last executing test programs: 6m16.850726822s ago: executing program 3 (id=121): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000140)={0xc3, 0x1, 0xcc, 0xa02, 0x4, 0x8}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x2, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0x7, &(0x7f0000000000)=""/36}, {0x10000, 0xffb, &(0x7f0000001d80)=""/4091}, {0xa000, 0x20, &(0x7f00000001c0)=""/32}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000880)=""/111, &(0x7f00000002c0)=0x6f) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000009c0)={0x0, 0x8, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) fdatasync(0xffffffffffffffff) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x490040) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xf5ff, 0x0}, 0x0, 0x0, 0x3, 0x34, 0x0, 0x0}) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 6m16.600759474s ago: executing program 0 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/120, 0x78}], 0x1}, 0x10050) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017", 0x65}], 0x1}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073"], 0x60}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f00000000c0)={0x1}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 6m16.283753907s ago: executing program 0 (id=123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) io_setup(0x7, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x8, r2, 0x0, 0x0, 0x60ffffffffff}]) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0xff}}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0xc, 0x8000}, {0xe, 0x9}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0]}}, &(0x7f0000000400)=""/180, 0x52, 0xb4, 0x0, 0x4, 0x10000}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000a00)={0x2710, 0x0, &(0x7f0000ffc000/0x4000)=nil}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0xfff, 0x8}, 0xc) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r10 = syz_open_dev$vcsu(&(0x7f00000007c0), 0x7, 0x408800) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x20140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1e, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5716}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x3547d695, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000500)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x6, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r5, 0xffffffffffffffff, r6, r7, r8, 0x1, r9, r10, r11, r12], &(0x7f0000000900)=[{0x2, 0x4, 0x1, 0xf}], 0x10, 0x8}, 0x94) 6m15.858326474s ago: executing program 3 (id=124): syz_usb_connect(0x2, 0x47, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662050c"], 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f00000005c0)=r0}, 0x20) (async) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aa"], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/ipc\x00') (async) prlimit64(r3, 0x0, &(0x7f0000000000)={0x100000001}, &(0x7f0000000040)) 6m15.651056427s ago: executing program 0 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x5) socket$inet(0x2, 0xb, 0x3ff) 6m14.948693348s ago: executing program 0 (id=130): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6m14.76049081s ago: executing program 0 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/63, 0x3f}, 0x10050) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006"], 0x60}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f00000000c0)={0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/151, 0x97}], 0x1, 0x7, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m13.824418717s ago: executing program 0 (id=136): syz_open_dev$sg(0x0, 0x0, 0x20c02) r0 = syz_io_uring_setup(0x24af, &(0x7f0000000080)={0x0, 0xb559, 0x4, 0x2, 0x1ed}, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_setup(0x68f2, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337, 0x0, r0}, &(0x7f0000000dc0), &(0x7f0000000a40)) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x80) r8 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r8, &(0x7f0000000180)={'#! ', './file0', [{0x20, '$[-:[]-\'\')'}, {0x20, '#! '}, {0x20, '[-\x98%/%#'}, {}], 0xa, '\t:'}, 0x25) 6m13.600887403s ago: executing program 32 (id=136): syz_open_dev$sg(0x0, 0x0, 0x20c02) r0 = syz_io_uring_setup(0x24af, &(0x7f0000000080)={0x0, 0xb559, 0x4, 0x2, 0x1ed}, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_setup(0x68f2, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337, 0x0, r0}, &(0x7f0000000dc0), &(0x7f0000000a40)) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x80) r8 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r8, &(0x7f0000000180)={'#! ', './file0', [{0x20, '$[-:[]-\'\')'}, {0x20, '#! '}, {0x20, '[-\x98%/%#'}, {}], 0xa, '\t:'}, 0x25) 6m12.560697832s ago: executing program 3 (id=142): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="89cfa6"]) 6m12.345093479s ago: executing program 3 (id=143): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6m12.136389088s ago: executing program 3 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006"], 0x60}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/151, 0x97}], 0x1, 0x7, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m10.968377147s ago: executing program 3 (id=149): openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) io_setup(0x1, &(0x7f00000000c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket(0x1e, 0x4, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}, {0x6, &(0x7f0000004000)=0x6, 0x2}], 0x2, 0x0, 0x0, 0x1) syz_clone3(&(0x7f0000000040)={0xa04400, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x58) 6m10.345208686s ago: executing program 33 (id=149): openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) io_setup(0x1, &(0x7f00000000c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket(0x1e, 0x4, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}, {0x6, &(0x7f0000004000)=0x6, 0x2}], 0x2, 0x0, 0x0, 0x1) syz_clone3(&(0x7f0000000040)={0xa04400, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x58) 5m51.597766657s ago: executing program 2 (id=195): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x71, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 5m50.024090494s ago: executing program 1 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="89cfa6"]) 5m50.022066701s ago: executing program 2 (id=199): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x0, 0x0, 0x0, 0x2e3, 0x0, 0x0, 0x1e00, 0x6a, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'dvmrp0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000400)={0x0, 0xa365, 0x10100, 0x6, 0xcb}, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYRESOCT], 0x42) 5m49.89581874s ago: executing program 2 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000340)={0xa, [0x9, 0x0, 0xe, 0xf000, 0x9, 0x1ff, 0x7, 0x5, 0x9, 0x5]}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) 5m49.422129155s ago: executing program 1 (id=203): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/173, 0xad}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m49.418154088s ago: executing program 2 (id=204): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5m49.335526371s ago: executing program 2 (id=205): r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) lseek(r1, 0x7fff, 0x1) read$FUSE(r1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1c, 0x43, 0x1, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc044}, 0xc000) preadv(r0, &(0x7f0000000200), 0x0, 0x800, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0e"], 0x22) 5m49.248653184s ago: executing program 1 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file1\x00', 0x800, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x20400, 0x180) fdatasync(r1) 5m49.173213226s ago: executing program 1 (id=207): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5m48.979664505s ago: executing program 1 (id=208): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0x0, "133559eb022583455d15af87533cf05b0ebff30fca687776d0cf3cc8179a8758", 0xe, 0x5, 0x10001, 0x8}, 0x3c) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2800c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000140)=r3) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)=0x39) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x40, 0x3, 0xf6, 0x2}, {0x9, 0x5, 0x80, 0x2, 0x200, 0x5e, 0xd9, 0x10}, {0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x6}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x40, 0x24, 0x95, {0x95, 0x4, "8c1cc71a8895aa985c6a0adcbe6ceb09eac70a832a1ab4a5684385cae992a6b458474728a2b2855409dc51bad167a73c58cd3ec0e8622115a7a3dec16669b5a6acd2e5ef713e8d94525bb5aae33f38103564f07c46fca50e9745486e66db18b027eda7fdb3dd46861f66c9c327f8762a7466605ba7ecd6a8ffdcd442fe51f85ae36077b12b36677631e86298b256c2ce910e44"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000340)={0x40, 0xe, 0x44, "7a096070f93591ca8d69df88a9851cf2679bb482166ea8f4cb790046a14c872090a6da9134a80947a35193f38d6a915d3a06b359833b27f0ca356b81c8fd979abfe1db09"}, &(0x7f00000003c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000800)={0x21, 0x0, 0x3, "cb7f7a"}}) syz_usb_control_io$sierra_net(r4, &(0x7f0000000940)={0x14, &(0x7f0000000880)={0x20, 0x26, 0x4d, {0x4d, 0x2, "215108c16994d0e17249f699f99b40549a3fba3537584dce7b193bb72427c609b9a6a96a3817791b55a55972d4f6efcec9abb4c5dd0077247fad2282b77b58d290e495ba22ba316f1e5cb1"}}, &(0x7f0000000900)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "831785b7ea77727ae798e1b921a084a43fd97440f0cc309918"}}}, &(0x7f0000000f00)={0x1c, &(0x7f0000000980)={0x20, 0x8, 0xc2, "4385aa37de3ca30ea79b97b0eb43d8b459b687a715da387e2c07f54a7c60c5c8d5a8d34e36f026fc28d3a359338e8a7ecb08cf1dc7454d2daf652fc5cf487586e2f7c0bace0a3131037ab2c2b2a07b4f8219da92046790ef4a6b632c84f23bbd56fa898a245100b42bb18effca239148f65b900d07f263e101795be9a3d3127e10d680273e42ae50b35d96ccfbf89392a077f12b78516255d2d0bb77f4e5e3324e4c06e3b3ba3b026715ff7a15d9b983aa1747168a421f3d98538e56959c5c7b5742"}, &(0x7f0000000a80)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000ec0)={0x21, 0x0, 0x1, 'I'}}) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x7fffffffffffffff) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000f40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x18, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x1, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x5, 0x4}}]}}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x200, 0x5, 0x4, 0x5, 0x8, 0x9}, 0xc, &(0x7f0000000fc0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0xe, 0x8000}]}, 0x5, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001040)=@string={0x4, 0x3, "24bc"}}, {0x89, &(0x7f0000001080)=@string={0x89, 0x3, "0f2b321162b753461db27d0e1bf9b00a4154d135acd1b20a313e80abf47508ed766e7cceaf9362ccf7745a9c86f7bf248022efc2e77324699f35c7082a4b1869c1afc9d19e27513672984529439416d2ffa7f301b4d42d1b0931a9805fb9c5a67fafce928d5c6efdee7fc8e64481cd7f9768cc1a65dfb12f2efcaeaa9446860c8f02c92b1ccc9a"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_control_io$printer(r5, &(0x7f00000013c0)={0x14, &(0x7f0000001240)={0x20, 0x22, 0x57, {0x57, 0xd, "4b4a755dfd75e38b8e3c2f1c1ba29dfd0517cc1e60d159eaeeb7b9debf7d1c7b1ae0a5bbad91bddc31dcd3736e2a5ea46675d1fd5b7efd3227127901ed6c97f7595243d5aa0e648feafcbf5954eece0fd75deb5dca"}}, &(0x7f00000012c0)={0x0, 0x3, 0xe8, @string={0xe8, 0x3, "a2f97d43881f76ce91cfff1b4b29311d0342e58b105c45e0b2efa4743d65e3d47b552a357d47625ef2758a906f996bce2d7b0ca13d7db2ab9376c4a136138aac5e042afe9b9a13fadb6b3dea51ef07ad59eeae06ed01e5bdd6a91e00762862db3bb86333fbf0b693882181886a5d9b8811e8d77b9069471bd552721ec27e221a9d03d7ad72049372fa219a4d01db4f8c3669a2ae60a359f8b9fca61620a0c7d9fe966ac084c7fe75ee85a7fb031e009cdf8f313931526c9887ca3291a6d834a2fc5c5957df531c93357a3aa3d63da30d49a8db2ce4e26e6914d45c4e8a7938b6d62586191215"}}}, &(0x7f0000001600)={0x34, &(0x7f0000001400)={0x0, 0x31, 0x5d, "82b858a389f0d874b63f950bee0b9852e69550c453aede05c52d21796198284949a592b6582d98be83ff4b12a72c7641e55c71199fe51463a21f53414807a936426fdb52371e92c61cbb6785c47769a5319dae13db63ae5abf5e36b984"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001500)={0x20, 0x0, 0x6b, {0x69, "0c6183fb1ddf6de0eb72d2abd5348d46e9a2b3a7e52b9b7598ef04380d2eeadedf4cd52cef3fdbf9d3950d8565953e07a20d747a2fdf8a63e24916d27a76de6ddb3bf489e7ee0e8cfc4e0922549b071a9f9b6a0426b73b940456ca95ac5d0add7eb0021796ee650761"}}, &(0x7f0000001580)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000015c0)={0x20, 0x0, 0x1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001680)={0x2, &(0x7f0000001640)=[{0x97, 