9e0/0xbb0 [ 1360.139882][T17386] ? __pfx___sys_bpf+0x10/0x10 [ 1360.139910][T17386] ? do_futex+0x3e7/0x4e0 [ 1360.139937][T17386] ? vfs_write+0x9e0/0xbb0 [ 1360.139982][T17386] ? rcu_is_watching+0x16/0xb0 [ 1360.140014][T17386] __x64_sys_bpf+0xba/0xd0 [ 1360.140039][T17386] do_syscall_64+0x166/0x520 [ 1360.140065][T17386] ? trace_irq_disable+0x3b/0x140 [ 1360.140086][T17386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.140106][T17386] ? clear_bhb_loop+0x70/0xc0 [ 1360.140128][T17386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.140147][T17386] RIP: 0033:0x7f6f172ef559 [ 1360.140166][T17386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.140182][T17386] RSP: 002b:00007f6f15546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1360.140203][T17386] RAX: ffffffffffffffda RBX: 00007f6f17575fa0 RCX: 00007f6f172ef559 [ 1360.140218][T17386] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 1360.140230][T17386] RBP: 00007f6f17386b20 R08: 0000000000000000 R09: 0000000000000000 [ 1360.140242][T17386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1360.140254][T17386] R13: 00007f6f17576038 R14: 00007f6f17575fa0 R15: 00007ffc4888c378 [ 1360.140285][T17386] [ 1360.140380][T17386] syz.5.2519: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1360.140449][T17386] CPU: 0 UID: 0 PID: 17386 Comm: syz.5.2519 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1360.140475][T17386] Tainted: [L]=SOFTLOCKUP [ 1360.140483][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1360.140494][T17386] Call Trace: [ 1360.140503][T17386] [ 1360.140511][T17386] dump_stack_lvl+0xe8/0x150 [ 1360.140544][T17386] warn_alloc+0x24d/0x270 [ 1360.140570][T17386] ? __kasan_kmalloc+0x22/0xb0 [ 1360.140600][T17386] ? __pfx_warn_alloc+0x10/0x10 [ 1360.140632][T17386] ? __get_vm_area_node+0x155/0x2f0 [ 1360.140657][T17386] ? finish_task_switch+0x40e/0xc60 [ 1360.140679][T17386] ? __get_vm_area_node+0x2a9/0x2f0 [ 1360.140699][T17386] ? rcu_is_watching+0x16/0xb0 [ 1360.140731][T17386] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1360.140779][T17386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1360.140802][T17386] ? futex_unqueue+0x22/0x240 [ 1360.140835][T17386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1360.140859][T17386] __vmalloc_noprof+0xd2/0x120 [ 1360.140882][T17386] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1360.140912][T17386] bpf_prog_alloc_no_stats+0x47/0x560 [ 1360.140937][T17386] ? bpf_prog_alloc+0x2a/0x1a0 [ 1360.140963][T17386] bpf_prog_alloc+0x3c/0x1a0 [ 1360.140990][T17386] bpf_prog_load+0x7f8/0x1c20 [ 1360.141027][T17386] ? __pfx_bpf_prog_load+0x10/0x10 [ 1360.141075][T17386] ? vfs_write+0x9e0/0xbb0 [ 1360.141098][T17386] __sys_bpf+0xd0d/0xd90 [ 1360.141127][T17386] ? vfs_write+0x9e0/0xbb0 [ 1360.141148][T17386] ? __pfx___sys_bpf+0x10/0x10 [ 1360.141176][T17386] ? do_futex+0x3e7/0x4e0 [ 1360.141201][T17386] ? vfs_write+0x9e0/0xbb0 [ 1360.141244][T17386] ? rcu_is_watching+0x16/0xb0 [ 1360.141274][T17386] __x64_sys_bpf+0xba/0xd0 [ 1360.141301][T17386] do_syscall_64+0x166/0x520 [ 1360.141328][T17386] ? trace_irq_disable+0x3b/0x140 [ 1360.141351][T17386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.141371][T17386] ? clear_bhb_loop+0x70/0xc0 [ 1360.141395][T17386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.141413][T17386] RIP: 0033:0x7f6f172ef559 [ 1360.141431][T17386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.141448][T17386] RSP: 002b:00007f6f15546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1360.141467][T17386] RAX: ffffffffffffffda RBX: 00007f6f17575fa0 RCX: 00007f6f172ef559 [ 1360.141482][T17386] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 1360.141496][T17386] RBP: 00007f6f17386b20 R08: 0000000000000000 R09: 0000000000000000 [ 1360.141509][T17386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1360.141521][T17386] R13: 00007f6f17576038 R14: 00007f6f17575fa0 R15: 00007ffc4888c378 [ 1360.141554][T17386] [ 1360.278810][T17386] Mem-Info: [ 1360.278824][T17386] active_anon:3072 inactive_anon:24163 isolated_anon:0 [ 1360.278824][T17386] active_file:35912 inactive_file:36077 isolated_file:0 [ 1360.278824][T17386] unevictable:0 dirty:143 writeback:0 [ 1360.278824][T17386] slab_reclaimable:13717 slab_unreclaimable:107257 [ 1360.278824][T17386] mapped:32607 shmem:20381 pagetables:2096 [ 1360.278824][T17386] sec_pagetables:0 bounce:0 [ 1360.278824][T17386] kernel_misc_reclaimable:0 [ 1360.278824][T17386] free:1240663 free_pcp:8826 free_cma:0 [ 1360.278961][T17386] Node 0 active_anon:12288kB inactive_anon:96652kB active_file:143448kB inactive_file:144308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130428kB dirty:572kB writeback:0kB shmem:81524kB kernel_stack:14032kB pagetables:8196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1360.279011][T17386] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1360.279053][T17386] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.279109][T17386] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 1360.279152][T17386] Node 0 DMA32 free:1013756kB boost:0kB min:3896kB low:6404kB high:8912kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12288kB inactive_anon:96652kB active_file:143448kB inactive_file:144308kB unevictable:0kB writepending:572kB zspages:0kB present:3129332kB managed:2540212kB mlocked:0kB bounce:0kB free_pcp:35296kB local_pcp:6224kB free_cma:0kB [ 1360.279211][T17386] lowmem_reserve[]: 0 0 1 1 1 [ 1360.279331][T17386] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1540kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1360.279384][T17386] lowmem_reserve[]: 0 0 0 0 0 [ 1360.279419][T17386] Node 1 Normal free:3933552kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.279476][T17386] lowmem_reserve[]: 0 0 0 0 0 [ 1360.279508][T17386] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1360.279641][T17386] Node 0 DMA32: 1188*4kB (UME) 1817*8kB (UME) 1357*16kB (UME) 1310*32kB (UME) 349*64kB (UME) 240*128kB (UM) 131*256kB (UM) 47*512kB (UM) 25*1024kB (UME) 8*2048kB (ME) 190*4096kB (UM) = 1013800kB [ 1360.279854][T17386] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1360.279951][T17386] Node 1 Normal: 2*4kB (M) 5*8kB (UM) 6*16kB (UM) 7*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 