last executing test programs: 11m12.500613594s ago: executing program 2 (id=632): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 11m12.408994922s ago: executing program 2 (id=633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x12f}], 0x2}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 11m12.179658338s ago: executing program 2 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000400000000000000000000000000000500030005"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c00c09c93afa01c5da640b23104d1030af09715f442d7cfc3745d745524c20355104931dc997e0156baf4b2e274a5a39607000000f048e502fe1dff7cebf75e3bc15fff497c8368224880acd1dd2c22d4a715224b80d50d8c36f974a6e3acaad42338b8061ba6772950fa314f9a56097a85f4831b428c7d9bf37712934bf62e2f4e87449ade2177a0b5fa30290f7f159d9c4608a6a71e71f4d8bb26c75fe80e08f95e6ed0cb643d189fcd053254d8c931650659a81b9e06da7aa2544ef3e4172192f76b893a82a0f9fa046f19f3", @ANYRES16=r2, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xc9d3, 0x0, 0x0, 0x2}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r4, r9, &(0x7f0000000740)={0x0, 0x4fc4, 0x4000, 0x1, 0xb2, 0x0, r4}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x100181c, 0x4000, 0x880, 0x2a9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd576, 0x1f, 0x1009, 0x282}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3083, 0x10000, 0x1, 0xed, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a5a, 0x10, 0x2000003, 0x2a3, 0x0, r5}}], 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x185) r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r11) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000005bcca2023380100eb03010203010902"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSND(r11, 0x80404532, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000440)={r3, &(0x7f0000000100)='team0\x00', 0x40400, &(0x7f0000000500)={@_ha_fsid={[0x202, 0x1000]}, {0x106, 0x3ff, 0x6}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000280)=0x8000}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x9, 0x6, 0x6, 0x20000, r10, 0x8a, '\x00', r1, r12, 0x5, 0x1, 0x3}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) 11m11.715683353s ago: executing program 2 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) (fail_nth: 2) 11m8.659842437s ago: executing program 2 (id=645): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x2, 0x8, 'syz1\x00'}) sendmsg(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000480)="d6", 0x1}, {&(0x7f00000004c0)="428e6372e885cbeeee5c88249c875043905da0d94b7aeb70ab68c5a0aa2314adc8698bfa9369b0201952d65abb947cf6f9f4d0b3c89abb7b2686a13e93b05f322701639cd209f459bf26872dd38b006347f065c2d558e6aec014caef6144f3c1d217b26e4522cf0835073499a6da7fd92dcdafbbe2bd60db0623045482190dd81e17c75f7d8c28da3576d69790a63c9d55b687ee61be6a6cb70650fc4582ee2188020241d984f6be3c3637630678c9a1dac008910c97afbdb2a1f781f7d63b408ed0df458ac0d4382094454418a8f072c267b6", 0xd3}, {&(0x7f00000005c0)="7a02940fd1bd3b14f24ae6257d55ccf14e6bbb1cf75a0b7c3bf9813e601489470c0130a125edf866704624c57f1b61ce4783ba99c069ef8e6c95fa6ae6afadd3cc7028686b6f7193c13aca90b5915b6a3d", 0x51}, {&(0x7f0000000640)="65bf129b2e8162854dbc99bd4d1d7b0c3d4967817a8f0d4315bf82c1b0609dfb99e38129f3a94e83ab915958003739b852766bf498e10d75006d7009c2", 0x3d}, {&(0x7f0000000680)="bea3baafa20ff0b812dbb9501e5415a5a459047395fa996d74838503ad1ec03060a136d8f384f4789bc7ecf594609ba7c33d1d97", 0x34}, {&(0x7f00000006c0)="f31055818664455b52ccdd88e8e0c1793c1803217c2c583a35c35e769768718de2d954315aaab76e80e9beb9f6a9e054d4657f1379c093d61e0844fd74516a3fd314fb0c8dbc8a9f3c12ab3f9625ec0efc27a0b9defa179f7b2997", 0x5b}, {&(0x7f0000000740)="c1d411df9ea4034c23aa2dd40d6ea0536617bfc3123bb7ce35cd0166552b720490b0b3486511410faf1ea63d8a991be911ea71dc1bc2b6e2465e5e44a51816ad09f5aa040e89cd792887b66d66ae698e7958354802b702b00d84c0fc70ec51fd3537b1f593162446ef93c1dceffebc38283fae", 0x73}, {&(0x7f00000007c0)="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", 0x1000}], 0x8, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], 0x1368}, 0x20044005) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000340)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59cb3da400001fb700674f19b42dff060115003901000001000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3463e5c83f1ba2112ce68bf17a6e000000000100000000000344744a4755cb74a995ce857db16f8ca51708e8ebf55e17f86035c99bd012f", 0xc0) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000280)={0x0, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x167) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) accept$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) lchown(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 11m5.957833797s ago: executing program 2 (id=652): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000300)={{0xffff1000, 0x70000, 0x9, 0x0, 0x0, 0x0, 0x8, 0x6, 0x80, 0x72, 0xf, 0xe8}, {0xe000, 0xffffffff, 0x0, 0x4, 0x3, 0xab, 0x55, 0x2, 0x9, 0x2, 0xb, 0x1}, {0x9000, 0x4000, 0x8, 0x18, 0x2, 0x0, 0x8, 0x5, 0x1, 0x3, 0x6, 0x6}, {0x200000, 0xf7d62000, 0x7, 0x9, 0x9, 0x81, 0x9, 0x2, 0x0, 0x5, 0x3, 0x9}, {0x200000, 0xdddd0000, 0xb, 0xff, 0x5, 0x2, 0xa3, 0x9, 0x8e, 0x8, 0x6, 0xc}, {0x8080000, 0xb000, 0xc, 0xd, 0x0, 0x3, 0x9, 0x5, 0x10, 0xe, 0x0, 0x6}, {0x8080000, 0x3000, 0x4, 0x9, 0x23, 0x80, 0x6, 0x2, 0x8, 0x7, 0x0, 0x5}, {0x4000, 0x8080000, 0xc, 0x5, 0xe, 0x8b, 0x2, 0x80, 0x8, 0x8, 0xc, 0xf}, {0xdddd0000, 0x100}, {0x0, 0x3}, 0x10, 0x0, 0x5000, 0x400240, 0x5, 0xe000, 0x8000000, 0x0, [0x2, 0x6, 0x3a9, 0x4]}) socket(0x28, 0x800, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m3.26437664s ago: executing program 32 (id=652): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000300)={{0xffff1000, 0x70000, 0x9, 0x0, 0x0, 0x0, 0x8, 0x6, 0x80, 0x72, 0xf, 0xe8}, {0xe000, 0xffffffff, 0x0, 0x4, 0x3, 0xab, 0x55, 0x2, 0x9, 0x2, 0xb, 0x1}, {0x9000, 0x4000, 0x8, 0x18, 0x2, 0x0, 0x8, 0x5, 0x1, 0x3, 0x6, 0x6}, {0x200000, 0xf7d62000, 0x7, 0x9, 0x9, 0x81, 0x9, 0x2, 0x0, 0x5, 0x3, 0x9}, {0x200000, 0xdddd0000, 0xb, 0xff, 0x5, 0x2, 0xa3, 0x9, 0x8e, 0x8, 0x6, 0xc}, {0x8080000, 0xb000, 0xc, 0xd, 0x0, 0x3, 0x9, 0x5, 0x10, 0xe, 0x0, 0x6}, {0x8080000, 0x3000, 0x4, 0x9, 0x23, 0x80, 0x6, 0x2, 0x8, 0x7, 0x0, 0x5}, {0x4000, 0x8080000, 0xc, 0x5, 0xe, 0x8b, 0x2, 0x80, 0x8, 0x8, 0xc, 0xf}, {0xdddd0000, 0x100}, {0x0, 0x3}, 0x10, 0x0, 0x5000, 0x400240, 0x5, 0xe000, 0x8000000, 0x0, [0x2, 0x6, 0x3a9, 0x4]}) socket(0x28, 0x800, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m3.803579503s ago: executing program 4 (id=2158): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x7, 0xffff}, {0x9, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x0, 0xb64, {{0xe, 0x4, 0x1, 0x1, 0x38, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @multicast2, {[@generic={0x94, 0xd, "28e3a18874e9478baec933"}, @timestamp={0x44, 0x8, 0x45, 0x0, 0xf, [0x9]}, @lsrr={0x83, 0xf, 0x57, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$rds(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000ffdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100656e61626c656400000000000000000000000000000000000000000000000000050003"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x40810) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x40, 0x700, 0x5, 0x0, {{0xe, 0x4, 0x2, 0xc, 0x38, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @multicast2, {[@rr={0x7, 0x17, 0x46, [@multicast2, @local, @broadcast, @private=0xa010101, @private=0xa010100]}, @lsrr={0x83, 0xb, 0xb3, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0xa, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=r14, @ANYBLOB="01000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6m3.539931968s ago: executing program 4 (id=2159): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) landlock_create_ruleset(&(0x7f0000000040)={0xe000, 0x3}, 0x30, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x800000, 0x20) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)={0x4100, 0x8c, 0xc}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_test', 0x169a82, 0x109) sendfile(r2, r2, 0x0, 0xb) renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000200)='./file0/../file0/file0\x00', 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb02001800000000000600c04a00005be453"], &(0x7f0000001f80)=""/211, 0x18, 0xd3, 0xb, 0xfffffff9}, 0x28) lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x50) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) unshare(0x24020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6m3.249954899s ago: executing program 4 (id=2160): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14fe01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) 6m2.99582284s ago: executing program 4 (id=2161): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) close(0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) r2 = fanotify_init(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f00000001c0)=0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {0x0}, {&(0x7f0000000540)="deaf7130f93a1e8c5e222438563c33a1be72087a8f398932d0791da1f98831207f545c194219d8281497d9958c23f36f69ee94b5b790aef32a1d3390112a30d5a20fdedf3a5b86efd6f5c3fe543926252bd9df68c1699f24db127da407bb0b86410cbfeb983faa69", 0x68}], 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000000ffff068cd2adad0b040a0194c97f00000100000000001c000000000000000000000008", @ANYRES32], 0x40}, 0xfffe) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="fd03a8cb9d1f180b9aceb6de7098121706deff9eaa9a901eae4551e68ce8d460293f7ec66f6792a6abee6660f800ff5257be5deded", 0x35}, {&(0x7f00000003c0)="588e6e20f7a7e13531f6e9099d57b410e3e23f354ca0495f9a4e43fbf9da34230d4b53e6e10ad9a9cb1ec40e694bf7d235e18a1f3a9f54eb83f935ac66a3f58f54a65409022f3d0eaa692e645ba7395ccbfb5fa01522e6cb1c772697cdf5a0dd396691158728780285528e7838cd98cabb0a67082be1361ded9690ab7d7b170855181808a8cf50984dc4820f1d46bd0bfe0f6de59336d07cb78a1a3ff56c7f9a08a83a", 0xa3}], 0x2}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) 6m2.782289897s ago: executing program 4 (id=2162): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x3315, 0x2, 0x3, 0x0, 0x9}) 6m2.687577144s ago: executing program 4 (id=2163): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe70, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe70}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendto(r2, 0x0, 0x0, 0x4, &(0x7f00000002c0)=@phonet={0x21, 0x2, 0x0, 0x77}, 0x80) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100), &(0x7f00000001c0), 0x2, 0x1) syz_open_dev$usbfs(&(0x7f0000000200), 0x1, 0x414101) 5m19.551984556s ago: executing program 3 (id=2253): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff1, 0xfff3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x200, 0x7, 0x8}, {{0x1, 0x1, 0x1}, {0x3, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5m18.965489257s ago: executing program 3 (id=2257): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x80080, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000002aaaaaa81001000080045f4004000000000000190780a010102ac1414aa04029078ac1e0001491400000064000002110006000000006401010286060000000044087360000000050000"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x2e, 0x1}, 0x3a1b1a6e2d222ade, 0x16a, 0x4, {0x40, 0x47}, 0x6, 0x4006}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, 0x0) r3 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x54, 0x29, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0xff}}, [@migrate={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) write$smackfs_cipso(r3, &(0x7f00000000c0)={'-', 0x20, 0xa6}, 0x2d) bind(r0, &(0x7f0000000440)=@in={0x2, 0x4e20, @loopback}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) listen(r0, 0x8) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x0) 5m18.727407694s ago: executing program 5 (id=2258): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001640)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000180)="03661ce6cd949281d51cc8e0dab9bcff06673ea27f3ab8fd494d41", 0x1b}, {&(0x7f0000000580)="5a51761b7cfe258684eb10b687fa5d76d36a0e16e7c9e280246c61fa9c2160706923b3a0bd98a5296d98ca78ffe2b04f97126c55da", 0x35}], 0x2, 0x0, 0x0, 0x841}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x1, 0x41, 0x0) 5m18.014002768s ago: executing program 5 (id=2261): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1, &(0x7f0000003480)=""/203, 0xcb}, 0x9}], 0x1, 0x40010110, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5m17.514252839s ago: executing program 3 (id=2263): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x400000002000) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4884) 5m15.942764759s ago: executing program 3 (id=2264): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0x400e, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x1, 0x9, 0x1, 0x4, 0x8001080, 0x80000002, 0x1, 0x200009, 0x40, 0xa4d, 0x3ff, 0x40000005, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x7, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0xfffffffe, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0xfffffff7, 0x0, 0xfdb, 0x3, 0x7, 0x5, 0xffffffff, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x9, 0xa1, 0x10000, 0xffffffff, 0x8, 0x10004, 0x9e, 0x8, 0x7fc, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x100004, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x3, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x9, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x40, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7b, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) ftruncate(r3, 0x7000000) (async) r6 = dup(r3) preadv2(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x300, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000003400128009000100626f6e64000000002400028008001f00ffffff7f0800070000000009"], 0x54}}, 0x0) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r11, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001400)={r8, "c95e563110fd63da161c8e684e9f71e1"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) r12 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000001180)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r12, &(0x7f00000011c0)={'^', 0x20, 0x63, 0x20, 0x1, 0x20, [{0x1a}]}, 0x42) (async) socket$netlink(0x10, 0x3, 0x16) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}]}}}]}, 0x48}}, 0x0) (async) dup3(r12, r13, 0x80000) 5m15.352389719s ago: executing program 5 (id=2265): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000002000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw}) ioctl$FS_IOC_GETVERSION(r2, 0x40025b0c, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file0\x00'}) r5 = memfd_create(&(0x7f0000000140)='){{!-\x00', 0x4) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="80c2536ec7b1d28b7a543c00000000000009000000", @ANYRES32, @ANYBLOB="0000000000f0ffffffffffff00b0ffff00000100", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff0000000000000000", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff0000000000000100", @ANYRES32=r5, @ANYBLOB="0000000000400000000000000000010000000000"]) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f0000000080)=0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="54000000020605000000000000000000070000000c00078008001140000000000500010006000000050005000200000005000400000000000900020073797a310000ae28f7f0f095000010000300686173683a69702c6d6163004eedf3b4dcae5c6f3cc2746bc372ed71787be94d3494d38bb6bb63155ccdc81c85be16486c8e7615c02c93b1f0db0e51bb80a3812eb9de4136a517bfbacb449d63dda48680213442154324c98b201d3facca9e93268342e5d1fec9c2964ae64a890d169c209811e649efd062aec194630a36a1d248820321152c79a330138795a23bc7"], 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x9, 0x1, 0xff, 0x4, 0x9, 0xf}, 0x20) 5m15.283401371s ago: executing program 3 (id=2266): socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x60a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) fstat(0xffffffffffffffff, 0x0) timer_create(0x9, 0x0, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) 5m11.088763285s ago: executing program 5 (id=2269): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x34}}, 0x5061) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r3) socket$kcm(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100), 0x18040, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@dont_appraise}]}}) 5m10.807227233s ago: executing program 5 (id=2271): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x800c8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 3) 5m9.83833879s ago: executing program 5 (id=2273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000200)={0x0, 0x380003}, 0x20) (async) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) r3 = accept$alg(r2, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) close(0xffffffffffffffff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x5aebecc8ccf4b421, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500000e90000000400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a318000000008000a4005fffffc0c0009800800014000000002080008400000000114000000110001", @ANYRES64=r3, @ANYBLOB="0251970c97a266479238cd97f69e7210cabdb0b6a1f35ad9eb365cd7c53fdef883c56efae25f3fc6a0194914443a5da71f6af83e658d5c375e49666e95da2dc06f70be0b8ced037c2e5e4be341e10c7d9ca0b3b742f3b4b3a8c4daa3eda0384d19d03d583fc6a3e36f6fb6f5fe3b64ee7e9ff47ecde4d7cdc3cfe34565cbfeddd20f04ae4ebd5ef1caee96426fdf0bc8c71bc3af5a747cf76d5aa9", @ANYRES8=r2], 0x78}, 0x1, 0x0, 0x0, 0x4008854}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', '', [{0x20, '/dev/kvm\x00'}]}, 0xe) (async) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x68}, 0x1, 0x0, 0x0, 0x20040081}, 0x50) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x8000}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) write$tun(r7, &(0x7f0000000940)=ANY=[@ANYBLOB="200088beaaaaaaaaaabbbbbbbbbbbbbb8120000286dd6153c70f000087ffff020000000000000000000000000001fe8000000000000000000000000000bb"], 0x3e) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x4, 0x30, 0x0, 0x83, 0x6, 0x1, 0x2, 0xff, 0xf6, 0xfa, 0x8, 0x22, 0x2, 0x6a}, 0xe) 5m4.381107564s ago: executing program 3 (id=2277): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, 0x0, &(0x7f0000000080)) unshare(0x62040200) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x20, 0xfb, 0x208}]}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000001c0)) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x8d}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m53.721257797s ago: executing program 33 (id=2273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000200)={0x0, 0x380003}, 0x20) (async) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) r3 = accept$alg(r2, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) close(0xffffffffffffffff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x5aebecc8ccf4b421, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500000e90000000400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a318000000008000a4005fffffc0c0009800800014000000002080008400000000114000000110001", @ANYRES64=r3, @ANYBLOB="0251970c97a266479238cd97f69e7210cabdb0b6a1f35ad9eb365cd7c53fdef883c56efae25f3fc6a0194914443a5da71f6af83e658d5c375e49666e95da2dc06f70be0b8ced037c2e5e4be341e10c7d9ca0b3b742f3b4b3a8c4daa3eda0384d19d03d583fc6a3e36f6fb6f5fe3b64ee7e9ff47ecde4d7cdc3cfe34565cbfeddd20f04ae4ebd5ef1caee96426fdf0bc8c71bc3af5a747cf76d5aa9", @ANYRES8=r2], 0x78}, 0x1, 0x0, 0x0, 0x4008854}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', '', [{0x20, '/dev/kvm\x00'}]}, 