0x36, 0x1, 0x9}, {0x8000, 0x3, 0x4, 0xc864}]}) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000016c0)) pwritev(r1, &(0x7f00000017c0)=[{&(0x7f0000001700)="5b13da2a7b5f3127e61b9ba1a089c3e7ea9d409260d44666bb4af415cd39c92e960cc9a12aaca664441dcc577340740cff392e7881b65a175b7ef7663361992653bea3d9c6924d805502e62b1dbdc9dbd0ce125528d8b57f5089b77b66ea1505d8a0260507896f073aaaf67f1cca87d883b6", 0x72}, {&(0x7f0000001780)="a99832c39968053da7", 0x9}], 0x2, 0x7, 0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r2) write$9p(r1, &(0x7f0000001840)="bc1c6eb4651ebe45e2580e1a49336b41d825241980dbdb172adafe5a99fce284b48f0a19bb8e90d94a812556315e0db612e3b7f95ce9e74cf0b220a150eb6a77c050f13f6863ae5e6267a315899c2ae3197ff3307670ce97647e1b42002e9c0bacb1869c532a22db1b848a49332987307028b5f498e7fe0ba1b5b3b569f69dc589d3d8ebeeb07cf43277ce25dd521e6e8180e0bfb79470dd6fb2edc404c8badd3ef3a6a230bbaf84c7410bc618f153ec7c26d911a4f5accc43cb878fd669c0e432b5757c1afe87f9bff9eb423c4c246a6742c16f0e347ea44f", 0xd9) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001940), r1) r7 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x4c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000014) r8 = syz_usb_connect$uac1(0x2, 0xd8, &(0x7f0000001ac0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0xa, 0x10, 0x85, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x62}, [@mixer_unit={0x7, 0x24, 0x4, 0x1, 0x7f, 'Hm'}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x4, 0x3, 0x1, 0x3, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x2, 0x4, 0xbd0, 0x32, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x2, 0x84, 0xe0, "50f5fbb79a2624"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6e, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x1, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x8, 0x5, "8caf0938"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0x3, 0x1, "ed9d3f178c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0xd, 0x9}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xf5ce, 0x40, 0x5, "6c5993badb"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x4, 0xfa, {0x7, 0x25, 0x1, 0x83, 0x1c, 0x8b}}}}}}}]}}, &(0x7f0000001ec0)={0xa, &(0x7f0000001bc0)={0xa, 0x6, 0x110, 0x4, 0x33, 0x7, 0x40, 0x4}, 0x8, &(0x7f0000001c00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x17, &(0x7f0000001c40)=@string={0x17, 0x3, "7ffd33c3a2deda09e868411d0aaa993a3b864224fa"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x31}}, {0xf9, &(0x7f0000001d00)=@string={0xf9, 0x3, "cd488a144c74a82d5c27249b9d962a524ef913fb960b838550a3ed7461adbe435607265911129fc887ebc0ece5613b9c4fe75d2cd66970f5f85779c6b796722321066a6377c3e45aaebe9adbcdfafda7b4d1999c2fbabf93dfe6e8a7132789166a3e1491cb6d60283f2d054acb1b51063a390fee39364e09327187b17a09409bfcb32f9be1999cdb49219470b302935c48780113b0ab0b0f6e92ed237898b73ec0ab6986d5f2bd0c1c07887195443061854d08240c685ca0a67570f25806bc59c0e48953bd9617789c528ec9e6b2b7b868e2264db637852d766c3ad14a0685c4001442b54aa4824678989529e04792718de6b39adfc123"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x180a}}]}) syz_usb_control_io$uac1(r8, &(0x7f0000002040)={0x14, &(0x7f0000001f40)={0x0, 0xa, 0xa4, {0xa4, 0x31, "7df7cd663e695d64586a7bdf8031ef5ffc170f04fda85c431eb93ab3ded18074c1dae4852db4cf4f4d7a8bd4c8f3c266d330d0d2b87edae1f914d3d473b3b757dd0aa50a76f8bdcb2f4fea012e409208bfcb074a5d5e68ee2149df23b1f1a35293193d7da5216ce49228abbd68bb4124a0f27ec32b277ca37ad85db1f8004dea239b24092818393b2d958d9888780d896f093da047b3a9cbbf35d4cc81916c32d793"}}, &(0x7f0000002000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f0000002280)={0x44, &(0x7f0000002080)={0x60, 0x1, 0x36, "5dbe7be914cfab5f845ab038a87bb1a9620e52a6799fb6185340564deff60f46ae04580ce1451694c87f89c9e2b2b706946f2ce2d299"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002140)={0x20, 0x81, 0x2, 'X%'}, &(0x7f0000002180)={0x20, 0x82, 0x3, "90e3f9"}, &(0x7f00000021c0)={0x20, 0x83, 0x2, "37d8"}, &(0x7f0000002200)={0x20, 0x84, 0x3, "844813"}, &(0x7f0000002240)={0x20, 0x85, 0x3, "bd037b"}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002340)=@generic={&(0x7f0000002300)='./file1\x00', r1}, 0x18) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000002380)=""/79, &(0x7f0000002400)=0x4f) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000002440)) r9 = openat$userio(0xffffffffffffff9c, &(0x7f00000024c0), 0x200240, 0x0) write$USERIO_CMD_REGISTER(r9, &(0x7f0000002500)={0x0, 0x3}, 0x2) r10 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000002540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r10, &(0x7f00000027c0)={0x14, &(0x7f0000002580)={0x20, 0xc, 0xe9, {0xe9, 0x31, "0e876c6204b005f944c306b7e07564481b36a28b3a83434af74817c9ebdd10f90bf68dfdb6d6b50a17cbc71968cde97c01f223f73c9871e31101879c201b6fad01104c5c83a1db9bf71a1bae0aa5ff8251376e9b84d949ad6c05759cabe7c934616269019a41ebaee2c50210c6a72f8492f72c57d15690f83c986799fb7e5144fb89efcbdb858485478b9dc59f38ac18c6cbed63fbdfbf6570c60dcd472a281ab8b74480e55dc90af55b90af60c705170251f6a2a923121924ff276822b33375e73682c9870f6b9d16f67403a0dc719fae899d8c01b8be77bd86dc7a8f23742f70c0b7048be10b"}}, &(0x7f0000002680)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "9273cca33145d86b071e382b20e4ac980a9deb6f13fac4db1bd09e906dd85ff6fe9800d0e76ce6d45026f9e51df6b5a90a738ea2c5c0580f6fcdabee075f0459ed8ccf8ebd371d0aa030af12bc10cb15038b690d85290a5d33692dfe7c997a94268f24ac4e49c3f62842d7b06878ac88e1e13885aad33156e21ba0f7e39c557662845e4e0f5d85e36e2c57a3c55022c08cb0bbff30f17c860709fe0ca9e6fa76eca1f7f0fb13dc302129757a958d39a11eab19f12e5b936cedc5c2721d765b7cf929fdc29c079acd03b1194055ce9b0a68781f2bf9529c87338c1df53619795f41cf1993846c7e96c026a35b5a1a7208a78a42d77a3d103585"}}}, &(0x7f0000002980)={0x34, &(0x7f0000002800)={0x20, 0xe, 0x11, "6e210fa1958198371260fa8a64e3d5b21e"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0xec}, &(0x7f00000028c0)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000002900)={0x40, 0xa0, 0x4, 0xffff741a}, &(0x7f0000002940)={0xc0, 0xa2, 0x2f, "5e22a5fbfceca075663efd3c8ca4f5bfeb5ce84e5d422df87c200b9ec38bf6cd94edd9a379abacdad5d71ce18f53c9"}}) 5m48.312437694s ago: executing program 2 (id=210): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYRES16, @ANYRES16], 0x0) 5m47.800704486s ago: executing program 34 (id=210): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYRES16, @ANYRES16], 0x0) 5m47.750215759s ago: executing program 1 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000340)={0xa, [0x9, 0x0, 0xe, 0xf000, 0x9, 0x1ff, 0x7, 0x5, 0x9, 0x5]}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) 5m47.522439571s ago: executing program 35 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000340)={0xa, [0x9, 0x0, 0xe, 0xf000, 0x9, 0x1ff, 0x7, 0x5, 0x9, 0x5]}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) 5m25.519314973s ago: executing program 4 (id=233): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) socket(0x3, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x8080e2e8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x14) io_setup(0xfff, &(0x7f0000000200)=0x0) io_submit(r10, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r9, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) r11 = dup3(r9, r5, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000a00)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="e09cde831f38637d874aaf450c825969743539175b0a3119f2b47bea291219b24bca9770dffd34be4157c697d6ae66e2", 0x30}, {&(0x7f0000000540)="fafb0d57e27533dea79227c4f1e32bbb0ec6e1978787dc5038aac6f934919941a9d3f1c34580ea9a59f82ce5c321450db7c7bc4c181aa7", 0x37}, {&(0x7f0000000580)="d910d66c4fba4c15149f181eb7648e1f443a34711e35c21f09b40be250b8ea8918c270ee17af98e7a39f3546ddf0a084119602694644d3bfc04b72bb52072d6507ef9872413ca3752901f1b5ca8543ce71719fdb6029aee618034a5cd9", 0x5d}, {&(0x7f0000000600)="40dd59cce5d18281115c6aec9a2cad77e9fdeda7ee8f32f59bcb2d6b16588dcaabefcf2dfe3038b2667e6834d1034969284087865c17fd712fa927a94cfab15821e399aeeeef8016d73281d7e9ffe0807e6e5a93556ad625dfee9254bc025f8135fa7482feb2825c77f8a697c1db8e76fd70d5a87e8b9beddc9454db7b7cc11e7516de1cad1053", 0x87}, {&(0x7f00000006c0)="719a9e67e3252ef0ff4d465de57c38eabc502be0c747540bb71b30ee40db9c342d5839907b50e92053b76a9d36c48a51dd", 0x31}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYBLOB="240000000000000001000000010000007c433d9566e76ce61526dcc802b98fea9334c19ee3ec257234d98f0deaf2849229ba62542d6827e2206bb302122e768fce564cf1dadada9c2ca01d7e98a7373fe38c5fbb70b48ae75df6f323c069192f401865ec11c9c177a46cea3a9cc2dd6af094463580f2ae6d599ed8930cdf840a8b544f4266", @ANYRES32=r5, @ANYRES32, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x40044}}], 0x1, 0x40) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') 5m24.471071095s ago: executing program 4 (id=234): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 5m24.389636587s ago: executing program 4 (id=235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m23.459365613s ago: executing program 4 (id=236): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5m23.405044254s ago: executing program 4 (id=237): io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) clock_gettime(0x0, &(0x7f0000003080)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000003500)=[{{&(0x7f0000000200), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f0000000280)=""/57, 0x39}], 0x4}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/22, 0x16}, {&(0x7f0000000780)=""/109, 0x6d}, {&(0x7f0000000800)=""/70, 0x46}, {&(0x7f0000000700)=""/61, 0x3d}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000980)}], 0x7, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/70, 0x46}, {&(0x7f0000000bc0)=""/64, 0x40}, {&(0x7f0000000c00)=""/65, 0x41}], 0x3, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)=""/185, 0xb9}, {&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000e80)=""/46, 0x2e}, {&(0x7f0000000ec0)=""/83, 0x53}], 0x4, &(0x7f0000001a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b40)=""/102, 0x66}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/136, 0x88}, {&(0x7f0000001c80)=""/125, 0x7d}, {&(0x7f0000001d00)=""/103, 0x67}, {&(0x7f0000001d80)=""/186, 0xba}], 0x6, &(0x7f0000000f80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000001f00)=""/123, 0x7b}, {&(0x7f0000001f80)=""/41, 0x29}, {&(0x7f0000001fc0)=""/94, 0x5e}, {&(0x7f0000002040)=""/221, 0xdd}], 0x5, &(0x7f00000021c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000002280)=""/177, 0xb1}, {&(0x7f0000002340)=""/156, 0x9c}, {&(0x7f0000002400)=""/247, 0xf7}, {&(0x7f0000002500)=""/220, 0xdc}], 0x5, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002840)=""/14, 0xe}, {&(0x7f0000002900)=""/243, 0xf3}, {&(0x7f0000002a00)=""/202, 0xca}, {&(0x7f0000002880)=""/24, 0x18}, {&(0x7f0000002b00)=""/159, 0x9f}, {&(0x7f0000002bc0)=""/235, 0xeb}], 0x6}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000007080)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/142, 0x8e}, {&(0x7f0000002e00)=""/218, 0xda}, {&(0x7f0000002f00)=""/189, 0xbd}, {&(0x7f0000002fc0)=""/157, 0x9d}, {&(0x7f0000003100)=""/244, 0xf4}, {&(0x7f0000003200)=""/228, 0xe4}, {&(0x7f0000003300)=""/210, 0xd2}], 0x8, &(0x7f0000003480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x9, 0x20, &(0x7f0000003740)={r3, r4+10000000}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}, {0x6, &(0x7f0000004000)=0x6, 0x2}], 0x2, 0x0, 0x0, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r6, r5}) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) socket(0x10, 0x803, 0x0) syz_clone3(&(0x7f0000000040)={0xa04400, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x58) 5m21.995317863s ago: executing program 4 (id=238): io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) clock_gettime(0x0, &(0x7f0000003080)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000003500)=[{{&(0x7f0000000200), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f0000000280)=""/57, 0x39}], 0x4}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/22, 0x16}, {&(0x7f0000000780)=""/109, 0x6d}, {&(0x7f0000000800)=""/70, 0x46}, {&(0x7f0000000700)=""/61, 0x3d}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000980)}], 0x7, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/70, 0x46}, {&(0x7f0000000bc0)=""/64, 0x40}, {&(0x7f0000000c00)=""/65, 0x41}], 0x3, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)=""/185, 0xb9}, {&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000e80)=""/46, 0x2e}, {&(0x7f0000000ec0)=""/83, 0x53}], 