958*4096kB (UM) = 3933552kB [ 1360.280198][T17386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1360.280215][T17386] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1360.280231][T17386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1360.280247][T17386] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1360.280263][T17386] 92366 total pagecache pages [ 1360.280271][T17386] 0 pages in swap cache [ 1360.280278][T17386] Free swap = 124996kB [ 1360.280285][T17386] Total swap = 124996kB [ 1360.280293][T17386] 2097051 pages RAM [ 1360.280301][T17386] 0 pages HighMem/MovableOnly [ 1360.280309][T17386] 429997 pages reserved [ 1360.280316][T17386] 0 pages cma reserved [ 1360.410674][T17324] rxe_eth0 speed is unknown, defaulting to 1000 [ 1361.168813][T17009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1361.383499][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1362.132698][T16344] Bluetooth: hci1: command tx timeout [ 1362.267720][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.267874][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.333412][ T126] bridge_slave_1: left allmulticast mode [ 1362.333448][ T126] bridge_slave_1: left promiscuous mode [ 1362.333709][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.501391][ T10] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1362.508737][ T126] bridge_slave_0: left allmulticast mode [ 1362.508839][ T126] bridge_slave_0: left promiscuous mode [ 1362.509111][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.651934][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1362.655104][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.655118][ T10] usb 6-1: Product: syz [ 1362.655126][ T10] usb 6-1: Manufacturer: syz [ 1362.655133][ T10] usb 6-1: SerialNumber: syz [ 1362.821375][T17151] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1362.945983][ T10] rtl8150 6-1:1.0: couldn't reset the device [ 1362.947295][ T10] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1362.966515][ T10] usb 6-1: USB disconnect, device number 82 [ 1362.971403][T17151] usb 5-1: Using ep0 maxpacket: 32 [ 1362.977121][T17151] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1362.983768][T17151] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1362.983791][T17151] usb 5-1: config 0 has no interface number 0 [ 1362.983837][T17151] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1362.988000][T17151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.988023][T17151] usb 5-1: Product: syz [ 1362.988037][T17151] usb 5-1: Manufacturer: syz [ 1362.988050][T17151] usb 5-1: SerialNumber: syz [ 1363.020320][T17151] usb 5-1: config 0 descriptor?? [ 1363.273965][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.276091][T17151] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1363.277063][T17151] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1363.277084][T17151] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1363.277174][T17151] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1363.309532][T17151] usb 5-1: USB disconnect, device number 72 [ 1363.438703][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.459451][T17413] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2523'. [ 1363.527953][ T126] bond0 (unregistering): Released all slaves [ 1363.571936][T17009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1363.646786][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1363.729863][T17009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1363.771469][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1363.788117][T17009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1363.868939][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1364.231533][T16344] Bluetooth: hci1: command tx timeout [ 1364.791650][T17151] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1365.432373][T17151] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1365.436326][T17151] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1365.436351][T17151] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1365.436375][T17151] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1365.503032][T17151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1365.503059][T17151] usb 1-1: Product: syz [ 1365.503073][T17151] usb 1-1: Manufacturer: syz [ 1365.503086][T17151] usb 1-1: SerialNumber: syz [ 1365.631501][ T126] hsr_slave_0: left promiscuous mode [ 1365.681446][ T126] hsr_slave_1: left promiscuous mode [ 1365.683651][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.732103][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.756008][T17151] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 103 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1365.911381][ T5712] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1366.035926][T17422] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1366.075593][T17151] usb 1-1: USB disconnect, device number 103 [ 1366.087681][ T5712] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1366.109055][ T5712] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1366.109081][ T5712] usb 6-1: Product: syz [ 1366.109095][ T5712] usb 6-1: Manufacturer: syz [ 1366.109109][ T5712] usb 6-1: SerialNumber: syz [ 1366.138899][T17151] usblp0: removed [ 1366.171324][ T5712] usb 6-1: config 0 descriptor?? [ 1366.186918][ T5712] ch341 6-1:0.0: ch341-uart converter detected [ 1366.347502][ T126] team0 (unregistering): Port device team_slave_1 removed [ 1366.377811][ T5712] usb 6-1: failed to receive control message: -71 [ 1366.377872][ T5712] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1366.389860][ T5712] usb 6-1: USB disconnect, device number 83 [ 1366.396284][ T5712] ch341 6-1:0.0: device disconnected [ 1366.432338][ T126] team0 (unregistering): Port device team_slave_0 removed [ 1367.028375][T17324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.028452][T17324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.028546][T17324] bridge_slave_0: entered allmulticast mode [ 1367.031781][T17324] bridge_slave_0: entered promiscuous mode [ 1367.061944][T17324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.062065][T17324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.062378][T17324] bridge_slave_1: entered allmulticast mode [ 1367.064792][T17324] bridge_slave_1: entered promiscuous mode [ 1367.121576][T17324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.128774][T17324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.200058][T17324] team0: Port device team_slave_0 added [ 1367.208089][T17324] team0: Port device team_slave_1 added [ 1367.270491][T17324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.270509][T17324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.270536][T17324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.272956][T17324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.272970][T17324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.272995][T17324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.375927][T17324] hsr_slave_0: entered promiscuous mode [ 1367.376718][T17324] hsr_slave_1: entered promiscuous mode [ 1368.198723][T12861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1368.253145][T12861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1368.255845][T12861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1368.288213][ T9008] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1368.306624][T12861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1368.324356][T12861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1368.529057][ T9008] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1368.712841][ T9008] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1368.712871][ T9008] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1368.712892][ T9008] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1368.763528][ T9008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1368.763556][ T9008] usb 1-1: Product: syz [ 1368.763570][ T9008] usb 1-1: Manufacturer: syz [ 1368.763583][ T9008] usb 1-1: SerialNumber: syz [ 1369.046302][ T9008] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1370.917010][T17468] FAULT_INJECTION: forcing a failure. [ 1370.917010][T17468] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.918404][T17468] CPU: 0 UID: 0 PID: 17468 Comm: syz.4.2534 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1370.918434][T17468] Tainted: [L]=SOFTLOCKUP [ 1370.918441][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1370.918451][T17468] Call Trace: [ 1370.918460][T17468] [ 1370.918469][T17468] dump_stack_lvl+0xe8/0x150 [ 1370.918502][T17468] should_fail_ex+0x46b/0x600 [ 1370.918529][T17468] should_failslab+0xa8/0x100 [ 1370.918559][T17468] __kmalloc_cache_noprof+0x9c/0x670 [ 1370.918584][T17468] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1370.918607][T17468] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1370.918635][T17468] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1370.918665][T17468] mptcp_sendmsg_fastopen+0x17b/0x540 [ 1370.918694][T17468] mptcp_sendmsg+0x1a69/0x1d10 [ 1370.918729][T17468] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1370.918756][T17468] ? irqentry_exit+0x2a0/0x9b0 [ 1370.918783][T17468] ? lockdep_hardirqs_on+0x7b/0x110 [ 1370.918808][T17468] ? irqentry_exit+0x2a0/0x9b0 [ 1370.918833][T17468] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1370.918859][T17468] ? inet_sendmsg+0x298/0x320 [ 1370.918882][T17468] ? __pfx_inet_sendmsg+0x10/0x10 [ 1370.918909][T17468] sock_sendmsg_nosec+0x10e/0x180 [ 1370.918935][T17468] ____sys_sendmsg+0x565/0x870 [ 1370.918970][T17468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1370.919001][T17468] ? __sanitizer_cov_trace_const_cmp8+0x8/0xb0 [ 1370.919028][T17468] ? import_iovec+0x73/0xa0 [ 1370.919053][T17468] ___sys_sendmsg+0x2a5/0x360 [ 1370.919077][T17468] ? __lock_acquire+0x747/0x2de0 [ 1370.919104][T17468] ? __pfx____sys_sendmsg+0x10/0x10 [ 1370.919167][T17468] ? __fget_files+0x3a8/0x420 [ 1370.919188][T17468] ? __fget_files+0x2a/0x420 [ 1370.919217][T17468] __sys_sendmmsg+0x279/0x4e0 [ 1370.919249][T17468] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1370.919285][T17468] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1370.919323][T17468] ? ksys_write+0x248/0x270 [ 1370.919347][T17468] ? __pfx_ksys_write+0x10/0x10 [ 1370.919376][T17468] __x64_sys_sendmmsg+0xa0/0xc0 [ 1370.919403][T17468] do_syscall_64+0x166/0x520 [ 1370.919429][T17468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.919448][T17468] ? clear_bhb_loop+0x70/0xc0 [ 1370.919468][T17468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.919486][T17468] RIP: 0033:0x7f141e59f559 [ 1370.919504][T17468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.919520][T17468] RSP: 002b:00007f141c7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1370.919539][T17468] RAX: ffffffffffffffda RBX: 00007f141e826090 RCX: 00007f141e59f559 [ 1370.919553][T17468] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000004 [ 1370.919565][T17468] RBP: 00007f141c7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.919577][T17468] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.919588][T17468] R13: 00007f141e826128 R14: 00007f141e826090 R15: 00007fffab310008 [ 1370.919620][T17468] [ 1371.806444][T16344] Bluetooth: hci3: command tx timeout [ 1372.431155][ T5712] usb 1-1: USB disconnect, device number 104 [ 1372.470144][ T5712] usblp0: removed [ 1373.902015][T16344] Bluetooth: hci3: command tx timeout [ 1374.242387][T17481] ./dev/sda1: Can't open blockdev [ 1374.331382][ T5599] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1374.483014][ T5599] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1374.484301][ T5599] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1374.484326][ T5599] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1374.484349][ T5599] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1374.487173][ T5599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1374.487259][ T5599] usb 1-1: Product: syz [ 1374.487274][ T5599] usb 1-1: Manufacturer: syz [ 1374.487288][ T5599] usb 1-1: SerialNumber: syz [ 1374.845960][ T5599] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1374.894734][T17324] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1374.927696][T17324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1374.927986][T17454] rxe_eth0 speed is unknown, defaulting to 1000 [ 1375.043055][ T126] rpcbind: server 127.0.0.1 not responding, timed out [ 1375.278452][T17479] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1375.330460][ T9011] usb 1-1: USB disconnect, device number 105 [ 1375.383563][ T9011] usblp0: removed [ 1375.401359][ T9008] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1375.419710][T17324] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1375.457210][T17324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1375.458725][T17324] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1375.501633][T17324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1375.504016][T17324] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1375.546504][T17324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1375.557267][ T9008] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1375.577370][ T9008] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1375.577395][ T9008] usb 6-1: Product: syz [ 1375.577409][ T9008] usb 6-1: Manufacturer: syz [ 1375.577423][ T9008] usb 6-1: SerialNumber: syz [ 1375.606106][ T9008] usb 6-1: config 0 descriptor?? [ 1375.621581][ T9008] ch341 6-1:0.0: ch341-uart converter detected [ 1375.822471][ T9008] usb 6-1: failed to receive control message: -71 [ 1375.822531][ T9008] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1375.840033][ T9008] usb 6-1: USB disconnect, device number 84 [ 1375.864846][ T9008] ch341 6-1:0.0: device disconnected [ 1375.881332][T17125] udevd[17125]: setting owner of /dev/bus/usb/006/084 to uid=0, gid=0 failed: No such file or directory [ 1375.912137][T16344] Bluetooth: hci3: command tx timeout [ 1376.681415][T17151] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1377.042296][T17151] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1377.043827][T17151] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1377.043854][T17151] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1377.043876][T17151] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1377.046980][T17151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1377.047005][T17151] usb 5-1: Product: syz [ 1377.047019][T17151] usb 5-1: Manufacturer: syz [ 1377.047033][T17151] usb 5-1: SerialNumber: syz [ 1377.461916][T17151] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1377.785316][T17151] usb 5-1: USB disconnect, device number 73 [ 1377.829525][T17151] usblp0: removed [ 1377.993169][T16344] Bluetooth: hci3: command tx timeout [ 1378.424866][T17511] FAULT_INJECTION: forcing a failure. [ 1378.424866][T17511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.424889][T17511] CPU: 0 UID: 0 PID: 17511 Comm: syz.0.2545 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1378.424904][T17511] Tainted: [L]=SOFTLOCKUP [ 1378.424908][T17511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1378.424915][T17511] Call Trace: [ 1378.424919][T17511] [ 1378.424925][T17511] dump_stack_lvl+0xe8/0x150 [ 1378.424944][T17511] should_fail_ex+0x46b/0x600 [ 1378.424959][T17511] _copy_to_user+0x31/0xb0 [ 1378.424972][T17511] simple_read_from_buffer+0xe1/0x170 [ 1378.424987][T17511] proc_fail_nth_read+0x1be/0x230 [ 1378.425002][T17511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1378.425017][T17511] ? rw_verify_area+0x250/0x4d0 [ 1378.425030][T17511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1378.425043][T17511] vfs_read+0x219/0xa90 [ 1378.425058][T17511] ? __pfx_vfs_read+0x10/0x10 [ 1378.425071][T17511] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1378.425088][T17511] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1378.425102][T17511] ? mutex_lock_nested+0x14d/0x1d0 [ 1378.425114][T17511] ? fdget_pos+0x11e/0x160 [ 1378.425129][T17511] ksys_read+0x156/0x270 [ 1378.425142][T17511] ? __pfx_ksys_read+0x10/0x10 [ 1378.425160][T17511] do_syscall_64+0x166/0x520 [ 1378.425174][T17511] ? trace_irq_disable+0x3b/0x140 [ 1378.425186][T17511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.425197][T17511] ? clear_bhb_loop+0x70/0xc0 [ 1378.425209][T17511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.425219][T17511] RIP: 0033:0x7fcd0138fd8e [ 1378.425230][T17511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1378.425238][T17511] RSP: 002b:00007fccff625fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1378.425249][T17511] RAX: ffffffffffffffda RBX: 00007fccff6266c0 RCX: 00007fcd0138fd8e [ 1378.425256][T17511] RDX: 000000000000000f RSI: 00007fccff6260a0 RDI: 0000000000000004 [ 1378.425263][T17511] RBP: 00007fccff626090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.425269][T17511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.425275][T17511] R13: 00007fcd01656038 R14: 00007fcd01655fa0 R15: 00007fff9e4c8bf8 [ 1378.425292][T17511] [ 1379.775672][T17324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.868731][T17324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.480073][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.960916][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.256658][T17531] ./dev/sda1: Can't open blockdev [ 1381.618225][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.618358][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.230998][T17538] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2549'. [ 1383.258044][T17454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.258167][T17454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.258308][T17454] bridge_slave_0: entered allmulticast mode [ 1383.262602][T17454] bridge_slave_0: entered promiscuous mode [ 1383.300448][T17454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.300513][T17454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.300617][T17454] bridge_slave_1: entered allmulticast mode [ 1383.304605][T17454] bridge_slave_1: entered promiscuous mode [ 1383.411406][T10332] bridge_slave_1: left allmulticast mode [ 1383.411429][T10332] bridge_slave_1: left promiscuous mode [ 1383.411571][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.461494][T17151] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1383.513422][T10332] bridge_slave_0: left allmulticast mode [ 1383.513458][T10332] bridge_slave_0: left promiscuous mode [ 