0xe) (async) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x68}, 0x1, 0x0, 0x0, 0x20040081}, 0x50) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x8000}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) write$tun(r7, &(0x7f0000000940)=ANY=[@ANYBLOB="200088beaaaaaaaaaabbbbbbbbbbbbbb8120000286dd6153c70f000087ffff020000000000000000000000000001fe8000000000000000000000000000bb"], 0x3e) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x4, 0x30, 0x0, 0x83, 0x6, 0x1, 0x2, 0xff, 0xf6, 0xfa, 0x8, 0x22, 0x2, 0x6a}, 0xe) 4m48.6727377s ago: executing program 34 (id=2277): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, 0x0, &(0x7f0000000080)) unshare(0x62040200) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x20, 0xfb, 0x208}]}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000001c0)) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x8d}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m45.652195412s ago: executing program 0 (id=2308): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 4m43.477006474s ago: executing program 0 (id=2310): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x30570}], 0x1, 0x0, 0x0, 0x8000000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x40000}, 0x400c011) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x30570}], 0x1, 0x0, 0x0, 0x8000000}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x40000}, 0x400c011) (async) 4m43.172317564s ago: executing program 0 (id=2312): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x80080, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000002aaaaaa81001000080045f4004000000000000190780a010102ac1414aa04029078ac1e0001491400000064000002110006000000006401010286060000000044087360000000050000"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x2e, 0x1}, 0x3a1b1a6e2d222ade, 0x16a, 0x4, {0x40, 0x47}, 0x6, 0x4006}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x54, 0x29, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0xff}}, [@migrate={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) bind(r0, &(0x7f0000000440)=@in={0x2, 0x4e20, @loopback}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) listen(r0, 0x8) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x0) 4m40.992683986s ago: executing program 0 (id=2315): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x7, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000000200)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x7d, &(0x7f0000000400)={r6, @in={{0x2, 0x4e22, @empty}}, 0x101, 0x403}, 0x90) r7 = dup(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_ublk_setup_queues(r7, r1, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xffffffee, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x93}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x1f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x282f, 0x1000, 0x40000003, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x20000001, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = socket(0x40000000015, 0x805, 0x0) getsockopt(r8, 0x114, 0x271f, 0x0, 0x0) 4m39.834412267s ago: executing program 0 (id=2318): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x704, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 4m39.199527202s ago: executing program 0 (id=2319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed0f", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x19) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x44002) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x9, 0x80010, r5, 0x81000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = getpgrp(0x0) r9 = gettid() kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x7, 0x102) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r7, 0x1, 0x9, &(0x7f0000000040), 0x29) close_range(r6, 0xffffffffffffffff, 0x2000000000000) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000180)={0x5, 0xffffff, "74b12b26d4f471a78134175a36cb615373659f0fc0105579", {0x9, 0xfffffff5}, 0x1f000}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xfec00000}) 4m32.287611229s ago: executing program 1 (id=2326): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b52, &(0x7f0000000100)={0xa, 0x200002, 0x7, 0xfffffffe, 0x9, "88bd91aa90758062b5fffd9272e301aa98af75"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m31.964053038s ago: executing program 1 (id=2327): io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 4m31.818837427s ago: executing program 1 (id=2328): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f84843", 0x15}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) 4m31.397469453s ago: executing program 1 (id=2329): landlock_restrict_self(0xffffffffffffffff, 0xd) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000200)="66cee50b47ccc32ff304b3a399e76bfae78f5abc66a01dc01b", 0x19}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c80100000000090400"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="4030040000002e101dce"], 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) 4m28.060380332s ago: executing program 1 (id=2330): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, 0x0) 4m27.647254829s ago: executing program 1 (id=2331): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x12, r3, 0xbebf5000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0xb, 0xf, 0x7]}, &(0x7f0000000080)=0x44) 4m23.746374817s ago: executing program 35 (id=2319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed0f", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x19) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x44002) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x9, 0x80010, r5, 0x81000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = getpgrp(0x0) r9 = gettid() kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x7, 0x102) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r7, 0x1, 0x9, &(0x7f0000000040), 0x29) close_range(r6, 0xffffffffffffffff, 0x2000000000000) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000180)={0x5, 0xffffff, "74b12b26d4f471a78134175a36cb615373659f0fc0105579", {0x9, 0xfffffff5}, 0x1f000}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xfec00000}) 4m11.803199309s ago: executing program 36 (id=2331): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x12, r3, 0xbebf5000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0xb, 0xf, 0x7]}, &(0x7f0000000080)=0x44) 1m50.478817016s ago: executing program 8 (id=2357): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp, 0x700}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20004014) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x2, 0x4d, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010002c3128e085104408182040102030109023b"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) 1m47.440345927s ago: executing program 8 (id=2358): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000032c0)={0x14, &(0x7f00000031c0)={0x20, 0x2b, 0x7b, {0x7b, 0x11, "896b3350b0d78fa3884743bfc2c9c907cfc7f0b898bbf8367ceb35bf80677a4ef23d9c5090435d499aa9541fa18ea5b7dae112ced3cf2480ea0a553ba0da15285602323441252b7d7d129b4cfd970c402dffd9471f3c2f5cbc7315741500ddd02c836c449b95f0c0353368b034ac610790186463d359290aa8"}}, &(0x7f0000003280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, &(0x7f0000003580)={0x44, &(0x7f0000003300)={0x20, 0x6, 0xb2, "dc79f84c969b896551ae280b093604e0dec7c6b2e981c3e0235bfc5c630152acd876a78c4efc87dedcaee359202e2466f335ed7da947188a7385b0755e538d13bdf2dee6581b3cf57744af740412ae993cb21e41f89419e119107e22a67506f6f130c4a846996a8e3bb3c75ead0f4b2afb1a5765cdff01c44c499d6eb106c50b9a38cd9f6108cd3ac412b50b720b181c6ce4ec8fb7f4683821670634fd556f9669086880db9a7a9af1d20368075ac7315313"}, &(0x7f00000033c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000003400)={0x0, 0x8, 0x1}, &(0x7f0000003440)={0x20, 0x81, 0x3, "e90231"}, &(0x7f0000003480)={0x20, 0x82, 0x2, "ce3a"}, &(0x7f00000034c0)={0x20, 0x83, 0x1, "f2"}, &(0x7f0000003500)={0x20, 0x84, 0x1, '\"'}, &(0x7f0000003540)={0x20, 0x85, 0x3, "025164"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) 1m45.001698691s ago: executing program 8 (id=2359): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) write$char_usb(r0, &(0x7f0000000a00)="5a7995", 0x3) unshare(0x28040480) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd=r0, 0x10000000005, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m44.123068999s ago: executing program 8 (id=2360): r0 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) io_uring_enter(r0, 0x0, 0x2, 0xf, 0x0, 0x0) 1m43.48513222s ago: executing program 8 (id=2362): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/56, 0x38, 0x8, &(0x7f00000001c0)={r1, r2+60000000}) fcntl$setstatus(r0, 0x4, 0x42000) setresgid(0xee00, 0x0, 0xee00) setregid(0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'IDLETIMER\x00'}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x1, 0x5}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000006c0)='-', 0x1}], 0x1, &(0x7f0000002500)=[{0x78, 0x114, 0x6, "bfc1b040f9b5b1325626fecf900d768ed6ac9b55f4d6c333b369b1fc2f78383067ab6df5ce60a9bf344bb7b86782413f325c123b99bacf19c4288e929a06ba4e29ad0f3ab8b096360ab5e9498c2024ee8c4bf60eeb0ce235b8e169367170d5944b"}, {0xc0, 0x115, 0x401, "d9d9ebd9ba9bab2a9c712d4cc0825b4a37f1cbfcb9fcd3acf3f06a852b62c1e2956e3731e2f602067a6ee7bdf7e67ac82771071c67334a38263ae4cb2579ad9a30e7502ca5d226435112370929bbc3f7275a806b7a2ee7f2bf0d4b6b58259e9a536027579b8f468cd0605e7fba526556fb086863b0fc1ca54d533b2efe323fe157e33cf2840bf4ae6e50883b799be8bb9fb3dd84c825ae9726bb4f51a276281f53d62319455408a690"}, {0xa0, 0xff, 0xdc, "dadfca5ca73b5824e0b9964be680efe417fd4344a5d45ab1b92bd0d158a501897a3fc76f8b51a5ee562ed48654d3390163a80e48f5dffe5bfb01d50d9cb12b00cf6f320c7f3a026d22b441dae0e1af2f7595dbb966b90b2d4f524e161dcc080ce75c3431b0bb3773d4e06e9ee9b42d8a435af2468e3493a68f0a43e4499589e4643c295aa702c0b11c"}, {0xc8, 0x5, 0x7f, "e7f1b01612307dab00339ea4395979cb9bacf879c458304fa88d8a1703fd97a31383e43cff7e26768dc9049e13b5affe4f9d323792bc6debd25c013ea0642ec50a3d43ad98f50fb780b3fec7da57db10bc16bed40b4d8aed88137f4669bb5323cd756f1b105a3a162173f65a789b8bee45be616930cee1ade541981cf6d7cb437ce1da6a0fcbf026a473cd105c460cc0a7787be99fd64a13562e50e486b8abfa38d1f4b684d7cc8c99b0f0d898414f1add"}, {0x40, 0x112, 0x200, "67e7dd171df999161e68e90c1d30e1f5969e8162ee80da6946ae8c9005d4f46917d3cf7a16351a808a"}, {0x1010, 0xff, 0x7, "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"}, {0xd18, 0x114, 0x2, "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"}], 0x2008}}], 0x1, 0x40) r6 = syz_ublk_setup_io_uring(0x628, &(0x7f0000000000)={0x0, 0x71e4, 0x10000, 0x1, 0x15c}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x3000001, 0x12, r6, 0x0) 1m41.696361979s ago: executing program 8 (id=2364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x180, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x2, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x40000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x24008050) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff], 'veth0_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0xf, 0x2, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x17, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) 1m26.282174369s ago: executing program 37 (id=2364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x180, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x2, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x40000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x24008050) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff], 'veth0_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0xf, 0x2, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x17, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) 618.092052ms ago: executing program 9 (id=2828): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9140010040efff0018"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 540.867299ms ago: executing program 9 (id=2829): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x39, 0x0, &(0x7f0000000500), 0x0, 0x1402, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) syz_clone(0x60000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) munlock(&(0x7f0000a81000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 416.999931ms ago: executing program 9 (id=2830): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4fa2, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) shutdown(r3, 0x1) ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1003, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) 243.17066ms ago: executing program 9 (id=2831): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstatfs(r0, &(0x7f0000001480)=""/204) 139.044003ms ago: executing program 9 (id=2832): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) unshare(0x8040480) socket$inet6_sctp(0xa, 0x5, 0x84) fallocate(0xffffffffffffffff, 0x0, 0x9000000, 0x400001) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0xfffffffffffffcb4) bind$tipc(r0, 0x0, 0x0) r1 = syz_open_dev$mtd(&(0x7f00000000c0), 0x0, 0x40002) ioctl$MEMSETBADBLOCK(r1, 0x40084d0c, &(0x7f0000000180)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0x39, 0x0, &(0x7f0000000500), 0x0, 0x1402, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) syz_clone(0x60000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) munlock(&(0x7f0000a81000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 0s ago: executing program 9 (id=2833): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4fa2, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) shutdown(r3, 0x1) kernel console output (not intermixed with test programs): cma reserved [ 634.474728][ T5776] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 634.474999][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 634.609459][ T5776] usb 1-1: device descriptor read/64, error -32 [ 634.839063][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 634.839086][ T36] audit: type=1800 audit(1785612502.518:1133): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2259" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 634.887583][ T1042] batman_adv: batadv0: Interface deactivated: wlan0 [ 634.901887][T12655] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 634.901921][T12655] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 634.901947][T12655] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 635.036456][ T5776] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 635.414770][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 635.415760][ T5776] usb 1-1: no configurations [ 635.415779][ T5776] usb 1-1: can't read configurations, error -22 [ 635.431163][ T5776] usb usb1-port1: attempt power cycle [ 635.846211][ T5776] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 635.865271][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 635.867236][ T5776] usb 1-1: no configurations [ 635.867255][ T5776] usb 1-1: can't read configurations, error -22 [ 636.426750][ T5776] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 636.458697][ T48] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 636.569961][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 636.570982][ T5776] usb 1-1: no configurations [ 636.571015][ T5776] usb 1-1: can't read configurations, error -22 [ 636.572028][ T5776] usb usb1-port1: unable to enumerate USB device [ 636.666201][ T1042] batman_adv: batadv0: Removing interface: wlan0 [ 636.734787][ T48] usb 6-1: device descriptor read/64, error -71 [ 636.986755][ T48] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 637.114951][ T48] usb 6-1: device descriptor read/64, error -71 [ 637.254266][ T48] usb usb6-port1: attempt power cycle [ 637.634921][ T48] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 639.848905][ T48] usb 6-1: device descriptor read/8, error -71 [ 639.954796][T12687] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2268'. [ 639.955133][T12688] tipc: Enabling of bearer rejected, failed to enable media [ 640.072239][T12692] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 640.323008][T12694] FAULT_INJECTION: forcing a failure. [ 640.323008][T12694] name failslab, interval 1, probability 0, space 0, times 0 [ 640.323054][T12694] CPU: 1 UID: 0 PID: 12694 Comm: syz.0.2270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 640.323097][T12694] Tainted: [L]=SOFTLOCKUP [ 640.323107][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.323122][T12694] Call Trace: [ 640.323133][T12694] [ 640.323144][T12694] dump_stack_lvl+0xe8/0x150 [ 640.323244][T12694] should_fail_ex+0x467/0x600 [ 640.323292][T12694] should_failslab+0xa8/0x100 [ 640.323328][T12694] __kmalloc_noprof+0xfe/0x780 [ 640.323357][T12694] ? sock_kmalloc+0xd6/0x160 [ 640.323391][T12694] ? sock_kmalloc+0xd6/0x160 [ 640.323433][T12694] sock_kmalloc+0xd6/0x160 [ 640.323471][T12694] skcipher_recvmsg+0x564/0xe10 [ 640.323516][T12694] ? do_raw_spin_lock+0x12b/0x2f0 [ 640.323566][T12694] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 640.323599][T12694] ? __lock_acquire+0x683/0x2ce0 [ 640.323630][T12694] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 640.323665][T12694] ? security_socket_recvmsg+0x7e/0x2c0 [ 640.323692][T12694] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 640.323727][T12694] sock_recvmsg+0x196/0x1e0 [ 640.323756][T12694] ____sys_recvmsg+0x1f2/0x4b0 [ 640.323800][T12694] ? __pfx_____sys_recvmsg+0x10/0x10 [ 640.323855][T12694] ? import_iovec+0x73/0xa0 [ 640.323891][T12694] ___sys_recvmsg+0x213/0x5a0 [ 640.323943][T12694] ? __pfx____sys_recvmsg+0x10/0x10 [ 640.323984][T12694] ? __fget_files+0x2a/0x420 [ 640.324034][T12694] ? __fget_files+0x3a8/0x420 [ 640.324076][T12694] do_recvmmsg+0x320/0x7f0 [ 640.324123][T12694] ? __pfx_do_recvmmsg+0x10/0x10 [ 640.324159][T12694] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 640.324206][T12694] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 640.324250][T12694] __x64_sys_recvmmsg+0x198/0x250 [ 640.324290][T12694] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 640.324336][T12694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.324365][T12694] do_syscall_64+0x174/0x580 [ 640.324397][T12694] ? trace_irq_disable+0x3b/0x140 [ 640.324424][T12694] ? clear_bhb_loop+0x40/0x90 [ 640.324458][T12694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.324484][T12694] RIP: 0033:0x7f1cd825e019 [ 640.324508][T12694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.324529][T12694] RSP: 002b:00007f1cd64b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 640.324554][T12694] RAX: ffffffffffffffda RBX: 00007f1cd84e5fa0 RCX: 00007f1cd825e019 [ 640.324573][T12694] RDX: 0000000000000001 RSI: 0000200000003900 RDI: 0000000000000004 [ 640.324590][T12694] RBP: 00007f1cd64b6090 R08: 0000000000000000 R09: 0000000000000000 [ 640.324606][T12694] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 640.324621][T12694] R13: 00007f1cd84e6038 R14: 00007f1cd84e5fa0 R15: 00007ffc266581e8 [ 640.324663][T12694] [ 640.699737][T12696] FAULT_INJECTION: forcing a failure. [ 640.699737][T12696] name failslab, interval 1, probability 0, space 0, times 0 [ 640.699780][T12696] CPU: 1 UID: 0 PID: 12696 Comm: syz.5.2271 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 640.699812][T12696] Tainted: [L]=SOFTLOCKUP [ 640.699820][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.699835][T12696] Call Trace: [ 640.699844][T12696] [ 