0x4, &(0x7f0000001a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b40)=""/102, 0x66}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/136, 0x88}, {&(0x7f0000001c80)=""/125, 0x7d}, {&(0x7f0000001d00)=""/103, 0x67}, {&(0x7f0000001d80)=""/186, 0xba}], 0x6, &(0x7f0000000f80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000001f00)=""/123, 0x7b}, {&(0x7f0000001f80)=""/41, 0x29}, {&(0x7f0000001fc0)=""/94, 0x5e}, {&(0x7f0000002040)=""/221, 0xdd}], 0x5, &(0x7f00000021c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000002280)=""/177, 0xb1}, {&(0x7f0000002340)=""/156, 0x9c}, {&(0x7f0000002400)=""/247, 0xf7}, {&(0x7f0000002500)=""/220, 0xdc}], 0x5, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002840)=""/14, 0xe}, {&(0x7f0000002900)=""/243, 0xf3}, {&(0x7f0000002a00)=""/202, 0xca}, {&(0x7f0000002880)=""/24, 0x18}, {&(0x7f0000002b00)=""/159, 0x9f}, {&(0x7f0000002bc0)=""/235, 0xeb}], 0x6}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000007080)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/142, 0x8e}, {&(0x7f0000002e00)=""/218, 0xda}, {&(0x7f0000002f00)=""/189, 0xbd}, {&(0x7f0000002fc0)=""/157, 0x9d}, {&(0x7f0000003100)=""/244, 0xf4}, {&(0x7f0000003200)=""/228, 0xe4}, {&(0x7f0000003300)=""/210, 0xd2}], 0x8, &(0x7f0000003480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x9, 0x20, &(0x7f0000003740)={r3, r4+10000000}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}, {0x6, &(0x7f0000004000)=0x6, 0x2}], 0x2, 0x0, 0x0, 0x1) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) socket(0x10, 0x803, 0x0) syz_clone3(&(0x7f0000000040)={0xa04400, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x58) 5m21.784973686s ago: executing program 36 (id=238): io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) clock_gettime(0x0, &(0x7f0000003080)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000003500)=[{{&(0x7f0000000200), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f0000000280)=""/57, 0x39}], 0x4}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/22, 0x16}, {&(0x7f0000000780)=""/109, 0x6d}, {&(0x7f0000000800)=""/70, 0x46}, {&(0x7f0000000700)=""/61, 0x3d}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000980)}], 0x7, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/70, 0x46}, {&(0x7f0000000bc0)=""/64, 0x40}, {&(0x7f0000000c00)=""/65, 0x41}], 0x3, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)=""/185, 0xb9}, {&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000e80)=""/46, 0x2e}, {&(0x7f0000000ec0)=""/83, 0x53}], 0x4, &(0x7f0000001a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b40)=""/102, 0x66}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/136, 0x88}, {&(0x7f0000001c80)=""/125, 0x7d}, {&(0x7f0000001d00)=""/103, 0x67}, {&(0x7f0000001d80)=""/186, 0xba}], 0x6, &(0x7f0000000f80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000001f00)=""/123, 0x7b}, {&(0x7f0000001f80)=""/41, 0x29}, {&(0x7f0000001fc0)=""/94, 0x5e}, {&(0x7f0000002040)=""/221, 0xdd}], 0x5, &(0x7f00000021c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000002280)=""/177, 0xb1}, {&(0x7f0000002340)=""/156, 0x9c}, {&(0x7f0000002400)=""/247, 0xf7}, {&(0x7f0000002500)=""/220, 0xdc}], 0x5, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002840)=""/14, 0xe}, {&(0x7f0000002900)=""/243, 0xf3}, {&(0x7f0000002a00)=""/202, 0xca}, {&(0x7f0000002880)=""/24, 0x18}, {&(0x7f0000002b00)=""/159, 0x9f}, {&(0x7f0000002bc0)=""/235, 0xeb}], 0x6}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000007080)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/142, 0x8e}, {&(0x7f0000002e00)=""/218, 0xda}, {&(0x7f0000002f00)=""/189, 0xbd}, {&(0x7f0000002fc0)=""/157, 0x9d}, {&(0x7f0000003100)=""/244, 0xf4}, {&(0x7f0000003200)=""/228, 0xe4}, {&(0x7f0000003300)=""/210, 0xd2}], 0x8, &(0x7f0000003480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x9, 0x20, &(0x7f0000003740)={r3, r4+10000000}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}, {0x6, &(0x7f0000004000)=0x6, 0x2}], 0x2, 0x0, 0x0, 0x1) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) socket(0x10, 0x803, 0x0) syz_clone3(&(0x7f0000000040)={0xa04400, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x58) 13.367695674s ago: executing program 5 (id=874): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], "1b8d2069162baf34"}}}}}}}, 0x0) fsopen(&(0x7f0000000080)='jffs2\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) shutdown(0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 11.566034224s ago: executing program 5 (id=879): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0684113, &(0x7f00000004c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0xffffffed, 0xd, 0x0, 0x40000, 0x2, 0x1}) 11.325248049s ago: executing program 9 (id=881): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x5c}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11.237551441s ago: executing program 5 (id=882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) 11.020029374s ago: executing program 9 (id=883): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe, 0x0, 0x0, 0x6, 0x0, 0x80}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x2, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x2, 0x0, 0x2, 0xfe, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.86596345s ago: executing program 5 (id=886): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000140)=0x1ff, 0x0, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x200000}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000004001000000002000020", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/73], 0xb8}}, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f00000005c0)={{0x1, @addr=0x2}, "522ec2c4dfdea0e049be106158e4f5aa2e9a2a24b978bb029b829364f1d8fecd", 0x1}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1100) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x337440, 0x0) 8.126467978s ago: executing program 8 (id=892): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0xa, 0x5, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 6.99292147s ago: executing program 9 (id=893): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) 6.990718412s ago: executing program 8 (id=894): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) readv(r1, &(0x7f0000000340)=[{0x0}], 0x1) 6.663792717s ago: executing program 5 (id=897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 6.44820084s ago: executing program 8 (id=898): io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8}]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) 6.447872929s ago: executing program 7 (id=899): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000840)={[0x3]}, 0x8, 0x80000) r0 = syz_io_uring_setup(0x4871, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x0, 0xbfe00000}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 5.422479552s ago: executing program 7 (id=900): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001400030500008000ffdbdf25021820ff", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) 4.798669682s ago: executing program 7 (id=901): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.704058442s ago: executing program 8 (id=902): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32], 0x28}}, 0x0) 4.358530276s ago: executing program 7 (id=903): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe, 0x0, 0x0, 0x6, 0x0, 0x80}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x2, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x2, 0x0, 0x2, 0xfe, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.154080353s ago: executing program 8 (id=904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b08000000"], 0x20}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x40, 0x1, 0x0, 0x1, 0x7, 0x3, 0x1ba5, 0x6, 0x9, 0x8001, 0x3, 0xe6c4, 0x10000, 0x3, 0x3, 0xa971, 0x7f, 0x5, 0x2, 0x8, 0x1, 0x5, 0x8, 0x9, 0xa4, 0x5, 0x5, 0x6, 0xe72, 0x1, 0x0, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x3, 0xd, 0x113, 0x8, 0xd, 0x9, 0x401, 0xffff, 0x6, 0x4, 0x2a9a, 0xfffffff9, 0x5, 0x1, 0x7, 0x0, 0x5, 0x1, 0x100, 0x9, 0x3fc000, 0x5, 0x8, 0x7, 0x40, 0x6, 0xfffff81c, 0x4, 0x2, 0xb9c7, 0x40, 0x400, 0x3, 0x2, 0x6c85, 0x88a, 0x3, 0xffff, 0x7, 0xb4c5, 0x4, 0x4, 0x4, 0x4, 0x2, 0xbe42, 0x5, 0x6, 0x7, 0x71, 0x4, 0x2, 0x6, 0xbd, 0x7, 0xfffffdc4, 0x2, 0xc, 0x0, 0x4, 0x2, 0xd0, 0x10, 0x0, 0x19, 0x5, 0x9, 0x8, 0xfffffffa, 0xfffffffc, 0x9c3b, 0x81, 0x7, 0x5, 0xffff, 0xfffffff9, 0x9, 0x6b, 0x7, 0x1, 0x9, 0xff, 0x9, 0x7, 0xfff, 0x6, 0x1, 0x3, 0x5, 0x7, 0xc, 0x2, 0x4, 0x5bb, 0x7, 0x3, 0x679, 0x7, 0x2, 0x5, 0x0, 0xd, 0x10000, 0x7fffffff, 0x5, 0x81, 0x342, 0x2, 0x6, 0x10, 0x6a, 0xd7, 0x10001, 0xcf5, 0xfffffffc, 0x9, 0x2, 0x3, 0x2bd621da, 0xe8, 0x9, 0x6, 0x8, 0x8, 0x5, 0x4, 0x629, 0x0, 0x7a409af, 0xff, 0x8, 0x4, 0x9, 0xe, 0x73b052b9, 0x6, 0x10, 0x3, 0xa, 0x0, 0x1, 0x5a, 0xfff, 0x0, 0x1c, 0xe7a7, 0xfffffffa, 0x6, 0x3, 0xa, 0xfff, 0x2, 0x2, 0x29e, 0x5, 0x47f, 0x0, 0x8, 0x4, 0x9b8, 0x7fff, 0x8, 0xffff, 0x10000, 0x400, 0x0, 0x0, 0xffffff39, 0x5, 0x6a80, 0x10001, 0x4, 0x3, 0x8000, 0x1, 0x2, 0x8, 0xd, 0xce2, 0xffffffe1, 0x3, 0x7, 0x2, 0x4, 0x0, 0x4, 0x4931, 0x80, 0x9, 0x6, 0xd, 0x0, 0x6, 0x2, 0x0, 0xafd7, 0xe, 0x0, 0x9, 0x3c115f2c, 0x2, 0x5, 0x3, 0x1, 0x419, 0x2, 0x9, 0xfffffffd, 0x0, 0x9, 0x2, 0x3, 0x1, 0x101, 0x1, 0x1, 0x3fffc, 0x2626, 0x6]}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x401, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x1c9, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x3, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x200, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x6, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x100, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x0, 0x5, 0xffff0000, 0x2, 0x81, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4ac, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x40, 0x3, 0x2, 0x83, 0x6, 0x56a, 0x0, 0x9, 0x9, 0x1, 0x7, 0x9, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x1, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x9, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.79416703s ago: executing program 6 (id=905): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], "1b8d2069162baf34"}}}}}}}, 0x0) fsopen(&(0x7f0000000080)='jffs2\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) shutdown(0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 2.781881503s ago: executing program 5 (id=906): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) acct(0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000080)={0x4, [[0x7fff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3], [0xfffffffc, 0xffffffff, 0x4d4b4a73, 0x0, 0x5, 0x0, 0xe], [0x48, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3]], '\x00', [{0x3, 0x1001}, {}, {0x0, 0x1}, {0x0, 0x8}, {0x200000}, {0x3}, {}, {}, {}, {0xfffffffd}, {0x8000, 0x1}, {0x0, 0x12}], '\x00', 0x4}) r1 = socket(0x11, 0xa, 0x8) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x20040009}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=@newtclass={0x78, 0x28, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xa}, {0x1, 0xffff}, {0xffe0, 0x5}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0xb, 0x21}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x4}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5a}}}, @tclass_kind_options=@c_red={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044080}, 0x8000004) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x14c, &(0x7f00000002c0)=ANY=[]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000013c0)=ANY=[@ANYRESDEC=r6, @ANYRES64, @ANYRESOCT=r3, @ANYRES32=r6, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc79, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) syz_emit_vhci(&(0x7f0000001300)=ANY=[@ANYBLOB="da8b65ca5c84b82cf2267fdb050946379eb5582b506c2efc6793fdd2a60f85a29acac7d9f2c89da52439daea2505073d00f5f16c607005f3651acd9e1ffcf61e7c85ff42d1f46599fc35aa46ae83c41bd2062f257ca13d434dbebe25b47a579214d50ef5ecef50886ae73cb00667fbdfb63b972b87bda74772b8902352f79ba96fd18367a6c006d5be7e483b5ae15db13d983042b33281f57ca9ad9dcdb8db4b77d749d056793aa7e3334f51865c0a045a102f9c7c"], 0xe) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) 2.591829577s ago: executing program 8 (id=907): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @private0, [0x0, 0x0, 0xffffff, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_team\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0xc, 0x0, 'syz1\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x8010, r0, 