1383.513780][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.692117][T17151] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1383.693818][T17151] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1383.693843][T17151] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1383.693865][T17151] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1383.697287][T17151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1383.697310][T17151] usb 5-1: Product: syz [ 1383.697323][T17151] usb 5-1: Manufacturer: syz [ 1383.697338][T17151] usb 5-1: SerialNumber: syz [ 1384.150836][T17151] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1384.491342][ T5712] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1384.754953][T17555] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2553'. [ 1385.532729][ T10] usb 5-1: USB disconnect, device number 74 [ 1385.559380][ T10] usblp0: removed [ 1385.728869][ T5712] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1385.733916][ T5712] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1385.733941][ T5712] usb 1-1: Product: syz [ 1385.733954][ T5712] usb 1-1: Manufacturer: syz [ 1385.733968][ T5712] usb 1-1: SerialNumber: syz [ 1385.789708][ T5712] usb 1-1: config 0 descriptor?? [ 1385.797701][ T5712] ch341 1-1:0.0: ch341-uart converter detected [ 1385.905476][T17561] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2554'. [ 1386.637113][ T5712] usb 1-1: failed to receive control message: -71 [ 1386.637173][ T5712] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1386.644520][ T5712] usb 1-1: USB disconnect, device number 106 [ 1386.656105][ T5712] ch341 1-1:0.0: device disconnected [ 1386.753312][T10332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.872152][T10332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.935813][T10332] bond0 (unregistering): Released all slaves [ 1387.110691][T17557] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1388.288311][T17573] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1388.988359][T17557] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1389.010492][T17454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.024819][T17557] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1389.024848][T17557] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1389.024870][T17557] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1389.038379][T17557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1389.038403][T17557] usb 6-1: Product: syz [ 1389.038417][T17557] usb 6-1: Manufacturer: syz [ 1389.038430][T17557] usb 6-1: SerialNumber: syz [ 1389.105648][T17454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.349690][T17557] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1389.551094][T17582] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2558'. [ 1390.179612][T17454] team0: Port device team_slave_0 added [ 1390.442476][T17454] team0: Port device team_slave_1 added [ 1390.638525][T17557] usb 6-1: USB disconnect, device number 85 [ 1390.638584][T17454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.638597][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.638620][T17454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.733385][T17454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.733401][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.733427][T17454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.801666][T17557] usblp0: removed [ 1392.091802][T10332] hsr_slave_0: left promiscuous mode [ 1392.127596][T10332] hsr_slave_1: left promiscuous mode [ 1392.130651][T10332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.170460][T10332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.621424][ T10] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1392.772438][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1392.774258][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1392.774285][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1392.774307][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1392.777373][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1392.777398][ T10] usb 1-1: Product: syz [ 1392.777412][ T10] usb 1-1: Manufacturer: syz [ 1392.777433][ T10] usb 1-1: SerialNumber: syz [ 1393.145372][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1393.461933][T17622] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2565'. [ 1394.405355][T17627] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2566'. [ 1394.432449][T17624] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1394.441996][T17627] netlink: 'syz.5.2566': attribute type 1 has an invalid length. [ 1395.589715][T10332] team0 (unregistering): Port device team_slave_1 removed [ 1395.662578][T10332] team0 (unregistering): Port device team_slave_0 removed [ 1395.751364][T17557] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1395.787715][ T5712] usb 1-1: USB disconnect, device number 107 [ 1395.835511][ T5712] usblp0: removed [ 1395.901502][T17557] usb 6-1: device descriptor read/64, error -71 [ 1396.183755][T17634] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2567'. [ 1396.961394][T17557] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1397.179183][T17557] usb 6-1: device descriptor read/64, error -71 [ 1397.207373][T17454] hsr_slave_0: entered promiscuous mode [ 1397.227257][T17454] hsr_slave_1: entered promiscuous mode [ 1397.227808][T17454] debugfs: 'hsr0' already exists in 'hsr' [ 1397.227832][T17454] Cannot create hsr debugfs directory [ 1397.306675][T17640] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2568'. [ 1398.039982][T17557] usb usb6-port1: attempt power cycle [ 1398.057273][ T5245] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1398.082023][ T1153] rpcbind: server 127.0.0.1 not responding, timed out [ 1399.118131][T17662] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2573'. [ 1401.042104][T17151] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1401.121383][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1401.275362][T17151] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1401.298768][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1401.394229][T17684] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2576'. [ 1402.130605][T17151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.130633][T17151] usb 6-1: Product: syz [ 