last executing test programs: 16m18.055867993s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x8, 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) getpid() r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x180, 0x48001051, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x5) close(r5) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 16m16.60754114s ago: executing program 3 (id=19): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x8, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) getpid() r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x180, 0x48001051, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x5) close(r4) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 16m15.410648667s ago: executing program 3 (id=22): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2c4, 0x30, 0x100, 0x71bd23, 0x25dfdbff, {}, [{0x2b0, 0x1, [@m_csum={0xf4, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0xc5, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b274"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x1b8, 0x12, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x40, 0x20000000, 0x6, 0x5}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x8, 0xf, 0x1}, @local, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0xffffffffffffffff, 0x1, 0x1}, @rand_addr=0x64010100, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8, 0x7, 0x8, 0x10}, @private=0xa010100, @rand_addr=0x64010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9, 0x0, 0x7, 0xffff8942}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}]}, {0xc5, 0x6, "9161facd0ff95a713a89d259046db020980876dac7871ca2ea6d1f1c366c68271521648418010000002f3933e73da4a79a059a5b352dddb52cb0c359429b1493717494c9c7c4691d794a967a8b1b9061f54eec486361cd31719abdb81e7bcc3582af1d6a442d255112274b18da8718c17a507f8aa0863e81581e17d5f423a719489282892a0f04944d6a2c7560578b1e3ea7736b05998bd0d92ec29eed8bd226a6c7088e40ea6ba0451286748a1307f49c244a1ca03ca68b2a2bd6e97b8e30273e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c0035bd7000fef5df250200000500fd1bd36e7f3af87e7d2ac98a86f56310001b1e3fbd35325020dbc92bdd7b916f13e35e189be56dc32cb5e9b8a0597b649449a6f42943ff46d3a7d6df53be4807a2e7641c97a49f1a1fd45fec549cc1d87264d0531f5e4e9786878ca87e427157", @ANYRES32=r2, @ANYBLOB="4000800208000100ac1414bb0a000200bbbbbbbbbbbb0000"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000080)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 16m14.796838263s ago: executing program 3 (id=24): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') sendfile(r0, r0, 0x0, 0x200000000b9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/10, 0x10}], 0x2}, 0x3b83}], 0x3fffffffffffe67, 0x20001000, 0x0) openat(r0, &(0x7f0000000240)='./file0\x00', 0x20001, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000a2427680000000000007265746170000014000280060011004e20000006000f0005000000"], 0x44}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x1) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15m59.101118362s ago: executing program 32 (id=24): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') sendfile(r0, r0, 0x0, 0x200000000b9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/10, 0x10}], 0x2}, 0x3b83}], 0x3fffffffffffe67, 0x20001000, 0x0) openat(r0, &(0x7f0000000240)='./file0\x00', 0x20001, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000a2427680000000000007265746170000014000280060011004e20000006000f0005000000"], 0x44}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x1) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m14.178737887s ago: executing program 1 (id=482): bind$alg(0xffffffffffffffff, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @local}, &(0x7f00000001c0)=0xc) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef", 0x6f}], 0x3}], 0x1, 0x40800) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYBLOB="4ad8"], 0x0) 12m8.442798784s ago: executing program 1 (id=490): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x21f8, &(0x7f0000000640)={[{0x1000, 0x4e00, "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"}, {0xcd, 0x4e00, "c81ad552e0163b9a9c0bb8b2e6a64717be686aab56f2d969ec8eedbc48d31395190ddddc316d3a38d47871168728349df3220b0c63d147310189e7a619b4b72dc52045cfb3bd54141442af43534256cd423904ee89198d62f9d00f91e640cbeca297a90027db98dd8e9a0c8fc4c0da2693e95e7026c0358170e71399de64bf11ab91b93f4b19e9bd1bed8811f2685baf047b0c5666bfeec3eb393105ab594f027f49f9e90133b26b4ed483952b9178a5a220b18a50c4ba9e805b965a92c0b09543f060e085cab19b433323d2d3"}, {0xe, 0x4e00, "13b75f2070fb118d9a5ef2279536"}, {0xdb, 0x4e00, "0d461fa695c5b55b559899786a9b40f2469f56129dddfbc81aba998dcf7c0e1e1ff1ba727bc34b0cd5a72fcda144672e78148b744e434514968e8d7aba282bada02ac79fd09f41731120b7bc741ed58852393f7fe2c21f584d6499f8db44bf4721b9386f44dc0970f24eca784cf1e74f6aa1c4032454f47bcf31d3b63132612f811db4430021f624cba7bf2441308c6141f951f729a08098163bba2e6d2d1706d27f9efba802e49318c7663bad31d89b93fa768a8cfc70862f346f6da2045ffda8e0d2926411348a85b9531814e98038a5ad988beac3181b3d81fb"}, {}, {0x1000, 0x4e00, "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"}, {0x20, 0x4e00, "a95306737a62303894814810a9d419206e557b577fa47e5b1042d44abf09af5a"}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12m5.416434868s ago: executing program 1 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m4.61515529s ago: executing program 1 (id=502): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) open(0x0, 0xc162, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 12m2.757621145s ago: executing program 1 (id=507): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) open(0x0, 0xc162, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 12m2.541920875s ago: executing program 1 (id=509): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/11, 0xb}], 0x1, &(0x7f00000004c0)=""/22, 0x16}, 0x7}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/20, 0x14}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/6, 0x6}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/114, 0x72}, {&(0x7f0000000900)=""/166, 0xa6}, {&(0x7f00000009c0)=""/122, 0x7a}], 0x9, &(0x7f0000000b80)=""/236, 0xec}, 0x7f}, {{&(0x7f0000000c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/206, 0xce}, {&(0x7f0000000e00)=""/217, 0xd9}], 0x3, &(0x7f0000000f00)=""/166, 0xa6}, 0x100}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000fc0)=""/66, 0x42}], 0x1, &(0x7f0000000d00)=""/183, 0xb7}, 0x8}], 0x4, 0x2001, &(0x7f0000001080)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="040e0400100000"], 0x7) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='-3', 0x2}]) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) r4 = syz_io_uring_setup(0x3bbc, &(0x7f0000001140)={0x0, 0x11e, 0x80, 0x3, 0x319, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000dc0)=0x0) r7 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r7, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000002c0)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='schedstat\x00') preadv(r10, &(0x7f0000002440)=[{&(0x7f0000000140)=""/96, 0x60}, {0x0}], 0x2, 0xa, 0xa) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r11, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r11], 0x40c}}, 0x0) 11m46.924878421s ago: executing program 33 (id=509): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/11, 0xb}], 0x1, &(0x7f00000004c0)=""/22, 0x16}, 0x7}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/20, 0x14}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/6, 0x6}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/114, 0x72}, {&(0x7f0000000900)=""/166, 0xa6}, {&(0x7f00000009c0)=""/122, 0x7a}], 0x9, &(0x7f0000000b80)=""/236, 0xec}, 0x7f}, {{&(0x7f0000000c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/206, 0xce}, {&(0x7f0000000e00)=""/217, 0xd9}], 0x3, &(0x7f0000000f00)=""/166, 0xa6}, 0x100}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000fc0)=""/66, 0x42}], 0x1, &(0x7f0000000d00)=""/183, 0xb7}, 0x8}], 0x4, 0x2001, &(0x7f0000001080)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="040e0400100000"], 0x7) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='-3', 0x2}]) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) r4 = syz_io_uring_setup(0x3bbc, &(0x7f0000001140)={0x0, 0x11e, 0x80, 0x3, 0x319, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000dc0)=0x0) r7 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r7, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000002c0)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='schedstat\x00') preadv(r10, &(0x7f0000002440)=[{&(0x7f0000000140)=""/96, 0x60}, {0x0}], 0x2, 0xa, 0xa) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r11, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r11], 0x40c}}, 0x0) 11m8.974693684s ago: executing program 2 (id=601): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x8, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) getpid() r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x180, 0x48001051, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x5) close(r5) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 11m5.979263978s ago: executing program 2 (id=606): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') 11m2.568838693s ago: executing program 2 (id=613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001800)={0x7f, 0x1, 0x4, {0x9, @pix={0x3ff, 0x7, 0x20323159, 0x6, 0x3, 0x87d, 0xc, 0x8800000, 0x0, 0x6}}, 0xd}) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a300000000009"], 0xbc}}, 0x4) 11m1.521168129s ago: executing program 2 (id=615): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x8, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) getpid() r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x180, 0x48001051, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x5) close(r5) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 11m1.315347257s ago: executing program 2 (id=616): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000ac0)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 11m1.267213762s ago: executing program 2 (id=617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0x0, 0x2}}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x0, 0x271}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) 10m46.220073784s ago: executing program 34 (id=617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0x0, 0x2}}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x0, 0x271}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) 4m17.353420361s ago: executing program 6 (id=1452): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) (fail_nth: 2) 4m17.262649124s ago: executing program 6 (id=1455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0xd8}}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x2, [0x2], [0x80ffff], [0x0, 0x0, 0x7], [0x3, 0x0, 0x0, 0x200000]}) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) socket$inet_smc(0x2b, 0x1, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 4m12.75071824s ago: executing program 6 (id=1466): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x114, &(0x7f0000000440)={0x0, 0x4000000, 0x0, 0x7, 0x48}, 0x0, &(0x7f0000000280)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48) unshare(0x20000400) 4m8.002924449s ago: executing program 6 (id=1481): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create1(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r0], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0606120c"], 0x9) 4m7.554777926s ago: executing program 4 (id=1483): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) fsopen(&(0x7f00000002c0)='sockfs\x00', 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x40) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x80984120, &(0x7f0000000380)) capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000001080)={0x9955, 0x1ffffe, 0x0, 0xfffffffc, 0x4}) 4m6.481662338s ago: executing program 4 (id=1484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x101) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x38}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 4m5.170903068s ago: executing program 6 (id=1485): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000007c0)={0x0, 0xfffffff8, 0xbc4c, 0xc, 0x6, 0x80, 0x6, 0x4, {0x0, @in6={{0xa, 0x4e22, 0xada, @ipv4={'\x00', '\xff\xff', @loopback}, 0x200000}}, 0x10, 0x2, 0x7, 0x400, 0x6}}, &(0x7f0000000880)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYBLOB="0080d20069e412e7a58cb95268e3bd3f0a49ee971c7d3c39194d14a8b1b68ca08858aa45176eedf114e97754c25f082a91d17faa81594dac7c59ccf3478446ca3035897c27a362ddcd0faf5bc58d3c62a6e7b5f100787cbf24e6cab4c174412b40cb3085a5fdcca770da37067f5058241348b779de4e060f07d6d5aa09acd6972217e20067a68b5b3df29b525b6b30fa2a24cb8162c6fd0b86adf2aa0ca7a13616d35676e0b3d22c261c69f321fcfe1b3db0b3d23b6d8b2c8fa9e4619e9f27a48303d362745d0ddc4dcf0b1f74e8c4fb8b1f5a4db6bdc0f5c98a5fba72e89c6d709833ca3c8ba38606948ebbf064be51d691be7c26bebffbc9aff9adfa1aa5"], 0xda) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x800) exit(0x0) 4m5.168842537s ago: executing program 4 (id=1486): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x2, 0x3, 0x30, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@rr={0x7, 0x3, 0x13}, @generic={0x44, 0x2}]}}, {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000540)="7d7a68e25d38566c61856d6817441a9c", 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x2400c0a0}], 0x1, 0x48800) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x400}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x24084041}, 0x80) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x7b3c, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r12}}) syz_io_uring_submit(r5, r8, &(0x7f0000001940)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, r3, 0x0, &(0x7f0000001900)='./file0\x00', 0xc, 0x0, 0x1, {0x0, r12}}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b00)=""/249, 0xf9}], 0x1}, 0x0) r14 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r14, &(0x7f00000018c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001880)={&(0x7f0000001400)={0x448, 0x3f4, 0x4, 0x70bd2a, 0x25dfdbfc, {0x4, 0x0, 0x2d, [0x0, 0x2, 0x7, 0x7, 0x6, 0x3ff, 0x0, 0x1000, 0x4, 0x6, 0x7000000, 0x9, 0x800, 0x3, 0x8, 0xffffffff, 0x2, 0x2, 0x134, 0x8, 0x400, 0x3, 0x419, 0x8, 0x10, 0x10001, 0xf948334c, 0xfffffff9, 0xffff, 0x3, 0x1, 0x0, 0x5, 0xf, 0x5, 0xfffffe01, 0xfffffffe, 0x0, 0x0, 0x6, 0x80, 0x80, 0x1000, 0x2, 0x100, 0x4, 0x0, 0xfffffff7, 0x2, 0x1, 0x9, 0x1, 0x8, 0x6, 0xc0000, 0x8, 0x3, 0x0, 0x9, 0x9, 0x2, 0xfffffff7, 0x70, 0x1a9a780a], [0x5f9, 0x4, 0x6, 0x8, 0x9, 0x8, 0x9, 0xd, 0x5, 0x100, 0x2, 0x68ca, 0x1, 0x1, 0x10, 0xff, 0x5, 0xfffffff9, 0x4, 0x9, 0x2, 0x7, 0x5, 0x1, 0x8, 0x9, 0x0, 0xffffff01, 0xaf28, 0x3, 0x7, 0x0, 0xfffffff7, 0x0, 0x2, 0x3, 0xfffffffd, 0x9, 0x2, 0x0, 0x1, 0xfffffffc, 0xdf, 0x9b85, 0x8, 0x10000, 0x40, 0xa, 0x81, 0x0, 0x7fff, 0x8001, 0x5, 0x0, 0x7, 0x9, 0x3ff, 0x9, 0x5, 0x0, 0x4800, 0x2, 0x2, 0x6032150c], [0x1, 0x5, 0x23, 0xc, 0x7a, 0x40000, 0x10, 0x8, 0x3, 0x9, 0x400, 0x7, 0x59e4, 0x4, 0x82, 0x400, 0xe6, 0x4, 0x7, 0x200, 0x4, 0x7fff, 0xb, 0xfffffff8, 0x2fa, 0x0, 0x8, 0x0, 0x7, 0x9, 0x81, 0x8, 0x9, 0x64, 0x8000, 0x5, 0x401, 0x1, 0xb0ac000, 0x4, 0x7fffffff, 0x401, 0xd, 0x6, 0x5, 0x800, 0x2, 0x8001, 0x10001, 0x3, 0x6, 0xf2, 0x4, 0x7, 0x2, 0x1, 0x0, 0x7f, 0x7, 0x7, 0x4, 0x0, 0x0, 0x800], [0x1, 0x9, 0xbac, 0xe, 0x4, 0x2, 0x5, 0xfffeffff, 0x5, 0x8, 0x8, 0x8, 0xa, 0xfb, 0x5, 0x1, 0x0, 0x3, 0x8, 0x413575a8, 0x6, 0x10, 0xc8ab, 0x80000001, 0x80000000, 0x7, 0x6, 0xfef7, 0x85, 0x1, 0x4, 0x7ff, 0x10001, 0x2, 0x10001, 0x80, 0xad, 0x9, 0x4, 0x1, 0x3b, 0x7, 0x4, 0x100, 0x2, 0x1, 0x6, 0x8001, 0x1, 0x8, 0x7, 0x40, 0x2, 0x8000, 0x9, 0x6, 0x2, 0x5, 0x66756a32, 0x3, 0x81, 0x4, 0x1, 0x7f], 0x26, ['\':^\xcf@[.&\x00', '%c\x00', '\x00', 'ib\x00', '\'*\x00', 'ecb(camellia)\x00', '-\x97\'\x00', '\x00']}, ["", "", "", "", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f00000000c0)={0x1280, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "e8fcb43daf254bd1a9909c67e70c4c88b0a96bb1e8e5daf6dd78402945e17b2a3839406cc7289dd29f0dbe2d1a3cac14083b07e6c706af7e90cd7667b1142fbae743a64e2e912708b6635301ae8929cd5161ab43b24231faec3087ae09b78fa0668930ad453fd1b30e0dc633a9795d1081306af72051060921c51d20a847246a5b6c6c0e12e2d9b1e6e619ea019bb513e85fad45d7dfeb9253330df9d8754f37b4a7d3654249f5a967a0253a07"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x698}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e68cce3a5442e10980b9daece4fbb09a3ef7d66130d0fc72ed5aa4117a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8430}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1280}, 0x1, 0x0, 0x0, 0x20004080}, 0x8004) 4m4.914078994s ago: executing program 4 (id=1487): pipe(&(0x7f0000000080)) socket(0x2, 0x80805, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x1, 0x5, &(0x7f00000001c0)=[{&(0x7f0000000080)="7464c5", 0x3}], 0x1, 0x1a, 0x1}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4m3.49294111s ago: executing program 6 (id=1490): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x3e8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) socket$kcm(0x10, 0x2, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) r3 = eventfd2(0x5, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0, 0x300, 0x800002, 0x0, 0x0, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r3, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r3}]) 3m58.190388816s ago: executing program 4 (id=1496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x101) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x38}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 3m56.639864531s ago: executing program 4 (id=1500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getpgrp(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x7, 0x3, 0x3, 0x100}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRES32=r2, @ANYBLOB="00010006258974dc14da00077d4ba30080000000000000de5d769f76029e2dab982a9b000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r5}}, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') read$FUSE(r6, &(0x7f00000061c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="441800001000030500560000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m56.082932625s ago: executing program 0 (id=1505): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000000cc0)=r2, 0x4) 3m55.679145683s ago: executing program 5 (id=1508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0xd8}}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x2, [0x2], [0x80ffff], [0x0, 0x0, 0x7], [0x3, 0x0, 0x0, 0x200000]}) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) socket$inet_smc(0x2b, 0x1, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 3m55.666806614s ago: executing program 0 (id=1509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0x10, 0x80002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x1f0, 0xd0, 0x1f0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="764e92856dd7", 0xfff8, 0xf, [0x3e, 0xd, 0x2c, 0x13, 0x16, 0x2a, 0x15, 0x3e, 0x15, 0x13, 0x18, 0x2e, 0xf, 0x18, 0xf, 0x23], 0x0, 0x7, 0x6cc}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff000000, 'veth1_to_bridge\x00', 'vcan0\x00', {0x907465b39c6dab9d}, {0xff}, 0x89, 0x2, 0x31}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x5, 0x4}}}, @common=@ttl={{0x28}, {0x3, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x4, 0xe, [0x36, 0x28, 0x22, 0x16, 0x13, 0x31, 0x18, 0x1b, 0x1e, 0x35, 0x10, 0x2b, 0x2f, 0x2e, 0x11, 0x27], 0x1, 0xffffffff, 0x7}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'syz_tun\x00', 'ip6erspan0\x00', {0xff}, {}, 0x33, 0x0, 0x8}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff000000, 0xffffff00, 0xffffff00], 0x4, 0x3, {0x6}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x101, {0xd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 3m55.554529646s ago: executing program 0 (id=1510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x101) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400"], 0x38}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 3m54.224731683s ago: executing program 0 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000540)) sendfile(r5, r5, 0x0, 0xfffa83) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010006000000080003000000000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3m54.224136362s ago: executing program 5 (id=1513): syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="7f6b574143f09481b439ba966711ba4700ee90231baf71d39336e5fc0dc0d469ee89ffeae80cd1aba71782ff54c1bc4ef7d411601eb29d60874e3fdb99db523d041b5195702aaae515", 