0xc0000) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000080)={0x4, r5, 0x2c, {0x6, 0xd377}, 0x43}, 0x1) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f00000003c0)={0x80, 0xa, 0x1, 0x9, 0x0, 0x7, 0x0}) 2.525202716s ago: executing program 6 (id=908): socket$nl_generic(0x11, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bff57002c1097f92e91002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8096d5742db41bd61080dcbe40e0f802fc12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1531497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1ea"], 0x0}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0) 2.46585164s ago: executing program 9 (id=909): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0xa, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.894742546s ago: executing program 6 (id=910): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) unshare(0x22020600) connect$unix(r0, 0x0, 0x0) 1.722809578s ago: executing program 6 (id=911): r0 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) 1.636651005s ago: executing program 7 (id=912): io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8}]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) 1.420056329s ago: executing program 6 (id=913): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000300)}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) 1.419282259s ago: executing program 9 (id=914): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x8) r1 = syz_io_uring_setup(0xd7, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x2, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 1.042331158s ago: executing program 6 (id=915): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 57.264706ms ago: executing program 7 (id=916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 0s ago: executing program 9 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents(r0, 0x0, 0x48) kernel console output (not intermixed with test programs): ve bond_slave_1): Enslaving as an active interface with an up link [ 157.217456][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.536992][ T6352] team0: Port device team_slave_0 added [ 157.861932][ T6352] team0: Port device team_slave_1 added [ 158.442133][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.462848][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.472300][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.485969][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.485985][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.486002][ T6352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.497418][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.501895][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.560206][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.560225][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.560253][ T6352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.792185][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.798293][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.815714][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.818811][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.819823][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.148485][ T6352] hsr_slave_0: entered promiscuous mode [ 160.170428][ T6352] hsr_slave_1: entered promiscuous mode [ 160.204781][ T6352] debugfs: 'hsr0' already exists in 'hsr' [ 160.204813][ T6352] Cannot create hsr debugfs directory [ 160.571646][ T5807] Bluetooth: hci0: command tx timeout [ 160.579022][ T68] bridge_slave_1: left allmulticast mode [ 160.579056][ T68] bridge_slave_1: left promiscuous mode [ 160.579323][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.663380][ T68] bridge_slave_0: left allmulticast mode [ 160.663412][ T68] bridge_slave_0: left promiscuous mode [ 160.663991][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.939956][ T6573] FAULT_INJECTION: forcing a failure. [ 160.939956][ T6573] name failslab, interval 1, probability 0, space 0, times 0 [ 160.939982][ T6573] CPU: 0 UID: 0 PID: 6573 Comm: syz.4.215 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.939997][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.940005][ T6573] Call Trace: [ 160.940010][ T6573] [ 160.940016][ T6573] dump_stack_lvl+0xe8/0x150 [ 160.940038][ T6573] should_fail_ex+0x46c/0x600 [ 160.940059][ T6573] ? __alloc_skb+0x1dc/0x3a0 [ 160.940074][ T6573] should_failslab+0xa8/0x100 [ 160.940087][ T6573] ? __alloc_skb+0x1dc/0x3a0 [ 160.940100][ T6573] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 160.940121][ T6573] ? lockdep_hardirqs_on+0x7b/0x110 [ 160.940136][ T6573] ? __alloc_skb+0x198/0x3a0 [ 160.940151][ T6573] __alloc_skb+0x1dc/0x3a0 [ 160.940168][ T6573] _sctp_make_chunk+0x59/0x290 [ 160.940187][ T6573] sctp_make_datafrag_empty+0x122/0x230 [ 160.940207][ T6573] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 160.940224][ T6573] ? __kmalloc_cache_noprof+0x1fb/0x6d0 [ 160.940242][ T6573] ? sctp_auth_send_cid+0x69/0x250 [ 160.940262][ T6573] sctp_datamsg_from_user+0x729/0xef0 [ 160.940286][ T6573] ? __genradix_ptr+0x1e1/0x220 [ 160.940301][ T6573] sctp_sendmsg_to_asoc+0x1059/0x18d0 [ 160.940333][ T6573] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 160.940351][ T6573] ? lockdep_hardirqs_on+0x7b/0x110 [ 160.940364][ T6573] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 160.940384][ T6573] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 160.940402][ T6573] ? __local_bh_enable+0x1e2/0x2f0 [ 160.940420][ T6573] ? __local_bh_enable_ip+0x1af/0x2c0 [ 160.940434][ T6573] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 160.940457][ T6573] sctp_sendmsg+0x174f/0x25d0 [ 160.940482][ T6573] ? __pfx_sctp_sendmsg+0x10/0x10 [ 160.940513][ T6573] ? sock_rps_record_flow+0x19/0x410 [ 160.940531][ T6573] ? inet_sendmsg+0x2f4/0x370 [ 160.940546][ T6573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.940565][ T6573] __sock_sendmsg+0x19c/0x270 [ 160.940579][ T6573] ____sys_sendmsg+0x534/0x810 [ 160.940599][ T6573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.940621][ T6573] ? import_iovec+0x74/0xa0 [ 160.940636][ T6573] ___sys_sendmsg+0x21f/0x2a0 [ 160.940654][ T6573] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.940673][ T6573] ? kstrtouint+0x6e/0xe0 [ 160.940705][ T6573] ? __fget_files+0x2a/0x420 [ 160.940718][ T6573] ? __fget_files+0x3a6/0x420 [ 160.940736][ T6573] __sys_sendmmsg+0x22d/0x430 [ 160.940756][ T6573] ? __pfx___sys_sendmmsg+0x10/0x10 [ 160.940779][ T6573] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 160.940804][ T6573] ? ksys_write+0x230/0x260 [ 160.940823][ T6573] ? __pfx_ksys_write+0x10/0x10 [ 160.940844][ T6573] __x64_sys_sendmmsg+0xa0/0xc0 [ 160.940869][ T6573] do_syscall_64+0xec/0xf80 [ 160.940883][ T6573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.940894][ T6573] ? trace_irq_disable+0x37/0x100 [ 160.940907][ T6573] ? clear_bhb_loop+0x60/0xb0 [ 160.940922][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.940934][ T6573] RIP: 0033:0x7fed9707f749 [ 160.940946][ T6573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.940957][ T6573] RSP: 002b:00007fed952de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 160.940971][ T6573] RAX: ffffffffffffffda RBX: 00007fed972d5fa0 RCX: 00007fed9707f749 [ 160.940980][ T6573] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 160.940988][ T6573] RBP: 00007fed952de090 R08: 0000000000000000 R09: 0000000000000000 [ 160.940995][ T6573] R10: 0000000004048884 R11: 0000000000000246 R12: 0000000000000001 [ 160.941003][ T6573] R13: 00007fed972d6038 R14: 00007fed972d5fa0 R15: 00007ffd7d5678d8 [ 160.941022][ T6573] [ 160.971460][ T5807] Bluetooth: hci1: command tx timeout [ 162.640649][ T5807] Bluetooth: hci0: command tx timeout [ 162.941028][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.001285][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.040248][ T5807] Bluetooth: hci1: command tx timeout [ 163.046280][ T68] bond0 (unregistering): Released all slaves [ 163.273323][ T6578] netlink: 'syz.4.217': attribute type 282 has an invalid length. [ 163.311091][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.217'. [ 163.750231][ T6321] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.790449][ T5807] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 163.790484][ T5807] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 163.958076][ T6321] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.371886][ T6321] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.461059][ T6321] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.719516][ T5807] Bluetooth: hci0: command tx timeout [ 164.776764][ T6593] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.842711][ T68] hsr_slave_0: left promiscuous mode [ 164.861820][ T68] hsr_slave_1: left promiscuous mode [ 164.865261][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.865290][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.910273][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.910304][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.984490][ T68] veth1_macvtap: left promiscuous mode [ 164.984563][ T68] veth0_macvtap: left promiscuous mode [ 164.984716][ T68] veth1_vlan: left promiscuous mode [ 164.984826][ T68] veth0_vlan: left promiscuous mode [ 165.120006][ T5807] Bluetooth: hci1: command tx timeout [ 166.798434][ T5807] Bluetooth: hci0: command tx timeout [ 167.201582][ T5807] Bluetooth: hci1: command tx timeout [ 167.299777][ T68] team0 (unregistering): Port device team_slave_1 removed [ 167.548688][ T68] team0 (unregistering): Port device team_slave_0 removed [ 170.419957][ T6612] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 170.419987][ T6612] CIFS mount error: No usable UNC path provided in device string! [ 170.419987][ T6612] [ 170.420191][ T6612] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.426645][ T6612] binder: BINDER_SET_CONTEXT_MGR already set [ 170.426660][ T6612] binder: 6609:6612 ioctl 4018620d 200000000040 returned -16 [ 170.427332][ T6612] binder: 6609:6612 ioctl c0306201 200000000300 returned -11 [ 171.197508][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 171.321231][ T6352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.430116][ T6352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 171.458068][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 171.597176][ T6352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.656158][ T6352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.856048][ T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 172.008397][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.008464][ T44] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.008486][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.012561][ T44] usb 5-1: config 0 descriptor?? [ 172.064587][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 172.462434][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 172.463323][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 172.464059][ T44] pwc: recv_control_msg error -32 req 02 val 2c00 [ 172.464649][ T44] pwc: recv_control_msg error -32 req 04 val 1000 [ 172.493836][ T44] pwc: recv_control_msg error -32 req 04 val 1300 [ 172.494613][ T44] pwc: recv_control_msg error -32 req 04 val 1400 [ 172.499163][ T44] pwc: recv_control_msg error -32 req 02 val 2000 [ 172.516329][ T44] pwc: recv_control_msg error -32 req 02 val 2100 [ 172.517378][ T44] pwc: recv_control_msg error -32 req 04 val 1500 [ 172.519082][ T44] pwc: recv_control_msg error -32 req 02 val 2500 [ 172.519786][ T44] pwc: recv_control_msg error -32 req 02 val 2400 [ 172.521117][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 172.521478][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 172.524961][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 172.528269][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 172.530102][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 172.534633][ T44] pwc: Registered as video103. [ 172.538581][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 172.545094][ T44] usb 5-1: USB disconnect, device number 11 [ 172.696068][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.700907][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.701277][ T6547] bridge_slave_0: entered allmulticast mode [ 172.704920][ T6547] bridge_slave_0: entered promiscuous mode [ 