1402.130647][T17151] usb 6-1: Manufacturer: syz [ 1402.130662][T17151] usb 6-1: SerialNumber: syz [ 1402.175967][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1402.175996][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1402.176018][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1402.178819][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1402.178842][ T10] usb 5-1: Product: syz [ 1402.178855][ T10] usb 5-1: Manufacturer: syz [ 1402.178868][ T10] usb 5-1: SerialNumber: syz [ 1402.265144][T17151] usb 6-1: can't set config #1, error -71 [ 1402.337494][T17151] usb 6-1: USB disconnect, device number 89 [ 1402.545759][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1402.793610][T17692] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2577'. [ 1403.623329][ T5599] usb 5-1: USB disconnect, device number 75 [ 1403.668848][ T5599] usblp0: removed [ 1403.842729][ T5245] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1403.873967][T17324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.902364][T17557] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1404.052107][T17557] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1404.054040][T17557] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.054089][T17557] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1404.054112][T17557] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1404.054141][T17557] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1404.054181][T17557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.647064][T17557] gud 1-1:1.0: USB-1: Failed to add properties (ret=-5) [ 1406.647114][T17557] gud 1-1:1.0: Failed to get connectors (error=-5) [ 1406.647148][T17557] gud 1-1:1.0: probe with driver gud failed with error -5 [ 1406.903914][ T5599] usb 1-1: USB disconnect, device number 108 [ 1408.473465][T17324] veth0_vlan: entered promiscuous mode [ 1408.497991][T17324] veth1_vlan: entered promiscuous mode [ 1408.752345][T17324] veth0_macvtap: entered promiscuous mode [ 1408.824987][T17324] veth1_macvtap: entered promiscuous mode [ 1409.035701][T17741] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2585'. [ 1409.601481][T17324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.651099][T17324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.235736][T12861] Bluetooth: hci3: command 0x0405 tx timeout [ 1410.288685][T17752] FAULT_INJECTION: forcing a failure. [ 1410.288685][T17752] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.288720][T17752] CPU: 0 UID: 0 PID: 17752 Comm: syz.5.2587 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1410.288755][T17752] Tainted: [L]=SOFTLOCKUP [ 1410.288763][T17752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1410.288774][T17752] Call Trace: [ 1410.288782][T17752] [ 1410.288791][T17752] dump_stack_lvl+0xe8/0x150 [ 1410.288826][T17752] should_fail_ex+0x46b/0x600 [ 1410.288854][T17752] should_failslab+0xa8/0x100 [ 1410.288884][T17752] __kmalloc_node_noprof+0xf8/0x7b0 [ 1410.288909][T17752] ? __get_vm_area_node+0x283/0x2f0 [ 1410.288929][T17752] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1410.288950][T17752] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1410.288981][T17752] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1410.289033][T17752] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1410.289058][T17752] ? __kasan_kmalloc+0x93/0xb0 [ 1410.289085][T17752] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1410.289113][T17752] vmalloc_user_noprof+0xad/0xe0 [ 1410.289136][T17752] ? vb2_vmalloc_alloc+0xef/0x360 [ 1410.289160][T17752] vb2_vmalloc_alloc+0xef/0x360 [ 1410.289182][T17752] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1410.289205][T17752] __vb2_queue_alloc+0xa0b/0x1660 [ 1410.289251][T17752] vb2_core_reqbufs+0xc3f/0x1470 [ 1410.289287][T17752] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1410.289313][T17752] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1410.289339][T17752] ? __vb2_init_fileio+0x1e2/0x1040 [ 1410.289369][T17752] __vb2_init_fileio+0x310/0x1040 [ 1410.289390][T17752] ? rt_spin_unlock+0x159/0x200 [ 1410.289423][T17752] vb2_core_poll+0x44b/0x7b0 [ 1410.289444][T17752] ? vb2_fop_poll+0xce/0x310 [ 1410.289468][T17752] vb2_fop_poll+0x19c/0x310 [ 1410.289490][T17752] ? __fget_files+0x3a8/0x420 [ 1410.289512][T17752] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1410.289534][T17752] v4l2_poll+0x14a/0x2c0 [ 1410.289555][T17752] ? __pfx_v4l2_poll+0x10/0x10 [ 1410.289575][T17752] do_sys_poll+0x940/0xfb0 [ 1410.289601][T17752] ? do_sys_poll+0x461/0xfb0 [ 1410.289627][T17752] ? __pfx_do_sys_poll+0x10/0x10 [ 1410.289650][T17752] ? lock_acquire+0x115/0x350 [ 1410.289672][T17752] ? futex_unqueue+0x22/0x240 [ 1410.289695][T17752] ? __pfx___pollwait+0x10/0x10 [ 1410.289725][T17752] ? __pfx_pollwake+0x10/0x10 [ 1410.289805][T17752] ? futex_wait+0x2a2/0x390 [ 1410.289830][T17752] ? __pfx_futex_wait+0x10/0x10 [ 1410.289874][T17752] ? set_user_sigmask+0xc6/0x230 [ 1410.289898][T17752] ? __pfx_set_user_sigmask+0x10/0x10 [ 1410.289917][T17752] ? kmem_cache_free+0x187/0x6d0 [ 1410.289940][T17752] ? do_sys_openat2+0x18d/0x200 [ 1410.289975][T17752] __se_sys_ppoll+0x209/0x2b0 [ 1410.290007][T17752] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1410.290044][T17752] ? __x64_sys_ppoll+0x20/0xc0 [ 1410.290073][T17752] do_syscall_64+0x166/0x520 [ 1410.290098][T17752] ? trace_irq_disable+0x3b/0x140 [ 1410.290120][T17752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.290140][T17752] ? clear_bhb_loop+0x70/0xc0 [ 1410.290163][T17752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.290182][T17752] RIP: 0033:0x7f6f172ef559 [ 1410.290201][T17752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.290217][T17752] RSP: 002b:00007f6f15546028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1410.290238][T17752] RAX: ffffffffffffffda RBX: 00007f6f17575fa0 RCX: 00007f6f172ef559 [ 1410.290253][T17752] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000680 [ 1410.290264][T17752] RBP: 00007f6f17386b20 R08: 0000000000000000 R09: 0000000000000000 [ 1410.290277][T17752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.290288][T17752] R13: 00007f6f17576038 R14: 00007f6f17575fa0 R15: 00007ffc4888c378 [ 