0x49}], 0x1}, 0x4008863) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open(0x0, 0x143bc2, 0x1c0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m53.146973354s ago: executing program 5 (id=1514): unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 3m53.030140907s ago: executing program 5 (id=1516): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x2, 0x3, 0x30, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@rr={0x7, 0x3, 0x13}, @generic={0x44, 0x2}]}}, {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000540)="7d7a68e25d38566c61856d6817441a9c", 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x2400c0a0}], 0x1, 0x48800) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x400}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x24084041}, 0x80) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x7b3c, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r12}}) syz_io_uring_submit(r5, r8, &(0x7f0000001940)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, r3, 0x0, &(0x7f0000001900)='./file0\x00', 0xc, 0x0, 0x1, {0x0, r12}}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b00)=""/249, 0xf9}], 0x1}, 0x0) r14 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r14, &(0x7f00000018c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001880)={&(0x7f0000001400)={0x448, 0x3f4, 0x4, 0x70bd2a, 0x25dfdbfc, {0x4, 0x0, 0x2d, [0x0, 0x2, 0x7, 0x7, 0x6, 0x3ff, 0x0, 0x1000, 0x4, 0x6, 0x7000000, 0x9, 0x800, 0x3, 0x8, 0xffffffff, 0x2, 0x2, 0x134, 0x8, 0x400, 0x3, 0x419, 0x8, 0x10, 0x10001, 0xf948334c, 0xfffffff9, 0xffff, 0x3, 0x1, 0x0, 0x5, 0xf, 0x5, 0xfffffe01, 0xfffffffe, 0x0, 0x0, 0x6, 0x80, 0x80, 0x1000, 0x2, 0x100, 0x4, 0x0, 0xfffffff7, 0x2, 0x1, 0x9, 0x1, 0x8, 0x6, 0xc0000, 0x8, 0x3, 0x0, 0x9, 0x9, 0x2, 0xfffffff7, 0x70, 0x1a9a780a], [0x5f9, 0x4, 0x6, 0x8, 0x9, 0x8, 0x9, 0xd, 0x5, 0x100, 0x2, 0x68ca, 0x1, 0x1, 0x10, 0xff, 0x5, 0xfffffff9, 0x4, 0x9, 0x2, 0x7, 0x5, 0x1, 0x8, 0x9, 0x0, 0xffffff01, 0xaf28, 0x3, 0x7, 0x0, 0xfffffff7, 0x0, 0x2, 0x3, 0xfffffffd, 0x9, 0x2, 0x0, 0x1, 0xfffffffc, 0xdf, 0x9b85, 0x8, 0x10000, 0x40, 0xa, 0x81, 0x0, 0x7fff, 0x8001, 0x5, 0x0, 0x7, 0x9, 0x3ff, 0x9, 0x5, 0x0, 0x4800, 0x2, 0x2, 0x6032150c], [0x1, 0x5, 0x23, 0xc, 0x7a, 0x40000, 0x10, 0x8, 0x3, 0x9, 0x400, 0x7, 0x59e4, 0x4, 0x82, 0x400, 0xe6, 0x4, 0x7, 0x200, 0x4, 0x7fff, 0xb, 0xfffffff8, 0x2fa, 0x0, 0x8, 0x0, 0x7, 0x9, 0x81, 0x8, 0x9, 0x64, 0x8000, 0x5, 0x401, 0x1, 0xb0ac000, 0x4, 0x7fffffff, 0x401, 0xd, 0x6, 0x5, 0x800, 0x2, 0x8001, 0x10001, 0x3, 0x6, 0xf2, 0x4, 0x7, 0x2, 0x1, 0x0, 0x7f, 0x7, 0x7, 0x4, 0x0, 0x0, 0x800], [0x1, 0x9, 0xbac, 0xe, 0x4, 0x2, 0x5, 0xfffeffff, 0x5, 0x8, 0x8, 0x8, 0xa, 0xfb, 0x5, 0x1, 0x0, 0x3, 0x8, 0x413575a8, 0x6, 0x10, 0xc8ab, 0x80000001, 0x80000000, 0x7, 0x6, 0xfef7, 0x85, 0x1, 0x4, 0x7ff, 0x10001, 0x2, 0x10001, 0x80, 0xad, 0x9, 0x4, 0x1, 0x3b, 0x7, 0x4, 0x100, 0x2, 0x1, 0x6, 0x8001, 0x1, 0x8, 0x7, 0x40, 0x2, 0x8000, 0x9, 0x6, 0x2, 0x5, 0x66756a32, 0x3, 0x81, 0x4, 0x1, 0x7f], 0x26, ['\':^\xcf@[.&\x00', '%c\x00', '\x00', 'ib\x00', '\'*\x00', 'ecb(camellia)\x00', '-\x97\'\x00', '\x00']}, ["", "", "", "", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f00000000c0)={0x1280, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "e8fcb43daf254bd1a9909c67e70c4c88b0a96bb1e8e5daf6dd78402945e17b2a3839406cc7289dd29f0dbe2d1a3cac14083b07e6c706af7e90cd7667b1142fbae743a64e2e912708b6635301ae8929cd5161ab43b24231faec3087ae09b78fa0668930ad453fd1b30e0dc633a9795d1081306af72051060921c51d20a847246a5b6c6c0e12e2d9b1e6e619ea019bb513e85fad45d7dfeb9253330df9d8754f37b4a7d3654249f5a967a0253a07"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x698}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e68cce3a5442e10980b9daece4fbb09a3ef7d66130d0fc72ed5aa4117a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8430}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1280}, 0x1, 0x0, 0x0, 0x20004080}, 0x8004) 3m52.894544447s ago: executing program 5 (id=1517): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r1 = syz_io_uring_setup(0x114, &(0x7f0000000440)={0x0, 0x4000000, 0x0, 0x7, 0x48}, 0x0, &(0x7f0000000280)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m52.81084849s ago: executing program 7 (id=1518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) 3m52.715740189s ago: executing program 0 (id=1519): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000000cc0)=r2, 0x4) 3m52.701595913s ago: executing program 7 (id=1520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0x10, 0x80002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x1f0, 0xd0, 0x1f0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="764e92856dd7", 0xfff8, 0xf, [0x3e, 0xd, 0x2c, 0x13, 0x16, 0x2a, 0x15, 0x3e, 0x15, 0x13, 0x18, 0x2e, 0xf, 0x18, 0xf, 0x23], 0x0, 0x7, 0x6cc}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff000000, 'veth1_to_bridge\x00', 'vcan0\x00', {0x907465b39c6dab9d}, {0xff}, 0x89, 0x2, 0x31}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x5, 0x4}}}, @common=@ttl={{0x28}, {0x3, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x4, 0xe, [0x36, 0x28, 0x22, 0x16, 0x13, 0x31, 0x18, 0x1b, 0x1e, 0x35, 0x10, 0x2b, 0x2f, 0x2e, 0x11, 0x27], 0x1, 0xffffffff, 0x7}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'syz_tun\x00', 'ip6erspan0\x00', {0xff}, {}, 0x33, 0x0, 0x8}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff000000, 0xffffff00, 0xffffff00], 0x4, 0x3, {0x6}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x101, {0xd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04226605363add6aeaa0854443d5d048bd9b98e1e0ff0003"], 0x12) 3m52.619415258s ago: executing program 5 (id=1521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8008743f, &(0x7f0000000180)) 3m52.580535473s ago: executing program 0 (id=1522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '.\'j.f,:&'}}]}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x3, 0x0, 0x1012, 0x0, 0x7}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d00010000c0070904000141030003000921000000012203000905810308000000030905020310000606fe406c8226cd5735af4f383262af863361e07374cfc4553f3f006b8604fa750cb83488ed2b3737d5eb488958eba3a3baa26c567a25ee23abf2031bf311844911239c3b1000"/144], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0x4, {0x4, 0x4, "54ed"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0xfffffffffffffc72) 3m52.548289809s ago: executing program 7 (id=1523): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="ad56b6c5910fae9d6dcd3292ea54336596abd27996d3c5e9c3a8f713fb88da78060eff4155409f363d88db568807c7f501001418ac01d70fa31e4f481e2969baffc6f9627ba1dc7a1e7561c76a560ff061b2f6c011b13abd3bdbc039cb828bc68c2cb33d54d5bdd22a1888fe8382bec4660cb9224bf2abc2700931fce47cb69c30422178c92f9879ead3d05c604892935ad1663be4fba9a326616d680f4bd2519b42d028da9b4f84aeefe6073cc077511c26fb258b5d2ab2d3b42a5fbfb08d76fbf7e83201124ce7607f41ab00"/230, 0xe6) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4048800) r8 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c82016001200050069b643468217050e00080001a10700ff0705dbf5ccd1454d8548fe0fcd006425ab23f867aba7ba7dcb88f2d0c5b37dd0a844fceca30008f17f4c39439227a51afd7d3ed65a92b75aca80f64ad794ced5439e8e226bd9943a77e330e569c59daa9a3f3e0111c07b93e0336fbfa4cfe766b55d1bd1f37b03d086e85cb3341507b75f1b42d62e22d32985e9"], 0x1b) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000001, 0x40010, r8, 0x3a0a4000) 3m52.467406419s ago: executing program 7 (id=1524): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) fsopen(&(0x7f00000002c0)='sockfs\x00', 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x40) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x80984120, &(0x7f0000000380)) capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000001080)={0x9955, 0x1ffffe, 0x0, 0xfffffffc, 0x4}) 3m51.370008662s ago: executing program 7 (id=1525): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000001840)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 3m51.297388765s ago: executing program 7 (id=1526): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x591003, 0x20}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000480)=0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080045b4002c00000000a3070000000000000014b6ff4e204001170502000000000000400ce5f693100250a307cff5e46d445e2d81fe236838", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="601000009078000004020000"], 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a3100000000050001"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48080) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000049009125745c7388641f9c0e0a"], 0xfe33) dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x100, 0x1e) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 3m47.668744594s ago: executing program 35 (id=1490): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x3e8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) socket$kcm(0x10, 0x2, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) r3 = eventfd2(0x5, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0, 0x300, 0x800002, 0x0, 0x0, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r3, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r3}]) 3m40.65717605s ago: executing program 36 (id=1500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getpgrp(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x7, 0x3, 0x3, 0x100}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRES32=r2, @ANYBLOB="00010006258974dc14da00077d4ba30080000000000000de5d769f76029e2dab982a9b000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r5}}, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') read$FUSE(r6, &(0x7f00000061c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="441800001000030500560000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m37.145673143s ago: executing program 37 (id=1522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '.\'j.f,:&'}}]}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x3, 0x0, 0x1012, 0x0, 0x7}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d00010000c0070904000141030003000921000000012203000905810308000000030905020310000606fe406c8226cd5735af4f383262af863361e07374cfc4553f3f006b8604fa750cb83488ed2b3737d5eb488958eba3a3baa26c567a25ee23abf2031bf311844911239c3b1000"/144], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0x4, {0x4, 0x4, "54ed"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0xfffffffffffffc72) 3m37.098380009s ago: executing program 38 (id=1521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8008743f, &(0x7f0000000180)) 3m36.145422478s ago: executing program 39 (id=1526): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x591003, 0x20}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000480)=0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080045b4002c00000000a3070000000000000014b6ff4e204001170502000000000000400ce5f693100250a307cff5e46d445e2d81fe236838", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="601000009078000004020000"], 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a3100000000050001"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48080) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000049009125745c7388641f9c0e0a"], 0xfe33) dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x100, 0x1e) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 7.938872258s ago: executing program 9 (id=1649): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000007c0)={0x0, 0xfffffff8, 0xbc4c, 0xc, 0x6, 0x80, 0x6, 0x4, {0x0, @in6={{0xa, 0x4e22, 0xada, @ipv4={'\x00', '\xff\xff', @loopback}, 0x200000}}, 0x10, 0x2, 0x7, 0x400, 0x6}}, &(0x7f0000000880)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0xda) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x1, r5, 0x8, 0x5, 0x80000001, 0x100, 0x0, 0x2, 0xfffffffb}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 7.068155885s ago: executing program 9 (id=1650): syz_emit_ethernet(0x1b0, &(0x7f0000000440)={@multicast, @random="f346e9980295", @void, {@mpls_mc={0x8848, {[{0x1}, {0x2, 0x0, 0x1}, {0x5}, {0xb}, {0x9, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x5}, {0x3ff}], @ipv6=@tipc_packet={0x8, 0x6, "df9b99", 0x15a, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @remote, {[@dstopts={0x6, 0x4, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x3d, 0x0, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}, @srh={0x6, 0x2, 0x4, 0x1, 0x16, 0x30, 0x2, [@remote]}, @dstopts={0x6, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}, @pad1]}, @hopopts={0x5e, 0xa, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x8000, [0x8]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2d}}, @jumbo={0xc2, 0x4, 0xf}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @srh={0x27, 0xc, 0x4, 0x6, 0x4, 0x28, 0x401, [@local, @dev={0xfe, 0x80, '\x00', 0x35}, @dev={0xfe, 0x80, '\x00', 0x1c}, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote]}], @payload_direct={{{{0x2a, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x2, 0x2, 0x0, 0x2, 0xf, 0x1, 0x3, 0x9, 0x7f, 0x4, 0x4e23, 0x4e20}, 0x4, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syslog(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbde250a0000000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x4004000) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xde0}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x4041) 6.210694769s ago: executing program 8 (id=1651): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) get_robust_list(0x0, &(0x7f0000000400)=0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x18c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@remote}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES16=r0, @ANYBLOB="000000000000000014001a80100004800c000480"], 0x34}}, 0x0) 6.076510812s ago: executing program 9 (id=1652): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) get_robust_list(0x0, &(0x7f0000000400)=0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x18c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@remote}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES16=r0, @ANYBLOB="000000000000000014001a80100004800c000480"], 0x34}}, 0x0) 5.012191608s ago: executing program 8 (id=1653): mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x95, 0x102) r0 = socket(0x5, 0x2, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x7, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x228000, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$inet(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x50}, {&(0x7f0000001740)="a6ef7189e7623e6504257da8abe3ca34474e9fb39130a220a3b8fbf7273b72ae4ce32b5c4a252744a0a4d6b5ce9ef1306e4fe7322c0bfaf45802d0c606a6d494ac54fc443ddf5a81a2bb724b050dbc08801de2133bb3270ce423c5241d7a6a1526cd37aaae2bab43a0843613f13fc6e18bdff355b0ae2248348bf132b80357c7260059b6cc481341491e3a9436c7e8507e0be76e54bd0bc2be9391793be00a7e2fa931cb3901975cc8be355e8a5c25749a08f130cf13e150a72ad46a25eac0d256848d7c4d8b0db41d7768a167de51", 0xfffffffffffffcad}, {&(0x7f0000000180)="14739d8abe13785835e67f6ab43f5d824a4e"}, {&(0x7f0000001880)="a7877d7da487e508a73d829a8273847b595292393a43d97d28590515f41c8bf3ff9c44d41d93459b335bc276770847b40203ffb8be0f2e5b69fb45604d4009343db0c14788533fc6e9afc4230c3ab95fa74e454023b43ec8acd8b6e9d503bbff19448ae789c463d71e633fb7cafdfbf4cbb8dec782b56b45c9076c510ff9dff74bef756d54b808562e2bddf2a9baedd9e16a1ab6ff3ea120f49e8373bfc636de6981a9e4daee631108c278202f40affde1cf0ab337073978897ad0030f193a4dd2d24811e0afaef4fb3a65af7de7abbd21c573414a25c92970fc9b7411b7a1efd968725c427be4bf86b92b965f38db63f0e16812a3fac3"}, {&(0x7f0000001980)="9ae75effffd58542278b3737f74a1f3c8ae0e7b8e067ed304d4dc4bd3975a8daa10443e2f7f83e5f1b9dd4136376a69268d4bbe48e15db303e6478d68e3dc36fce71c35b33a3ff272b435962e6e42908ed76cf9c283b6148aab59f8a2405cc908358cf6037fd9c86a8c7e2df27"}, {&(0x7f0000001a00)="94be69f2e6ce3acc6b96ccac8987f498ce54de9734a5a3f663226706ec7f3609cd4dddefec35a8f912bda2dfaa3b0f3282a418aa13a3a62a7e5cff1e783556bc8702a269f702186b1905ad9923c29c64e7edba3732dfcdf4b15a5a61dca39e733ba25a93a6b69b5edffd2e58174f5bda8c626020c3e4d183e8eaa7063e0cc2da250e354a4408561c6baf3241de631f8e6b44bb70b2f44b1bc5cc52e64a42c700dceea56a57086817bc626b42f34e3fdb94d6abf760eae5bbcdfc", 0x1c}], 0x1}, 0xc015) readv(r1, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4107, 0x100b}], 0x1) syz_open_dev$sg(&(0x7f00000000c0), 0x6bc, 0x400001) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a6c8de", 0x3}], 0x1) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x1, &(0x7f0000051000/0x4000)=nil, 0x1) 4.495808763s ago: executing program 9 (id=1654): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\\\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x3ff, 0x1801, 0x0, 0x0}, {0x5, 0x8201, 0x0, 0x0}], 0x2}) 3.0855193s ago: executing program 9 (id=1655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0xd8}}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x2, [0x2], [0x80ffff], [0x0, 0x0, 0x7], [0x3, 0x0, 0x0, 0x200000]}) socket$inet_smc(0x2b, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 1.753447789s ago: executing program 9 (id=1656): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x1, 0x5, &(0x7f00000001c0)=[{&(0x7f0000000080)='td', 0x2}], 0x1, 0x1a, 0x1}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.702398866s ago: executing program 8 (id=1657): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000007c0)={0x0, 0xfffffff8, 0xbc4c, 0xc, 0x6, 0x80, 0x6, 0x4, {0x0, @in6={{0xa, 0x4e22, 0xada, @ipv4={'\x00', '\xff\xff', @loopback}, 0x200000}}, 0x10, 0x2, 0x7, 0x400, 0x6}}, &(0x7f0000000880)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0xda) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x1, r5, 0x8, 0x5, 0x80000001, 0x100, 0x0, 0x2, 0xfffffffb}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 737.251957ms ago: executing program 8 (id=1658): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r3 = syz_open_dev$usbmon(&(0x7f0000000680), 0x8b3, 0x80) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r10, 0x0, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="1bfac52f586f793fc01c104e721a1b998e04a493b8bf7f5a5264", 0x1a}, {&(0x7f00000001c0)="563ebad4220ac7b9e4aac870f08bc9bb128b97311d699be25a949847de676ba3aed64f3f5f2e962b1c43dcee087daf2587d9719e47", 0x35}, {&(0x7f00000002c0)="caa3b1bdec9a548255f6ae5147b0a95b1b35083db453ebed47bb4226fa1b9c", 0x1f}, {&(0x7f00000004c0)="87ef3d26d0382a7b3c258cc3c748ea835ffe85aebfc7fdd7a8178de9bc6a4fc15c8a57f9b772ad4d7291cb8ed423832315cacaeb119aa04c7dc5b80b9749929018aac140df2be6ed1900d9789bc925761753cb1b1b1408914a677e44b3964e8ae5884b084da7cd4aca43c9ae6b3082bc5e49a43a6dd4286c4836fd75fef0e3a1fd261d188b2ca868faa51abf37f10cb7a0c0e5f31f5a2a8c46c2de773cf1e3d0e8", 0xa1}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x11e0}, 0x0, 0x8000, 0x1}) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x10248ca4, 0x40, 0x53, 0x0, 0x1, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x82840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 452.252702ms ago: executing program 8 (id=1659): io_setup(0x1, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0], 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xff2, &(0x7f0000000240)=""/4082}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) close(r3) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x2240) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61fbddf000083afffe8800002a9ca9000000000000000000000101000000000000000000000000000000018000907800"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) 0s ago: executing program 8 (id=1660): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x40, 0x8, 0x2, "ec0a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) readahead(r2, 0x2a91, 0x7ff) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f0000000380)={0x0, 0x22, 0xbc, {0xbc, 0x30, "424aa040aa60544c5625f7ba62dd31d87b522015fd05cbcbce21cb8444d9fae698b29355b3480f0fa2f2b85b83755d4a1dde766bbdee20af2ae3d09e9c3d78ff36eea4fef81ec8639161b2237d91ebe0ea65ed5ceb43b838fb7b24d02ae3c2f3145cd12b992debfbdbf94c1b6788eae9bd423c7ed5f52d7ccaef17a760ede96636e1821a39c00a28ca7b417a38c092167c0d72c95003b136285ca398dac2e131df42a0bb933a221074644bba36296438bdc4717b2ce5941b65d1"}}, &(0x7f0000000480)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "dada0150b146a7e2ca8f03e1513eedeb5c9bb0f7edbed1c39ba330490f0c4c9f36dbe6fd5e0078b734ea8cedb271b8cc88b89292756de4971d882c4b8a8f1ed230438f8564f2a27b61007076f504c6b1fc8d3169feab5b907123fda538c253a102722ddd00435824660eb6033f659555e6d3ecb72f3e29a018ea6f92c14bcc06cf9f98c0f81f01908c34b3625362cd438729212d568dd97ee2c98858598da2d81767bf2f9e0114"}}, &(0x7f0000000540)={0x0, 