172.842053][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.842186][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.842364][ T6547] bridge_slave_1: entered allmulticast mode [ 172.844000][ T6547] bridge_slave_1: entered promiscuous mode [ 173.112686][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.298096][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.298260][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.298480][ T6551] bridge_slave_0: entered allmulticast mode [ 173.301712][ T6551] bridge_slave_0: entered promiscuous mode [ 173.418196][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.419233][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.419469][ T6551] bridge_slave_1: entered allmulticast mode [ 173.424599][ T6551] bridge_slave_1: entered promiscuous mode [ 173.559269][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.628740][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.722305][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.969659][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.088902][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.308659][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.371533][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.380639][ T6547] team0: Port device team_slave_0 added [ 174.571441][ T6547] team0: Port device team_slave_1 added [ 174.920968][ T6551] team0: Port device team_slave_0 added [ 175.077864][ T6551] team0: Port device team_slave_1 added [ 175.087635][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.087653][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.087678][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.246481][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.246503][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.246532][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.751941][ T6321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.777443][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.777462][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.777491][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.799176][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.799195][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.799219][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.179422][ T6673] binder: 6671:6673 ioctl c0306201 200000000080 returned -14 [ 176.337090][ T6547] hsr_slave_0: entered promiscuous mode [ 176.338773][ T6547] hsr_slave_1: entered promiscuous mode [ 176.339872][ T6547] debugfs: 'hsr0' already exists in 'hsr' [ 176.339898][ T6547] Cannot create hsr debugfs directory [ 176.776122][ T6551] hsr_slave_0: entered promiscuous mode [ 176.777931][ T6551] hsr_slave_1: entered promiscuous mode [ 176.778639][ T6551] debugfs: 'hsr0' already exists in 'hsr' [ 176.778667][ T6551] Cannot create hsr debugfs directory [ 176.931228][ T6321] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.175589][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.512120][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.666400][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.666558][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.815654][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.879193][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.879694][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.141229][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.414568][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.753570][ T6352] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.899883][ T6547] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 178.950673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.960984][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.974876][ T6547] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 179.040382][ T68] bridge_slave_1: left allmulticast mode [ 179.040416][ T68] bridge_slave_1: left promiscuous mode [ 179.056419][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.104252][ T68] bridge_slave_0: left allmulticast mode [ 179.104285][ T68] bridge_slave_0: left promiscuous mode [ 179.104556][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.207598][ T68] bridge_slave_1: left allmulticast mode [ 179.207631][ T68] bridge_slave_1: left promiscuous mode [ 179.207914][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.290661][ T68] bridge_slave_0: left allmulticast mode [ 179.290695][ T68] bridge_slave_0: left promiscuous mode [ 179.290983][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.551893][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.633188][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.653544][ T68] bond0 (unregistering): Released all slaves [ 183.230979][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.312568][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.335925][ T68] bond0 (unregistering): Released all slaves [ 183.383678][ T6547] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.527615][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.527727][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.771377][ T6547] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.256355][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.267205][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.274043][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.275746][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.276559][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.750949][ T6551] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 185.022391][ T6551] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 185.082776][ T6551] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 185.390326][ T6551] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 185.545354][ T6321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.819362][ T68] hsr_slave_0: left promiscuous mode [ 185.858989][ T68] hsr_slave_1: left promiscuous mode [ 185.860070][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.860098][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.891614][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.891643][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.100109][ T68] hsr_slave_0: left promiscuous mode [ 186.141292][ T68] hsr_slave_1: left promiscuous mode [ 186.142049][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.142069][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.199555][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.199585][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.310211][ T5809] Bluetooth: hci3: command tx timeout [ 186.327238][ T68] veth1_macvtap: left promiscuous mode [ 186.327310][ T68] veth0_macvtap: left promiscuous mode [ 186.327465][ T68] veth1_vlan: left promiscuous mode [ 186.327584][ T68] veth0_vlan: left promiscuous mode [ 186.449262][ T68] veth1_macvtap: left promiscuous mode [ 186.449390][ T68] veth0_macvtap: left promiscuous mode [ 186.449706][ T68] veth1_vlan: left promiscuous mode [ 186.449919][ T68] veth0_vlan: left promiscuous mode [ 188.397847][ T5809] Bluetooth: hci3: command tx timeout [ 188.838555][ T68] team0 (unregistering): Port device team_slave_1 removed [ 189.068056][ T68] team0 (unregistering): Port device team_slave_0 removed [ 190.476881][ T5809] Bluetooth: hci3: command tx timeout [ 192.545767][ T5809] Bluetooth: hci3: command tx timeout [ 192.728070][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.753374][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.776308][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.779008][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.780152][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.455790][ T68] team0 (unregistering): Port device team_slave_1 removed [ 193.726137][ T68] team0 (unregistering): Port device team_slave_0 removed [ 194.784733][ T5809] Bluetooth: hci5: command tx timeout [ 196.711657][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.723803][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 196.744005][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.745422][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.746338][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.863399][ T5809] Bluetooth: hci5: command tx timeout [ 197.718256][ T6715] chnl_net:caif_netlink_parms(): no params data found [ 198.041482][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.424382][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.433100][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.433372][ T6715] bridge_slave_0: entered allmulticast mode [ 198.435376][ T6715] bridge_slave_0: entered promiscuous mode [ 198.519724][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.519875][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.520130][ T6715] bridge_slave_1: entered allmulticast mode [ 198.566163][ T6715] bridge_slave_1: entered promiscuous mode [ 198.860838][ T6715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.862498][ T5809] Bluetooth: hci6: command tx timeout [ 198.904944][ T6715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.907091][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.929430][ T6742] chnl_net:caif_netlink_parms(): no params data found [ 198.942517][ T5809] Bluetooth: hci5: command tx timeout [ 199.167301][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.181265][ T6715] team0: Port device team_slave_0 added [ 199.355226][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.355320][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.359306][ T6715] team0: Port device team_slave_1 added [ 199.633253][ T6754] chnl_net:caif_netlink_parms(): no params data found [ 199.658551][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.658708][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.673583][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.673674][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.766423][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.766437][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.766454][ T6715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.125078][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.125097][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.125126][ T6715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.375673][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.375900][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.376144][ T6742] bridge_slave_0: entered allmulticast mode [ 200.377929][ T6742] bridge_slave_0: entered promiscuous mode [ 200.608835][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.609071][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.609301][ T6742] bridge_slave_1: entered allmulticast mode [ 200.612075][ T6742] bridge_slave_1: entered promiscuous mode [ 200.631117][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.943562][ T5807] Bluetooth: hci6: command tx timeout [ 201.021632][ T5809] Bluetooth: hci5: command tx timeout [ 201.136683][ T6742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.237586][ T6715] hsr_slave_0: entered promiscuous mode [ 201.238517][ T6715] hsr_slave_1: entered promiscuous mode [ 201.239133][ T6715] debugfs: 'hsr0' already exists in 'hsr' [ 201.239150][ T6715] Cannot create hsr debugfs directory [ 201.249780][ T6742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.280291][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.280494][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.280781][ T6754] bridge_slave_0: entered allmulticast mode [ 201.285177][ T6754] bridge_slave_0: entered promiscuous mode [ 201.373601][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.373697][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.591824][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.591929][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.592108][ T6754] bridge_slave_1: entered allmulticast mode [ 201.594007][ T6754] bridge_slave_1: entered promiscuous mode [ 201.966451][ T6742] team0: Port device team_slave_0 added [ 202.066057][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.066320][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.295699][ T6742] team0: Port device team_slave_1 added [ 202.299021][ T6754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.464738][ T6754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.694768][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.694788][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.694815][ T6742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.790064][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.790078][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.790094][ T6742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.813452][ T6754] team0: Port device team_slave_0 added [ 202.854815][ T6754] team0: Port device team_slave_1 added [ 203.021317][ T5809] Bluetooth: hci6: command tx timeout [ 203.152480][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.152499][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.152526][ T6754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.404794][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.404814][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.404844][ T6754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.448812][ T6742] hsr_slave_0: entered promiscuous mode [ 203.451063][ T6742] hsr_slave_1: entered promiscuous mode [ 203.452055][ T6742] debugfs: 'hsr0' already exists in 'hsr' [ 203.452078][ T6742] Cannot create hsr debugfs directory [ 204.094450][ T6754] hsr_slave_0: entered promiscuous mode [ 204.095542][ T6754] hsr_slave_1: entered promiscuous mode [ 204.096151][ T6754] debugfs: 'hsr0' already exists in 'hsr' [ 204.096171][ T6754] Cannot create hsr debugfs directory [ 205.109665][ T5809] Bluetooth: hci6: command tx timeout [ 205.124122][ T6715] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 205.185886][ T6715] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 205.417390][ T6715] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 205.470449][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.474883][ T6715] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 206.240395][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.455692][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.762248][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.060888][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.084416][ T6547] veth0_vlan: entered promiscuous mode [ 207.310892][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.436630][ T6547] veth1_vlan: entered promiscuous mode [ 207.620789][ T6715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.674822][ T6551] veth0_vlan: entered promiscuous mode [ 207.815069][ T6547] veth0_macvtap: entered promiscuous mode [ 207.826612][ T6551] veth1_vlan: entered promiscuous mode [ 207.873403][ T6715] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.916285][ T6547] veth1_macvtap: entered promiscuous mode [ 207.957558][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.958337][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.995366][ T68] bridge_slave_1: left allmulticast mode [ 207.995398][ T68] bridge_slave_1: left promiscuous mode [ 207.995670][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.078940][ T68] bridge_slave_0: left allmulticast mode [ 208.078964][ T68] bridge_slave_0: left promiscuous mode [ 208.079508][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.151264][ T68] bridge_slave_1: left allmulticast mode [ 208.151289][ T68] bridge_slave_1: left promiscuous mode [ 208.151460][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.234115][ T68] bridge_slave_0: left allmulticast mode [ 208.234141][ T68] bridge_slave_0: left promiscuous mode [ 208.234333][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.310647][ T68] bridge_slave_1: left allmulticast mode [ 208.310672][ T68] bridge_slave_1: left promiscuous mode [ 208.310836][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.381492][ T68] bridge_slave_0: left allmulticast mode [ 208.381527][ T68] bridge_slave_0: left promiscuous mode [ 208.381807][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.218484][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.278541][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.328994][ T68] bond0 (unregistering): Released all slaves [ 211.768476][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.826871][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.878758][ T68] bond0 (unregistering): Released all slaves [ 213.446109][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.505813][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.528529][ T68] bond0 (unregistering): Released all slaves [ 213.591649][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.591835][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.719926][ T6742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.787192][ T6742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.841840][ T6742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.893537][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.893657][ T6742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.056388][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.133146][ T6551] veth0_macvtap: entered promiscuous mode [ 214.527785][ T3524] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.558141][ T3524] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.559353][ T6551] veth1_macvtap: entered promiscuous mode [ 214.598952][ T3524] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.608188][ T3524] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.630188][ T6754] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.938699][ T6754] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 215.084497][ T6754] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 215.115648][ T6754] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.249883][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.464162][ T68] hsr_slave_0: left promiscuous mode [ 215.504685][ T68] hsr_slave_1: left promiscuous mode [ 215.505889][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.528335][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.666848][ T68] hsr_slave_0: left promiscuous mode [ 215.684030][ T68] hsr_slave_1: left promiscuous mode [ 215.684775][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.724918][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.865465][ T68] hsr_slave_0: left promiscuous mode [ 215.885962][ T68] hsr_slave_1: left promiscuous mode [ 215.886639][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.886658][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.936269][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.936309][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.077192][ T68] veth1_macvtap: left promiscuous mode [ 216.077334][ T68] veth0_macvtap: left promiscuous mode [ 216.077665][ T68] veth1_vlan: left promiscuous mode [ 216.077874][ T68] veth0_vlan: left promiscuous mode [ 217.315271][ T68] team0 (unregistering): Port device team_slave_1 removed [ 217.523833][ T68] team0 (unregistering): Port device team_slave_0 removed [ 218.273888][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.281518][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.290226][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.295656][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.296504][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.295267][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.299425][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.301303][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.327920][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.333725][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.371691][ T5809] Bluetooth: hci2: command tx timeout [ 220.683424][ T68] team0 (unregistering): Port device team_slave_1 removed [ 220.922074][ T68] team0 (unregistering): Port device team_slave_0 removed [ 221.429391][ T5809] Bluetooth: hci4: command tx timeout [ 222.450839][ T5809] Bluetooth: hci2: command tx timeout [ 223.490222][ T5809] Bluetooth: hci4: command tx timeout [ 224.529865][ T5809] Bluetooth: hci2: command tx timeout [ 224.919888][ T68] team0 (unregistering): Port device team_slave_1 removed [ 225.131657][ T68] team0 (unregistering): Port device team_slave_0 removed [ 225.569155][ T5809] Bluetooth: hci4: command tx timeout [ 226.608817][ T5809] Bluetooth: hci2: command tx timeout [ 227.648044][ T5809] Bluetooth: hci4: command tx timeout [ 228.298253][ T6715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.242902][ T6742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.773248][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.802805][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.803108][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.853581][ T6847] chnl_net:caif_netlink_parms(): no params data found [ 229.896020][ T6754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.984802][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.984971][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.192531][ T6850] chnl_net:caif_netlink_parms(): no params data found [ 230.590687][ T6754] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.605144][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.605292][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.605447][ T6847] bridge_slave_0: entered allmulticast mode [ 230.608292][ T6847] bridge_slave_0: entered promiscuous mode [ 230.692008][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.692094][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.692249][ T6847] bridge_slave_1: entered allmulticast mode [ 230.693909][ T6847] bridge_slave_1: entered promiscuous mode [ 230.695758][ T6715] veth0_vlan: entered promiscuous mode [ 230.882670][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.884118][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.884347][ T6850] bridge_slave_0: entered allmulticast mode [ 230.908267][ T6850] bridge_slave_0: entered promiscuous mode [ 231.001677][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.001764][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.005031][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.005125][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.005262][ T6850] bridge_slave_1: entered allmulticast mode [ 231.007530][ T6850] bridge_slave_1: entered promiscuous mode [ 231.014088][ T6847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.129632][ T6847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.359202][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.359347][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.364273][ T6715] veth1_vlan: entered promiscuous mode [ 231.412536][ T6850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.528856][ T6850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.531795][ T6847] team0: Port device team_slave_0 added [ 231.791228][ T6847] team0: Port device team_slave_1 added [ 231.965037][ T6850] team0: Port device team_slave_0 added [ 232.100619][ T6850] team0: Port device team_slave_1 added [ 232.102014][ T68] IPVS: stop unused estimator thread 0... [ 232.103431][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.103445][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.103470][ T6847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.196528][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.196547][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.196575][ T6847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.311784][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.311803][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.311831][ T6850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.364314][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.364332][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.364362][ T6850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.013474][ T6847] hsr_slave_0: entered promiscuous mode [ 233.014910][ T6847] hsr_slave_1: entered promiscuous mode [ 233.459937][ T6850] hsr_slave_0: entered promiscuous mode [ 233.461454][ T6850] hsr_slave_1: entered promiscuous mode [ 233.462073][ T6850] debugfs: 'hsr0' already exists in 'hsr' [ 233.462091][ T6850] Cannot create hsr debugfs directory [ 233.779569][ T6715] veth0_macvtap: entered promiscuous mode [ 234.117325][ T6715] veth1_macvtap: entered promiscuous mode [ 234.462635][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.816699][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.058885][ T6847] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.123015][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.288934][ T6847] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.333536][ T4157] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.345913][ T4157] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.347767][ T4157] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.350064][ T6754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.350476][ T4157] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.550965][ T6847] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.818760][ T6847] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.154246][ T1383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.154270][ T1383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.228650][ T6742] veth0_vlan: entered promiscuous mode [ 236.231012][ T68] bridge_slave_1: left allmulticast mode [ 236.231034][ T68] bridge_slave_1: left promiscuous mode [ 236.231206][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.296942][ T68] bridge_slave_0: left allmulticast mode [ 236.296966][ T68] bridge_slave_0: left promiscuous mode [ 236.297134][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.386331][ T68] bridge_slave_1: left allmulticast mode [ 236.386355][ T68] bridge_slave_1: left promiscuous mode [ 236.386517][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.434966][ T68] bridge_slave_0: left allmulticast mode [ 236.434995][ T68] bridge_slave_0: left promiscuous mode [ 236.435182][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.293421][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.354429][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.375052][ T68] bond0 (unregistering): Released all slaves [ 239.953037][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.022490][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.049351][ T68] bond0 (unregistering): Released all slaves [ 240.313935][ T6742] veth1_vlan: entered promiscuous mode [ 240.375236][ T4157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.375260][ T4157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.081456][ T68] hsr_slave_0: left promiscuous mode [ 241.121405][ T68] hsr_slave_1: left promiscuous mode [ 241.122187][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.122207][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.159286][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.281207][ T5793] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 241.301245][ T68] hsr_slave_0: left promiscuous mode [ 241.341436][ T68] hsr_slave_1: left promiscuous mode [ 241.342128][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.342156][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.385385][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.385415][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.455828][ T5793] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 241.455864][ T5793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.455884][ T5793] usb 10-1: Product: syz [ 241.455897][ T5793] usb 10-1: Manufacturer: syz [ 241.455911][ T5793] usb 10-1: SerialNumber: syz [ 241.460552][ T5793] usb 10-1: config 0 descriptor?? [ 241.503957][ T5793] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 002 [ 241.769599][ T68] veth1_macvtap: left promiscuous mode [ 241.771559][ T68] veth0_macvtap: left promiscuous mode [ 241.775412][ T68] veth1_vlan: left promiscuous mode [ 241.775739][ T68] veth0_vlan: left promiscuous mode [ 241.821230][ T68] veth1_macvtap: left promiscuous mode [ 241.821329][ T68] veth0_macvtap: left promiscuous mode [ 241.821582][ T68] veth1_vlan: left promiscuous mode [ 241.821750][ T68] veth0_vlan: left promiscuous mode [ 241.881047][ T5793] (null): failure reading functionality [ 242.264375][ T5793] i2c i2c-1: connected i2c-tiny-usb device [ 242.439526][ T6956] fuse: Unknown parameter 'dd' [ 244.140764][ T5982] usb 10-1: USB disconnect, device number 2 [ 244.780378][ T68] team0 (unregistering): Port device team_slave_1 removed [ 245.070131][ T68] team0 (unregistering): Port device team_slave_0 removed [ 249.127400][ T5793] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 249.297188][ T5793] usb 10-1: Using ep0 maxpacket: 16 [ 249.301542][ T5793] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 249.301572][ T5793] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.304615][ T5793] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.304640][ T5793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.304652][ T5793] usb 10-1: Product: syz [ 249.304661][ T5793] usb 10-1: Manufacturer: syz [ 249.304670][ T5793] usb 10-1: SerialNumber: syz [ 249.564584][ T6984] openvswitch: netlink: Message has 4 unknown bytes. [ 249.564611][ T6984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.587204][ T5793] usb 10-1: 0:2 : does not exist [ 249.626622][ T5793] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 249.641928][ T5793] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 249.651585][ T5793] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 249.704598][ T5793] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 249.715767][ T5793] usb 10-1: USB disconnect, device number 3 [ 250.354396][ T6987] nbd: must specify a size in bytes for the device [ 250.617409][ T68] team0 (unregistering): Port device team_slave_1 removed [ 250.877453][ T68] team0 (unregistering): Port device team_slave_0 removed [ 252.831157][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.833826][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.835131][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.886102][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.887565][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.286432][ T6754] veth0_vlan: entered promiscuous mode [ 253.297954][ T6988] netlink: 60 bytes leftover after parsing attributes in process `syz.9.248'. [ 253.405806][ T6754] veth1_vlan: entered promiscuous mode [ 254.019941][ T6995] netlink: 'syz.9.250': attribute type 21 has an invalid length. [ 254.174796][ T1383] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.181917][ T6754] veth0_macvtap: entered promiscuous mode [ 254.347193][ T1383] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.665058][ T1383] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.721291][ T1383] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.722191][ T6754] veth1_macvtap: entered promiscuous mode [ 254.775816][ T6847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 254.852000][ T6847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 254.908055][ T6847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 254.933612][ T5809] Bluetooth: hci0: command tx timeout [ 255.126388][ T6847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 255.374585][ T6754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.576647][ T6754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.735678][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.737126][ T6850] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 255.748494][ T5809] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 255.748527][ T5809] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 255.892291][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.895529][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.954273][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.955540][ T6850] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 255.999812][ T6990] chnl_net:caif_netlink_parms(): no params data found [ 256.013235][ T6850] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 256.258469][ T6850] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.784515][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.817628][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.822508][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.834299][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.835142][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.993485][ T5809] Bluetooth: hci0: command tx timeout [ 257.576969][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.581368][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.581652][ T6990] bridge_slave_0: entered allmulticast mode [ 257.585480][ T6990] bridge_slave_0: entered promiscuous mode [ 257.631575][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.631779][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.632332][ T6990] bridge_slave_1: entered allmulticast mode [ 257.637779][ T6990] bridge_slave_1: entered promiscuous mode [ 258.116399][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.159245][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.444566][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.655305][ T6990] team0: Port device team_slave_0 added [ 258.835928][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.879134][ T6990] team0: Port device team_slave_1 added [ 258.912341][ T5809] Bluetooth: hci1: command tx timeout [ 259.082232][ T5809] Bluetooth: hci0: command tx timeout [ 259.400250][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.485389][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.485411][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.485441][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.507437][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.507454][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.507481][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.738812][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.034291][ T6990] hsr_slave_0: entered promiscuous mode [ 260.035772][ T6990] hsr_slave_1: entered promiscuous mode [ 260.036845][ T6990] debugfs: 'hsr0' already exists in 'hsr' [ 260.036873][ T6990] Cannot create hsr debugfs directory [ 260.124032][ T6847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.472978][ T37] audit: type=1326 audit(6059978146.730:2): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7062 comm="syz.9.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 260.473255][ T37] audit: type=1326 audit(6059978146.730:3): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7062 comm="syz.9.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 261.230469][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.230553][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.267210][ T5809] Bluetooth: hci1: command tx timeout [ 261.267219][ T5807] Bluetooth: hci0: command tx timeout [ 261.444918][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 261.643073][ T6847] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.714392][ T6850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.134775][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.135083][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.465247][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.465354][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.465521][ T7039] bridge_slave_0: entered allmulticast mode [ 262.467281][ T7039] bridge_slave_0: entered promiscuous mode [ 262.494976][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.495126][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.508664][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.508819][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.509036][ T7039] bridge_slave_1: entered allmulticast mode [ 262.517471][ T7039] bridge_slave_1: entered promiscuous mode [ 262.868615][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.101506][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.346860][ T5809] Bluetooth: hci1: command tx timeout [ 263.353636][ T6850] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.498058][ T7039] team0: Port device team_slave_0 added [ 264.524277][ T7039] team0: Port device team_slave_1 added [ 264.575741][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.575987][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.199660][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.199675][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.199693][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.203815][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.204000][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.250258][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.250277][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.250303][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.390959][ T5809] Bluetooth: hci1: command tx timeout [ 265.787904][ T7039] hsr_slave_0: entered promiscuous mode [ 265.790215][ T7039] hsr_slave_1: entered promiscuous mode [ 265.791189][ T7039] debugfs: 'hsr0' already exists in 'hsr' [ 