1410.290320][T17752] [ 1410.290330][T17752] syz.5.2587: vmalloc error: size 131072, failed to allocated page array size 256, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1410.290395][T17752] CPU: 0 UID: 0 PID: 17752 Comm: syz.5.2587 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1410.290421][T17752] Tainted: [L]=SOFTLOCKUP [ 1410.290429][T17752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1410.290440][T17752] Call Trace: [ 1410.290448][T17752] [ 1410.290456][T17752] dump_stack_lvl+0xe8/0x150 [ 1410.290487][T17752] warn_alloc+0x24d/0x270 [ 1410.290518][T17752] ? __pfx_warn_alloc+0x10/0x10 [ 1410.290540][T17752] ? rcu_is_watching+0x16/0xb0 [ 1410.290573][T17752] ? __kmalloc_node_noprof+0x589/0x7b0 [ 1410.290596][T17752] ? __get_vm_area_node+0x283/0x2f0 [ 1410.290616][T17752] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1410.290637][T17752] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1410.290667][T17752] __vmalloc_node_range_noprof+0x969/0x1540 [ 1410.290719][T17752] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1410.290754][T17752] ? __kasan_kmalloc+0x93/0xb0 [ 1410.290781][T17752] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1410.290809][T17752] vmalloc_user_noprof+0xad/0xe0 [ 1410.290832][T17752] ? vb2_vmalloc_alloc+0xef/0x360 [ 1410.290856][T17752] vb2_vmalloc_alloc+0xef/0x360 [ 1410.290877][T17752] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1410.290900][T17752] __vb2_queue_alloc+0xa0b/0x1660 [ 1410.290943][T17752] vb2_core_reqbufs+0xc3f/0x1470 [ 1410.290979][T17752] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1410.291003][T17752] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1410.291028][T17752] ? __vb2_init_fileio+0x1e2/0x1040 [ 1410.291055][T17752] __vb2_init_fileio+0x310/0x1040 [ 1410.291080][T17752] ? rt_spin_unlock+0x159/0x200 [ 1410.291115][T17752] vb2_core_poll+0x44b/0x7b0 [ 1410.291138][T17752] ? vb2_fop_poll+0xce/0x310 [ 1410.291163][T17752] vb2_fop_poll+0x19c/0x310 [ 1410.291185][T17752] ? __fget_files+0x3a8/0x420 [ 1410.291214][T17752] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1410.291237][T17752] v4l2_poll+0x14a/0x2c0 [ 1410.291258][T17752] ? __pfx_v4l2_poll+0x10/0x10 [ 1410.291279][T17752] do_sys_poll+0x940/0xfb0 [ 1410.291305][T17752] ? do_sys_poll+0x461/0xfb0 [ 1410.291331][T17752] ? __pfx_do_sys_poll+0x10/0x10 [ 1410.291356][T17752] ? lock_acquire+0x115/0x350 [ 1410.291381][T17752] ? futex_unqueue+0x22/0x240 [ 1410.291410][T17752] ? __pfx___pollwait+0x10/0x10 [ 1410.291445][T17752] ? __pfx_pollwake+0x10/0x10 [ 1410.291514][T17752] ? futex_wait+0x2a2/0x390 [ 1410.291539][T17752] ? __pfx_futex_wait+0x10/0x10 [ 1410.291584][T17752] ? set_user_sigmask+0xc6/0x230 [ 1410.291608][T17752] ? __pfx_set_user_sigmask+0x10/0x10 [ 1410.291631][T17752] ? kmem_cache_free+0x187/0x6d0 [ 1410.291660][T17752] ? do_sys_openat2+0x18d/0x200 [ 1410.291697][T17752] __se_sys_ppoll+0x209/0x2b0 [ 1410.291733][T17752] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1410.291782][T17752] ? __x64_sys_ppoll+0x20/0xc0 [ 1410.291814][T17752] do_syscall_64+0x166/0x520 [ 1410.291842][T17752] ? trace_irq_disable+0x3b/0x140 [ 1410.291866][T17752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.291888][T17752] ? clear_bhb_loop+0x70/0xc0 [ 1410.291913][T17752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.291934][T17752] RIP: 0033:0x7f6f172ef559 [ 1410.291954][T17752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.291973][T17752] RSP: 002b:00007f6f15546028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1410.291994][T17752] RAX: ffffffffffffffda RBX: 00007f6f17575fa0 RCX: 00007f6f172ef559 [ 1410.292007][T17752] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000680 [ 1410.292019][T17752] RBP: 00007f6f17386b20 R08: 0000000000000000 R09: 0000000000000000 [ 1410.292030][T17752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.292041][T17752] R13: 00007f6f17576038 R14: 00007f6f17575fa0 R15: 00007ffc4888c378 [ 1410.292072][T17752] [ 1410.296735][T17752] Mem-Info: [ 1410.296766][T17752] active_anon:3073 inactive_anon:24043 isolated_anon:0 [ 1410.296766][T17752] active_file:35931 inactive_file:36077 isolated_file:0 [ 1410.296766][T17752] unevictable:0 dirty:291 writeback:0 [ 1410.296766][T17752] slab_reclaimable:13619 slab_unreclaimable:107885 [ 1410.296766][T17752] mapped:31563 shmem:20381 pagetables:2063 [ 1410.296766][T17752] sec_pagetables:0 bounce:0 [ 1410.296766][T17752] kernel_misc_reclaimable:0 [ 1410.296766][T17752] free:1237613 free_pcp:12075 free_cma:0 [ 1410.296818][T17752] Node 0 active_anon:12292kB inactive_anon:96172kB active_file:143524kB inactive_file:144308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126252kB dirty:1164kB writeback:0kB shmem:81524kB kernel_stack:14092kB pagetables:8064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1410.296866][T17752] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1410.296906][T17752] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.296959][T17752] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 1410.296996][T17752] Node 0 DMA32 free:1001560kB boost:0kB min:3896kB low:6404kB high:8912kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12292kB inactive_anon:96172kB active_file:143524kB inactive_file:144308kB unevictable:0kB writepending:1164kB zspages:0kB present:3129332kB managed:2540212kB mlocked:0kB bounce:0kB free_pcp:48292kB local_pcp:34888kB free_cma:0kB [ 1410.297048][T17752] lowmem_reserve[]: 0 0 1 1 1 [ 1410.297079][T17752] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1540kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1410.297129][T17752] lowmem_reserve[]: 0 0 0 0 0 [ 1410.297162][T17752] Node 1 Normal free:3933548kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.297218][T17752] lowmem_reserve[]: 0 0 0 0 0 [ 1410.297251][T17752] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1410.297394][T17752] Node 0 DMA32: 966*4kB (ME) 2094*8kB (UME) 1327*16kB (UME) 743*32kB (UME) 276*64kB (UME) 198*128kB (UME) 164*256kB (UM) 54*512kB (UM) 28*1024kB (UME) 8*2048kB (ME) 190*4096kB (UM) = 1001560kB [ 1410.297554][T17752] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1410.297654][T17752] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 