640.699855][T12696] dump_stack_lvl+0xe8/0x150 [ 640.699896][T12696] should_fail_ex+0x467/0x600 [ 640.699941][T12696] should_failslab+0xa8/0x100 [ 640.699971][T12696] __kmalloc_noprof+0xfe/0x780 [ 640.699997][T12696] ? io_cache_alloc_new+0x40/0x100 [ 640.700024][T12696] ? io_cache_alloc_new+0x40/0x100 [ 640.700060][T12696] io_cache_alloc_new+0x40/0x100 [ 640.700090][T12696] __io_prep_rw+0x281/0xe70 [ 640.700209][T12696] ? __pfx___io_prep_rw+0x10/0x10 [ 640.700241][T12696] ? io_import_reg_buf+0x279/0x5b0 [ 640.700267][T12696] ? __fget_files+0x2a/0x420 [ 640.700299][T12696] io_prep_rwv+0x8d/0x430 [ 640.700334][T12696] ? __pfx_io_prep_rwv+0x10/0x10 [ 640.700388][T12696] ? io_req_defer_failed+0x2e0/0x3e0 [ 640.700423][T12696] io_submit_sqes+0xbde/0x2310 [ 640.700487][T12696] __se_sys_io_uring_enter+0x364/0x1bb0 [ 640.700517][T12696] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 640.700565][T12696] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 640.700601][T12696] ? fput+0xa0/0xd0 [ 640.700625][T12696] ? ksys_write+0x248/0x270 [ 640.700657][T12696] ? __pfx_ksys_write+0x10/0x10 [ 640.700693][T12696] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 640.700725][T12696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.700751][T12696] do_syscall_64+0x174/0x580 [ 640.700781][T12696] ? trace_irq_disable+0x3b/0x140 [ 640.700803][T12696] ? clear_bhb_loop+0x40/0x90 [ 640.700832][T12696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.700855][T12696] RIP: 0033:0x7f57d2dae019 [ 640.700877][T12696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.700897][T12696] RSP: 002b:00007f57d1006028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 640.700922][T12696] RAX: ffffffffffffffda RBX: 00007f57d3035fa0 RCX: 00007f57d2dae019 [ 640.700940][T12696] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 640.700955][T12696] RBP: 00007f57d1006090 R08: 0000000000000000 R09: 0000000000000000 [ 640.700971][T12696] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 640.700985][T12696] R13: 00007f57d3036038 R14: 00007f57d3035fa0 R15: 00007ffe35d06aa8 [ 640.701022][T12696] [ 642.381268][T12708] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2274'. [ 642.915477][T12710] FAULT_INJECTION: forcing a failure. [ 642.915477][T12710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.915517][T12710] CPU: 1 UID: 0 PID: 12710 Comm: syz.0.2275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 642.915549][T12710] Tainted: [L]=SOFTLOCKUP [ 642.915557][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.915572][T12710] Call Trace: [ 642.915581][T12710] [ 642.915591][T12710] dump_stack_lvl+0xe8/0x150 [ 642.915633][T12710] should_fail_ex+0x467/0x600 [ 642.915680][T12710] _copy_to_user+0x31/0xb0 [ 642.915712][T12710] simple_read_from_buffer+0xe1/0x170 [ 642.915743][T12710] proc_fail_nth_read+0x1be/0x230 [ 642.915774][T12710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.915804][T12710] ? rw_verify_area+0x250/0x4d0 [ 642.915834][T12710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.915859][T12710] vfs_read+0x219/0xa90 [ 642.915896][T12710] ? __pfx_vfs_read+0x10/0x10 [ 642.915928][T12710] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 642.915961][T12710] ? lockdep_hardirqs_on+0x7a/0x110 [ 642.915992][T12710] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 642.916021][T12710] ? mutex_lock_nested+0x152/0x1d0 [ 642.916043][T12710] ? fdget_pos+0x252/0x320 [ 642.916086][T12710] ksys_read+0x156/0x270 [ 642.916117][T12710] ? __pfx_ksys_read+0x10/0x10 [ 642.916145][T12710] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 642.916186][T12710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.916212][T12710] do_syscall_64+0x174/0x580 [ 642.916242][T12710] ? trace_irq_disable+0x3b/0x140 [ 642.916267][T12710] ? clear_bhb_loop+0x40/0x90 [ 642.916295][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.916318][T12710] RIP: 0033:0x7f1cd821e84e [ 642.916340][T12710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 642.916361][T12710] RSP: 002b:00007f1cd64b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 642.916386][T12710] RAX: ffffffffffffffda RBX: 00007f1cd64b66c0 RCX: 00007f1cd821e84e [ 642.916404][T12710] RDX: 000000000000000f RSI: 00007f1cd64b60a0 RDI: 0000000000000004 [ 642.916419][T12710] RBP: 00007f1cd64b6090 R08: 0000000000000000 R09: 0000000000000000 [ 642.916434][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.916448][T12710] R13: 00007f1cd84e6038 R14: 00007f1cd84e5fa0 R15: 00007ffc266581e8 [ 642.916484][T12710] [ 643.814869][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 643.994723][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 643.995611][ T9] usb 1-1: no configurations [ 643.995625][ T9] usb 1-1: can't read configurations, error -22 [ 644.214916][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 644.414706][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 644.415699][ T9] usb 1-1: no configurations [ 644.415718][ T9] usb 1-1: can't read configurations, error -22 [ 644.451897][ T9] usb usb1-port1: attempt power cycle [ 645.318383][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 645.457377][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 645.458395][ T9] usb 1-1: no configurations [ 645.458414][ T9] usb 1-1: can't read configurations, error -22 [ 645.704697][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 645.725388][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 645.726232][ T9] usb 1-1: no configurations [ 645.726250][ T9] usb 1-1: can't read configurations, error -22 [ 645.727152][ T9] usb usb1-port1: unable to enumerate USB device [ 646.763405][T12655] syz.1.2259 (12655) used greatest stack depth: 16848 bytes left [ 646.913637][ T36] audit: type=1326 audit(1785612514.628:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12757 comm="syz.3.2277" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08fd51e019 code=0x0 [ 647.093786][T12764] warn_alloc: 1 callbacks suppressed [ 647.093807][T12764] syz.0.2278: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 647.093882][T12764] CPU: 0 UID: 0 PID: 12764 Comm: syz.0.2278 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 647.093915][T12764] Tainted: [L]=SOFTLOCKUP [ 647.093925][T12764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.093940][T12764] Call Trace: [ 647.093950][T12764] [ 647.093960][T12764] dump_stack_lvl+0xe8/0x150 [ 647.094005][T12764] warn_alloc+0x24c/0x270 [ 647.094031][T12764] ? __se_sys_ioctl+0x47/0x170 [ 647.094064][T12764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.094094][T12764] ? __pfx_warn_alloc+0x10/0x10 [ 647.094136][T12764] ? look_up_lock_class+0x57/0x110 [ 647.094182][T12764] __vmalloc_node_range_noprof+0x12c/0x1730 [ 647.094212][T12764] ? __lock_acquire+0x683/0x2ce0 [ 647.094248][T12764] ? kasan_quarantine_put+0xbb/0x1f0 [ 647.094286][T12764] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 647.094325][T12764] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 647.094365][T12764] vmalloc_noprof+0xb2/0xe0 [ 647.094389][T12764] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 647.094427][T12764] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 647.094462][T12764] ? dvb_demux_do_ioctl+0x323/0x540 [ 647.094501][T12764] dvb_demux_do_ioctl+0x460/0x540 [ 647.094541][T12764] dvb_usercopy+0x199/0x2e0 [ 647.094573][T12764] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 647.094607][T12764] ? __pfx_dvb_usercopy+0x10/0x10 [ 647.094649][T12764] ? __fget_files+0x3a8/0x420 [ 647.094675][T12764] ? __fget_files+0x2a/0x420 [ 647.094703][T12764] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 647.094737][T12764] dvb_demux_ioctl+0x29/0x40 [ 647.094772][T12764] __se_sys_ioctl+0xff/0x170 [ 647.094803][T12764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.094829][T12764] do_syscall_64+0x174/0x580 [ 647.094859][T12764] ? trace_irq_disable+0x3b/0x140 [ 647.094883][T12764] ? clear_bhb_loop+0x40/0x90 [ 647.094913][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.094937][T12764] RIP: 0033:0x7f1cd825e019 [ 647.094959][T12764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.094979][T12764] RSP: 002b:00007f1cd64b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.095004][T12764] RAX: ffffffffffffffda RBX: 00007f1cd84e5fa0 RCX: 00007f1cd825e019 [ 647.095022][T12764] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 647.095038][T12764] RBP: 00007f1cd82f500c R08: 0000000000000000 R09: 0000000000000000 [ 647.095052][T12764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.095066][T12764] R13: 00007f1cd84e6038 R14: 00007f1cd84e5fa0 R15: 00007ffc266581e8 [ 647.095105][T12764] [ 647.112180][T12764] Mem-Info: [ 647.112224][T12764] active_anon:202 inactive_anon:6263 isolated_anon:0 [ 647.112224][T12764] active_file:23312 inactive_file:39699 isolated_file:0 [ 647.112224][T12764] unevictable:768 dirty:110 writeback:0 [ 647.112224][T12764] slab_reclaimable:12276 slab_unreclaimable:111985 [ 647.112224][T12764] mapped:30669 shmem:1300 pagetables:1444 [ 647.112224][T12764] sec_pagetables:0 bounce:0 [ 647.112224][T12764] kernel_misc_reclaimable:0 [ 647.112224][T12764] free:1294985 free_pcp:3640 free_cma:0 [ 647.112444][T12764] Node 0 active_anon:808kB inactive_anon:25052kB active_file:93036kB inactive_file:158796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122676kB dirty:436kB writeback:0kB shmem:3664kB kernel_stack:13468kB pagetables:5652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 647.112604][T12764] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 647.112738][T12764] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 647.112920][T12764] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 647.113030][T12764] Node 0 DMA32 free:1224144kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:808kB inactive_anon:25052kB active_file:93036kB inactive_file:158796kB unevictable:1536kB writepending:436kB zspages:0kB present:3129332kB managed:2560536kB mlocked:0kB bounce:0kB free_pcp:14548kB local_pcp:4608kB free_cma:0kB [ 647.113212][T12764] lowmem_reserve[]: 0 0 1 1 1 [ 647.113329][T12764] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 647.113499][T12764] lowmem_reserve[]: 0 0 0 0 0 [ 647.128488][T12764] Node 1 Normal free:3940436kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 647.128694][T12764] lowmem_reserve[]: 0 0 0 0 0 [ 647.128793][T12764] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 647.129138][T12764] Node 0 DMA32: 924*4kB (UME) 707*8kB (UME) 482*16kB (ME) 615*32kB (UME) 397*64kB (UME) 271*128kB (UME) 139*256kB (ME) 60*512kB (UME) 38*1024kB (UME) 25*2048kB (UME) 237*4096kB (UM) = 1224008kB [ 647.129644][T12764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 647.195473][T12764] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 8*16kB (UM) 9*32kB (UM) 8*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940436kB [ 647.195862][T12764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 647.195923][T12764] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 647.195974][T12764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 647.196026][T12764] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 647.196079][T12764] 64307 total pagecache pages [ 647.196103][T12764] 0 pages in swap cache [ 647.196172][T12764] Free swap = 124996kB [ 647.196195][T12764] Total swap = 124996kB [ 647.196218][T12764] 2097051 pages RAM [ 647.196247][T12764] 0 pages HighMem/MovableOnly [ 647.196270][T12764] 424839 pages reserved [ 647.196292][T12764] 0 pages cma reserved [ 647.274662][ T5727] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 647.466912][ T5727] usb 2-1: not running at top speed; connect to a high speed hub [ 647.468553][ T5727] usb 2-1: config 0 has an invalid interface number: 69 but max is 1 [ 647.468582][ T5727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.468605][ T5727] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 647.468628][ T5727] usb 2-1: config 0 has no interface number 0 [ 647.468661][ T5727] usb 2-1: config 0 interface 69 has no altsetting 0 [ 647.471899][ T5727] usb 2-1: New USB device found, idVendor=0451, idProduct=8140, bcdDevice= 4.82 [ 647.471933][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.471956][ T5727] usb 2-1: Product: syz [ 647.471972][ T5727] usb 2-1: Manufacturer: syz [ 647.471988][ T5727] usb 2-1: SerialNumber: syz [ 648.046781][ T5727] usb 2-1: config 0 descriptor?? [ 648.472035][ T5727] hub 2-1:0.69: bad descriptor, ignoring hub [ 648.472077][ T5727] hub 2-1:0.69: probe with driver hub failed with error -5 [ 648.495740][ T5727] rndis_host 2-1:0.69: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 648.565402][ T5727] usb 2-1: USB disconnect, device number 34 [ 648.705300][T12771] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2280'. [ 648.722601][T12770] tipc: Enabling of bearer rejected, failed to enable media [ 651.499211][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2281'. [ 652.378023][ T4910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 652.433043][ T4910] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 652.485434][ T4910] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 652.507689][ T4910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 652.537215][ T4910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 653.968040][T12807] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 653.969140][T12807] batman_adv: batadv0: Adding interface: wlan0 [ 653.969152][T12807] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.969177][T12807] batman_adv: batadv0: Interface activated: wlan0 [ 654.606135][T12826] tipc: Enabled bearer , priority 10 [ 654.696395][ T4910] Bluetooth: hci4: command tx timeout [ 656.774742][ T4910] Bluetooth: hci4: command tx timeout [ 658.075055][ T48] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 658.119983][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.120221][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.120453][T12781] bridge_slave_0: entered allmulticast mode [ 658.123427][T12781] bridge_slave_0: entered promiscuous mode [ 658.172407][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.172595][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.173195][T12781] bridge_slave_1: entered allmulticast mode [ 658.202842][T12781] bridge_slave_1: entered promiscuous mode [ 658.239148][ T48] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 658.239181][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.313215][ T48] usb 1-1: config 0 descriptor?? [ 658.347191][ T48] cp210x 1-1:0.0: cp210x converter detected [ 658.506456][T12781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.645997][T12781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.855012][ T4910] Bluetooth: hci4: command tx timeout [ 659.116622][ T48] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 659.116655][ T48] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 659.148099][ T48] usb 1-1: cp210x converter now attached to ttyUSB0 [ 659.169551][ T48] usb 1-1: USB disconnect, device number 58 [ 659.193430][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 659.203422][ T48] cp210x 1-1:0.0: device disconnected [ 659.481701][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 659.550035][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 659.596520][T12781] team0: Port device team_slave_0 added [ 659.600788][T12781] team0: Port device team_slave_1 added [ 659.712066][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 659.713846][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 659.743714][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 660.308501][T12781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.308522][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.308555][T12781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.474357][T12781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.474377][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.474410][T12781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.934844][ T4910] Bluetooth: hci4: command tx timeout [ 661.983891][ T4910] Bluetooth: hci6: command tx timeout [ 663.403490][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 663.489048][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 663.496398][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 663.558240][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 663.567420][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 664.054762][ T4910] Bluetooth: hci6: command tx timeout [ 664.227411][T12781] hsr_slave_0: entered promiscuous mode [ 664.241321][T12781] hsr_slave_1: entered promiscuous mode [ 664.256898][T12781] debugfs: 'hsr0' already exists in 'hsr' [ 664.256931][T12781] Cannot create hsr debugfs directory [ 665.032732][T12918] sctp: [Deprecated]: syz.0.2306 (pid 12918) Use of int in max_burst socket option. [ 665.032732][T12918] Use struct sctp_assoc_value instead [ 665.445252][ T48] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 665.597866][ T48] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 665.597902][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.670463][ T48] usb 2-1: config 0 descriptor?? [ 665.747044][ T48] cp210x 2-1:0.0: cp210x converter detected [ 665.843542][ T4910] Bluetooth: hci1: command tx timeout [ 666.134786][ T4910] Bluetooth: hci6: command tx timeout [ 666.565914][ T48] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 666.565948][ T48] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 666.691257][ T48] usb 2-1: cp210x converter now attached to ttyUSB0 [ 666.813308][ T48] usb 2-1: USB disconnect, device number 35 [ 667.157385][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 667.180547][ T48] cp210x 2-1:0.0: device disconnected [ 667.904674][ T4910] Bluetooth: hci1: command tx timeout [ 668.215052][ T4910] Bluetooth: hci6: command tx timeout [ 669.975030][ T4910] Bluetooth: hci1: command tx timeout [ 672.056756][ T4910] Bluetooth: hci1: command tx timeout [ 672.834408][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.843297][T12862] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.843613][T12862] bridge_slave_0: entered allmulticast mode [ 672.907248][T12862] bridge_slave_0: entered promiscuous mode [ 673.539909][T12862] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.540049][T12862] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.540314][T12862] bridge_slave_1: entered allmulticast mode [ 673.578289][T12862] bridge_slave_1: entered promiscuous mode [ 673.596381][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.596504][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.596726][T12903] bridge_slave_0: entered allmulticast mode [ 673.605344][T12903] bridge_slave_0: entered promiscuous mode [ 674.945302][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.945456][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.945775][T12903] bridge_slave_1: entered allmulticast mode [ 674.976501][T12903] bridge_slave_1: entered promiscuous mode [ 675.222340][T12862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.293932][T12862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.320379][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.383270][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.599013][T12862] team0: Port device team_slave_0 added [ 675.927610][T12862] team0: Port device team_slave_1 added [ 675.952277][T12903] team0: Port device team_slave_0 added [ 676.898442][T12903] team0: Port device team_slave_1 added [ 676.977019][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2324'. [ 677.064053][T12862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.064074][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.064107][T12862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.072626][T12862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.072648][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.072681][T12862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.544001][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.544021][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.544053][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.761602][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.761624][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.761657][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.052969][T12862] hsr_slave_0: entered promiscuous mode [ 678.062713][T12862] hsr_slave_1: entered promiscuous mode [ 678.085938][T12862] debugfs: 'hsr0' already exists in 'hsr' [ 678.085973][T12862] Cannot create hsr debugfs directory [ 678.843444][T12903] hsr_slave_0: entered promiscuous mode [ 678.855980][T12903] hsr_slave_1: entered promiscuous mode [ 678.857091][T12903] debugfs: 'hsr0' already exists in 'hsr' [ 678.857120][T12903] Cannot create hsr debugfs directory [ 679.560722][T13039] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2328'. [ 680.145064][ T7373] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 680.297769][ T7373] usb 2-1: Using ep0 maxpacket: 16 [ 680.300198][ T7373] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 680.303339][ T7373] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 680.303371][ T7373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.303395][ T7373] usb 2-1: Product: syz [ 680.303411][ T7373] usb 2-1: Manufacturer: syz [ 680.303428][ T7373] usb 2-1: SerialNumber: syz [ 680.371837][ T7373] r8152-cfgselector 2-1: Unknown version 0x0000 [ 680.371867][ T7373] r8152-cfgselector 2-1: config 0 descriptor?? [ 682.817956][ T5727] r8152-cfgselector 2-1: USB disconnect, device number 36 [ 687.816831][ T5606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 687.896454][ T5606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 687.903095][ T5606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 687.946792][ T5606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 687.989498][ T5606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 690.050319][T13050] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.051030][T13050] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.051296][T13050] bridge_slave_0: entered allmulticast mode [ 690.134720][ T4910] Bluetooth: hci7: command tx timeout [ 690.146480][T13050] bridge_slave_0: entered promiscuous mode [ 690.548460][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.204066][T13050] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.204155][T13050] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.204398][T13050] bridge_slave_1: entered allmulticast mode [ 691.221866][T13050] bridge_slave_1: entered promiscuous mode [ 692.215403][ T4910] Bluetooth: hci7: command tx timeout [ 692.573440][T13050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.785691][T13050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.160573][T13050] team0: Port device team_slave_0 added [ 693.172482][T13050] team0: Port device team_slave_1 added [ 694.294993][ T4910] Bluetooth: hci7: command tx timeout [ 694.448424][T13050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.448445][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.448476][T13050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.451093][T13050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.451111][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.451142][T13050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.887161][T13050] hsr_slave_0: entered promiscuous mode [ 694.889209][T13050] hsr_slave_1: entered promiscuous mode [ 694.890378][T13050] debugfs: 'hsr0' already exists in 'hsr' [ 694.890406][T13050] Cannot create hsr debugfs directory [ 696.374764][ T4910] Bluetooth: hci7: command tx timeout [ 699.749894][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.848683][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.861867][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.898647][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.902933][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 702.224827][ T5606] Bluetooth: hci2: command tx timeout [ 704.294961][ T5606] Bluetooth: hci2: command tx timeout [ 704.750697][T13073] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.750929][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.751166][T13073] bridge_slave_0: entered allmulticast mode [ 704.754243][T13073] bridge_slave_0: entered promiscuous mode [ 704.789628][T13073] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.789854][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.790121][T13073] bridge_slave_1: entered allmulticast mode [ 704.793218][T13073] bridge_slave_1: entered promiscuous mode [ 705.008005][T13073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.013216][T13073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.098222][T13073] team0: Port device team_slave_0 added [ 705.102687][T13073] team0: Port device team_slave_1 added [ 705.168874][T13073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.168892][T13073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.168924][T13073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.188631][T13073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.188684][T13073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.188769][T13073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.418688][T13073] hsr_slave_0: entered promiscuous mode [ 705.421019][T13073] hsr_slave_1: entered promiscuous mode [ 705.422150][T13073] debugfs: 'hsr0' already exists in 'hsr' [ 705.422178][T13073] Cannot create hsr debugfs directory [ 706.375335][ T5606] Bluetooth: hci2: command tx timeout [ 708.455743][ T4910] Bluetooth: hci2: command tx timeout [ 709.978819][ T5606] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 710.033992][ T5606] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 710.069423][ T5606] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 710.093771][ T5606] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 710.125140][ T5606] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 711.552488][T13145] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.552737][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.553003][T13145] bridge_slave_0: entered allmulticast mode [ 711.559933][T13145] bridge_slave_0: entered promiscuous mode [ 711.615554][T13145] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.617374][T13145] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.617748][T13145] bridge_slave_1: entered allmulticast mode [ 711.646217][T13145] bridge_slave_1: entered promiscuous mode [ 711.791616][T13145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.814312][T13145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.937202][T13145] team0: Port device team_slave_0 added [ 711.941373][T13145] team0: Port device team_slave_1 added [ 712.008435][T13145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.008456][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.008489][T13145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.011049][T13145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.011067][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.011099][T13145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.214855][ T4910] Bluetooth: hci8: command tx timeout [ 713.102642][ T4910] Bluetooth: hci5: command 0x0406 tx timeout [ 713.762397][T13145] hsr_slave_0: entered promiscuous mode [ 713.769450][T13145] hsr_slave_1: entered promiscuous mode [ 713.777027][T13145] debugfs: 'hsr0' already exists in 'hsr' [ 713.822334][T13145] Cannot create hsr debugfs directory [ 714.294810][ T5606] Bluetooth: hci8: command tx timeout [ 716.375392][ T5606] Bluetooth: hci8: command tx timeout [ 718.456323][ T5606] Bluetooth: hci8: command tx timeout [ 718.572745][ T4910] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 718.676263][ T4910] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 718.712578][ T4910] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 718.744141][ T4910] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 718.767063][ T4910] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 720.230364][T13165] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.230556][T13165] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.230848][T13165] bridge_slave_0: entered allmulticast mode [ 720.260039][T13165] bridge_slave_0: entered promiscuous mode [ 720.299437][T13165] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.299583][T13165] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.299903][T13165] bridge_slave_1: entered allmulticast mode [ 720.302332][T13165] bridge_slave_1: entered promiscuous mode [ 720.388557][T13165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.392775][T13165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.467217][T13165] team0: Port device team_slave_0 added [ 720.472636][T13165] team0: Port device team_slave_1 added [ 720.532907][T13165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.532927][T13165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.532961][T13165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.592367][T13165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.592408][T13165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.592444][T13165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.749126][T13165] hsr_slave_0: entered promiscuous mode [ 720.750843][T13165] hsr_slave_1: entered promiscuous mode [ 720.751996][T13165] debugfs: 'hsr0' already exists in 'hsr' [ 720.752024][T13165] Cannot create hsr debugfs directory [ 721.015837][ T5606] Bluetooth: hci9: command tx timeout [ 723.033595][ T4910] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 723.094895][ T4910] Bluetooth: hci9: command tx timeout [ 723.152480][ T4910] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 723.154431][ T4910] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 723.190037][ T4910] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 723.227496][ T4910] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 724.840211][T13189] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.840497][T13189] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.840777][T13189] bridge_slave_0: entered allmulticast mode [ 724.844013][T13189] bridge_slave_0: entered promiscuous mode [ 724.885933][T13189] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.886234][T13189] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.886526][T13189] bridge_slave_1: entered allmulticast mode [ 724.889556][T13189] bridge_slave_1: entered promiscuous mode [ 724.998889][T13189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.021758][T13189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.120430][T13189] team0: Port device team_slave_0 added [ 725.137623][T13189] team0: Port device team_slave_1 added [ 725.181349][ T5606] Bluetooth: hci9: command tx timeout [ 725.234790][T13189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.234811][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.234844][T13189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.237602][T13189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.237620][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.237654][T13189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.495349][ T5606] Bluetooth: hci10: command tx timeout [ 726.219163][T13189] hsr_slave_0: entered promiscuous mode [ 726.220975][T13189] hsr_slave_1: entered promiscuous mode [ 726.222219][T13189] debugfs: 'hsr0' already exists in 'hsr' [ 726.222249][T13189] Cannot create hsr debugfs directory [ 727.254737][ T5606] Bluetooth: hci9: command tx timeout [ 727.574910][ T5606] Bluetooth: hci10: command tx timeout [ 729.654758][ T5606] Bluetooth: hci10: command tx timeout [ 731.734747][ T5606] Bluetooth: hci10: command tx timeout [ 748.390460][ T4910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.441770][ T4910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.458809][ T4910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.460114][ T4910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.501115][ T4910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.879322][T13212] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.879550][T13212] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.879810][T13212] bridge_slave_0: entered allmulticast mode [ 749.882982][T13212] bridge_slave_0: entered promiscuous mode [ 749.920387][T13212] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.922093][T13212] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.922406][T13212] bridge_slave_1: entered allmulticast mode [ 749.950095][T13212] bridge_slave_1: entered promiscuous mode [ 750.046590][T13212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.053934][T13212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.281561][T13212] team0: Port device team_slave_0 added [ 750.292663][T13212] team0: Port device team_slave_1 added [ 750.357040][T13212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.357060][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.357090][T13212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.359848][T13212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.359866][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.359896][T13212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.535749][T13212] hsr_slave_0: entered promiscuous mode [ 750.537473][T13212] hsr_slave_1: entered promiscuous mode [ 750.538691][T13212] debugfs: 'hsr0' already exists in 'hsr' [ 750.538720][T13212] Cannot create hsr debugfs directory [ 750.614764][ T4910] Bluetooth: hci0: command tx timeout [ 751.979861][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.694930][ T4910] Bluetooth: hci0: command tx timeout [ 754.774687][ T4910] Bluetooth: hci0: command tx timeout [ 756.856742][ T4910] Bluetooth: hci0: command tx timeout [ 759.968029][ T5606] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 760.042556][ T5606] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 760.068076][ T5606] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 760.070472][ T5606] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 760.071384][ T5606] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 762.088738][ T1042] hsr_slave_0: left promiscuous mode [ 762.214989][ T5606] Bluetooth: hci11: command tx timeout [ 763.039594][ T1042] hsr_slave_1: left promiscuous mode [ 763.079754][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.079788][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.176563][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.176594][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.745618][ T1042] veth1_macvtap: left promiscuous mode [ 763.745762][ T1042] veth0_macvtap: left promiscuous mode [ 763.747644][ T1042] veth1_vlan: left promiscuous mode [ 763.812233][ T1042] veth0_vlan: left promiscuous mode [ 764.298999][ T5606] Bluetooth: hci11: command tx timeout [ 766.385643][ T5606] Bluetooth: hci11: command tx timeout [ 767.135489][ T1042] team_slave_1 (unregistering): left promiscuous mode [ 767.135538][ T1042] team_slave_1 (unregistering): left allmulticast mode [ 767.138799][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 767.221942][ T1042] team_slave_0 (unregistering): left promiscuous mode [ 767.221983][ T1042] team_slave_0 (unregistering): left allmulticast mode [ 767.299729][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 768.464732][ T5606] Bluetooth: hci11: command tx timeout [ 770.221829][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 770.272020][ T4910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 770.280457][ T4910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 770.395426][ T4910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 770.396280][ T4910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 772.454929][ T4910] Bluetooth: hci1: command tx timeout [ 774.534722][ T4910] Bluetooth: hci1: command tx timeout [ 776.620515][ T4910] Bluetooth: hci1: command tx timeout [ 778.694824][ T4910] Bluetooth: hci1: command tx timeout [ 779.950323][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.038621][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 780.075273][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 780.081910][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.092377][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 782.614863][ T4910] Bluetooth: hci2: command tx timeout [ 783.143723][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.203637][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.264244][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 783.274204][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.299927][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 784.694726][ T4910] Bluetooth: hci2: command tx timeout [ 785.495249][ T4910] Bluetooth: hci4: command tx timeout [ 786.777618][ T4910] Bluetooth: hci2: command tx timeout [ 787.585024][ T4910] Bluetooth: hci4: command tx timeout [ 788.854674][ T4910] Bluetooth: hci2: command tx timeout [ 789.231880][T13233] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.232407][T13233] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.232693][T13233] bridge_slave_0: entered allmulticast mode [ 789.263109][T13233] bridge_slave_0: entered promiscuous mode [ 789.370058][T13233] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.370191][T13233] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.370459][T13233] bridge_slave_1: entered allmulticast mode [ 789.404245][T13233] bridge_slave_1: entered promiscuous mode [ 789.655029][ T4910] Bluetooth: hci4: command tx timeout [ 789.990141][T13233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.030327][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.030572][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.030927][T13254] bridge_slave_0: entered allmulticast mode [ 790.061443][T13254] bridge_slave_0: entered promiscuous mode [ 790.090226][T13233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.121807][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.121953][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.122255][T13254] bridge_slave_1: entered allmulticast mode [ 790.148030][T13254] bridge_slave_1: entered promiscuous mode [ 790.595520][T13233] team0: Port device team_slave_0 added [ 790.853084][T13233] team0: Port device team_slave_1 added [ 790.902661][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.735154][ T4910] Bluetooth: hci4: command tx timeout [ 791.807708][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.940313][T13233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.940333][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.940364][T13233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.053817][T13233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.053837][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.053869][T13233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.139504][T13254] team0: Port device team_slave_0 added [ 792.431149][T13254] team0: Port device team_slave_1 added [ 792.431326][T13212] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 792.501741][T13212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 792.603641][T13212] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 792.653773][T13212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 792.711846][T13212] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 792.757141][T13212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 792.854045][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.854065][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.854096][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.900636][T13212] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 793.758298][T13212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.871878][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.871896][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.871928][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.970003][T13233] hsr_slave_0: entered promiscuous mode [ 793.971663][T13233] hsr_slave_1: entered promiscuous mode [ 793.972752][T13233] debugfs: 'hsr0' already exists in 'hsr' [ 793.972774][T13233] Cannot create hsr debugfs directory [ 794.309133][T13254] hsr_slave_0: entered promiscuous mode [ 794.310822][T13254] hsr_slave_1: entered promiscuous mode [ 794.311935][T13254] debugfs: 'hsr0' already exists in 'hsr' [ 794.311963][T13254] Cannot create hsr debugfs directory [ 795.885834][T13308] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.886080][T13308] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.886468][T13308] bridge_slave_0: entered allmulticast mode [ 795.895337][T13308] bridge_slave_0: entered promiscuous mode [ 796.096798][T13308] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.096902][T13308] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.097267][T13308] bridge_slave_1: entered allmulticast mode [ 796.146187][T13308] bridge_slave_1: entered promiscuous mode [ 796.281296][T13339] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.281396][T13339] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.281971][T13339] bridge_slave_0: entered allmulticast mode [ 796.311133][T13339] bridge_slave_0: entered promiscuous mode [ 796.521963][T13339] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.522111][T13339] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.522471][T13339] bridge_slave_1: entered allmulticast mode [ 796.552321][T13339] bridge_slave_1: entered promiscuous mode [ 796.608186][T13308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.705928][T13308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.803616][T13339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.882042][T13339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.911426][T13308] team0: Port device team_slave_0 added [ 797.048775][T13308] team0: Port device team_slave_1 added [ 797.181397][T13339] team0: Port device team_slave_0 added [ 798.002215][T13339] team0: Port device team_slave_1 added [ 798.012782][T13233] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 798.200611][T13233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.245198][T13308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.245219][T13308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.245252][T13308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.334095][T13233] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 798.501181][T13233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.502829][T13308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.502846][T13308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.502879][T13308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.901420][T13233] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 799.052740][T13233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 799.062974][T13339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.062993][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.063047][T13339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.114325][T13233] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 799.224348][T13233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.259951][T13339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.259971][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.260004][T13339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.401933][T13308] hsr_slave_0: entered promiscuous mode [ 799.403812][T13308] hsr_slave_1: entered promiscuous mode [ 799.417486][T13308] debugfs: 'hsr0' already exists in 'hsr' [ 799.417529][T13308] Cannot create hsr debugfs directory [ 799.536962][T13339] hsr_slave_0: entered promiscuous mode [ 799.538396][T13339] hsr_slave_1: entered promiscuous mode [ 799.541679][T13339] debugfs: 'hsr0' already exists in 'hsr' [ 799.541704][T13339] Cannot create hsr debugfs directory [ 799.611015][T13212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.851329][T13212] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.026336][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.026594][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.196675][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.200401][ T6712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.520757][T13233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.760507][T13233] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.925389][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.925626][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.968260][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.968530][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.188010][T13212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.993888][T13212] veth0_vlan: entered promiscuous mode [ 804.050798][T13212] veth1_vlan: entered promiscuous mode [ 804.195248][T13212] veth0_macvtap: entered promiscuous mode [ 804.219462][T13212] veth1_macvtap: entered promiscuous mode [ 804.462524][T13212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.507857][T13233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.516039][T13212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.911776][ T67] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.912052][ T67] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.912273][ T67] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.749827][ T1142] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.673355][T10326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.673380][T10326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.911752][T13233] veth0_vlan: entered promiscuous mode [ 806.958111][T13233] veth1_vlan: entered promiscuous mode [ 806.963479][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.963502][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.439538][T13233] veth0_macvtap: entered promiscuous mode [ 807.468932][T13233] veth1_macvtap: entered promiscuous mode [ 807.550428][T13233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.646187][T13233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.762069][ T1142] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.762437][ T1142] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.801550][ T1142] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.801610][ T1142] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.214947][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.214972][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.033656][ T3104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.033680][ T3104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.300322][ T31] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 810.499210][ T31] usb 9-1: not running at top speed; connect to a high speed hub [ 810.501334][ T31] usb 9-1: config 0 has an invalid interface number: 69 but max is 1 [ 810.501364][ T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.501385][ T31] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 810.501407][ T31] usb 9-1: config 0 has no interface number 0 [ 810.501442][ T31] usb 9-1: config 0 interface 69 has no altsetting 0 [ 810.565328][ T31] usb 9-1: New USB device found, idVendor=0451, idProduct=8140, bcdDevice= 4.82 [ 810.565364][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.565387][ T31] usb 9-1: Product: syz [ 810.565403][ T31] usb 9-1: Manufacturer: syz [ 810.565420][ T31] usb 9-1: SerialNumber: syz [ 810.585892][ T31] usb 9-1: config 0 descriptor?? [ 811.377012][ T31] hub 9-1:0.69: bad descriptor, ignoring hub [ 811.377056][ T31] hub 9-1:0.69: probe with driver hub failed with error -5 [ 811.378520][ T31] rndis_host 9-1:0.69: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 811.460518][ T31] usb 9-1: USB disconnect, device number 2 [ 814.657874][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.160130][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2336'. [ 815.160166][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2336'. [ 815.995078][T13431] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 816.254714][T13431] usb 9-1: Using ep0 maxpacket: 32 [ 816.287794][T13431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.287836][T13431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.287884][T13431] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 816.287913][T13431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.347588][T13431] usb 9-1: config 0 descriptor?? [ 816.362466][T13431] hub 9-1:0.0: USB hub found [ 816.694073][T13431] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 816.832170][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2337'. [ 816.922888][T13431] usbhid 9-1:0.0: can't add hid device: -71 [ 816.923025][T13431] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 816.985835][T13431] usb 9-1: USB disconnect, device number 3 [ 817.294247][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2339'. [ 825.554661][T13431] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 825.809777][T13431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.809825][T13431] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 825.809846][T13431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.890709][T13431] usb 9-1: config 0 descriptor?? [ 826.146829][T13431] usbhid 9-1:0.0: can't add hid device: -71 [ 826.147063][T13431] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 826.183880][T13431] usb 9-1: USB disconnect, device number 4 [ 826.626370][T13431] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 826.786613][T13431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.786667][T13431] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 826.786694][T13431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.852744][T13431] usb 9-1: config 0 descriptor?? [ 827.675712][T13508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.695021][T13508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.871183][T13431] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 827.949891][T13431] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input28 [ 828.973680][T13431] usb 9-1: USB disconnect, device number 5 [ 828.973810][ C1] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 832.799409][ T5878] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 833.465805][ T5878] usb 10-1: Using ep0 maxpacket: 32 [ 833.469406][ T5878] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.469443][ T5878] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.469487][ T5878] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 833.469513][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.486135][ T5878] usb 10-1: config 0 descriptor?? [ 834.672838][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 834.855996][ T5878] usb 10-1: can't set config #0, error -71 [ 834.858658][ T5878] usb 10-1: USB disconnect, device number 2 [ 834.867841][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 834.876739][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 834.905989][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 834.908545][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 836.184671][T13431] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 836.337233][T13431] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 836.337268][T13431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.365955][T13431] usb 9-1: config 0 descriptor?? [ 836.372826][T13431] cp210x 9-1:0.0: cp210x converter detected [ 836.598773][T13431] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 836.598805][T13431] cp210x 9-1:0.0: querying part number failed [ 836.632722][T13431] usb 9-1: cp210x converter now attached to ttyUSB0 [ 837.015551][ T5606] Bluetooth: hci3: command tx timeout [ 839.799439][ T5606] Bluetooth: hci3: command tx timeout [ 839.911446][ T5688] usb 9-1: USB disconnect, device number 6 [ 839.959711][ T5688] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 840.041129][ T5688] cp210x 9-1:0.0: device disconnected [ 840.685355][T13531] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.693827][T13531] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.694218][T13531] bridge_slave_0: entered allmulticast mode [ 840.811669][T13531] bridge_slave_0: entered promiscuous mode [ 841.646494][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.659357][T13531] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.659741][T13531] bridge_slave_1: entered allmulticast mode [ 841.795498][T13531] bridge_slave_1: entered promiscuous mode [ 841.819995][T13192] Bluetooth: hci3: command tx timeout [ 841.820218][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 841.871852][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 841.895477][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 841.927186][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 841.952148][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.044651][ T5688] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 842.340666][ T5688] usb 9-1: not running at top speed; connect to a high speed hub [ 842.352852][ T5688] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.352882][ T5688] usb 9-1: config 0 has no interfaces? [ 842.375271][ T5688] usb 9-1: New USB device found, idVendor=0451, idProduct=8140, bcdDevice= 4.82 [ 842.375305][ T5688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.375326][ T5688] usb 9-1: Product: syz [ 842.375341][ T5688] usb 9-1: Manufacturer: syz [ 842.375357][ T5688] usb 9-1: SerialNumber: syz [ 842.423641][ T5688] usb 9-1: config 0 descriptor?? [ 842.837327][T13431] usb 9-1: USB disconnect, device number 7 [ 842.886917][T13531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.990256][T13531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.524138][T13531] team0: Port device team_slave_0 added [ 843.600123][T13531] team0: Port device team_slave_1 added [ 843.895433][ T4910] Bluetooth: hci3: command tx timeout [ 844.055103][T13431] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 844.239086][T13431] usb 9-1: Using ep0 maxpacket: 32 [ 844.374094][T13431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.374131][T13431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.374170][T13431] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 844.374196][T13431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.394622][ T4910] Bluetooth: hci5: command tx timeout [ 844.436103][T13431] usb 9-1: config 0 descriptor?? [ 844.476482][T13431] hub 9-1:0.0: USB hub found [ 844.805027][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 844.902595][T13431] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 844.933484][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 844.941931][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 844.944425][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 844.976530][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 845.248827][T13431] usbhid 9-1:0.0: can't add hid device: -71 [ 845.248965][T13431] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 845.595851][T13431] usb 9-1: USB disconnect, device number 8 [ 845.652728][T13531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.652750][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.652785][T13531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.744963][T13531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.744984][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.745017][T13531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.462751][ T4910] Bluetooth: hci5: command tx timeout [ 846.810174][T13531] hsr_slave_0: entered promiscuous mode [ 846.823579][T13531] hsr_slave_1: entered promiscuous mode [ 846.842080][T13531] debugfs: 'hsr0' already exists in 'hsr' [ 846.842115][T13531] Cannot create hsr debugfs directory [ 847.175347][ T4910] Bluetooth: hci6: command tx timeout [ 848.015271][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2361'. [ 848.190621][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2361'. [ 848.536590][ T4910] Bluetooth: hci5: command tx timeout [ 849.257388][ T4910] Bluetooth: hci6: command tx timeout [ 849.286712][ T5878] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 849.438109][ T5878] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 849.438144][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.602991][ T5878] usb 10-1: config 0 descriptor?? [ 849.669056][ T5878] cp210x 10-1:0.0: cp210x converter detected [ 849.826477][ T5878] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 849.826509][ T5878] cp210x 10-1:0.0: querying part number failed [ 849.904175][ T5878] usb 10-1: cp210x converter now attached to ttyUSB0 [ 850.616224][ T4910] Bluetooth: hci5: command tx timeout [ 851.334986][ T4910] Bluetooth: hci6: command tx timeout [ 852.122912][ T9] usb 10-1: USB disconnect, device number 3 [ 852.145015][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 852.189142][ T9] cp210x 10-1:0.0: device disconnected [ 853.417765][ T4910] Bluetooth: hci6: command tx timeout [ 854.477084][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.477218][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.477595][T13572] bridge_slave_0: entered allmulticast mode [ 854.517141][T13572] bridge_slave_0: entered promiscuous mode [ 854.580045][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.580151][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.580375][T13572] bridge_slave_1: entered allmulticast mode [ 854.697475][T13572] bridge_slave_1: entered promiscuous mode [ 855.048508][T13572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.091817][T13572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.757858][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.757995][T13585] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.758395][T13585] bridge_slave_0: entered allmulticast mode [ 855.772163][T13585] bridge_slave_0: entered promiscuous mode [ 855.891512][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.891641][T13585] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.892050][T13585] bridge_slave_1: entered allmulticast mode [ 855.928945][T13585] bridge_slave_1: entered promiscuous mode [ 