0x22, 0x18, {[@main=@item_012={0x2, 0x0, 0x8, "3c97"}, @local=@item_4={0x3, 0x2, 0x7, "25f82042"}, @main=@item_4={0x3, 0x0, 0x8, "fde813dd"}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0xa, "d18c6412"}, @global=@item_4={0x3, 0x1, 0x5, "03e59af9"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x5ed}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000740)={0x40, 0xc, 0xa3, "f6d3609d63b4e586813004aaf8f0a09772e0760693c49ea1432e8960d98efc437833f9e5a80de19fa6506ecbf0737f557ff411e6d05ee3f1c8e283dbeee9e08607431cefe14c38c8703419895e48565f24e0634ebb9af15debeb724199a8f05f6f81957fb56b4f92dda0885f60b26bfd4d26da437b473c6356793a576b39c47775cd805bdb3874e7122848f6181f86d2ca61d7b6e226d507c143bb36bf7a546a88d42d"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x95}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x31}, &(0x7f0000000800)={0x20, 0x1, 0x2a, "1d61b79783423e21ae021997e948a97d42a69f5d76e849cc8c47159bbf4901aca59ccb6c98560ebfd9ba"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0xa}}) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xce, 0x0, 0x6}]}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x1a, 0xfff, 0xf909, 0x899d, 0x80, 0x6, 0x7, 0x812, 0xfffffe01, 0x1, 0x8c, 0xffffffff, 0x6, 0x5, 0x0], 0x1, 0x4000003}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000040)={0xe, {0x0, 0x2, 0x3, 0xa4, "476101b291b1273b3a22509285692a3ad5099098574eda196b4ac3896df53d1309558826f481123bfaddacb040caaed299323e63c7d5e2c41a9bc2d9792b5ebd95caf9e822b3bbb638d9c2fb16d75690b3a5fef4b3209e54204e19ad89e8f57a7f87bde92e9f1cd110ec1c0d02bcf22c2358ba03b53ad7307f19d5f3db05a0fd3f50cd415d0c9d4cfb86a7952a6bbbc380187fbab2cdc7627f71637a4cd440b637505ecb"}}, 0xb0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020000000073"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x404, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000001c0)={0xa, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 000000 R09: 0000000000000000 [ 815.273733][T11795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.273745][T11795] R13: 00007f9d36a56038 R14: 00007f9d36a55fa0 R15: 00007ffdc1442048 [ 815.273776][T11795] [ 815.999973][T11811] Device name cannot be null; rc = [-22] [ 816.709510][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1435'. [ 816.777409][T11811] bond2: option arp_interval: invalid value (18446744071947943938) [ 816.777434][T11811] bond2: option arp_interval: allowed values 0 - 2147483647 [ 816.828388][T11816] Device name cannot be null; rc = [-22] [ 816.829807][T11811] bond2 (unregistering): Released all slaves [ 816.868857][T11816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1436'. [ 816.945651][T11822] 9p: Bad value for 'wfdno' [ 818.072228][T11829] binder: BINDER_SET_CONTEXT_MGR already set [ 818.072244][T11829] binder: 11826:11829 ioctl 4018620d 200000000040 returned -16 [ 818.161201][T11545] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 818.189073][T11816] bond2: option arp_interval: invalid value (18446744071947943938) [ 818.189096][T11816] bond2: option arp_interval: allowed values 0 - 2147483647 [ 818.214219][T11816] bond2 (unregistering): Released all slaves [ 818.311225][T11545] usb 8-1: Using ep0 maxpacket: 32 [ 818.315274][T11545] usb 8-1: too many endpoints for config 0 interface 0 altsetting 1: 65, using maximum allowed: 30 [ 818.315320][T11545] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.315346][T11545] usb 8-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 65 [ 818.315371][T11545] usb 8-1: config 0 interface 0 has no altsetting 0 [ 818.315402][T11545] usb 8-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 818.315424][T11545] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.399122][ T5816] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 818.411238][T11832] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1438'. [ 818.412422][T11545] usb 8-1: config 0 descriptor?? [ 818.412669][T11832] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1438'. [ 818.421858][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1438'. [ 818.902499][T11545] ntrig 0003:1B96:000A.001B: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.7-1/input0 [ 819.154449][T11545] usb 8-1: USB disconnect, device number 9 [ 819.365999][ T6023] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 819.641297][ T6023] usb 6-1: Using ep0 maxpacket: 16 [ 819.646594][ T6023] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 819.646663][ T6023] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.725693][ T6023] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 819.725720][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.725783][ T6023] usb 6-1: Product: syz [ 819.725797][ T6023] usb 6-1: Manufacturer: syz [ 819.725810][ T6023] usb 6-1: SerialNumber: syz [ 820.996085][T11852] fido_id[11852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 822.225957][ T6023] usb 6-1: 0:2 : does not exist [ 822.226013][ T6023] usb 6-1: unit 9 not found! [ 822.262278][T11865] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1448'. [ 822.262301][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1448'. [ 822.262315][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1448'. [ 822.985387][ T6023] usb 6-1: USB disconnect, device number 44 [ 823.138375][T11848] udevd[11848]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 823.252326][ T5816] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 823.395537][T11875] FAULT_INJECTION: forcing a failure. [ 823.395537][T11875] name failslab, interval 1, probability 0, space 0, times 0 [ 823.395574][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.6.1452 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 823.395626][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 823.395651][T11875] Call Trace: [ 823.395665][T11875] [ 823.395681][T11875] dump_stack_lvl+0xe8/0x150 [ 823.395743][T11875] should_fail_ex+0x46c/0x600 [ 823.395813][T11875] should_failslab+0xa8/0x100 [ 823.395861][T11875] __kmalloc_cache_noprof+0x84/0x6d0 [ 823.395927][T11875] ? wakeup_source_register+0x5b/0x390 [ 823.395985][T11875] wakeup_source_register+0x5b/0x390 [ 823.396043][T11875] ep_modify+0x2c9/0xb20 [ 823.396107][T11875] ? __pfx_ep_modify+0x10/0x10 [ 823.396171][T11875] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 823.396223][T11875] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 823.396258][T11875] ? mutex_lock_nested+0x154/0x1d0 [ 823.396280][T11875] ? do_epoll_ctl+0x3d2/0xe90 [ 823.396304][T11875] do_epoll_ctl+0x6be/0xe90 [ 823.396333][T11875] __x64_sys_epoll_ctl+0x163/0x1a0 [ 823.396357][T11875] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 823.396391][T11875] do_syscall_64+0xec/0xf80 [ 823.396409][T11875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.396427][T11875] ? trace_irq_disable+0x37/0x100 [ 823.396447][T11875] ? clear_bhb_loop+0x60/0xb0 [ 823.396469][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.396488][T11875] RIP: 0033:0x7fe866d5f749 [ 823.396510][T11875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.396527][T11875] RSP: 002b:00007fe864fc6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 823.396548][T11875] RAX: ffffffffffffffda RBX: 00007fe866fb5fa0 RCX: 00007fe866d5f749 [ 823.396563][T11875] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000005 [ 823.396574][T11875] RBP: 00007fe864fc6090 R08: 0000000000000000 R09: 0000000000000000 [ 823.396586][T11875] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001 [ 823.396599][T11875] R13: 00007fe866fb6038 R14: 00007fe866fb5fa0 R15: 00007fffa3be4d78 [ 823.396631][T11875] [ 828.005749][ T5816] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 830.071818][T11930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 830.073139][T11930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 830.073341][T11930] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 830.073542][T11930] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 830.073713][T11930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 830.206428][T11945] warning: `syz.7.1474' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 832.439053][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 832.439094][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 832.440829][ T9445] Bluetooth: hci5: command 0x0406 tx timeout [ 832.448492][ T5816] Bluetooth: hci6: command 0x0419 tx timeout [ 832.448612][T10783] Bluetooth: hci1: command 0x0c1a tx timeout [ 833.021381][ T5857] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 833.363458][ T5857] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 833.363485][ T5857] usb 7-1: config 0 has no interface number 0 [ 833.363515][ T5857] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 833.363566][ T5857] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 833.363594][ T5857] usb 7-1: config 0 interface 255 has no altsetting 0 [ 833.363624][ T5857] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 833.363645][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.368827][ T5857] usb 7-1: config 0 descriptor?? [ 833.377304][ T5857] ums-realtek 7-1:0.255: USB Mass Storage device detected [ 833.600330][ T5119] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 835.591302][T11545] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 835.635369][ T5857] usb 7-1: USB disconnect, device number 2 [ 835.788655][T11545] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 835.788683][T11545] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 835.788702][T11545] usb 1-1: config 171 has no interface number 0 [ 835.788748][T11545] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 835.788772][T11545] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64 [ 835.788797][T11545] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 835.856183][T11545] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 835.856211][T11545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.856231][T11545] usb 1-1: Product: syz [ 835.856245][T11545] usb 1-1: Manufacturer: syz [ 835.856258][T11545] usb 1-1: SerialNumber: syz [ 835.914374][T11972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 836.134364][T11989] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1487'. [ 836.987045][T11545] ath6kl: Failed to submit usb control message: -71 [ 836.987094][T11545] ath6kl: unable to send the bmi data to the device: -71 [ 836.987108][T11545] ath6kl: Unable to send get target info: -71 [ 837.031642][T11545] ath6kl: Failed to init ath6kl core: -71 [ 837.033954][T11545] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 837.096180][T11545] usb 1-1: USB disconnect, device number 45 [ 844.437090][T12039] FAULT_INJECTION: forcing a failure. [ 844.437090][T12039] name failslab, interval 1, probability 0, space 0, times 0 [ 844.437122][T12039] CPU: 0 UID: 0 PID: 12039 Comm: syz.0.1503 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 844.437144][T12039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 844.437156][T12039] Call Trace: [ 844.437163][T12039] [ 844.437178][T12039] dump_stack_lvl+0xe8/0x150 [ 844.437207][T12039] should_fail_ex+0x46c/0x600 [ 844.437237][T12039] should_failslab+0xa8/0x100 [ 844.437257][T12039] __kmalloc_noprof+0xe0/0x7e0 [ 844.437283][T12039] ? tomoyo_encode+0x28b/0x550 [ 844.437307][T12039] tomoyo_encode+0x28b/0x550 [ 844.437331][T12039] tomoyo_realpath_from_path+0x58d/0x5d0 [ 844.437361][T12039] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 844.437386][T12039] tomoyo_path_number_perm+0x1e8/0x5a0 [ 844.437413][T12039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 844.437436][T12039] ? __lock_acquire+0x6b6/0x2cf0 [ 844.437464][T12039] ? do_raw_spin_lock+0x121/0x290 [ 844.437517][T12039] ? __fget_files+0x2a/0x420 [ 844.437540][T12039] ? __fget_files+0x2a/0x420 [ 844.437558][T12039] ? __fget_files+0x3a6/0x420 [ 844.437576][T12039] ? __fget_files+0x2a/0x420 [ 844.437600][T12039] security_file_ioctl+0xcb/0x2d0 [ 844.437628][T12039] __se_sys_ioctl+0x47/0x170 [ 844.437654][T12039] do_syscall_64+0xec/0xf80 [ 844.437673][T12039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.437691][T12039] ? trace_irq_disable+0x37/0x100 [ 844.437710][T12039] ? clear_bhb_loop+0x60/0xb0 [ 844.437733][T12039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.437751][T12039] RIP: 0033:0x7f2c0a3ef749 [ 844.437767][T12039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.437783][T12039] RSP: 002b:00007f2c08656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.437803][T12039] RAX: ffffffffffffffda RBX: 00007f2c0a645fa0 RCX: 00007f2c0a3ef749 [ 844.437817][T12039] RDX: 0000200000000100 RSI: 00000000c0185647 RDI: 0000000000000003 [ 844.437830][T12039] RBP: 00007f2c08656090 R08: 0000000000000000 R09: 0000000000000000 [ 844.437843][T12039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.437855][T12039] R13: 00007f2c0a646038 R14: 00007f2c0a645fa0 R15: 00007ffece7a3758 [ 844.437888][T12039] [ 844.437908][T12039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 845.042127][T12053] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1506'. [ 845.058438][T12055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1509'. [ 845.546314][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1510'. [ 847.575916][T12072] bond1 (unregistering): Released all slaves [ 848.058828][T12089] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1520'. [ 848.091421][ T5119] Bluetooth: hci6: Malformed HCI Event: 0x22 [ 848.193139][ T5119] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 849.496031][T12106] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3952. macoff=96 [ 849.497821][T12106] binder: BINDER_SET_CONTEXT_MGR already set [ 849.497829][T12106] binder: 12104:12106 ioctl 4018620d 200000004a80 returned -16 [ 869.995981][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.996075][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 921.207016][T12001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 921.213723][T12001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 921.213981][T12001] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 921.214223][T12001] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 921.214463][T12001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 921.262797][T11958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 921.280147][T11958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 921.300447][T11958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 921.313564][T11958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 921.334025][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 921.334780][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 921.336566][T11958] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 921.348748][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 921.354080][T11958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 921.361735][T11958] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 921.363073][T11958] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 921.364197][T11958] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 921.365166][T11958] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 921.367299][T11958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 921.374345][T11958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 921.502962][ T5816] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 921.507083][ T5816] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 921.508275][ T5816] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 921.509307][ T5816] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 921.510310][ T5816] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 921.754057][ T5811] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 921.757219][ T5811] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 921.800301][ T5811] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 921.802409][ T5811] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 921.803101][ T5811] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 921.855342][ T5811] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 921.877084][ T5811] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 921.879740][ T5811] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 921.888737][ T5811] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 921.889577][ T5811] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 921.984027][ T5119] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 922.005230][ T5119] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 922.009629][ T5119] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 922.016635][ T5119] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 922.017424][ T5119] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 923.271221][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 923.441214][ T5816] Bluetooth: hci4: command tx timeout [ 923.511168][ T5816] Bluetooth: hci2: command tx timeout [ 923.511179][ T5119] Bluetooth: hci7: command tx timeout [ 923.751793][ T5816] Bluetooth: hci8: command tx timeout [ 923.867574][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 923.870886][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 923.873559][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 923.874698][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 923.875447][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 923.941267][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 923.945356][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 923.946499][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 923.948346][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 923.949032][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 923.991210][ T5816] Bluetooth: hci9: command tx timeout [ 923.991486][ T5119] Bluetooth: hci11: command tx timeout [ 924.151313][ T5119] Bluetooth: hci10: command tx timeout [ 924.354049][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.664318][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.736963][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 924.761414][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 924.764087][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 924.777130][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 924.777920][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 925.066964][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.429311][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.511523][ T5816] Bluetooth: hci4: command tx timeout [ 925.591208][ T5119] Bluetooth: hci2: command tx timeout [ 925.591293][ T5816] Bluetooth: hci7: command tx timeout [ 925.841167][ T5816] Bluetooth: hci8: command tx timeout [ 925.911340][ T5816] Bluetooth: hci1: command tx timeout [ 925.991282][ T5816] Bluetooth: hci3: command tx timeout [ 926.071189][ T5816] Bluetooth: hci11: command tx timeout [ 926.071220][ T5816] Bluetooth: hci9: command tx timeout [ 926.231213][ T5119] Bluetooth: hci10: command tx timeout [ 926.268134][T12133] chnl_net:caif_netlink_parms(): no params data found [ 926.487242][T12116] chnl_net:caif_netlink_parms(): no params data found [ 926.748189][T12114] chnl_net:caif_netlink_parms(): no params data found [ 926.871242][ T5119] Bluetooth: hci5: command tx timeout [ 927.130334][ T43] bridge_slave_1: left allmulticast mode [ 927.130361][ T43] bridge_slave_1: left promiscuous mode [ 927.130586][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.182677][ T43] bridge_slave_0: left allmulticast mode [ 927.182700][ T43] bridge_slave_0: left promiscuous mode [ 927.182939][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.591326][ T5119] Bluetooth: hci4: command tx timeout [ 927.671195][ T5119] Bluetooth: hci2: command tx timeout [ 927.991295][ T5119] Bluetooth: hci1: command tx timeout [ 928.071381][ T5119] Bluetooth: hci3: command tx timeout [ 928.161161][ T5119] Bluetooth: hci11: command tx timeout [ 928.311199][ T5119] Bluetooth: hci10: command tx timeout [ 928.821614][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.882326][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.905241][ T43] bond0 (unregistering): Released all slaves [ 928.951252][ T5119] Bluetooth: hci5: command tx timeout [ 928.967835][T12125] chnl_net:caif_netlink_parms(): no params data found [ 929.125871][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.125991][T12133] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.126164][T12133] bridge_slave_0: entered allmulticast mode [ 929.128753][T12133] bridge_slave_0: entered promiscuous mode [ 929.503477][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.503673][T12133] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.503885][T12133] bridge_slave_1: entered allmulticast mode [ 929.508710][T12133] bridge_slave_1: entered promiscuous mode [ 929.671675][ T5119] Bluetooth: hci4: command tx timeout [ 929.751292][ T5119] Bluetooth: hci2: command tx timeout [ 929.921930][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.922082][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.922256][T12116] bridge_slave_0: entered allmulticast mode [ 929.923705][T12116] bridge_slave_0: entered promiscuous mode [ 930.071196][ T5119] Bluetooth: hci1: command tx timeout [ 930.151175][ T5119] Bluetooth: hci3: command tx timeout [ 930.241160][ T5119] Bluetooth: hci11: command tx timeout [ 930.391177][ T5119] Bluetooth: hci10: command tx timeout [ 930.422828][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.422961][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.423154][T12116] bridge_slave_1: entered allmulticast mode [ 930.424764][T12116] bridge_slave_1: entered promiscuous mode [ 930.445547][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.445666][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.445905][T12114] bridge_slave_0: entered allmulticast mode [ 930.448813][T12114] bridge_slave_0: entered promiscuous mode [ 930.524032][T12133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.628148][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.628235][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.628351][T12114] bridge_slave_1: entered allmulticast mode [ 930.629717][T12114] bridge_slave_1: entered promiscuous mode [ 930.630999][T12149] chnl_net:caif_netlink_parms(): no params data found [ 930.668800][T12133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.789023][T12147] chnl_net:caif_netlink_parms(): no params data found [ 930.924453][T12116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.041257][ T5119] Bluetooth: hci5: command tx timeout [ 931.211302][ T43] hsr_slave_0: left promiscuous mode [ 931.231877][ T43] hsr_slave_1: left promiscuous mode [ 931.232442][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.232457][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.271945][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.271967][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.343840][ T43] veth1_macvtap: left promiscuous mode [ 931.343950][ T43] veth0_macvtap: left promiscuous mode [ 931.344120][ T43] veth1_vlan: left promiscuous mode [ 931.344215][ T43] veth0_vlan: left promiscuous mode [ 931.437369][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.437460][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.151133][ T5119] Bluetooth: hci1: command tx timeout [ 932.231163][ T5119] Bluetooth: hci3: command tx timeout [ 933.112027][ T5119] Bluetooth: hci5: command tx timeout [ 933.536115][ T43] team0 (unregistering): Port device team_slave_1 removed [ 933.732461][ T43] team0 (unregistering): Port device team_slave_0 removed [ 935.917910][T12116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.003624][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.004873][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.004981][T12125] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.005101][T12125] bridge_slave_0: entered allmulticast mode [ 936.006524][T12125] bridge_slave_0: entered promiscuous mode [ 936.094586][T12133] team0: Port device team_slave_0 added [ 936.264933][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.265240][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.265338][T12125] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.265452][T12125] bridge_slave_1: entered allmulticast mode [ 936.266809][T12125] bridge_slave_1: entered promiscuous mode [ 936.269147][T12133] team0: Port device team_slave_1 added [ 936.603558][T12116] team0: Port device team_slave_0 added [ 936.883852][T12116] team0: Port device team_slave_1 added [ 936.884176][T12155] chnl_net:caif_netlink_parms(): no params data found [ 936.978423][T12114] team0: Port device team_slave_0 added [ 936.982130][T12125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.982882][T12133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.982893][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.982914][T12133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.274991][T12114] team0: Port device team_slave_1 added [ 937.275801][T12133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.275810][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.275823][T12133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.278159][T12125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.572832][T12149] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.572981][T12149] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.573105][T12149] bridge_slave_0: entered allmulticast mode [ 937.574497][T12149] bridge_slave_0: entered promiscuous mode [ 937.874541][T12116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.874554][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.874568][T12116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.971961][T12149] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.972028][T12149] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.972146][T12149] bridge_slave_1: entered allmulticast mode [ 937.973512][T12149] bridge_slave_1: entered promiscuous mode [ 937.974578][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.974709][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.974837][T12147] bridge_slave_0: entered allmulticast mode [ 937.976208][T12147] bridge_slave_0: entered promiscuous mode [ 938.142816][T12116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.142830][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.142855][T12116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.252067][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.252158][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.252282][T12147] bridge_slave_1: entered allmulticast mode [ 938.253645][T12147] bridge_slave_1: entered promiscuous mode [ 938.255240][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.255248][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.255263][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.258981][T12125] team0: Port device team_slave_0 added [ 938.482626][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.482635][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.482650][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.574116][T12125] team0: Port device team_slave_1 added [ 938.642825][T12149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.923690][T12149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.927757][T12147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.935925][T12133] hsr_slave_0: entered promiscuous mode [ 938.937265][T12133] hsr_slave_1: entered promiscuous mode [ 939.205350][T12147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.207365][T12125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.207374][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.207388][T12125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.323485][T12155] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.323671][T12155] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.323868][T12155] bridge_slave_0: entered allmulticast mode [ 939.325439][T12155] bridge_slave_0: entered promiscuous mode [ 939.533030][T12125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.533041][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.533063][T12125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.538154][T12116] hsr_slave_0: entered promiscuous mode [ 939.538920][T12116] hsr_slave_1: entered promiscuous mode [ 939.539492][T12116] debugfs: 'hsr0' already exists in 'hsr' [ 939.539508][T12116] Cannot create hsr debugfs directory [ 939.540002][T12155] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.540260][T12155] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.540373][T12155] bridge_slave_1: entered allmulticast mode [ 939.545177][T12155] bridge_slave_1: entered promiscuous mode [ 939.794181][T12149] team0: Port device team_slave_0 added [ 940.363665][T12149] team0: Port device team_slave_1 added [ 940.365237][T12147] team0: Port device team_slave_0 added [ 940.369932][T12114] hsr_slave_0: entered promiscuous mode [ 940.370702][T12114] hsr_slave_1: entered promiscuous mode [ 940.371532][T12114] debugfs: 'hsr0' already exists in 'hsr' [ 940.371557][T12114] Cannot create hsr debugfs directory [ 940.813640][T12147] team0: Port device team_slave_1 added [ 940.956907][T12155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.299575][ T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.348139][T12155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.349024][T12149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.349038][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.349063][T12149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.823304][T12149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.823316][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.823330][T12149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.826210][T12147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.826219][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.826233][T12147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.852256][T12125] hsr_slave_0: entered promiscuous mode [ 941.854227][T12125] hsr_slave_1: entered promiscuous mode [ 941.859601][T12125] debugfs: 'hsr0' already exists in 'hsr' [ 941.859624][T12125] Cannot create hsr debugfs directory [ 942.184910][ T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.212584][T12147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.212599][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.212625][T12147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.351669][T12155] team0: Port device team_slave_0 added [ 942.404022][T12155] team0: Port device team_slave_1 added [ 942.624672][ T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.365131][ T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.404856][T12149] hsr_slave_0: entered promiscuous mode [ 943.405703][T12149] hsr_slave_1: entered promiscuous mode [ 943.406248][T12149] debugfs: 'hsr0' already exists in 'hsr' [ 943.406262][T12149] Cannot create hsr debugfs directory [ 943.407173][T12155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.407182][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.407196][T12155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.524710][T12155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.524721][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.524735][T12155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.619786][T12147] hsr_slave_0: entered promiscuous mode [ 943.620617][T12147] hsr_slave_1: entered promiscuous mode [ 943.621846][T12147] debugfs: 'hsr0' already exists in 'hsr' [ 943.621869][T12147] Cannot create hsr debugfs directory [ 944.465021][T12155] hsr_slave_0: entered promiscuous mode [ 944.465844][T12155] hsr_slave_1: entered promiscuous mode [ 944.466416][T12155] debugfs: 'hsr0' already exists in 'hsr' [ 944.466431][T12155] Cannot create hsr debugfs directory [ 944.878686][T12133] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 944.987146][T12133] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 945.196992][T12133] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 945.430351][ T43] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.794246][ T43] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.184670][ T43] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.534061][ T43] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.081817][T12133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.135574][T12133] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.398556][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.398930][ T1560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.458884][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.459030][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.669649][ T43] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.955339][ T43] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.224863][ T43] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.294848][T12133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.474564][ T43] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.203901][ T43] bridge_slave_1: left allmulticast mode [ 949.203927][ T43] bridge_slave_1: left promiscuous mode [ 949.204122][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.300020][ T43] bridge_slave_0: left allmulticast mode [ 949.300038][ T43] bridge_slave_0: left promiscuous mode [ 949.300182][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.365725][ T43] bridge_slave_1: left allmulticast mode [ 949.365740][ T43] bridge_slave_1: left promiscuous mode [ 949.365869][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.438697][ T43] bridge_slave_0: left allmulticast mode [ 949.438721][ T43] bridge_slave_0: left promiscuous mode [ 949.438982][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.503324][ T43] bridge_slave_1: left allmulticast mode [ 949.503340][ T43] bridge_slave_1: left promiscuous mode [ 949.503464][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.562777][ T43] bridge_slave_0: left allmulticast mode [ 949.562792][ T43] bridge_slave_0: left promiscuous mode [ 949.562943][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.642775][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.701529][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.763928][ T43] bond0 (unregistering): (slave bond1): Releasing backup interface [ 951.781708][ T43] bond0 (unregistering): Released all slaves [ 952.475017][ T43] bond1 (unregistering): Released all slaves [ 953.853606][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.912551][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.933275][ T43] bond0 (unregistering): Released all slaves [ 955.281658][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.361927][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.383234][ T43] bond0 (unregistering): Released all slaves [ 955.714487][T12133] veth0_vlan: entered promiscuous mode [ 955.714842][ T43] : left promiscuous mode [ 956.012502][T12133] veth1_vlan: entered promiscuous mode [ 956.078907][T12133] veth0_macvtap: entered promiscuous mode [ 956.622890][T12133] veth1_macvtap: entered promiscuous mode [ 956.870391][T12133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.161569][T12133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.279213][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.279234][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.381275][ T43] hsr_slave_0: left promiscuous mode [ 959.422041][ T43] hsr_slave_1: left promiscuous mode [ 959.422571][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.422586][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.451751][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.451766][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.593346][ T43] hsr_slave_0: left promiscuous mode [ 959.631201][ T43] hsr_slave_1: left promiscuous mode [ 959.631717][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.631731][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.663572][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.663594][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.801182][ T43] hsr_slave_0: left promiscuous mode [ 959.821594][ T43] hsr_slave_1: left promiscuous mode [ 959.822516][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.822539][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.901841][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.901857][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.025416][ T43] veth1_macvtap: left promiscuous mode [ 960.025475][ T43] veth0_macvtap: left promiscuous mode [ 960.025611][ T43] veth1_vlan: left promiscuous mode [ 960.025703][ T43] veth0_vlan: left promiscuous mode [ 960.152044][ T43] veth1_macvtap: left promiscuous mode [ 960.152145][ T43] veth0_macvtap: left promiscuous mode [ 960.153352][ T43] veth1_vlan: left promiscuous mode [ 960.153531][ T43] veth0_vlan: left promiscuous mode [ 960.291756][ T43] veth1_macvtap: left promiscuous mode [ 960.291861][ T43] veth0_macvtap: left promiscuous mode [ 960.292062][ T43] veth1_vlan: left promiscuous mode [ 960.292158][ T43] veth0_vlan: left promiscuous mode [ 962.441558][ T43] team0 (unregistering): Port device team_slave_1 removed [ 962.622143][ T43] team0 (unregistering): Port device team_slave_0 removed [ 966.543222][ T43] team0 (unregistering): Port device team_slave_1 removed [ 966.741971][ T43] team0 (unregistering): Port device team_slave_0 removed [ 970.571917][ T43] team0 (unregistering): Port device team_slave_1 removed [ 970.771664][ T43] team0 (unregistering): Port device team_slave_0 removed [ 972.907878][ T8142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.907897][ T8142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.079730][T12116] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 973.151132][T12116] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 973.219232][T12116] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 973.361963][T12116] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 975.321408][T12114] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 975.377934][T12114] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 975.453818][ T5119] Bluetooth: hci11: Malformed HCI Event: 0x22 [ 975.463631][T12338] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1534'. [ 975.463867][T12114] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 975.543015][T12114] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 975.712712][ T5816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 975.731622][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 975.735558][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 975.736870][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 975.737660][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 976.164247][T12149] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 976.578046][T12149] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 976.625215][T12149] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 976.697716][T12149] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 977.083546][T12147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 977.152875][T12147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 977.190638][T12147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 977.260661][T12116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.376608][T12147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 977.831587][ T5119] Bluetooth: hci6: command tx timeout [ 977.870194][T12116] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.892950][T12155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 978.014891][T12155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 978.078799][T12155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 978.134720][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.134934][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.163102][T12342] chnl_net:caif_netlink_parms(): no params data found [ 978.196528][T12155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 978.394093][ T5119] Bluetooth: hci11: Malformed HCI Event: 0x22 [ 978.443014][T12396] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1541'. [ 978.525160][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.530014][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.817211][T12114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.045012][ T43] IPVS: stop unused estimator thread 0... [ 979.347788][T12342] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.348618][T12342] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.348804][T12342] bridge_slave_0: entered allmulticast mode [ 979.361332][T12342] bridge_slave_0: entered promiscuous