6*16kB (UM) 7*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 958*4096kB (UM) = 3933548kB [ 1410.297817][T17752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.297835][T17752] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1410.297850][T17752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.297867][T17752] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1410.297883][T17752] 92385 total pagecache pages [ 1410.297891][T17752] 0 pages in swap cache [ 1410.297898][T17752] Free swap = 124996kB [ 1410.297906][T17752] Total swap = 124996kB [ 1410.297914][T17752] 2097051 pages RAM [ 1410.297921][T17752] 0 pages HighMem/MovableOnly [ 1410.297929][T17752] 429997 pages reserved [ 1410.297936][T17752] 0 pages cma reserved [ 1412.192459][T17151] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1414.108872][T10341] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.109719][T10341] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.196302][T10341] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.207460][T10341] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.630998][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.648060][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.176851][ T5827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.176872][ T5827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.258573][T17454] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1416.328592][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1416.350689][T17454] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1416.398470][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1416.411796][T17454] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1416.527568][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1416.549881][T17454] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1416.598257][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1417.318043][T17454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.349125][T17454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.364558][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.365327][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.401582][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.401711][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.441481][T17151] usb 1-1: device descriptor read/64, error -110 [ 1417.684031][T17151] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1417.811475][T17151] usb 1-1: device descriptor read/64, error -32 [ 1417.922127][T17151] usb usb1-port1: attempt power cycle [ 1418.109991][T17454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.281432][T17151] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1418.301705][T17151] usb 1-1: device descriptor read/8, error -32 [ 1418.481605][T17151] raw-gadget.0 gadget.0: failed to queue resume event [ 1418.538020][T17454] veth0_vlan: entered promiscuous mode [ 1418.562798][T17151] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1418.581698][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1418.581826][T17151] usb 1-1: device descriptor read/8, error -32 [ 1418.582566][T17454] veth1_vlan: entered promiscuous mode [ 1418.660417][T17454] veth0_macvtap: entered promiscuous mode [ 1418.674943][T17454] veth1_macvtap: entered promiscuous mode [ 1418.691556][T17151] raw-gadget.0 gadget.0: failed to queue suspend event [ 1418.691814][T17151] usb usb1-port1: unable to enumerate USB device [ 1418.716681][T17454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.738392][T17454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.215286][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.221873][ T5827] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.222296][ T5827] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.222817][ T5827] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.889322][T16868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.889345][T16868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.976137][T10341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.976156][T10341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.033705][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.033866][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1481.431518][T16344] Bluetooth: hci1: command 0x0406 tx timeout [ 1484.473823][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.473908][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.671411][T16344] Bluetooth: hci3: command 0x0405 tx timeout [ 1545.916894][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.916974][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.071480][ T38] INFO: task syz-executor:5572 blocked in I/O wait for more than 143 seconds. [ 1558.071508][ T38] Tainted: G L syzkaller #0 [ 1558.071519][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1558.071528][ T38] task:syz-executor state:D stack:21896 pid:5572 tgid:5572 ppid:5571 task_flags:0x440100 flags:0x00080800 [ 1558.071579][ T38] Call Trace: [ 1558.071587][ T38] [ 1558.071600][ T38] __schedule+0x171d/0x56e0 [ 1558.071663][ T38] ? __pfx___schedule+0x10/0x10 [ 1558.071697][ T38] ? schedule+0x90/0x2b0 [ 1558.071725][ T38] schedule+0x164/0x2b0 [ 1558.071751][ T38] io_schedule+0x80/0xe0 [ 1558.071777][ T38] bit_wait_io+0x13/0x110 [ 1558.071805][ T38] __wait_on_bit+0xac/0x2f0 [ 1558.071830][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 1558.071858][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 1558.071886][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 1558.071911][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1558.071941][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 1558.071980][ T38] do_get_write_access+0x667/0x10d0 [ 1558.072023][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 1558.072051][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 1558.072084][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1558.072108][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1558.072149][ T38] ext4_reserve_inode_write+0x294/0x360 [ 1558.072183][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1558.072275][ T38] ext4_dirty_inode+0xd0/0x110 [ 1558.072300][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10