855.961139][T13572] team0: Port device team_slave_0 added [ 856.050152][T13572] team0: Port device team_slave_1 added [ 856.648777][T13585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.719508][T13585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.214649][ T5719] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 857.688395][ T5719] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.688449][ T5719] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 857.688474][ T5719] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.711350][ T5719] usb 10-1: config 0 descriptor?? [ 857.751518][T13572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.751537][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.751568][T13572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.056162][ T5719] usbhid 10-1:0.0: can't add hid device: -71 [ 858.056296][ T5719] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 858.084935][T13572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.084957][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.084989][T13572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.178234][ T5719] usb 10-1: USB disconnect, device number 4 [ 858.642984][T13585] team0: Port device team_slave_0 added [ 858.671160][T13585] team0: Port device team_slave_1 added [ 858.836413][T13572] hsr_slave_0: entered promiscuous mode [ 858.838279][T13572] hsr_slave_1: entered promiscuous mode [ 858.840365][T13572] debugfs: 'hsr0' already exists in 'hsr' [ 858.840393][T13572] Cannot create hsr debugfs directory [ 858.842637][T13585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.842654][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.842686][T13585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.031380][ T5719] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 859.059498][T13585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.059517][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.059550][T13585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.534592][ T5719] usb 10-1: device not accepting address 5, error -71 [ 861.902361][T13585] hsr_slave_0: entered promiscuous mode [ 861.926843][T13585] hsr_slave_1: entered promiscuous mode [ 861.972415][T13585] debugfs: 'hsr0' already exists in 'hsr' [ 861.972450][T13585] Cannot create hsr debugfs directory [ 865.191244][ T5606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 865.247551][ T5606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 865.290360][ T5606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 865.343931][ T5606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 865.402972][ T5606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 865.670685][T13698] FAULT_INJECTION: forcing a failure. [ 865.670685][T13698] name failslab, interval 1, probability 0, space 0, times 0 [ 865.670729][T13698] CPU: 0 UID: 0 PID: 13698 Comm: syz.9.2385 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 865.670762][T13698] Tainted: [L]=SOFTLOCKUP [ 865.670770][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.670786][T13698] Call Trace: [ 865.670795][T13698] [ 865.670822][T13698] dump_stack_lvl+0xe8/0x150 [ 865.670911][T13698] should_fail_ex+0x467/0x600 [ 865.670984][T13698] should_failslab+0xa8/0x100 [ 865.671035][T13698] __kmalloc_noprof+0xfe/0x780 [ 865.671071][T13698] ? sock_kmalloc+0xd6/0x160 [ 865.671139][T13698] ? sock_kmalloc+0xd6/0x160 [ 865.671178][T13698] sock_kmalloc+0xd6/0x160 [ 865.671220][T13698] skcipher_recvmsg+0x564/0xe10 [ 865.671269][T13698] ? do_raw_spin_lock+0x12b/0x2f0 [ 865.671334][T13698] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 865.671363][T13698] ? __lock_acquire+0x683/0x2ce0 [ 865.671391][T13698] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 865.671439][T13698] ? security_socket_recvmsg+0x7e/0x2c0 [ 865.671468][T13698] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 865.671499][T13698] sock_recvmsg+0x196/0x1e0 [ 865.671538][T13698] ____sys_recvmsg+0x1f2/0x4b0 [ 865.671578][T13698] ? __pfx_____sys_recvmsg+0x10/0x10 [ 865.671625][T13698] ? import_iovec+0x73/0xa0 [ 865.671661][T13698] ___sys_recvmsg+0x213/0x5a0 [ 865.671699][T13698] ? __pfx____sys_recvmsg+0x10/0x10 [ 865.671736][T13698] ? __fget_files+0x2a/0x420 [ 865.671788][T13698] ? __fget_files+0x3a8/0x420 [ 865.671825][T13698] do_recvmmsg+0x320/0x7f0 [ 865.671867][T13698] ? __pfx_do_recvmmsg+0x10/0x10 [ 865.671898][T13698] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 865.671968][T13698] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 865.672007][T13698] __x64_sys_recvmmsg+0x198/0x250 [ 865.672043][T13698] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 865.672085][T13698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.672126][T13698] do_syscall_64+0x174/0x580 [ 865.672157][T13698] ? trace_irq_disable+0x3b/0x140 [ 865.672198][T13698] ? clear_bhb_loop+0x40/0x90 [ 865.672227][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.672251][T13698] RIP: 0033:0x7fd3657ce019 [ 865.672273][T13698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.672293][T13698] RSP: 002b:00007fd363a26028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 865.672318][T13698] RAX: ffffffffffffffda RBX: 00007fd365a55fa0 RCX: 00007fd3657ce019 [ 865.672335][T13698] RDX: 0000000000000002 RSI: 0000200000000980 RDI: 0000000000000004 [ 865.672350][T13698] RBP: 00007fd363a26090 R08: 0000000000000000 R09: 0000000000000000 [ 865.672364][T13698] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 865.672378][T13698] R13: 00007fd365a56038 R14: 00007fd365a55fa0 R15: 00007ffd338c82f8 [ 865.672414][T13698] [ 866.133148][T13702] FAULT_INJECTION: forcing a failure. [ 866.133148][T13702] name failslab, interval 1, probability 0, space 0, times 0 [ 866.133190][T13702] CPU: 1 UID: 0 PID: 13702 Comm: syz.9.2386 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 866.133221][T13702] Tainted: [L]=SOFTLOCKUP [ 866.133230][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.133246][T13702] Call Trace: [ 866.133255][T13702] [ 866.133265][T13702] dump_stack_lvl+0xe8/0x150 [ 866.133307][T13702] should_fail_ex+0x467/0x600 [ 866.133349][T13702] should_failslab+0xa8/0x100 [ 866.133380][T13702] kmem_cache_alloc_noprof+0xa4/0x650 [ 866.133404][T13702] ? dst_alloc+0x105/0x170 [ 866.133437][T13702] ? dst_alloc+0x105/0x170 [ 866.133477][T13702] dst_alloc+0x105/0x170 [ 866.133515][T13702] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 866.133654][T13702] ? ip_route_output_key_hash+0xd8/0x2a0 [ 866.133680][T13702] ip_route_output_key_hash+0x18d/0x2a0 [ 866.133706][T13702] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 866.133752][T13702] ip_route_output_flow+0x2a/0x150 [ 866.133784][T13702] ? security_sk_classify_flow+0x6d/0x150 [ 866.133814][T13702] raw_sendmsg+0x110d/0x1a20 [ 866.133876][T13702] ? __pfx_raw_sendmsg+0x10/0x10 [ 866.133927][T13702] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 866.133985][T13702] ? sock_rps_record_flow+0x19/0x350 [ 866.134012][T13702] ? inet_sendmsg+0x298/0x320 [ 866.134038][T13702] ? __pfx_inet_sendmsg+0x10/0x10 [ 866.134067][T13702] sock_sendmsg_nosec+0x10e/0x180 [ 866.134107][T13702] ____sys_sendmsg+0x565/0x870 [ 866.134145][T13702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.134187][T13702] ? import_iovec+0x73/0xa0 [ 866.134220][T13702] ___sys_sendmsg+0x2a5/0x360 [ 866.134248][T13702] ? __lock_acquire+0x683/0x2ce0 [ 866.134278][T13702] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.134314][T13702] ? kstrtouint+0x6e/0xe0 [ 866.134377][T13702] ? __fget_files+0x2a/0x420 [ 866.134402][T13702] ? __fget_files+0x3a8/0x420 [ 866.134437][T13702] __sys_sendmmsg+0x279/0x4d0 [ 866.134472][T13702] ? __pfx___sys_sendmmsg+0x10/0x10 [ 866.134511][T13702] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 866.134550][T13702] ? ksys_write+0x248/0x270 [ 866.134593][T13702] ? __pfx_ksys_write+0x10/0x10 [ 866.134629][T13702] __x64_sys_sendmmsg+0xa0/0xc0 [ 866.134660][T13702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.134684][T13702] do_syscall_64+0x174/0x580 [ 866.134714][T13702] ? trace_irq_disable+0x3b/0x140 [ 866.134737][T13702] ? clear_bhb_loop+0x40/0x90 [ 866.134765][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.134788][T13702] RIP: 0033:0x7fd3657ce019 [ 866.134810][T13702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.134830][T13702] RSP: 002b:00007fd363a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 866.134854][T13702] RAX: ffffffffffffffda RBX: 00007fd365a55fa0 RCX: 00007fd3657ce019 [ 866.134872][T13702] RDX: 0000000000000002 RSI: 0000200000004e80 RDI: 0000000000000003 [ 866.134888][T13702] RBP: 00007fd363a26090 R08: 0000000000000000 R09: 0000000000000000 [ 866.134902][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.134916][T13702] R13: 00007fd365a56038 R14: 00007fd365a55fa0 R15: 00007ffd338c82f8 [ 866.134954][T13702] [ 867.495532][ T5606] Bluetooth: hci7: command tx timeout [ 868.115782][T13724] FAULT_INJECTION: forcing a failure. [ 868.115782][T13724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.116014][T13724] CPU: 1 UID: 0 PID: 13724 Comm: syz.9.2395 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 868.116049][T13724] Tainted: [L]=SOFTLOCKUP [ 868.116058][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.116073][T13724] Call Trace: [ 868.116082][T13724] [ 868.116094][T13724] dump_stack_lvl+0xe8/0x150 [ 868.116135][T13724] should_fail_ex+0x467/0x600 [ 868.116178][T13724] copy_fpstate_to_sigframe+0xac0/0xd80 [ 868.116247][T13724] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 868.116288][T13724] ? rt_spin_lock+0x1e0/0x400 [ 868.116314][T13724] ? rt_spin_lock+0x1e0/0x400 [ 868.116342][T13724] ? do_raw_spin_lock+0x12b/0x2f0 [ 868.116390][T13724] ? fpu__alloc_mathframe+0xac/0x130 [ 868.116425][T13724] get_sigframe+0x603/0x830 [ 868.116466][T13724] ? __pfx_get_sigframe+0x10/0x10 [ 868.116502][T13724] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 868.116525][T13724] ? rt_spin_lock+0x1e0/0x400 [ 868.116555][T13724] x64_setup_rt_frame+0x164/0xc50 [ 868.116586][T13724] ? rt_spin_unlock+0x157/0x200 [ 868.116615][T13724] ? rt_spin_unlock+0x163/0x200 [ 868.116642][T13724] ? get_signal+0x10de/0x12c0 [ 868.116693][T13724] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 868.116724][T13724] ? irqentry_exit+0x218/0x8f0 [ 868.116764][T13724] arch_do_signal_or_restart+0x45b/0x860 [ 868.116814][T13724] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 868.116845][T13724] ? ksys_write+0x240/0x270 [ 868.116894][T13724] ? ksys_write+0x248/0x270 [ 868.116932][T13724] exit_to_user_mode_loop+0x104/0x730 [ 868.117043][T13724] ? rcu_is_watching+0x15/0xb0 [ 868.117084][T13724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.117112][T13724] do_syscall_64+0x353/0x580 [ 868.117146][T13724] ? clear_bhb_loop+0x40/0x90 [ 868.117176][T13724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.117199][T13724] RIP: 0033:0x7fd36578e84e [ 868.117222][T13724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 868.117242][T13724] RSP: 002b:00007fd363a25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.117266][T13724] RAX: 0000000000000001 RBX: 00007fd363a266c0 RCX: 00007fd36578e84e [ 868.117282][T13724] RDX: 0000000000000001 RSI: 00007fd363a26090 RDI: 0000000000000004 [ 868.117298][T13724] RBP: 00007fd363a26090 R08: 0000000000000000 R09: 0000000000000000 [ 868.117313][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.117326][T13724] R13: 00007fd365a56038 R14: 00007fd365a55fa0 R15: 00007ffd338c82f8 [ 868.117370][T13724] [ 869.575031][ T5606] Bluetooth: hci7: command tx timeout [ 870.260310][T13690] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.278852][T13690] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.279300][T13690] bridge_slave_0: entered allmulticast mode [ 870.305361][T13690] bridge_slave_0: entered promiscuous mode [ 870.336724][T13690] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.411208][T13690] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.412705][T13690] bridge_slave_1: entered allmulticast mode [ 870.434246][T13690] bridge_slave_1: entered promiscuous mode [ 870.924805][T13690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.000881][T13690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.229211][T13690] team0: Port device team_slave_0 added [ 871.243355][T13690] team0: Port device team_slave_1 added [ 871.279977][T13758] FAULT_INJECTION: forcing a failure. [ 871.279977][T13758] name failslab, interval 1, probability 0, space 0, times 0 [ 871.280008][T13758] CPU: 0 UID: 0 PID: 13758 Comm: syz.9.2408 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 871.280031][T13758] Tainted: [L]=SOFTLOCKUP [ 871.280037][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.280047][T13758] Call Trace: [ 871.280061][T13758] [ 871.280068][T13758] dump_stack_lvl+0xe8/0x150 [ 871.280100][T13758] should_fail_ex+0x467/0x600 [ 871.280130][T13758] should_failslab+0xa8/0x100 [ 871.280152][T13758] __kmalloc_noprof+0xfe/0x780 [ 871.280171][T13758] ? sock_kmalloc+0xd6/0x160 [ 871.280193][T13758] ? sock_kmalloc+0xd6/0x160 [ 871.280219][T13758] sock_kmalloc+0xd6/0x160 [ 871.280244][T13758] __ipv6_sock_mc_join+0x40b/0x740 [ 871.280370][T13758] ipv6_mcast_join_leave+0x1a2/0x240 [ 871.280416][T13758] ? __pfx_ipv6_mcast_join_leave+0x10/0x10 [ 871.280454][T13758] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 871.280475][T13758] ? lockdep_hardirqs_on+0x7a/0x110 [ 871.280502][T13758] do_ipv6_setsockopt+0x1990/0x3180 [ 871.280532][T13758] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 871.280555][T13758] ? get_pid_task+0x20/0x1f0 [ 871.280590][T13758] ? __lock_acquire+0x683/0x2ce0 [ 871.280620][T13758] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 871.280642][T13758] ? lockdep_hardirqs_on+0x7a/0x110 [ 871.280667][T13758] ? __fget_files+0x2a/0x420 [ 871.280693][T13758] ? __fget_files+0x2a/0x420 [ 871.280713][T13758] ipv6_setsockopt+0x59/0x170 [ 871.280735][T13758] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 871.280754][T13758] do_sock_setsockopt+0x17c/0x1b0 [ 871.280779][T13758] __x64_sys_setsockopt+0x143/0x1b0 [ 871.280801][T13758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.280819][T13758] do_syscall_64+0x174/0x580 [ 871.280841][T13758] ? trace_irq_disable+0x3b/0x140 [ 871.280858][T13758] ? clear_bhb_loop+0x40/0x90 [ 871.280877][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.280893][T13758] RIP: 0033:0x7fd3657ce019 [ 871.280908][T13758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.280922][T13758] RSP: 002b:00007fd363a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 871.280939][T13758] RAX: ffffffffffffffda RBX: 00007fd365a55fa0 RCX: 00007fd3657ce019 [ 871.280952][T13758] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000003 [ 871.280962][T13758] RBP: 00007fd363a26090 R08: 0000000000000108 R09: 0000000000000000 [ 871.280972][T13758] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 871.280983][T13758] R13: 00007fd365a56038 R14: 00007fd365a55fa0 R15: 00007ffd338c82f8 [ 871.281008][T13758] [ 871.656479][ T5606] Bluetooth: hci7: command tx timeout [ 871.822804][ T5606] Bluetooth: hci0: command 0x0406 tx timeout [ 871.859031][T13690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.859051][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.859083][T13690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.861790][T13690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.861808][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.861842][T13690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.760896][T13690] hsr_slave_0: entered promiscuous mode [ 872.778056][T13690] hsr_slave_1: entered promiscuous mode [ 872.782655][T13690] debugfs: 'hsr0' already exists in 'hsr' [ 872.782690][T13690] Cannot create hsr debugfs directory [ 873.734794][ T4910] Bluetooth: hci7: command tx timeout [ 875.029625][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.844082][T13799] FAULT_INJECTION: forcing a failure. [ 875.844082][T13799] name failslab, interval 1, probability 0, space 0, times 0 [ 875.844124][T13799] CPU: 1 UID: 0 PID: 13799 Comm: syz.9.2428 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 875.844156][T13799] Tainted: [L]=SOFTLOCKUP [ 875.844164][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 875.844178][T13799] Call Trace: [ 875.844186][T13799] [ 875.844198][T13799] dump_stack_lvl+0xe8/0x150 [ 875.844240][T13799] should_fail_ex+0x467/0x600 [ 875.844281][T13799] ? __pfx_sock_alloc_inode+0x10/0x10 [ 875.844304][T13799] should_failslab+0xa8/0x100 [ 875.844334][T13799] ? __pfx_sock_alloc_inode+0x10/0x10 [ 875.844353][T13799] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 875.844379][T13799] ? sock_alloc_inode+0x2c/0x1a0 [ 875.844399][T13799] ? sock_alloc_inode+0x2c/0x1a0 [ 875.844428][T13799] ? __pfx_sock_alloc_inode+0x10/0x10 [ 875.844447][T13799] sock_alloc_inode+0x2c/0x1a0 [ 875.844468][T13799] ? __pfx_sock_alloc_inode+0x10/0x10 [ 875.844488][T13799] alloc_inode+0x6a/0x1b0 [ 875.844512][T13799] sock_create_lite+0x8b/0x510 [ 875.844536][T13799] ? sctp_id2assoc+0x1cf/0x260 [ 875.844594][T13799] sctp_getsockopt_peeloff_common+0x1fe/0x5f0 [ 875.844644][T13799] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 875.844693][T13799] sctp_getsockopt_peeloff+0x13f/0x230 [ 875.844716][T13799] ? __local_bh_enable+0x1e1/0x2f0 [ 875.844748][T13799] ? __pfx_sctp_getsockopt_peeloff+0x10/0x10 [ 875.844772][T13799] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 875.844801][T13799] ? lockdep_hardirqs_on+0x7a/0x110 [ 875.844838][T13799] sctp_getsockopt+0x196/0xb90 [ 875.844867][T13799] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 875.844892][T13799] do_sock_getsockopt+0x51d/0x7e0 [ 875.844935][T13799] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 875.844981][T13799] ? __fget_files+0x3a8/0x420 [ 875.845005][T13799] ? __fget_files+0x2a/0x420 [ 875.845038][T13799] __x64_sys_getsockopt+0x1aa/0x250 [ 875.845075][T13799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.845101][T13799] do_syscall_64+0x174/0x580 [ 875.845130][T13799] ? trace_irq_disable+0x3b/0x140 [ 875.845153][T13799] ? clear_bhb_loop+0x40/0x90 [ 875.845181][T13799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.845206][T13799] RIP: 0033:0x7fd3657ce019 [ 875.845227][T13799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.845247][T13799] RSP: 002b:00007fd363a05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 875.845272][T13799] RAX: ffffffffffffffda RBX: 00007fd365a56090 RCX: 00007fd3657ce019 [ 875.845290][T13799] RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003 [ 875.845305][T13799] RBP: 00007fd363a05090 R08: 00002000000000c0 R09: 0000000000000000 [ 875.845321][T13799] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 875.845336][T13799] R13: 00007fd365a56128 R14: 00007fd365a56090 R15: 00007ffd338c82f8 [ 875.845373][T13799] [ 877.558360][T13813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.558791][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2435'. [ 887.180021][ T4910] Bluetooth: hci11: command 0x0406 tx timeout [ 892.211838][ T4910] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 892.298885][ T4910] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 892.302862][ T4910] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 892.376403][ T4910] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 892.453671][ T4910] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 894.535244][ T5606] Bluetooth: hci8: command tx timeout [ 894.929704][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.929845][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.930235][T13996] bridge_slave_0: entered allmulticast mode [ 894.932510][T13996] bridge_slave_0: entered promiscuous mode [ 894.947811][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.948041][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.948415][T13996] bridge_slave_1: entered allmulticast mode [ 894.958592][T13996] bridge_slave_1: entered promiscuous mode [ 895.383876][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.433028][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.624029][T13996] team0: Port device team_slave_0 added [ 895.640590][T13996] team0: Port device team_slave_1 added [ 895.837383][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.837404][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.837436][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.852044][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.852065][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.852098][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.159570][T13996] hsr_slave_0: entered promiscuous mode [ 896.173373][T13996] hsr_slave_1: entered promiscuous mode [ 896.191401][T13996] debugfs: 'hsr0' already exists in 'hsr' [ 896.191434][T13996] Cannot create hsr debugfs directory [ 896.360355][T14046] FAULT_INJECTION: forcing a failure. [ 896.360355][T14046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.360396][T14046] CPU: 1 UID: 0 PID: 14046 Comm: syz.9.2540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 896.360428][T14046] Tainted: [L]=SOFTLOCKUP [ 896.360441][T14046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 896.360456][T14046] Call Trace: [ 896.360490][T14046] [ 896.360500][T14046] dump_stack_lvl+0xe8/0x150 [ 896.360635][T14046] should_fail_ex+0x467/0x600 [ 896.360756][T14046] _copy_from_iter+0x1d3/0x1660 [ 896.360830][T14046] ? rcu_is_watching+0x15/0xb0 [ 896.360915][T14046] ? trace_kmem_cache_alloc+0x29/0xe0 [ 896.360970][T14046] ? __pfx__copy_from_iter+0x10/0x10 [ 896.360990][T14046] ? __alloc_skb+0x276/0x7a0 [ 896.361056][T14046] ? __alloc_skb+0x276/0x7a0 [ 896.361140][T14046] ? netlink_sendmsg+0x650/0xb40 [ 896.361238][T14046] ? skb_put+0x112/0x210 [ 896.361321][T14046] netlink_sendmsg+0x6c0/0xb40 [ 896.361419][T14046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.361514][T14046] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 896.361621][T14046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.361696][T14046] sock_sendmsg_nosec+0x13a/0x180 [ 896.361804][T14046] ____sys_sendmsg+0x565/0x870 [ 896.361880][T14046] ? __might_fault+0xaf/0x130 [ 896.361978][T14046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 896.362118][T14046] ? import_iovec+0x73/0xa0 [ 896.362206][T14046] ___sys_sendmsg+0x2a5/0x360 [ 896.362280][T14046] ? __lock_acquire+0x683/0x2ce0 [ 896.362365][T14046] ? __pfx____sys_sendmsg+0x10/0x10 [ 896.362452][T14046] ? kstrtouint+0x6e/0xe0 [ 896.362633][T14046] ? __fget_files+0x2a/0x420 [ 896.362697][T14046] ? __fget_files+0x3a8/0x420 [ 896.362777][T14046] __sys_sendmmsg+0x279/0x4d0 [ 896.362866][T14046] ? __pfx___sys_sendmmsg+0x10/0x10 [ 896.362976][T14046] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 896.363076][T14046] ? ksys_write+0x248/0x270 [ 896.363170][T14046] ? __pfx_ksys_write+0x10/0x10 [ 896.363269][T14046] __x64_sys_sendmmsg+0xa0/0xc0 [ 896.363345][T14046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.363438][T14046] do_syscall_64+0x174/0x580 [ 896.363537][T14046] ? trace_irq_disable+0x3b/0x140 [ 896.363594][T14046] ? clear_bhb_loop+0x40/0x90 [ 896.363670][T14046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.363734][T14046] RIP: 0033:0x7fd3657ce019 [ 896.363791][T14046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.363855][T14046] RSP: 002b:00007fd363a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 896.363921][T14046] RAX: ffffffffffffffda RBX: 00007fd365a55fa0 RCX: 00007fd3657ce019 [ 896.363970][T14046] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 896.364046][T14046] RBP: 00007fd363a26090 R08: 0000000000000000 R09: 0000000000000000 [ 896.364104][T14046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.364139][T14046] R13: 00007fd365a56038 R14: 00007fd365a55fa0 R15: 00007ffd338c82f8 [ 896.364236][T14046] [ 896.616569][ T5606] Bluetooth: hci8: command tx timeout [ 897.415031][ T5606] Bluetooth: hci1: command 0x0406 tx timeout [ 897.785009][ T5712] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 897.934847][ T5712] usb 10-1: Using ep0 maxpacket: 8 [ 897.942656][ T5712] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 897.942689][ T5712] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 487, setting to 64 [ 897.942719][ T5712] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 897.942748][ T5712] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 897.950896][ T5712] usb 10-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 897.950929][ T5712] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.950951][ T5712] usb 10-1: Product: syz [ 897.950968][ T5712] usb 10-1: Manufacturer: syz [ 897.950984][ T5712] usb 10-1: SerialNumber: syz [ 898.336560][T14062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.348583][T14062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.694867][ T5606] Bluetooth: hci8: command tx timeout [ 899.659560][ T5712] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 899.659637][ T5712] usb 10-1: MIDIStreaming interface descriptor not found [ 899.897047][ T5712] usb 10-1: USB disconnect, device number 7 [ 900.083419][T13514] udevd[13514]: setting mode of /dev/bus/usb/010/007 to 020664 failed: No such file or directory [ 900.083635][T13514] udevd[13514]: setting owner of /dev/bus/usb/010/007 to uid=0, gid=0 failed: No such file or directory [ 900.197167][T13505] udevd[13505]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.934610][ T5606] Bluetooth: hci8: command tx timeout [ 901.582397][T13192] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 901.678924][T13192] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 901.781023][T13192] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 901.836695][T13192] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 901.837583][T13192] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 902.545696][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 903.979284][ T4910] Bluetooth: hci9: command tx timeout [ 904.284062][ T5606] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 904.377303][ T5606] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 904.380582][ T5606] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 904.396520][ T5606] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 904.429942][ T5606] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 906.055133][ T4910] Bluetooth: hci9: command tx timeout [ 906.615075][ T4910] Bluetooth: hci10: command tx timeout [ 906.705276][T14142] FAULT_INJECTION: forcing a failure. [ 906.705276][T14142] name failslab, interval 1, probability 0, space 0, times 0 [ 906.705318][T14142] CPU: 1 UID: 0 PID: 14142 Comm: syz.9.2570 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 906.705351][T14142] Tainted: [L]=SOFTLOCKUP [ 906.705359][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.705374][T14142] Call Trace: [ 906.705383][T14142] [ 906.705393][T14142] dump_stack_lvl+0xe8/0x150 [ 906.705445][T14142] should_fail_ex+0x467/0x600 [ 906.705492][T14142] should_failslab+0xa8/0x100 [ 906.705523][T14142] __kmalloc_cache_noprof+0xa0/0x6b0 [ 906.705550][T14142] ? bcm_rx_setup+0x46e/0x2000 [ 906.705679][T14142] ? bcm_rx_setup+0x46e/0x2000 [ 906.705711][T14142] bcm_rx_setup+0x46e/0x2000 [ 906.705751][T14142] bcm_sendmsg+0x2b9/0x7a0 [ 906.705777][T14142] ? __pfx_bcm_sendmsg+0x10/0x10 [ 906.705799][T14142] ? __lock_acquire+0x683/0x2ce0 [ 906.705829][T14142] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 906.705864][T14142] ? __kernel_text_address+0xd/0x30 [ 906.705889][T14142] ? unwind_get_return_address+0x4d/0x90 [ 906.705925][T14142] ? __pfx_bcm_sendmsg+0x10/0x10 [ 906.705946][T14142] sock_sendmsg_nosec+0x13a/0x180 [ 906.705987][T14142] ____sys_sendmsg+0x565/0x870 [ 906.706017][T14142] ? __might_fault+0xaf/0x130 [ 906.706049][T14142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.706089][T14142] ? import_iovec+0x73/0xa0 [ 906.706120][T14142] ___sys_sendmsg+0x2a5/0x360 [ 906.706149][T14142] ? __lock_acquire+0x683/0x2ce0 [ 906.706177][T14142] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.706239][T14142] ? __fget_files+0x2a/0x420 [ 906.706262][T14142] ? __fget_files+0x3a8/0x420 [ 906.706298][T14142] __x64_sys_sendmsg+0x1b7/0x290 [ 906.706330][T14142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.706377][T14142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.706401][T14142] do_syscall_64+0x174/0x580 [ 906.706440][T14142] ? trace_irq_disable+0x3b/0x140 [ 906.706463][T14142] ? clear_bhb_loop+0x40/0x90 [ 906.706491][T14142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.706513][T14142] RIP: 0033:0x7fd3657ce019 [ 906.706535][T14142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.706556][T14142] RSP: 002b:00007fd363a26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.706580][T14142] RAX: ffffffffffffffda RBX: 00007fd365a55fa0 RCX: 00007fd3657ce019 [ 906.706597][T14142] RDX: 0000000000004044 RSI: 0000200000000480 RDI: 0000000000000003 [ 906.706613][T14142] RBP: 00007fd363a26090 R08: 0000000000000000 R09: 0000000000000000 [ 906.706628][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.706642][T14142] R13: 00007fd365a56038 R14: 00007fd365a55fa0 R15: 00007ffd338c82f8 [ 906.706678][T14142] [ 907.654994][ T4910] Bluetooth: hci4: command 0x0406 tx timeout [ 908.134900][ T5606] Bluetooth: hci9: command tx timeout [ 908.684979][T14080] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.685131][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.685576][T14080] bridge_slave_0: entered allmulticast mode [ 908.695532][ T5606] Bluetooth: hci10: command tx timeout [ 908.715539][T14080] bridge_slave_0: entered promiscuous mode [ 908.827587][T14080] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.827830][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.828235][T14080] bridge_slave_1: entered allmulticast mode [ 908.868371][T14080] bridge_slave_1: entered promiscuous mode [ 909.143422][T14080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.206672][T14080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.713814][T14080] team0: Port device team_slave_0 added [ 909.767772][T14080] team0: Port device team_slave_1 added [ 910.218981][ T5606] Bluetooth: hci9: command tx timeout [ 910.681262][T14080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.681283][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.681316][T14080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.775350][ T5606] Bluetooth: hci10: command tx timeout [ 910.836401][T14080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.836422][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.836455][T14080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.456107][T14080] hsr_slave_0: entered promiscuous mode [ 911.458445][T14080] hsr_slave_1: entered promiscuous mode [ 911.459912][T14080] debugfs: 'hsr0' already exists in 'hsr' [ 911.459944][T14080] Cannot create hsr debugfs directory [ 912.195597][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.197154][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.197500][T14108] bridge_slave_0: entered allmulticast mode [ 912.230960][T14108] bridge_slave_0: entered promiscuous mode [ 912.378471][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.378691][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.380503][T14108] bridge_slave_1: entered allmulticast mode [ 912.414340][T14108] bridge_slave_1: entered promiscuous mode [ 912.857778][ T5606] Bluetooth: hci10: command tx timeout [ 912.917643][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.008817][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.342617][T14108] team0: Port device team_slave_0 added [ 913.521237][T14108] team0: Port device team_slave_1 added [ 913.984229][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.984249][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.984281][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.991873][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.991926][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.992010][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.148685][T14225] FAULT_INJECTION: forcing a failure. [ 914.148685][T14225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.148728][T14225] CPU: 1 UID: 0 PID: 14225 Comm: syz.9.2605 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 914.148760][T14225] Tainted: [L]=SOFTLOCKUP [ 914.148769][T14225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.148784][T14225] Call Trace: [ 914.148793][T14225] [ 914.148803][T14225] dump_stack_lvl+0xe8/0x150 [ 914.148846][T14225] should_fail_ex+0x467/0x600 [ 914.148888][T14225] _copy_from_iter+0x1d3/0x1660 [ 914.148913][T14225] ? trace_kmem_cache_alloc+0x29/0xe0 [ 914.148939][T14225] ? kmem_cache_alloc_node_noprof+0x44e/0x670 [ 914.148965][T14225] ? __alloc_skb+0x276/0x7a0 [ 914.148994][T14225] ? __pfx__copy_from_iter+0x10/0x10 [ 914.149024][T14225] ? skb_page_frag_refill+0x217/0x460 [ 914.149066][T14225] tcp_sendmsg_locked+0x2626/0x55c0 [ 914.149182][T14225] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 914.149221][T14225] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 914.149250][T14225] ? lockdep_hardirqs_on+0x7a/0x110 [ 914.149285][T14225] tcp_sendmsg+0x2f/0x50 [ 914.149311][T14225] ? __pfx_inet_sendmsg+0x10/0x10 [ 914.149332][T14225] sock_sendmsg_nosec+0x10e/0x180 [ 914.149371][T14225] __sys_sendto+0x41e/0x5d0 [ 914.149404][T14225] ? __pfx___sys_sendto+0x10/0x10 [ 914.149461][T14225] ? __pfx_ksys_write+0x10/0x10 [ 914.149498][T14225] __x64_sys_sendto+0xde/0x100 [ 914.149525][T14225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.149551][T14225] do_syscall_64+0x174/0x580 [ 914.149581][T14225] ? trace_irq_disable+0x3b/0x140 [ 914.149604][T14225] ? clear_bhb_loop+0x40/0x90 [ 914.149633][T14225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.149656][T14225] RIP: 0033:0x7fd3657ce019 [ 914.149678][T14225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.149699][T14225] RSP: 002b:00007fd363a26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 914.149723][T14225] RAX: ffffffffffffffda RBX: 00007fd365a55fa0 RCX: 00007fd3657ce019 [ 914.149741][T14225] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 914.149756][T14225] RBP: 00007fd363a26090 R08: 0000000000000000 R09: 0000000000000000 [ 914.149772][T14225] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 914.149786][T14225] R13: 00007fd365a56038 R14: 00007fd365a55fa0 R15: 00007ffd338c82f8 [ 914.149823][T14225] [ 915.773300][T14108] hsr_slave_0: entered promiscuous mode [ 915.787246][T14108] hsr_slave_1: entered promiscuous mode [ 915.793754][T14108] debugfs: 'hsr0' already exists in 'hsr' [ 915.793801][T14108] Cannot create hsr debugfs directory [ 925.284295][ T4910] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 925.358349][ T4910] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 925.363446][ T4910] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 925.436556][ T4910] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 925.437516][ T4910] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 927.577311][ T4910] Bluetooth: hci12: command tx timeout [ 929.585991][T14437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.611800][T14437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.654665][ T4910] Bluetooth: hci12: command tx timeout [ 929.745084][ T5878] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 930.018880][T14380] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.019117][T14380] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.019556][T14380] bridge_slave_0: entered allmulticast mode [ 930.056731][T14380] bridge_slave_0: entered promiscuous mode [ 930.132900][T14380] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.133035][T14380] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.133468][T14380] bridge_slave_1: entered allmulticast mode [ 930.199099][T14380] bridge_slave_1: entered promiscuous mode [ 930.398252][T14380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.418986][T14380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.090240][T14380] team0: Port device team_slave_0 added [ 931.118336][T14380] team0: Port device team_slave_1 added [ 931.344875][T14380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.344893][T14380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.344917][T14380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.412698][T14380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.412720][T14380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.412752][T14380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.551097][T14380] hsr_slave_0: entered promiscuous mode [ 931.553119][T14380] hsr_slave_1: entered promiscuous mode [ 931.554344][T14380] debugfs: 'hsr0' already exists in 'hsr' [ 931.554367][T14380] Cannot create hsr debugfs directory [ 931.744595][ T4910] Bluetooth: hci12: command tx timeout [ 933.815553][ T4910] Bluetooth: hci12: command tx timeout [ 936.307945][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.494135][T14581] FAULT_INJECTION: forcing a failure. [ 941.494135][T14581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.494177][T14581] CPU: 1 UID: 0 PID: 14581 Comm: syz.9.2768 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 941.494209][T14581] Tainted: [L]=SOFTLOCKUP [ 941.494218][T14581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 941.494233][T14581] Call Trace: [ 941.494242][T14581] [ 941.494251][T14581] dump_stack_lvl+0xe8/0x150 [ 941.494293][T14581] should_fail_ex+0x467/0x600 [ 941.494336][T14581] _copy_from_user+0x2d/0xb0 [ 941.494365][T14581] memdup_user+0x5e/0xd0 [ 941.494402][T14581] strndup_user+0x68/0xd0 [ 941.494435][T14581] __se_sys_fsconfig+0x4d6/0x810 [ 941.494496][T14581] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 941.494528][T14581] ? ksys_write+0x248/0x270 [ 941.494561][T14581] ? __pfx_ksys_write+0x10/0x10 [ 941.494597][T14581] ? __x64_sys_fsconfig+0x20/0xc0 [ 941.494631][T14581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.494656][T14581] do_syscall_64+0x174/0x580 [ 941.494688][T14581] ? trace_irq_disable+0x3b/0x140 [ 941.494712][T14581] ? clear_bhb_loop+0x40/0x90 [ 941.494740][T14581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.494764][T14581] RIP: 0033:0x7fd3657ce019 [ 941.494785][T14581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.494806][T14581] RSP: 002b:00007fd363a26028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 941.494831][T14581] RAX: ffffffffffffffda RBX: 00007fd365a55fa0 RCX: 00007fd3657ce019 [ 941.494848][T14581] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 941.494863][T14581] RBP: 00007fd363a26090 R08: 0000000000000000 R09: 0000000000000000 [ 941.494887][T14581] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 941.494902][T14581] R13: 