mode [ 979.376290][T12342] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.376425][T12342] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.376602][T12342] bridge_slave_1: entered allmulticast mode [ 979.379458][T12342] bridge_slave_1: entered promiscuous mode [ 979.513043][T12114] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.903030][T12342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.911284][ T5119] Bluetooth: hci6: command tx timeout [ 979.915217][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.928291][ T8142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.943264][T12342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.979113][T12149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.628287][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.628508][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.644308][ T43] bridge_slave_1: left allmulticast mode [ 980.644333][ T43] bridge_slave_1: left promiscuous mode [ 980.644542][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.752591][ T43] bridge_slave_0: left allmulticast mode [ 980.752617][ T43] bridge_slave_0: left promiscuous mode [ 980.752831][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.283748][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.403360][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.495206][ T43] bond0 (unregistering): Released all slaves [ 981.574608][T12342] team0: Port device team_slave_0 added [ 981.675089][T12342] team0: Port device team_slave_1 added [ 981.991205][ T5816] Bluetooth: hci6: command tx timeout [ 982.032255][T12342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.032270][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.032295][T12342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.181247][ T5898] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 982.221163][ T43] hsr_slave_0: left promiscuous mode [ 982.247112][ T43] hsr_slave_1: left promiscuous mode [ 982.247742][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.279464][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.331201][ T5898] usb 10-1: Using ep0 maxpacket: 32 [ 982.334492][ T5898] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 982.334517][ T5898] usb 10-1: config 0 has no interface number 0 [ 982.334580][ T5898] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 982.337467][ T5898] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 982.337493][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.337513][ T5898] usb 10-1: Product: syz [ 982.337527][ T5898] usb 10-1: Manufacturer: syz [ 982.337541][ T5898] usb 10-1: SerialNumber: syz [ 982.372690][ T5898] usb 10-1: config 0 descriptor?? [ 982.379222][ T5898] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 982.379254][ T5898] em28xx 10-1:0.132: Video interface 132 found: [ 982.832872][ T5898] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 982.967712][ T5898] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 982.967732][ T5898] em28xx 10-1:0.132: board has no eeprom [ 983.031129][ T5898] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 983.031145][ T5898] em28xx 10-1:0.132: analog set to bulk mode. [ 983.031178][ T6016] em28xx 10-1:0.132: Registering V4L2 extension [ 983.050946][ T5898] usb 10-1: USB disconnect, device number 2 [ 983.054736][ T5898] em28xx 10-1:0.132: Disconnecting em28xx [ 983.323175][ T6016] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 983.323191][ T6016] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 983.323198][ T6016] em28xx 10-1:0.132: No AC97 audio processor [ 983.379619][ T6016] usb 10-1: Decoder not found [ 983.379637][ T6016] em28xx 10-1:0.132: failed to create media graph [ 983.379671][ T6016] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 983.383201][ T6016] em28xx 10-1:0.132: Remote control support is not available for this card. [ 983.383252][ T5898] em28xx 10-1:0.132: Closing input extension [ 983.398781][ T5898] em28xx 10-1:0.132: Freeing device [ 983.572533][ T43] team0 (unregistering): Port device team_slave_1 removed [ 983.770958][ T43] team0 (unregistering): Port device team_slave_0 removed [ 984.038006][ T5119] Bluetooth: hci11: Malformed HCI Event: 0x22 [ 984.081098][ T5119] Bluetooth: hci6: command tx timeout [ 984.189112][ T5816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 984.210004][ T5816] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 984.213865][ T5816] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 984.227676][ T5816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 984.228486][ T5816] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 984.349002][ T5119] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 984.377618][ T5119] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 984.388176][ T5119] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 984.390358][ T5119] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 984.392778][ T5119] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 984.752972][T12342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.752983][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.752997][T12342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.362257][ T5816] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 985.384338][ T5816] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 985.385519][ T5816] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 985.386853][ T5816] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 985.387539][ T5816] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 985.689751][T12342] hsr_slave_0: entered promiscuous mode [ 985.728160][T12342] hsr_slave_1: entered promiscuous mode [ 985.729154][T12342] debugfs: 'hsr0' already exists in 'hsr' [ 985.729176][T12342] Cannot create hsr debugfs directory [ 986.176371][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1552'. [ 986.320033][ T5119] Bluetooth: hci7: command tx timeout [ 986.471606][ T5119] Bluetooth: hci8: command tx timeout [ 986.807362][T12502] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1552'. [ 986.807385][T12502] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1552'. [ 987.431177][ T5119] Bluetooth: hci9: command tx timeout [ 987.806078][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.059232][T12518] FAULT_INJECTION: forcing a failure. [ 988.059232][T12518] name failslab, interval 1, probability 0, space 0, times 0 [ 988.059274][T12518] CPU: 1 UID: 0 PID: 12518 Comm: syz.9.1554 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 988.059296][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 988.059309][T12518] Call Trace: [ 988.059317][T12518] [ 988.059325][T12518] dump_stack_lvl+0xe8/0x150 [ 988.059357][T12518] should_fail_ex+0x46c/0x600 [ 988.059386][T12518] ? __alloc_skb+0x1dc/0x3a0 [ 988.059407][T12518] should_failslab+0xa8/0x100 [ 988.059428][T12518] ? __alloc_skb+0x1dc/0x3a0 [ 988.059445][T12518] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 988.059472][T12518] ? lockdep_hardirqs_on+0x7b/0x110 [ 988.059493][T12518] ? __alloc_skb+0x198/0x3a0 [ 988.059515][T12518] __alloc_skb+0x1dc/0x3a0 [ 988.059540][T12518] netlink_sendmsg+0x5c6/0xb30 [ 988.059579][T12518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.059612][T12518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 988.059637][T12518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.059663][T12518] __sock_sendmsg+0x21c/0x270 [ 988.059694][T12518] ____sys_sendmsg+0x508/0x810 [ 988.059724][T12518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 988.059756][T12518] ? import_iovec+0x74/0xa0 [ 988.059779][T12518] ___sys_sendmsg+0x21f/0x2a0 [ 988.059805][T12518] ? __pfx____sys_sendmsg+0x10/0x10 [ 988.059862][T12518] ? __fget_files+0x2a/0x420 [ 988.059882][T12518] ? __fget_files+0x3a6/0x420 [ 988.059912][T12518] __x64_sys_sendmsg+0x1a1/0x260 [ 988.059938][T12518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 988.059971][T12518] ? __pfx_ksys_write+0x10/0x10 [ 988.060005][T12518] do_syscall_64+0xec/0xf80 [ 988.060024][T12518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.060043][T12518] ? trace_irq_disable+0x37/0x100 [ 988.060063][T12518] ? clear_bhb_loop+0x60/0xb0 [ 988.060087][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.060106][T12518] RIP: 0033:0x7f627bf3f749 [ 988.060125][T12518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.060141][T12518] RSP: 002b:00007f627a19e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 988.060162][T12518] RAX: ffffffffffffffda RBX: 00007f627c195fa0 RCX: 00007f627bf3f749 [ 988.060177][T12518] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 988.060190][T12518] RBP: 00007f627a19e090 R08: 0000000000000000 R09: 0000000000000000 [ 988.060203][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.060215][T12518] R13: 00007f627c196038 R14: 00007f627c195fa0 R15: 00007ffde17d1f58 [ 988.060248][T12518] [ 988.128509][ T5119] Bluetooth: hci11: Malformed HCI Event: 0x22 [ 988.392031][ T5119] Bluetooth: hci7: command tx timeout [ 989.471442][ T5119] Bluetooth: hci8: command tx timeout [ 989.511196][ T5119] Bluetooth: hci9: command tx timeout [ 990.471453][ T5119] Bluetooth: hci7: command tx timeout [ 990.619667][T12555] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 991.263166][T12483] chnl_net:caif_netlink_parms(): no params data found [ 991.401575][ T5898] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 991.511314][ T5119] Bluetooth: hci8: command tx timeout [ 991.551244][ T5898] usb 10-1: Using ep0 maxpacket: 32 [ 991.554421][ T5898] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 991.557641][ T5898] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 991.557661][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.557672][ T5898] usb 10-1: Product: Ѝ [ 991.557681][ T5898] usb 10-1: Manufacturer: 恈葉疜Ȯ콁첏矉꼔㣇있뱻诅닝빅ࢶᦩ쿤䯛㨜ᱣ埻ϐ濶懘魴ᅧꤿ傺啬꽜덁䏸⏷ꗕ짺ह쀣䊌瘋㫶쥮郘妸ú囤𢡄䩳즗ケ㞎甶愢隽낵䛃問舩㾲 [ 991.557694][ T5898] usb 10-1: SerialNumber: ꂒ啈춋㚋겤鿦⏻䔄뙯胹婡揇ꄵᰴ䐊ᢚК觞擂靧讱䝀䉲ꈛ磦蜷꿉쏫禺َꀍ䐧᧛ᚍ‣㓥೩ႉ窪⳷駣킜⡡挖嵻띈ꨩ [ 991.592101][ T5119] Bluetooth: hci9: command tx timeout [ 991.878281][T12114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.567068][ T5119] Bluetooth: hci7: command tx timeout [ 992.997719][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.997789][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.543594][T12489] chnl_net:caif_netlink_parms(): no params data found [ 993.591506][ T5119] Bluetooth: hci8: command tx timeout [ 993.671162][ T5119] Bluetooth: hci9: command tx timeout [ 993.715829][T12499] chnl_net:caif_netlink_parms(): no params data found [ 994.272758][ T5898] cdc_ncm 10-1:1.0: bind() failure [ 994.291325][ T5898] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 994.291371][ T5898] cdc_ncm 10-1:1.1: bind() failure [ 994.314025][ T5119] Bluetooth: hci11: Malformed HCI Event: 0x22 [ 994.318603][ T5898] usb 10-1: USB disconnect, device number 3 [ 994.662802][T12483] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.663002][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.663193][T12483] bridge_slave_0: entered allmulticast mode [ 994.664643][T12483] bridge_slave_0: entered promiscuous mode [ 996.495743][T12483] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.495866][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.496060][T12483] bridge_slave_1: entered allmulticast mode [ 996.498622][T12483] bridge_slave_1: entered promiscuous mode [ 997.094782][T12489] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.094975][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.095162][T12489] bridge_slave_0: entered allmulticast mode [ 997.097917][T12489] bridge_slave_0: entered promiscuous mode [ 997.206109][T12483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.226080][T12116] veth0_vlan: entered promiscuous mode [ 997.226615][T12489] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.226907][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.227062][T12489] bridge_slave_1: entered allmulticast mode [ 997.229140][T12489] bridge_slave_1: entered promiscuous mode [ 997.230455][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.230520][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.230629][T12499] bridge_slave_0: entered allmulticast mode [ 997.284456][T12499] bridge_slave_0: entered promiscuous mode [ 997.319760][T12483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.392171][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.392266][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.392389][T12499] bridge_slave_1: entered allmulticast mode [ 997.393831][T12499] bridge_slave_1: entered promiscuous mode [ 997.768814][T12489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.038231][T12483] team0: Port device team_slave_0 added [ 998.040762][T12489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.040842][T12342] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 998.165248][T12499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.169393][T12483] team0: Port device team_slave_1 added [ 998.242019][T12342] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 998.288097][T12499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.289280][T12116] veth1_vlan: entered promiscuous mode [ 998.422595][T12342] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 999.023825][T12489] team0: Port device team_slave_0 added [ 999.023919][T12342] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 999.134502][T12483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.134513][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.134527][T12483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.137595][T12489] team0: Port device team_slave_1 added [ 999.184867][ T6069] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 999.345675][ T6069] usb 10-1: config 171 has an invalid interface number: 109 but max is 0 [ 999.345694][ T6069] usb 10-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 999.345705][ T6069] usb 10-1: config 171 has no interface number 0 [ 999.345732][ T6069] usb 10-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 999.345745][ T6069] usb 10-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64 [ 999.345758][ T6069] usb 10-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 999.348335][ T6069] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 999.348352][ T6069] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.348363][ T6069] usb 10-1: Product: syz [ 999.348371][ T6069] usb 10-1: Manufacturer: syz [ 999.348379][ T6069] usb 10-1: SerialNumber: syz [ 999.359988][T12658] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 999.461796][T12499] team0: Port device team_slave_0 added [ 999.466393][T12483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.466403][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.466418][T12483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.711104][ T6069] ath6kl: Failed to submit usb control message: -71 [ 1000.711152][ T6069] ath6kl: unable to send the bmi data to the device: -71 [ 1000.711167][ T6069] ath6kl: Unable to send get target info: -71 [ 1000.768202][ T6069] ath6kl: Failed to init ath6kl core: -71 [ 1000.769470][ T6069] ath6kl_usb 10-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1000.805193][ T6069] usb 10-1: USB disconnect, device number 4 [ 1000.828512][T12499] team0: Port device team_slave_1 added [ 1001.146935][T12489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.146947][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.146963][T12489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.302140][T12489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.302152][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.302167][T12489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.308090][T12499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.308105][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.308131][T12499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.451580][T12114] veth0_vlan: entered promiscuous mode [ 1001.463995][T12499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.464010][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.464036][T12499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.583317][T12483] hsr_slave_0: entered promiscuous mode [ 1001.584668][T12483] hsr_slave_1: entered promiscuous mode [ 1001.585607][T12483] debugfs: 'hsr0' already exists in 'hsr' [ 1001.585631][T12483] Cannot create hsr debugfs directory [ 1001.947677][T12672] FAULT_INJECTION: forcing a failure. [ 1001.947677][T12672] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.947698][T12672] CPU: 1 UID: 0 PID: 12672 Comm: syz.9.1574 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1001.947711][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1001.947717][T12672] Call Trace: [ 1001.947722][T12672] [ 1001.947727][T12672] dump_stack_lvl+0xe8/0x150 [ 1001.947746][T12672] should_fail_ex+0x46c/0x600 [ 1001.947764][T12672] should_failslab+0xa8/0x100 [ 1001.947776][T12672] __kmalloc_noprof+0xe0/0x7e0 [ 1001.947791][T12672] ? tomoyo_encode+0x28b/0x550 [ 1001.947805][T12672] tomoyo_encode+0x28b/0x550 [ 1001.947817][T12672] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1001.947829][T12672] ? tomoyo_domain+0xd9/0x130 [ 1001.947842][T12672] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1001.947857][T12672] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1001.947872][T12672] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1001.947886][T12672] ? __lock_acquire+0x6b6/0x2cf0 [ 1001.947904][T12672] ? do_raw_spin_lock+0x121/0x290 [ 1001.947932][T12672] ? __fget_files+0x2a/0x420 [ 1001.947944][T12672] ? __fget_files+0x2a/0x420 [ 1001.947954][T12672] ? __fget_files+0x3a6/0x420 [ 1001.947964][T12672] ? __fget_files+0x2a/0x420 [ 1001.947977][T12672] security_file_ioctl+0xcb/0x2d0 [ 1001.947993][T12672] __se_sys_ioctl+0x47/0x170 [ 1001.948008][T12672] do_syscall_64+0xec/0xf80 [ 1001.948019][T12672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.948029][T12672] ? trace_irq_disable+0x37/0x100 [ 1001.948040][T12672] ? clear_bhb_loop+0x60/0xb0 [ 1001.948053][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.948063][T12672] RIP: 0033:0x7f627bf3f749 [ 1001.948073][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.948082][T12672] RSP: 002b:00007f627a19e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1001.948094][T12672] RAX: ffffffffffffffda RBX: 00007f627c195fa0 RCX: 00007f627bf3f749 [ 1001.948102][T12672] RDX: 0000200000000440 RSI: 000000004040ae77 RDI: 0000000000000004 [ 1001.948110][T12672] RBP: 00007f627a19e090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.948116][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.948122][T12672] R13: 00007f627c196038 R14: 00007f627c195fa0 R15: 00007ffde17d1f58 [ 1001.948139][T12672] [ 1001.948150][T12672] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1002.036659][T12489] hsr_slave_0: entered promiscuous mode [ 1002.037985][T12489] hsr_slave_1: entered promiscuous mode [ 1002.038904][T12489] debugfs: 'hsr0' already exists in 'hsr' [ 1002.038926][T12489] Cannot create hsr debugfs directory [ 1002.233217][T12499] hsr_slave_0: entered promiscuous mode [ 1002.234599][T12499] hsr_slave_1: entered promiscuous mode [ 1002.235602][T12499] debugfs: 'hsr0' already exists in 'hsr' [ 1002.235626][T12499] Cannot create hsr debugfs directory [ 1002.236333][T12114] veth1_vlan: entered promiscuous mode [ 1002.670191][T12116] veth0_macvtap: entered promiscuous mode [ 1003.123664][T12116] veth1_macvtap: entered promiscuous mode [ 1004.884574][T12693] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1579'. [ 1006.311181][T11545] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1006.461169][T11545] usb 10-1: Using ep0 maxpacket: 32 [ 1006.462895][T11545] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1006.462919][T11545] usb 10-1: config 0 has no interface number 0 [ 1006.462965][T11545] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1006.465111][T11545] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1006.465137][T11545] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.465149][T11545] usb 10-1: Product: syz [ 1006.465156][T11545] usb 10-1: Manufacturer: syz [ 1006.465164][T11545] usb 10-1: SerialNumber: syz [ 1006.468872][T11545] usb 10-1: config 0 descriptor?? [ 1006.542084][T11545] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1006.542103][T11545] em28xx 10-1:0.132: Video interface 132 found: [ 