00007fd365a56038 R14: 00007fd365a55fa0 R15: 00007ffd338c82f8 [ 941.494937][T14581] [ 944.419388][T14617] FAULT_INJECTION: forcing a failure. [ 944.419388][T14617] name failslab, interval 1, probability 0, space 0, times 0 [ 944.419430][T14617] CPU: 1 UID: 0 PID: 14617 Comm: syz.9.2786 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 944.419462][T14617] Tainted: [L]=SOFTLOCKUP [ 944.419471][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 944.419486][T14617] Call Trace: [ 944.419495][T14617] [ 944.419505][T14617] dump_stack_lvl+0xe8/0x150 [ 944.419546][T14617] should_fail_ex+0x467/0x600 [ 944.419588][T14617] should_failslab+0xa8/0x100 [ 944.419619][T14617] __kmalloc_noprof+0xfe/0x780 [ 944.419646][T14617] ? copy_splice_read+0x16f/0xab0 [ 944.419671][T14617] ? copy_splice_read+0x16f/0xab0 [ 944.419712][T14617] copy_splice_read+0x16f/0xab0 [ 944.419749][T14617] ? rcu_is_watching+0x15/0xb0 [ 944.419778][T14617] ? __pfx_copy_splice_read+0x10/0x10 [ 944.419801][T14617] ? trace_kmalloc+0x2a/0xf0 [ 944.419828][T14617] ? look_up_lock_class+0x57/0x110 [ 944.419858][T14617] ? register_lock_class+0x31/0x2e0 [ 944.419884][T14617] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 944.419921][T14617] ? alloc_pipe_info+0x35d/0x4c0 [ 944.419953][T14617] ? __pfx_copy_splice_read+0x10/0x10 [ 944.419977][T14617] splice_direct_to_actor+0x496/0xcc0 [ 944.420011][T14617] ? kstrtouint+0x6e/0xe0 [ 944.420056][T14617] ? __pfx_direct_splice_actor+0x10/0x10 [ 944.420084][T14617] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 944.420125][T14617] do_splice_direct+0x19b/0x2a0 [ 944.420155][T14617] ? __pfx_do_splice_direct+0x10/0x10 [ 944.420184][T14617] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 944.420215][T14617] ? bpf_lsm_file_permission+0x9/0x20 [ 944.420250][T14617] ? security_file_permission+0x75/0x260 [ 944.420278][T14617] ? rw_verify_area+0x209/0x4d0 [ 944.420310][T14617] do_sendfile+0x540/0x7e0 [ 944.420331][T14617] ? lockdep_hardirqs_on+0x7a/0x110 [ 944.420368][T14617] ? __pfx_do_sendfile+0x10/0x10 [ 944.420404][T14617] __se_sys_sendfile64+0x144/0x1a0 [ 944.420442][T14617] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 944.420486][T14617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.420512][T14617] do_syscall_64+0x174/0x580 [ 944.420544][T14617] ? clear_bhb_loop+0x40/0x90 [ 944.420570][T14617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.420592][T14617] RIP: 0033:0x7fd3657ce019 [ 944.420614][T14617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.420633][T14617] RSP: 002b:00007fd363a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 944.420656][T14617] RAX: ffffffffffffffda RBX: 00007fd365a55fa0 RCX: 00007fd3657ce019 [ 944.420681][T14617] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 944.420695][T14617] RBP: 00007fd363a26090 R08: 0000000000000000 R09: 0000000000000000 [ 944.420710][T14617] R10: 000000005269eecc R11: 0000000000000246 R12: 0000000000000001 [ 944.420725][T14617] R13: 00007fd365a56038 R14: 00007fd365a55fa0 R15: 00007ffd338c82f8 [ 944.420760][T14617] [ 951.014786][ T37] INFO: task syz-executor:13308 blocked for more than 143 seconds. [ 951.014815][ T37] Tainted: G L syzkaller #0 [ 951.014828][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 951.014839][ T37] task:syz-executor stat[ 951.014839][ T37] task:syz-executor state:D stack:18024 pid:13308 tgid:13308 ppid:1 task_flags:0x400140 flags:0x00080002 [ 951.014929][ T37] Call Trace: [ 951.014938][ T37] [ 951.014953][ T37] __schedule+0x16dc/0x5500 [ 951.015017][ T37] ? __pfx___schedule+0x10/0x10 [ 951.015041][ T37] ? rt_mutex_slowlock_block+0x33a/0x680 [ 951.015081][ T37] rt_mutex_schedule+0x76/0xf0 [ 951.015125][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 951.015157][ T37] ? rt_mutex_slowlock_block+0x33a/0x680 [ 951.015183][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 951.015209][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 951.015234][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 951.015270][ T37] ? del_device_store+0xd6/0x370 [ 951.015508][ T37] ? del_device_store+0xd6/0x370 [ 951.015546][ T37] ? del_device_store+0xd6/0x370 [ 951.015568][ T37] mutex_lock_nested+0x168/0x1d0 [ 951.015592][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 951.015726][ T37] del_device_store+0xd6/0x370 [ 951.015751][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 951.015786][ T37] ? __pfx_del_device_store+0x10/0x10 [ 951.015812][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 951.015847][ T37] ? sysfs_kf_write+0x166/0x260 [ 951.015872][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 951.015893][ T37] kernfs_fop_write_iter+0x3a5/0x540 [ 951.015930][ T37] vfs_write+0x61e/0xbb0 [ 951.016134][ T37] ? __pfx_vfs_write+0x10/0x10 [ 951.016178][ T37] ? do_sys_openat2+0x14e/0x200 [ 951.016202][ T37] ? kmem_cache_free+0x187/0x6c0 [ 951.016247][ T37] ksys_write+0x156/0x270 [ 951.016280][ T37] ? __pfx_ksys_write+0x10/0x10 [ 951.016317][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.016344][ T37] do_syscall_64+0x174/0x580 [ 951.016383][ T37] ? trace_irq_disable+0x3b/0x140 [ 951.016408][ T37] ? clear_bhb_loop+0x40/0x90 [ 951.016437][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.016461][ T37] RIP: 0033:0x7fbfddd3e84e [ 951.016481][ T37] RSP: 002b:00007ffe2cdabaa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 951.016506][ T37] RAX: ffffffffffffffda RBX: 0000555579b6d500 RCX: 00007fbfddd3e84e [ 951.016524][ T37] RDX: 0000000000000001 RSI: 00007ffe2cdabb30 RDI: 0000000000000005 [ 951.016539][ T37] RBP: 00007fbfdde1588f R08: 0000000000000000 R09: 0000000000000000 [ 951.016552][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.016564][ T37] R13: 00007ffe2cdabb30 R14: 00007fbfdeb34620 R15: 0000000000000003 [ 951.016599][ T37] [ 951.016623][ T37] INFO: task syz-executor:13339 blocked for more than 143 seconds. [ 951.016644][ T37] Tainted: G L syzkaller #0 [ 951.016659][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 951.016670][ T37] task:syz-executor state:D stack:22352 pid:13339 tgid:13339 ppid:1 task_flags:0x400140 flags:0x00080002 [ 951.016730][ T37] Call Trace: [ 951.016739][ T37] [ 951.016753][ T37] __schedule+0x16dc/0x5500 [ 951.016810][ T37] ? __pfx___schedule+0x10/0x10 [ 951.016854][ T37] rt_mutex_schedule+0x76/0xf0 [ 951.016887][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 951.016927][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 951.016954][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 951.016980][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 951.017016][ T37] ? del_device_store+0xd6/0x370 [ 951.017084][ T37] ? del_device_store+0xd6/0x370 [ 951.017114][ T37] ? del_device_store+0xd6/0x370 [ 951.017136][ T37] mutex_lock_nested+0x168/0x1d0 [ 951.017157][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 951.017196][ T37] del_device_store+0xd6/0x370 [ 951.017220][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 951.017255][ T37] ? __pfx_del_device_store+0x10/0x10 [ 951.017280][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 951.017316][ T37] ? sysfs_kf_write+0x166/0x260 [ 951.017342][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 951.017362][ T37] kernfs_fop_write_iter+0x3a5/0x540 [ 951.017398][ T37] vfs_write+0x61e/0xbb0 [ 951.017436][ T37] ? __pfx_vfs_write+0x10/0x10 [ 951.017469][ T37] ? do_sys_openat2+0x14e/0x200 [ 951.017490][ T37] ? kmem_cache_free+0x187/0x6c0 [ 951.017534][ T37] ksys_write+0x156/0x270 [ 951.017567][ T37] ? __pfx_ksys_write+0x10/0x10 [ 951.017606][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.017632][ T37] do_syscall_64+0x174/0x580 [ 951.017665][ T37] ? clear_bhb_loop+0x40/0x90 [ 951.017695][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.017718][ T37] RIP: 0033:0x7f5bf335e84e [ 951.017739][ T37] RSP: 002b:00007ffead90f988 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 951.017762][ T37] RAX: ffffffffffffffda RBX: 0000555585369500 RCX: 00007f5bf335e84e [ 951.017780][ T37] RDX: 0000000000000001 RSI: 00007ffead90fa10 RDI: 0000000000000005 [ 951.017795][ T37] RBP: 00007f5bf343588f R08: 0000000000000000 R09: 0000000000000000 [ 951.017810][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.017824][ T37] R13: 00007ffead90fa10 R14: 00007f5bf4154620 R15: 0000000000000003 [ 951.017860][ T37] [ 951.017930][ T37] [ 951.017930][ T37] Showing all locks held in the system: [ 951.018007][ T37] 5 locks held by ksoftirqd/0/15: [ 951.018061][ T37] 1 lock held by khungtaskd/37: [ 951.018075][ T37] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 951.018167][ T37] 5 locks held by kworker/u8:6/316: [ 951.018184][ T37] 5 locks held by kworker/u8:7/1042: [ 951.018198][ T37] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 951.018259][ T37] #1: ffffc90005b07c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 951.018317][ T37] #2: ffffffff8f5a3920 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 951.018373][ T37] #3: ffff888034571978 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 951.018514][ T37] #4: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 951.018580][ T37] 3 locks held by kworker/u8:9/1142: [ 951.018610][ T37] 1 lock held by udevd/4961: [ 951.018624][ T37] 2 locks held by getty/5351: [ 951.018636][ T37] #0: ffff8880362660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 951.018716][ T37] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 951.018798][ T37] 1 lock held by syz.3.2277/12758: [ 951.018811][ T37] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 951.018878][ T37] 2 locks held by syz-executor/13233: [ 951.018891][ T37] 7 locks held by syz-executor/13254: [ 951.018905][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.018977][ T37] #1: ffff88804f06dc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.019047][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.019117][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.019171][ T37] #4: ffff88802a6c6160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 951.019288][ T37] #5: ffff88803d11c310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 951.019380][ T37] #6: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 951.019443][ T37] 4 locks held by syz-executor/13308: [ 951.019457][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.019520][ T37] #1: ffff88808373c878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.019583][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.019652][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.019706][ T37] 4 locks held by syz-executor/13339: [ 951.019719][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.019783][ T37] #1: ffff888061a20478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.019845][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.019911][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.019968][ T37] 5 locks held by kworker/1:2/13431: [ 951.019983][ T37] 4 locks held by syz-executor/13531: [ 951.019995][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.020063][ T37] #1: ffff888037064878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.020124][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.020189][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.020245][ T37] 4 locks held by syz-executor/13572: [ 951.020258][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.020321][ T37] #1: ffff888088af4878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.020386][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.020453][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.020506][ T37] 4 locks held by syz-executor/13585: [ 951.020518][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.020586][ T37] #1: ffff88807f621078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.020647][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.020713][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.020767][ T37] 1 lock held by syz.8.2364/13624: [ 951.020781][ T37] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 951.020842][ T37] 4 locks held by syz-executor/13690: [ 951.020855][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.020914][ T37] #1: ffff8880588b9478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.020976][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.021052][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.021109][ T37] 4 locks held by syz-executor/13996: [ 951.021123][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.021186][ T37] #1: ffff88803db78c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.021250][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.021320][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.021374][ T37] 4 locks held by syz-executor/14080: [ 951.021388][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.021450][ T37] #1: ffff8880854ae478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.021512][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.021579][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.021634][ T37] 4 locks held by syz-executor/14108: [ 951.021647][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.021710][ T37] #1: ffff88807f6c6c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.021770][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.021837][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.021891][ T37] 4 locks held by syz-executor/14380: [ 951.021904][ T37] #0: ffff8880348b0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 951.021966][ T37] #1: ffff88809fb70c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 951.022026][ T37] #2: ffff8880290ddc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 951.022103][ T37] #3: ffffffff8ee27278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 951.022165][ T37] [ 951.022172][ T37] ============================================= [ 951.022172][ T37] [ 951.022183][ T37] NMI backtrace for cpu 0 [ 951.022201][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 951.022232][ T37] Tainted: [L]=SOFTLOCKUP [ 951.022241][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.022256][ T37] Call Trace: [ 951.022266][ T37] [ 951.022276][ T37] dump_stack_lvl+0xe8/0x150 [ 951.022312][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 951.022337][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 951.022473][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 951.022502][ T37] sys_info+0x135/0x170 [ 951.022522][ T37] watchdog+0xfd7/0x1030 [ 951.022557][ T37] ? watchdog+0x1c7/0x1030 [ 951.022587][ T37] kthread+0x388/0x470 [ 951.022646][ T37] ? __pfx_watchdog+0x10/0x10 [ 951.022665][ T37] ? __pfx_kthread+0x10/0x10 [ 951.022702][ T37] ret_from_fork+0x514/0xb70 [ 951.022742][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 951.022778][ T37] ? __switch_to+0xc89/0x1420 [ 951.022812][ T37] ? __pfx_kthread+0x10/0x10 [ 951.022846][ T37] ret_from_fork_asm+0x1a/0x30 [ 951.022885][ T37] [ 951.022900][ T37] Sending NMI from CPU 0 to CPUs 1: [ 951.022937][ C1] NMI backtrace for cpu 1 [ 951.022955][ C1] CPU: 1 UID: 0 PID: 1142 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 951.022982][ C1] Tainted: [L]=SOFTLOCKUP [ 951.022989][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.023001][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 951.023080][ C1] RIP: 0010:match_held_lock+0x78/0xb0 [ 951.023109][ C1] Code: 00 00 48 c7 c2 d0 d4 46 93 48 29 d0 48 c1 f8 03 48 ba 29 5c 8f c2 f5 28 5c 8f 48 0f af d0 bb 01 00 00 00 48 39 ca 74 02 31 db <89> d8 5b 41 5e c3 cc cc cc cc cc 90 e8 87 0e 7b f9 85 c0 74 1c 83 [ 951.023125][ C1] RSP: 0018:ffffc90005f97690 EFLAGS: 00000046 [ 951.023141][ C1] RAX: 0000000000000006 RBX: 0000000000000001 RCX: 0000000080000001 [ 951.023154][ C1] RDX: 0000000000000001 RSI: ffff888040ecd150 RDI: ffff888028a84ad0 [ 951.023168][ C1] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 [ 951.023181][ C1] R10: dffffc0000000000 R11: fffff52000bf2f14 R12: 0000000000000046 [ 951.023194][ C1] R13: ffff888028a83e00 R14: ffff888040ecd150 R15: 0000000000000005 [ 951.023212][ C1] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 951.023228][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.023242][ C1] CR2: 00007ffd338c6f10 CR3: 00000000389da000 CR4: 00000000003526f0 [ 951.023259][ C1] Call Trace: [ 951.023267][ C1] [ 951.023275][ C1] lock_is_held_type+0x89/0x150 [ 951.023303][ C1] rtlock_slowlock_locked+0xde/0x3c20 [ 951.023328][ C1] ? __lock_acquire+0x683/0x2ce0 [ 951.023355][ C1] ? __lock_acquire+0x683/0x2ce0 [ 951.023375][ C1] ? rt_mutex_slowunlock+0x219/0x460 [ 951.023393][ C1] ? batadv_iv_ogm_queue_add+0xb5e/0xd80 [ 951.023416][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 951.023439][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 951.023468][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 951.023498][ C1] ? rcu_is_watching+0x15/0xb0 [ 951.023525][ C1] rt_spin_lock+0x165/0x400 [ 951.023554][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 951.023573][ C1] ? rcu_is_watching+0x15/0xb0 [ 951.023596][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 951.023622][ C1] ? batadv_forw_packet_steal+0x2e/0x180 [ 951.023701][ C1] batadv_forw_packet_steal+0x45/0x180 [ 951.023728][ C1] ? batadv_forw_packet_steal+0x2e/0x180 [ 951.023758][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x691/0x790 [ 951.023782][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 951.023809][ C1] ? rcu_is_watching+0x15/0xb0 [ 951.023833][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 951.023855][ C1] process_scheduled_works+0xa8e/0x14e0 [ 951.023891][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 951.023918][ C1] ? assign_work+0x3cf/0x5d0 [ 951.023943][ C1] worker_thread+0xa47/0xfb0 [ 951.023979][ C1] kthread+0x388/0x470 [ 951.024007][ C1] ? __pfx_worker_thread+0x10/0x10 [ 951.024030][ C1] ? __pfx_kthread+0x10/0x10 [ 951.024060][ C1] ret_from_fork+0x514/0xb70 [ 951.024091][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 951.024120][ C1] ? __switch_to+0xc89/0x1420 [ 951.024147][ C1] ? __pfx_kthread+0x10/0x10 [ 951.024176][ C1] ret_from_fork_asm+0x1a/0x30 [ 951.024202][ C1] [ 951.049863][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 951.049935][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 951.050021][ T37] Tainted: [L]=SOFTLOCKUP [ 951.050052][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.050073][ T37] Call Trace: [ 951.050083][ T37] [ 951.050093][ T37] vpanic+0x56c/0xa60 [ 951.050172][ T37] ? __pfx___schedule+0x10/0x10 [ 951.050276][ T37] ? __pfx_vpanic+0x10/0x10 [ 951.050362][ T37] panic+0xc5/0xd0 [ 951.050418][ T37] ? __pfx_panic+0x10/0x10 [ 951.050471][ T37] ? preempt_schedule_common+0x82/0xd0 [ 951.050542][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 951.050618][ T37] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 951.050695][ T37] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 951.050773][ T37] watchdog+0x1030/0x1030 [ 951.050857][ T37] ? watchdog+0x1c7/0x1030 [ 951.050932][ T37] kthread+0x388/0x470 [ 951.051020][ T37] ? __pfx_watchdog+0x10/0x10 [ 951.051075][ T37] ? __pfx_kthread+0x10/0x10 [ 951.051170][ T37] ret_from_fork+0x514/0xb70 [ 951.051279][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 951.051381][ T37] ? __switch_to+0xc89/0x1420 [ 951.051477][ T37] ? __pfx_kthread+0x10/0x10 [ 951.051577][ T37] ret_from_fork_asm+0x1a/0x30 [ 951.051664][ T37] [ 951.052298][ T37] Kernel Offset: disabled