1006.714235][T12116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.789771][T12114] veth0_macvtap: entered promiscuous mode [ 1006.857868][T12116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.877749][T12114] veth1_macvtap: entered promiscuous mode [ 1006.883065][T11545] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1006.900927][T11542] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.919789][T11542] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.950563][T11542] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.035773][T11542] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.354467][T12114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.449513][T12114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.552101][T11545] em28xx 10-1:0.132: failed to read eeprom (err=-110) [ 1007.552159][T11545] em28xx 10-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1007.589673][ T43] bridge_slave_1: left allmulticast mode [ 1007.589697][ T43] bridge_slave_1: left promiscuous mode [ 1007.589913][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.672679][ T43] bridge_slave_0: left allmulticast mode [ 1007.672700][ T43] bridge_slave_0: left promiscuous mode [ 1007.672896][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.727137][T12701] netlink: 26 bytes leftover after parsing attributes in process `syz.9.1582'. [ 1007.727156][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1582'. [ 1007.727163][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1582'. [ 1007.727200][T12701] netlink: 26 bytes leftover after parsing attributes in process `syz.9.1582'. [ 1007.770264][ T43] bridge_slave_1: left allmulticast mode [ 1007.770289][ T43] bridge_slave_1: left promiscuous mode [ 1007.770471][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.851870][ T43] bridge_slave_0: left allmulticast mode [ 1007.851887][ T43] bridge_slave_0: left promiscuous mode [ 1007.852017][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.891203][T11545] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1007.891229][T11545] em28xx 10-1:0.132: analog set to bulk mode. [ 1007.892315][ T5898] em28xx 10-1:0.132: Registering V4L2 extension [ 1007.908184][T11545] usb 10-1: USB disconnect, device number 5 [ 1007.916558][T11545] em28xx 10-1:0.132: Disconnecting em28xx [ 1007.978715][ T43] bridge_slave_1: left allmulticast mode [ 1007.978741][ T43] bridge_slave_1: left promiscuous mode [ 1007.978956][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.027410][ T5898] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1008.027424][ T5898] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1008.027432][ T5898] em28xx 10-1:0.132: No AC97 audio processor [ 1008.029375][ T5898] usb 10-1: Decoder not found [ 1008.029391][ T5898] em28xx 10-1:0.132: failed to create media graph [ 1008.029426][ T5898] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1008.030902][ T5898] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1008.030938][T11545] em28xx 10-1:0.132: Closing input extension [ 1008.043471][T11545] em28xx 10-1:0.132: Freeing device [ 1008.102298][ T43] bridge_slave_0: left allmulticast mode [ 1008.102315][ T43] bridge_slave_0: left promiscuous mode [ 1008.102454][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.761211][T12018] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1008.930913][T12018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.930945][T12018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.933583][T12018] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1008.933608][T12018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1008.933619][T12018] usb 10-1: SerialNumber: syz [ 1008.937199][T12018] usb 10-1: config 0 descriptor?? [ 1009.182031][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.241850][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.305269][ T43] bond0 (unregistering): Released all slaves [ 1009.825418][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.902864][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.967509][ T43] bond0 (unregistering): Released all slaves [ 1011.371885][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.434724][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.497150][ T43] bond0 (unregistering): Released all slaves [ 1011.550309][T12342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.569640][T12018] usbhid 10-1:0.0: can't add hid device: -71 [ 1011.569753][T12018] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1011.599012][T12018] usb 10-1: USB disconnect, device number 6 [ 1011.883229][T11542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.883250][T11542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.000586][T12342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.164834][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.164927][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.503569][T12716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1012.503695][T12716] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1012.523618][ T43] hsr_slave_0: left promiscuous mode [ 1012.561240][ T43] hsr_slave_1: left promiscuous mode [ 1012.561788][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.585518][T12716] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1012.601662][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.662887][T12716] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1012.663192][T12716] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1012.742111][T12716] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1012.802291][ T43] hsr_slave_0: left promiscuous mode [ 1012.821306][ T43] hsr_slave_1: left promiscuous mode [ 1012.822373][T12716] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 1012.822454][T12716] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 1012.823483][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.881739][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.924704][T12716] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 1013.002227][T12716] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1013.002349][T12716] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1013.061161][ T43] hsr_slave_0: left promiscuous mode [ 1013.082070][T12716] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1013.101172][ T43] hsr_slave_1: left promiscuous mode [ 1013.101739][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.132066][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.172693][T12716] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1013.172792][T12716] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1013.216715][T12716] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1013.294227][T12716] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1013.294316][T12716] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1013.342191][T12716] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1013.412391][T12716] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1013.412510][T12716] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1013.492632][T12716] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1013.843723][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1013.911221][ T5119] Bluetooth: hci2: command 0x0c1a tx timeout [ 1013.961634][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1014.711372][ T5119] Bluetooth: hci4: command 0x0c1a tx timeout [ 1014.874611][ T5119] Bluetooth: hci11: command 0x0c1a tx timeout [ 1015.032830][ T5119] Bluetooth: hci6: command 0x0c1a tx timeout [ 1015.062052][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1015.191589][ T5119] Bluetooth: hci7: command 0x0c1a tx timeout [ 1015.207769][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1015.351378][ T5119] Bluetooth: hci8: command 0x0c1a tx timeout [ 1015.431280][ T5119] Bluetooth: hci9: command 0x0c1a tx timeout [ 1016.015617][ T5119] Bluetooth: hci2: command 0x0c1a tx timeout [ 1016.211653][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1016.321722][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1016.791198][ T5119] Bluetooth: hci4: command 0x0c1a tx timeout [ 1016.951089][ T5119] Bluetooth: hci11: command 0x0c1a tx timeout [ 1016.994018][ T1497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.994038][ T1497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.996909][ T6408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.997031][ T6408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.111150][ T5119] Bluetooth: hci6: command 0x0c1a tx timeout [ 1017.166307][T11542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.166325][T11542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.268067][T11542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.268086][T11542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.271999][ T5119] Bluetooth: hci7: command 0x0c1a tx timeout [ 1017.349627][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1587'. [ 1017.441939][ T5119] Bluetooth: hci8: command 0x0c1a tx timeout [ 1017.511249][ T5119] Bluetooth: hci9: command 0x0c1a tx timeout [ 1018.083845][ T5119] Bluetooth: hci2: command 0x0c1a tx timeout [ 1018.180638][T12342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.192789][ T5119] Bluetooth: hci11: command 0x0c1a tx timeout [ 1019.192908][ T5119] Bluetooth: hci6: command 0x0c1a tx timeout [ 1019.354588][ T5816] Bluetooth: hci7: command 0x0c1a tx timeout [ 1019.515347][ T5816] Bluetooth: hci8: command 0x0c1a tx timeout [ 1019.761118][ T5816] Bluetooth: hci9: command 0x0c1a tx timeout [ 1022.467476][T12483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1022.496731][T12483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1022.538940][T12483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1022.639482][T12483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1022.847504][T12342] veth0_vlan: entered promiscuous mode [ 1022.886034][T12489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1022.925007][T12489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1022.982981][T12489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1023.103383][T12489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1023.153032][T12342] veth1_vlan: entered promiscuous mode [ 1023.386631][T12499] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1023.420745][T12499] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1023.517934][T12499] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1023.557921][T12499] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1023.635269][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1594'. [ 1024.584583][T12342] veth0_macvtap: entered promiscuous mode [ 1024.717195][T12342] veth1_macvtap: entered promiscuous mode [ 1025.714349][T12342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.790869][T12342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.848098][T12483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.892465][T11542] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.896622][T11542] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.923161][T11542] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.942620][T11542] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.333342][T12018] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1026.501652][T12018] usb 10-1: Using ep0 maxpacket: 16 [ 1026.529457][T12018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.529505][T12018] usb 10-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 1026.529527][T12018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.679118][T12018] usb 10-1: config 0 descriptor?? [ 1027.253423][T12018] smartjoyplus 0003:6666:8801.001C: unknown main item tag 0x0 [ 1027.253460][T12018] smartjoyplus 0003:6666:8801.001C: unknown main item tag 0x0 [ 1027.253553][T12018] smartjoyplus 0003:6666:8801.001C: item fetching failed at offset 2/5 [ 1027.290459][T12018] smartjoyplus 0003:6666:8801.001C: parse failed [ 1027.299479][T12018] smartjoyplus 0003:6666:8801.001C: probe with driver smartjoyplus failed with error -22 [ 1027.870846][T12799] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 1028.369370][T12489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.056950][T12018] usb 10-1: USB disconnect, device number 7 [ 1029.150144][T12483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.339642][ T43] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.453151][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.458406][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.541130][T12018] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1029.605394][ T43] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.624742][T12489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.711802][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.711960][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.739845][T12018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.739875][T12018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.741102][T12018] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1029.741128][T12018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1029.741147][T12018] usb 10-1: SerialNumber: syz [ 1029.795455][T12018] usb 10-1: config 0 descriptor?? [ 1029.896131][ T43] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.963492][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.963804][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.060972][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.061391][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.068387][ T1497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.068405][ T1497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.274898][T12018] usbhid 10-1:0.0: can't add hid device: -71 [ 1030.275015][T12018] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1030.299096][ T43] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.315452][T12018] usb 10-1: USB disconnect, device number 8 [ 1030.384681][T12499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.449555][ T6767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.449573][ T6767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.490941][T12499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.519551][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.520018][ T6767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.580077][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.580205][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.199785][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1601'. [ 1032.200116][ T43] bridge_slave_1: left allmulticast mode [ 1032.200144][ T43] bridge_slave_1: left promiscuous mode [ 1032.200363][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.755517][ T43] bridge_slave_0: left allmulticast mode [ 1032.755543][ T43] bridge_slave_0: left promiscuous mode [ 1032.755803][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.797909][T12833] fuse: Bad value for 'user_id' [ 1032.797926][T12833] fuse: Bad value for 'user_id' [ 1032.865309][ T43] bridge_slave_1: left allmulticast mode [ 1032.865333][ T43] bridge_slave_1: left promiscuous mode [ 1032.865510][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.002512][ T43] bridge_slave_0: left allmulticast mode [ 1033.002537][ T43] bridge_slave_0: left promiscuous mode [ 1033.002770][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.051166][ T49] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1033.211175][ T49] usb 10-1: Using ep0 maxpacket: 32 [ 1033.215802][ T49] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1033.215825][ T49] usb 10-1: config 0 has no interface number 0 [ 1033.215872][ T49] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1033.218259][ T49] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1033.218285][ T49] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.218304][ T49] usb 10-1: Product: syz [ 1033.218318][ T49] usb 10-1: Manufacturer: syz [ 1033.218332][ T49] usb 10-1: SerialNumber: syz [ 1033.223898][ T49] usb 10-1: config 0 descriptor?? [ 1033.260834][ T49] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1033.260863][ T49] em28xx 10-1:0.132: Video interface 132 found: [ 1033.656897][ T49] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1033.717514][ T49] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1033.717535][ T49] em28xx 10-1:0.132: board has no eeprom [ 1033.771091][ T49] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1033.771118][ T49] em28xx 10-1:0.132: analog set to bulk mode. [ 1033.771388][T12018] em28xx 10-1:0.132: Registering V4L2 extension [ 1033.782220][ T49] usb 10-1: USB disconnect, device number 9 [ 1033.784253][ T49] em28xx 10-1:0.132: Disconnecting em28xx [ 1033.908783][T12018] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1033.908807][T12018] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1033.908821][T12018] em28xx 10-1:0.132: No AC97 audio processor [ 1033.926759][T12018] usb 10-1: Decoder not found [ 1033.926776][T12018] em28xx 10-1:0.132: failed to create media graph [ 1033.926810][T12018] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1033.929240][T12018] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1033.929700][ T49] em28xx 10-1:0.132: Closing input extension [ 1033.945783][ T49] em28xx 10-1:0.132: Freeing device [ 1034.441097][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1034.621049][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.621084][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.623109][ T10] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1034.623129][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1034.623139][ T10] usb 10-1: SerialNumber: syz [ 1034.627587][ T10] usb 10-1: config 0 descriptor?? [ 1035.094212][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 1035.094327][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1035.098888][ T10] usb 10-1: USB disconnect, device number 10 [ 1035.221747][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.282770][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.305881][ T43] bond0 (unregistering): Released all slaves [ 1036.722340][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.783568][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.803147][ T43] bond0 (unregistering): Released all slaves [ 1037.326406][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1610'. [ 1037.508383][T12489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.521174][ T5970] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1037.532647][T12483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.586329][T12499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.671776][ T5970] usb 9-1: Using ep0 maxpacket: 32 [ 1037.673649][ T5970] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1037.673672][ T5970] usb 9-1: config 0 has no interface number 0 [ 1037.673712][ T5970] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1037.675969][ T5970] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1037.675984][ T5970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.675995][ T5970] usb 9-1: Product: syz [ 1037.676003][ T5970] usb 9-1: Manufacturer: syz [ 1037.676010][ T5970] usb 9-1: SerialNumber: syz [ 1037.679731][ T5970] usb 9-1: config 0 descriptor?? [ 1037.755433][ T5970] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1037.755452][ T5970] em28xx 9-1:0.132: Video interface 132 found: [ 1038.158925][ T5970] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1038.781122][ T5970] em28xx 9-1:0.132: failed to read eeprom (err=-110) [ 1038.781162][ T5970] em28xx 9-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1038.913809][T12483] veth0_vlan: entered promiscuous mode [ 1039.004957][T12489] veth0_vlan: entered promiscuous mode [ 1039.009144][T12499] veth0_vlan: entered promiscuous mode [ 1039.081106][ T5970] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1039.081131][ T5970] em28xx 9-1:0.132: analog set to bulk mode. [ 1039.081491][ T6023] em28xx 9-1:0.132: Registering V4L2 extension [ 1039.095237][ T5970] usb 9-1: USB disconnect, device number 2 [ 1039.098027][ T5970] em28xx 9-1:0.132: Disconnecting em28xx [ 1039.211970][ T43] hsr_slave_0: left promiscuous mode [ 1039.231114][ T43] hsr_slave_1: left promiscuous mode [ 1039.232013][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.232037][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.253567][T12874] FAULT_INJECTION: forcing a failure. [ 1039.253567][T12874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.253597][T12874] CPU: 1 UID: 0 PID: 12874 Comm: syz.9.1612 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1039.253619][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1039.253632][T12874] Call Trace: [ 1039.253640][T12874] [ 1039.253648][T12874] dump_stack_lvl+0xe8/0x150 [ 1039.253678][T12874] should_fail_ex+0x46c/0x600 [ 1039.253709][T12874] _copy_from_user+0x2d/0xb0 [ 1039.253729][T12874] sctp_getsockopt_local_addrs+0x102/0xc80 [ 1039.253754][T12874] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1039.253774][T12874] ? lockdep_hardirqs_on+0x7b/0x110 [ 1039.253792][T12874] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1039.253810][T12874] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1039.253837][T12874] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 1039.253873][T12874] ? __local_bh_enable_ip+0x1af/0x2c0 [ 1039.253895][T12874] ? lockdep_hardirqs_on+0x7b/0x110 [ 1039.253917][T12874] sctp_getsockopt+0x68f/0xb90 [ 1039.253941][T12874] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1039.253962][T12874] do_sock_getsockopt+0x2b4/0x3d0 [ 1039.253993][T12874] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1039.254016][T12874] ? __fget_files+0x3a6/0x420 [ 1039.254035][T12874] ? __fget_files+0x2a/0x420 [ 1039.254061][T12874] __x64_sys_getsockopt+0x1ab/0x250 [ 1039.254093][T12874] do_syscall_64+0xec/0xf80 [ 1039.254111][T12874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.254128][T12874] ? trace_irq_disable+0x37/0x100 [ 1039.254148][T12874] ? clear_bhb_loop+0x60/0xb0 [ 1039.254170][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.254189][T12874] RIP: 0033:0x7f627bf3f749 [ 1039.254207][T12874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.254223][T12874] RSP: 002b:00007f627a19e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1039.254244][T12874] RAX: ffffffffffffffda RBX: 00007f627c195fa0 RCX: 00007f627bf3f749 [ 1039.254258][T12874] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 1039.254270][T12874] RBP: 00007f627a19e090 R08: 0000200000000000 R09: 0000000000000000 [ 1039.254284][T12874] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1039.254297][T12874] R13: 00007f627c196038 R14: 00007f627c195fa0 R15: 00007ffde17d1f58 [ 1039.254328][T12874] [ 1039.261658][ T6023] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1039.261679][ T6023] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1039.261692][ T6023] em28xx 9-1:0.132: No AC97 audio processor [ 1039.279263][ T6023] usb 9-1: Decoder not found [ 1039.279280][ T6023] em28xx 9-1:0.132: failed to create media graph [ 1039.279314][ T6023] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1039.283338][ T6023] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1039.283388][ T5970] em28xx 9-1:0.132: Closing input extension [ 1039.296772][ T5970] em28xx 9-1:0.132: Freeing device [ 1039.632844][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.632871][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.551256][ T43] hsr_slave_0: left promiscuous mode [ 1040.591112][ T43] hsr_slave_1: left promiscuous mode [ 1040.591699][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.591715][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.634133][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.634157][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.761150][ T5900] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1040.790727][ T43] veth1_macvtap: left promiscuous mode [ 1040.790788][ T43] veth0_macvtap: left promiscuous mode [ 1040.790929][ T43] veth1_vlan: left promiscuous mode [ 1040.808399][ T43] veth0_vlan: left promiscuous mode [ 1040.911178][ T5900] usb 10-1: Using ep0 maxpacket: 32 [ 1040.912893][ T5900] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1040.912916][ T5900] usb 10-1: config 0 has no interface number 0 [ 1040.912975][ T5900] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1040.915147][ T5900] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1040.915173][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.915192][ T5900] usb 10-1: Product: syz [ 1040.915200][ T5900] usb 10-1: Manufacturer: syz [ 1040.915207][ T5900] usb 10-1: SerialNumber: syz [ 1040.918880][ T5900] usb 10-1: config 0 descriptor?? [ 1040.957183][ T5900] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1040.957215][ T5900] em28xx 10-1:0.132: Video interface 132 found: [ 1041.003524][ T43] veth1_macvtap: left promiscuous mode [ 1041.003602][ T43] veth0_macvtap: left promiscuous mode [ 1041.003784][ T43] veth1_vlan: left promiscuous mode [ 1041.003939][ T43] veth0_vlan: left promiscuous mode [ 1041.335124][ T5900] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1041.961220][ T5900] em28xx 10-1:0.132: failed to read eeprom (err=-110) [ 1041.961274][ T5900] em28xx 10-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1042.149512][T12884] netlink: 26 bytes leftover after parsing attributes in process `syz.9.1614'. [ 1042.149526][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1614'. [ 1042.149539][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1614'. [ 1042.149597][T12884] netlink: 26 bytes leftover after parsing attributes in process `syz.9.1614'. [ 1042.294362][ T5900] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1042.294387][ T5900] em28xx 10-1:0.132: analog set to bulk mode. [ 1042.294596][ T5970] em28xx 10-1:0.132: Registering V4L2 extension [ 1042.321905][ T5900] usb 10-1: USB disconnect, device number 11 [ 1042.323884][ T5900] em28xx 10-1:0.132: Disconnecting em28xx [ 1042.416821][ T5970] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1042.416836][ T5970] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1042.416843][ T5970] em28xx 10-1:0.132: No AC97 audio processor [ 1042.418850][ T5970] usb 10-1: Decoder not found [ 1042.418866][ T5970] em28xx 10-1:0.132: failed to create media graph [ 1042.418900][ T5970] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1042.420301][ T5970] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1042.420335][ T5900] em28xx 10-1:0.132: Closing input extension [ 1042.479565][ T5900] em28xx 10-1:0.132: Freeing device [ 1043.741795][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1044.091811][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1044.299869][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1044.323027][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1044.325244][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1044.330144][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1044.338136][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1044.468562][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1044.486634][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1044.493958][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1044.495194][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1044.496029][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1045.448567][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1045.456359][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1045.461986][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1045.472250][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1045.473488][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1046.476630][ T5119] Bluetooth: hci1: command tx timeout [ 1046.554406][ T5119] Bluetooth: hci2: command tx timeout [ 1047.591115][ T5119] Bluetooth: hci3: command tx timeout [ 1048.552766][ T5119] Bluetooth: hci1: command tx timeout [ 1048.641226][ T5119] Bluetooth: hci2: command tx timeout [ 1048.712752][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1048.922531][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1049.671157][ T5119] Bluetooth: hci3: command tx timeout [ 1050.631183][ T5119] Bluetooth: hci1: command tx timeout [ 1050.711248][ T5119] Bluetooth: hci2: command tx timeout [ 1051.071043][T12899] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1617'. [ 1051.366146][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1618'. [ 1052.501622][ T5119] Bluetooth: hci3: command tx timeout [ 1052.712590][ T5119] Bluetooth: hci1: command tx timeout [ 1052.791084][ T5119] Bluetooth: hci2: command tx timeout [ 1052.803332][T12917] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1619'. [ 1053.441109][ T6023] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1054.316535][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.316619][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.351435][ T6023] usb 10-1: Using ep0 maxpacket: 32 [ 1054.356610][ T6023] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1054.356634][ T6023] usb 10-1: config 0 has no interface number 0 [ 1054.356679][ T6023] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1054.358791][ T6023] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1054.358817][ T6023] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.358828][ T6023] usb 10-1: Product: syz [ 1054.358836][ T6023] usb 10-1: Manufacturer: syz [ 1054.358844][ T6023] usb 10-1: SerialNumber: syz [ 1054.363537][ T6023] usb 10-1: config 0 descriptor?? [ 1054.452834][ T6023] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1054.452856][ T6023] em28xx 10-1:0.132: Video interface 132 found: [ 1054.562113][ T5119] Bluetooth: hci3: command tx timeout [ 1054.827799][ T6023] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1055.451060][ T6023] em28xx 10-1:0.132: failed to read eeprom (err=-110) [ 1055.451115][ T6023] em28xx 10-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1055.638717][T12922] netlink: 26 bytes leftover after parsing attributes in process `syz.9.1621'. [ 1055.638739][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1621'. [ 1055.638752][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1621'. [ 1055.638807][T12922] netlink: 26 bytes leftover after parsing attributes in process `syz.9.1621'. [ 1055.811098][ T6023] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1055.811126][ T6023] em28xx 10-1:0.132: analog set to bulk mode. [ 1055.811435][ T5990] em28xx 10-1:0.132: Registering V4L2 extension [ 1055.851534][ T6023] usb 10-1: USB disconnect, device number 12 [ 1055.853651][ T6023] em28xx 10-1:0.132: Disconnecting em28xx [ 1056.181691][ T5990] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1056.181716][ T5990] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1056.181730][ T5990] em28xx 10-1:0.132: No AC97 audio processor [ 1056.216200][ T5990] usb 10-1: Decoder not found [ 1056.216219][ T5990] em28xx 10-1:0.132: failed to create media graph [ 1056.216256][ T5990] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1056.220088][ T5990] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1056.220142][ T6023] em28xx 10-1:0.132: Closing input extension [ 1056.316263][ T6023] em28xx 10-1:0.132: Freeing device [ 1056.443776][T12904] chnl_net:caif_netlink_parms(): no params data found [ 1056.805116][ T6023] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1056.882459][T12907] chnl_net:caif_netlink_parms(): no params data found [ 1056.967162][ T6023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.967194][ T6023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.969623][ T6023] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1056.969649][ T6023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1056.969668][ T6023] usb 10-1: SerialNumber: syz [ 1057.044542][ T6023] usb 10-1: config 0 descriptor?? [ 1058.166242][T12902] chnl_net:caif_netlink_parms(): no params data found [ 1058.221514][ T6023] usbhid 10-1:0.0: can't add hid device: -71 [ 1058.221631][ T6023] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1058.225655][ T6023] usb 10-1: USB disconnect, device number 13 [ 1058.333761][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1627'. [ 1059.560497][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.560619][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.560736][T12904] bridge_slave_0: entered allmulticast mode [ 1059.564296][T12904] bridge_slave_0: entered promiscuous mode [ 1061.002480][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.002548][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.002666][T12904] bridge_slave_1: entered allmulticast mode [ 1061.004052][T12904] bridge_slave_1: entered promiscuous mode [ 1061.288749][T12907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.288965][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.289151][T12907] bridge_slave_0: entered allmulticast mode [ 1061.292385][T12907] bridge_slave_0: entered promiscuous mode [ 1061.542456][T12907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.565868][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.565993][T12907] bridge_slave_1: entered allmulticast mode [ 1061.665623][T12907] bridge_slave_1: entered promiscuous mode [ 1061.825741][T12904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.440784][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1635'. [ 1064.456876][T12904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.574173][T12902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.574286][T12902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.574438][T12902] bridge_slave_0: entered allmulticast mode [ 1064.601498][T12902] bridge_slave_0: entered promiscuous mode [ 1064.617592][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1064.617606][ T37] audit: type=1326 audit(1767588138.266:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1064.617650][ T37] audit: type=1326 audit(1767588138.266:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1064.625518][ T37] audit: type=1326 audit(1767588138.276:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1064.625564][ T37] audit: type=1326 audit(1767588138.276:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1064.625603][ T37] audit: type=1326 audit(1767588138.276:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1064.625642][ T37] audit: type=1326 audit(1767588138.276:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1064.625879][ T37] audit: type=1326 audit(1767588138.276:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1064.627082][ T37] audit: type=1326 audit(1767588138.276:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1064.632441][ T37] audit: type=1326 audit(1767588138.276:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1064.633221][ T37] audit: type=1326 audit(1767588138.276:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.9.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf3f749 code=0x7ffc0000 [ 1066.362098][T12902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.362167][T12902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.362282][T12902] bridge_slave_1: entered allmulticast mode [ 1066.363654][T12902] bridge_slave_1: entered promiscuous mode [ 1066.409665][T12907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.616986][T12907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.747889][ T5119] Bluetooth: hci6: Malformed HCI Event: 0x22 [ 1066.998099][T12904] team0: Port device team_slave_0 added [ 1067.025542][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1641'. [ 1067.154747][T12904] team0: Port device team_slave_1 added [ 1067.158536][T12902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.515232][T12902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.517010][T12907] team0: Port device team_slave_0 added [ 1067.672968][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1067.821417][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1067.823661][ T10] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1067.823684][ T10] usb 10-1: config 0 has no interface number 0 [ 1067.823730][ T10] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1067.826582][ T10] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1067.826609][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.826629][ T10] usb 10-1: Product: syz [ 1067.826643][ T10] usb 10-1: Manufacturer: syz [ 1067.826657][ T10] usb 10-1: SerialNumber: syz [ 1067.840960][ T10] usb 10-1: config 0 descriptor?? [ 1067.848028][ T10] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1067.848059][ T10] em28xx 10-1:0.132: Video interface 132 found: [ 1068.053544][T12907] team0: Port device team_slave_1 added [ 1068.975648][ T10] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1069.153024][T12904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.153040][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.153066][T12904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.403592][T12904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.403609][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.403630][T12904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.408089][T12902] team0: Port device team_slave_0 added [ 1069.709045][T12902] team0: Port device team_slave_1 added [ 1069.709886][T12907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.709899][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.709925][T12907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.848360][T12907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.848375][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.848402][T12907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.055477][ T10] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1070.055503][ T10] em28xx 10-1:0.132: board has no eeprom [ 1070.083704][T12902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.083714][T12902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.083729][T12902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.111133][ T10] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1070.111157][ T10] em28xx 10-1:0.132: analog set to bulk mode. [ 1070.111537][ T5965] em28xx 10-1:0.132: Registering V4L2 extension [ 1070.222091][ T5965] em28xx 10-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1070.223329][ T5965] em28xx 10-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1070.227813][ T5965] em28xx 10-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1070.247081][ T5965] em28xx 10-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1070.254996][T12902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.255011][T12902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.255037][T12902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.276479][T12904] hsr_slave_0: entered promiscuous mode [ 1070.277681][T12904] hsr_slave_1: entered promiscuous mode [ 1070.278520][T12904] debugfs: 'hsr0' already exists in 'hsr' [ 1070.278541][T12904] Cannot create hsr debugfs directory [ 1070.394947][ T5965] em28xx 10-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1070.395552][ T5965] em28xx 10-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1070.395925][ T5965] em28xx 10-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1070.396295][ T5965] em28xx 10-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1070.426896][ T10] usb 10-1: USB disconnect, device number 14 [ 1070.428891][ T10] em28xx 10-1:0.132: Disconnecting em28xx [ 1070.536247][ T5965] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1070.536260][ T5965] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1070.536269][ T5965] em28xx 10-1:0.132: No AC97 audio processor [ 1070.552932][ T5965] usb 10-1: Decoder not found [ 1070.552949][ T5965] em28xx 10-1:0.132: failed to create media graph [ 1070.552983][ T5965] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1070.565317][ T5965] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1070.565877][ T10] em28xx 10-1:0.132: Closing input extension [ 1070.594759][ T10] em28xx 10-1:0.132: Freeing device [ 1071.801243][T13041] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1645'. [ 1071.834056][T12907] hsr_slave_0: entered promiscuous mode [ 1071.852449][T12907] hsr_slave_1: entered promiscuous mode [ 1071.853409][T12907] debugfs: 'hsr0' already exists in 'hsr' [ 1071.853433][T12907] Cannot create hsr debugfs directory [ 1072.081800][T12902] hsr_slave_0: entered promiscuous mode [ 1072.083147][T12902] hsr_slave_1: entered promiscuous mode [ 1072.084095][T12902] debugfs: 'hsr0' already exists in 'hsr' [ 1072.084118][T12902] Cannot create hsr debugfs directory [ 1072.231276][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1072.381072][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1072.384558][ T10] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1072.384582][ T10] usb 9-1: config 0 has no interface number 0 [ 1072.384630][ T10] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1072.391970][ T10] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1072.391996][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.392016][ T10] usb 9-1: Product: syz [ 1072.392030][ T10] usb 9-1: Manufacturer: syz [ 1072.392044][ T10] usb 9-1: SerialNumber: syz [ 1072.411405][ T10] usb 9-1: config 0 descriptor?? [ 1072.495388][ T10] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1072.495423][ T10] em28xx 9-1:0.132: Video interface 132 found: [ 1072.902924][ T10] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1073.542767][ T10] em28xx 9-1:0.132: failed to read eeprom (err=-110) [ 1073.542819][ T10] em28xx 9-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1073.742361][T13049] netlink: 26 bytes leftover after parsing attributes in process `syz.8.1647'. [ 1073.742382][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1647'. [ 1073.742395][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1647'. [ 1073.742446][T13049] netlink: 26 bytes leftover after parsing attributes in process `syz.8.1647'. [ 1073.868828][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1650'. [ 1073.924863][ T10] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1073.924888][ T10] em28xx 9-1:0.132: analog set to bulk mode. [ 1073.925199][ T5965] em28xx 9-1:0.132: Registering V4L2 extension [ 1073.957789][ T10] usb 9-1: USB disconnect, device number 3 [ 1073.960648][ T10] em28xx 9-1:0.132: Disconnecting em28xx [ 1074.174085][ T5965] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1074.174109][ T5965] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1074.174123][ T5965] em28xx 9-1:0.132: No AC97 audio processor [ 1074.180891][ T5965] usb 9-1: Decoder not found [ 1074.180908][ T5965] em28xx 9-1:0.132: failed to create media graph [ 1074.180943][ T5965] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1074.250315][ T5965] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1074.253900][ T10] em28xx 9-1:0.132: Closing input extension [ 1074.269796][ T10] em28xx 9-1:0.132: Freeing device [ 1076.101217][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1076.251217][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1076.258004][ T10] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1076.258029][ T10] usb 9-1: config 0 has no interface number 0 [ 1076.258077][ T10] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1076.261949][ T10] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1076.261974][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.261993][ T10] usb 9-1: Product: syz [ 1076.262007][ T10] usb 9-1: Manufacturer: syz [ 1076.262021][ T10] usb 9-1: SerialNumber: syz [ 1076.289823][ T10] usb 9-1: config 0 descriptor?? [ 1076.308163][ T10] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1076.308193][ T10] em28xx 9-1:0.132: Video interface 132 found: [ 1076.521146][T12018] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1076.674514][T12018] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.674540][T12018] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1076.674590][T12018] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1076.674613][T12018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.679003][T12018] usb 10-1: config 0 descriptor?? [ 1076.697783][ T10] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1076.735592][T12018] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1076.735985][T12018] dvb-usb: bulk message failed: -22 (3/0) [ 1076.767594][T12018] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1076.768724][T12018] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1076.768815][T12018] usb 10-1: media controller created [ 1076.803445][T12018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1076.905000][T12018] dvb-usb: bulk message failed: -22 (6/0) [ 1076.905131][T12018] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1076.931595][T12018] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input23 [ 1076.955729][T12018] dvb-usb: schedule remote query interval to 150 msecs. [ 1076.955749][T12018] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1077.003645][T13107] dvb-usb: bulk message failed: -22 (2/0) [ 1077.022050][ T5898] usb 10-1: USB disconnect, device number 15 [ 1077.267312][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1078.861788][ T10] em28xx 9-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1078.861817][ T10] em28xx 9-1:0.132: board has no eeprom [ 1078.921183][ T10] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1078.921208][ T10] em28xx 9-1:0.132: analog set to bulk mode. [ 1078.922686][ T5898] em28xx 9-1:0.132: Registering V4L2 extension [ 1078.981407][ T10] usb 9-1: USB disconnect, device number 4 [ 1078.982578][ T10] em28xx 9-1:0.132: Disconnecting em28xx [ 1079.312508][ T5898] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1079.312533][ T5898] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1079.312547][ T5898] em28xx 9-1:0.132: No AC97 audio processor [ 1079.352561][ T5898] usb 9-1: Decoder not found [ 1079.352578][ T5898] em28xx 9-1:0.132: failed to create media graph [ 1079.352613][ T5898] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1079.357416][ T5898] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1079.357469][ T10] em28xx 9-1:0.132: Closing input extension [ 1079.384411][ T10] em28xx 9-1:0.132: Freeing device [ 1080.397563][ T43] bridge_slave_1: left allmulticast mode [ 1080.397592][ T43] bridge_slave_1: left promiscuous mode [ 1080.397833][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.453548][ T43] bridge_slave_0: left allmulticast mode [ 1080.453564][ T43] bridge_slave_0: left promiscuous mode [ 1080.453698][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.545468][ T43] bridge_slave_1: left allmulticast mode [ 1080.545495][ T43] bridge_slave_1: left promiscuous mode [ 1080.545714][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.640671][ T43] bridge_slave_0: left allmulticast mode [ 1080.640695][ T43] bridge_slave_0: left promiscuous mode [ 1080.640920][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.737592][ T43] bridge_slave_1: left allmulticast mode [ 1080.737616][ T43] bridge_slave_1: left promiscuous mode [ 1080.737833][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.822425][ T43] bridge_slave_0: left allmulticast mode [ 1080.822450][ T43] bridge_slave_0: left promiscuous mode [ 1080.822667][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.975666][ T5898] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1081.141187][ T5898] usb 9-1: Using ep0 maxpacket: 32 [ 1081.144225][ T5898] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1081.144248][ T5898] usb 9-1: config 0 has no interface number 0 [ 1081.144294][ T5898] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1081.147827][ T5898] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1081.147867][ T5898] usb 9-1: [ 1081.147867][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.147887][ T5898] usb 9-1: Product: syz [ 1081.147901][ T5898] usb 9-1: Manufacturer: syz [ 1081.147915][ T5898] usb 9-1: SerialNumber: syz [ 1081.160056][ T5898] usb 9-1: config 0 descriptor?? [ 1081.174023][ T5898] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1081.174054][ T5898] em28xx 9-1:0.132: Video interface 132 found: [ 1081.191235][ T38] INFO: task syz.4.1500:12036 blocked for more than 143 seconds. [ 1081.191254][ T38] Not tainted syzkaller #0 [ 1081.191265][ T38] Blocked by coredump. [ 1081.191271][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1081.191281][ T38] task:syz.4.1500 state:D stack:27032 pid:12036 tgid:12034 ppid:5802 task_flags:0x40044c flags:0x00080001 [ 1081.191335][ T38] Call Trace: [ 1081.191343][ T38] [ 1081.191356][ T38] __schedule+0x145f/0x5070 [ 1081.191389][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1081.191420][ T38] ? unwind_next_frame+0xa5/0x23d0 [ 1081.191459][ T38] ? __pfx___schedule+0x10/0x10 [ 1081.191493][ T38] ? schedule+0x91/0x360 [ 1081.191521][ T38] schedule+0x165/0x360 [ 1081.191547][ T38] schedule_timeout+0x9a/0x270 [ 1081.191573][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1081.191600][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1081.191630][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1081.191645][ T38] ? wait_for_completion+0x267/0x5d0 [ 1081.191672][ T38] wait_for_completion+0x2bf/0x5d0 [ 1081.191711][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1081.191744][ T38] ? __flush_work+0xce/0xd20 [ 1081.191767][ T38] ? __flush_work+0xce/0xd20 [ 1081.191790][ T38] __flush_work+0x9c1/0xd20 [ 1081.191813][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1081.191858][ T38] ? __flush_work+0xce/0xd20 [ 1081.191884][ T38] ? __pfx___flush_work+0x10/0x10 [ 1081.191908][ T38] ? __pfx_wq_barrier_func+0x10/0x10 [ 1081.191939][ T38] ? work_grab_pending+0x123/0x8e0 [ 1081.191972][ T38] ? __cancel_work_sync+0x5c/0x110 [ 1081.191999][ T38] __cancel_work_sync+0xbe/0x110 [ 1081.192025][ T38] hci_cmd_sync_clear+0x30/0x230 [ 1081.192062][ T38] hci_unregister_dev+0x194/0x5b0 [ 1081.192085][ T38] vhci_release+0x155/0x1b0 [ 1081.192112][ T38] ? __pfx_vhci_release+0x10/0x10 [ 1081.192138][ T38] __fput+0x45b/0xa80 [ 1081.192171][ T38] task_work_run+0x1d4/0x260 [ 1081.192201][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1081.192227][ T38] ? do_exit+0x68f/0x22f0 [ 1081.192253][ T38] ? do_exit+0x68f/0x22f0 [ 1081.192283][ T38] do_exit+0x694/0x22f0 [ 1081.192311][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1081.192331][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1081.192352][ T38] ? __pfx_do_exit+0x10/0x10 [ 1081.192375][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1081.192399][ T38] ? reacquire_held_locks+0x104/0x190 [ 1081.192426][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1081.192462][ T38] do_group_exit+0x21c/0x2d0 [ 1081.192489][ T38] ? rt_spin_unlock+0x161/0x200 [ 1081.192516][ T38] get_signal+0x125d/0x1310 [ 1081.192559][ T38] arch_do_signal_or_restart+0x9a/0x7a0 [ 1081.192590][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1081.192616][ T38] ? do_sys_openat2+0x15a/0x200 [ 1081.192657][ T38] exit_to_user_mode_loop+0x87/0x4e0 [ 1081.192684][ T38] ? rcu_is_watching+0x15/0xb0 [ 1081.192706][ T38] do_syscall_64+0x2c1/0xf80 [ 1081.192725][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.192744][ T38] ? trace_irq_disable+0x37/0x100 [ 1081.192764][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1081.192788][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.192808][ T38] RIP: 0033:0x7fc64564f749 [ 1081.192826][ T38] RSP: 002b:00007fc6438ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1081.192854][ T38] RAX: 0000000000000004 RBX: 00007fc6458a5fa0 RCX: 00007fc64564f749 [ 1081.192868][ T38] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1081.192883][ T38] RBP: 00007fc6456d3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1081.192896][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.192909][ T38] R13: 00007fc6458a6038 R14: 00007fc6458a5fa0 R15: 00007fff2de36118 [ 1081.192942][ T38] [ 1081.193000][ T38] [ 1081.193000][ T38] Showing all locks held in the system: [ 1081.193011][ T38] 3 locks held by kworker/0:1/10: [ 1081.193023][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1081.193077][ T38] #1: ffffc900000f7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1081.193122][ T38] #2: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1081.193169][ T38] 4 locks held by pr/legacy/17: [ 1081.193182][ T38] 1 lock held by khungtaskd/38: [ 1081.193193][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1081.193245][ T38] 11 locks held by kworker/u8:2/43: [ 1081.193264][ T38] 8 locks held by kworker/u8:7/1001: [ 1081.193291][ T38] 3 locks held by kworker/u8:18/3684: [ 1081.193302][ T38] #0: ffff88814d5a6138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1081.193349][ T38] #1: ffffc9000e3bfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1081.193397][ T38] #2: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 1081.193447][ T38] 1 lock held by udevd/5170: [ 1081.193458][ T38] #0: ffff8880b8946458 (&s->lock_key#58){+.+.}-{3:3}, at: ___slab_alloc+0x2ad/0x13e0 [ 1081.193510][ T38] 2 locks held by getty/5564: [ 1081.193521][ T38] #0: ffff88814e6130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1081.193568][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1081.193613][ T38] 6 locks held by kworker/0:6/5898: [ 1081.193625][ T38] #0: ffff8881426c1138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1081.193670][ T38] #1: ffffc90005227bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1081.193716][ T38] #2: ffff8880282d8188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4f30 [ 1081.193763][ T38] #3: ffff888035d38188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 1081.193808][ T38] #4: ffff888024076150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 1081.193859][ T38] #5: ffff888032119ef8 (&dev->ctrl_urb_lock){+.+.}-{4:4}, at: em28xx_write_regs_req+0x14d/0x3e0 [ 1081.193908][ T38] 3 locks held by kworker/u8:25/8631: [ 1081.193919][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1081.193967][ T38] #1: ffffc90004227bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1081.194012][ T38] #2: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1081.194062][ T38] 3 locks held by kworker/u9:2/9860: [ 1081.194073][ T38] #0: ffff88802807f138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1081.194117][ T38] #1: ffffc90004dd7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1081.194163][ T38] #2: ffff88803b954f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1081.194221][ T38] 7 locks held by syz-executor/12902: [ 1081.194232][ T38] #0: ffff888035906480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1081.194285][ T38] #1: ffff88805d9e4c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1081.194332][ T38] #2: ffff888143365b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1081.194381][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1081.194425][ T38] #4: ffff88807c4dd0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1081.194472][ T38] #5: ffff88807c4de300 (&devlink->lock_key#24){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1081.194522][ T38] #6: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1081.194567][ T38] 4 locks held by syz-executor/12904: [ 1081.194578][ T38] #0: ffff888035906480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1081.194629][ T38] #1: ffff88806640e878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1081.194674][ T38] #2: ffff888143365a58 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1081.194723][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 1081.194768][ T38] 4 locks held by syz-executor/12907: [ 1081.194779][ T38] #0: ffff888035906480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1081.194831][ T38] #1: ffff88803121d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1081.194883][ T38] #2: ffff888143365a58 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1081.194934][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 1081.194980][ T38] 1 lock held by syz.9.1656/13160: [ 1081.194991][ T38] #0: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 1081.195036][ T38] 2 locks held by cmp/13176: [ 1081.195048][ T38] [ 1081.195053][ T38] ============================================= [ 1081.195053][ T38] [ 1081.195062][ T38] NMI backtrace for cpu 1 [ 1081.195075][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1081.195097][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1081.195109][ T38] Call Trace: [ 1081.195117][ T38] [ 1081.195125][ T38] dump_stack_lvl+0xe8/0x150 [ 1081.195152][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1081.195176][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1081.195197][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1081.195224][ T38] sys_info+0x135/0x170 [ 1081.195244][ T38] watchdog+0xf95/0xfe0 [ 1081.195269][ T38] ? watchdog+0x20a/0xfe0 [ 1081.195296][ T38] kthread+0x711/0x8a0 [ 1081.195325][ T38] ? __pfx_watchdog+0x10/0x10 [ 1081.195345][ T38] ? __pfx_kthread+0x10/0x10 [ 1081.195367][ T38] ? rt_spin_unlock+0x150/0x200 [ 1081.195395][ T38] ? rt_spin_unlock+0x161/0x200 [ 1081.195416][ T38] ? __pfx_kthread+0x10/0x10 [ 1081.195443][ T38] ret_from_fork+0x510/0xa50 [ 1081.195466][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1081.195485][ T38] ? __switch_to+0xc9e/0x1480 [ 1081.195515][ T38] ? __pfx_kthread+0x10/0x10 [ 1081.195540][ T38] ret_from_fork_asm+0x1a/0x30 [ 1081.195581][ T38] [ 1081.195589][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1081.195619][ C0] NMI backtrace for cpu 0 [ 1081.195634][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1081.195654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1081.195666][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x80 [ 1081.195686][ C0] Code: 00 00 00 48 8b 3d e4 d9 41 0b 48 89 de 5b e9 13 3c 57 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 0c 25 08 10 b3 91 65 8b 35 e8 63 f3 0f 81 e6 [ 1081.195702][ C0] RSP: 0018:ffffc900001577d8 EFLAGS: 00000246 [ 1081.195718][ C0] RAX: 0000000000000000 RBX: ffff8880282564e0 RCX: ffff88801ba95ac0 [ 1081.195731][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1081.195743][ C0] RBP: ffffc90000157ab0 R08: ffff88801ba95ac0 R09: 0000000000000002 [ 1081.195756][ C0] R10: 0000000000000100 R11: 0000000000000001 R12: 000000000000d000 [ 1081.195767][ C0] R13: ffff8880282564f0 R14: 1ffff1100679a901 R15: dffffc0000000000 [ 1081.195782][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1081.195797][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1081.195810][ C0] CR2: 00007f56664f1e9c CR3: 0000000027ea2000 CR4: 00000000003526f0 [ 1081.195826][ C0] Call Trace: [ 1081.195833][ C0] [ 1081.195839][ C0] dummy_timer+0x457a/0x46f0 [ 1081.195863][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 1081.195896][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1081.195925][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1081.195942][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1081.195961][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1081.195976][ C0] __hrtimer_run_queues+0x542/0xd00 [ 1081.196002][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1081.196019][ C0] ? read_tsc+0x9/0x20 [ 1081.196039][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 1081.196059][ C0] handle_softirqs+0x1df/0x650 [ 1081.196083][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1081.196109][ C0] run_ktimerd+0x69/0x100 [ 1081.196129][ C0] smpboot_thread_fn+0x542/0xa60 [ 1081.196151][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1081.196175][ C0] kthread+0x711/0x8a0 [ 1081.196198][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1081.196219][ C0] ? __pfx_kthread+0x10/0x10 [ 1081.196240][ C0] ? rt_spin_unlock+0x150/0x200 [ 1081.196263][ C0] ? rt_spin_unlock+0x161/0x200 [ 1081.196285][ C0] ? __pfx_kthread+0x10/0x10 [ 1081.196308][ C0] ret_from_fork+0x510/0xa50 [ 1081.196327][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1081.196344][ C0] ? __switch_to+0xc9e/0x1480 [ 1081.196370][ C0] ? __pfx_kthread+0x10/0x10 [ 1081.196393][ C0] ret_from_fork_asm+0x1a/0x30 [ 1081.196425][ C0] [ 1081.196621][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1081.196640][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1081.196661][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1081.196673][ T38] Call Trace: [ 1081.196682][ T38] [ 1081.196690][ T38] vpanic+0x1e0/0x670 [ 1081.196719][ T38] panic+0xb9/0xc0 [ 1081.196743][ T38] ? __pfx_panic+0x10/0x10 [ 1081.196777][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1081.196806][ T38] watchdog+0xfdf/0xfe0 [ 1081.196832][ T38] ? watchdog+0x20a/0xfe0 [ 1081.196866][ T38] kthread+0x711/0x8a0 [ 1081.196893][ T38] ? __pfx_watchdog+0x10/0x10 [ 1081.196914][ T38] ? __pfx_kthread+0x10/0x10 [ 1081.196936][ T38] ? rt_spin_unlock+0x150/0x200 [ 1081.196963][ T38] ? rt_spin_unlock+0x161/0x200 [ 1081.196985][ T38] ? __pfx_kthread+0x10/0x10 [ 1081.197011][ T38] ret_from_fork+0x510/0xa50 [ 1081.197033][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1081.197052][ T38] ? __switch_to+0xc9e/0x1480 [ 1081.197082][ T38] ? __pfx_kthread+0x10/0x10 [ 1081.197108][ T38] ret_from_fork_asm+0x1a/0x30 [ 1081.197149][ T38] [ 1081.197484][ T38] Kernel Offset: disabled