265.791214][ T7039] Cannot create hsr debugfs directory [ 266.079204][ T68] bridge_slave_1: left allmulticast mode [ 266.079236][ T68] bridge_slave_1: left promiscuous mode [ 266.079498][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.161222][ T68] bridge_slave_0: left allmulticast mode [ 266.161258][ T68] bridge_slave_0: left promiscuous mode [ 266.161539][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.241413][ T68] bridge_slave_1: left allmulticast mode [ 266.241439][ T68] bridge_slave_1: left promiscuous mode [ 266.241603][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.309948][ T68] bridge_slave_0: left allmulticast mode [ 266.309974][ T68] bridge_slave_0: left promiscuous mode [ 266.310169][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.238273][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.300460][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.321774][ T68] bond0 (unregistering): Released all slaves [ 269.830552][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.887488][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.909294][ T68] bond0 (unregistering): Released all slaves [ 271.192050][ T7133] tipc: Trying to set illegal importance in message [ 271.260192][ T37] audit: type=1800 audit(6059978157.536:4): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.282" name="nullb0" dev="tmpfs" ino=252 res=0 errno=0 [ 271.286712][ T68] hsr_slave_0: left promiscuous mode [ 271.328463][ T68] hsr_slave_1: left promiscuous mode [ 271.329626][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.329654][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.358400][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.358429][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.368697][ T7137] netlink: 340 bytes leftover after parsing attributes in process `syz.9.283'. [ 271.368913][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.9.283'. [ 272.695543][ T68] hsr_slave_0: left promiscuous mode [ 272.717576][ T68] hsr_slave_1: left promiscuous mode [ 272.718336][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.747891][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.870403][ T68] veth1_macvtap: left promiscuous mode [ 272.870464][ T68] veth0_macvtap: left promiscuous mode [ 272.870571][ T68] veth1_vlan: left promiscuous mode [ 272.870653][ T68] veth0_vlan: left promiscuous mode [ 272.955597][ T68] veth1_vlan: left promiscuous mode [ 272.955772][ T68] veth0_vlan: left promiscuous mode [ 275.314997][ T68] team0 (unregistering): Port device team_slave_1 removed [ 275.524547][ T68] team0 (unregistering): Port device team_slave_0 removed [ 278.894083][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.899163][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.932452][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.936114][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.937175][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.353309][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.374411][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.378303][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.379788][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.380935][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.392814][ T68] team0 (unregistering): Port device team_slave_1 removed [ 279.652612][ T68] team0 (unregistering): Port device team_slave_0 removed [ 280.981817][ T5809] Bluetooth: hci5: command tx timeout [ 281.474458][ T5809] Bluetooth: hci6: command tx timeout [ 282.192839][ T7152] overlayfs: failed to clone upperpath [ 282.213940][ T7152] netlink: 372 bytes leftover after parsing attributes in process `syz.9.285'. [ 283.063516][ T5809] Bluetooth: hci5: command tx timeout [ 283.540095][ T5809] Bluetooth: hci6: command tx timeout [ 283.565063][ T7157] netlink: 1624 bytes leftover after parsing attributes in process `syz.9.287'. [ 284.019345][ T6990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 285.026009][ T6990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 285.139232][ T5809] Bluetooth: hci5: command tx timeout [ 285.260960][ T6990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.208247][ T5809] Bluetooth: hci6: command tx timeout [ 286.304581][ T6990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.399555][ T7173] overlayfs: failed to clone upperpath [ 286.471013][ T7174] netlink: 372 bytes leftover after parsing attributes in process `syz.9.292'. [ 286.814407][ T37] audit: type=1326 audit(6059978173.064:5): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 286.815225][ T37] audit: type=1326 audit(6059978173.064:6): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 286.815279][ T37] audit: type=1326 audit(6059978173.074:7): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 286.815709][ T37] audit: type=1326 audit(6059978173.074:8): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 286.816493][ T37] audit: type=1326 audit(6059978173.074:9): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 286.817489][ T37] audit: type=1326 audit(6059978173.074:10): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 286.817915][ T37] audit: type=1326 audit(6059978173.084:11): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 287.222208][ T5809] Bluetooth: hci5: command tx timeout [ 287.357796][ T37] audit: type=1326 audit(6059978173.084:12): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 287.398776][ T37] audit: type=1326 audit(6059978173.084:13): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98a024df90 code=0x7ffc0000 [ 287.399238][ T37] audit: type=1326 audit(6059978173.094:14): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.9.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 288.129826][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 289.131463][ T5809] Bluetooth: hci6: command tx timeout [ 289.316302][ T7148] chnl_net:caif_netlink_parms(): no params data found [ 289.350544][ T7199] 9p: Bad value for 'wfdno' [ 290.531483][ T7206] overlayfs: failed to clone upperpath [ 290.573058][ T7206] netlink: 372 bytes leftover after parsing attributes in process `syz.9.299'. [ 291.000528][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.002507][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.002779][ T7144] bridge_slave_0: entered allmulticast mode [ 291.005735][ T7144] bridge_slave_0: entered promiscuous mode [ 291.152251][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.152398][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.152607][ T7144] bridge_slave_1: entered allmulticast mode [ 291.161788][ T7144] bridge_slave_1: entered promiscuous mode [ 291.358976][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.359195][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.359463][ T7148] bridge_slave_0: entered allmulticast mode [ 291.426223][ T7148] bridge_slave_0: entered promiscuous mode [ 291.594539][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.594674][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.595033][ T7148] bridge_slave_1: entered allmulticast mode [ 291.598152][ T7148] bridge_slave_1: entered promiscuous mode [ 291.709025][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.874986][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.091994][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.116918][ T37] kauditd_printk_skb: 77 callbacks suppressed [ 292.116940][ T37] audit: type=1326 audit(6059978178.416:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.9.303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x0 [ 292.590597][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.594012][ T7039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.635915][ T7144] team0: Port device team_slave_0 added [ 292.899856][ T7039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 292.921388][ T7144] team0: Port device team_slave_1 added [ 293.248778][ T7039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 293.303798][ T5809] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 293.303959][ T5809] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 293.389996][ T7148] team0: Port device team_slave_0 added [ 293.392621][ T7039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 293.733172][ T7148] team0: Port device team_slave_1 added [ 293.749247][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.749262][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.749280][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.284662][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.284699][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.284718][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.470864][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.470884][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.470915][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.635657][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.635677][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.635710][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.920382][ T7144] hsr_slave_0: entered promiscuous mode [ 294.921555][ T7144] hsr_slave_1: entered promiscuous mode [ 294.922170][ T7144] debugfs: 'hsr0' already exists in 'hsr' [ 294.922196][ T7144] Cannot create hsr debugfs directory [ 295.195158][ T7148] hsr_slave_0: entered promiscuous mode [ 295.196136][ T7148] hsr_slave_1: entered promiscuous mode [ 295.196785][ T7148] debugfs: 'hsr0' already exists in 'hsr' [ 295.196802][ T7148] Cannot create hsr debugfs directory [ 295.943255][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.744296][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.005802][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.006542][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.261427][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.261623][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.461455][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.695451][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.730739][ T68] bridge_slave_1: left allmulticast mode [ 298.730771][ T68] bridge_slave_1: left promiscuous mode [ 298.731022][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.824678][ T68] bridge_slave_0: left allmulticast mode [ 298.824711][ T68] bridge_slave_0: left promiscuous mode [ 298.824985][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.925059][ T68] bridge_slave_1: left allmulticast mode [ 298.925085][ T68] bridge_slave_1: left promiscuous mode [ 298.925299][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.014375][ T68] bridge_slave_0: left allmulticast mode [ 299.014410][ T68] bridge_slave_0: left promiscuous mode [ 299.014695][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.802230][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.862801][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.883761][ T68] bond0 (unregistering): Released all slaves [ 302.381343][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.451946][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.472869][ T68] bond0 (unregistering): Released all slaves [ 302.749025][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.760536][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.803646][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.803800][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.200533][ T68] hsr_slave_0: left promiscuous mode [ 303.240341][ T68] hsr_slave_1: left promiscuous mode [ 303.243167][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.262405][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.420043][ T68] hsr_slave_0: left promiscuous mode [ 303.475765][ T68] hsr_slave_1: left promiscuous mode [ 303.476857][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.525539][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.695683][ T5809] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 304.695716][ T5809] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 304.831941][ T68] team0 (unregistering): Port device team_slave_1 removed [ 305.100332][ T68] team0 (unregistering): Port device team_slave_0 removed [ 306.024125][ T7290] capability: warning: `syz.9.321' uses 32-bit capabilities (legacy support in use) [ 307.454468][ T5807] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 307.454492][ T5807] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 309.219815][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 309.977777][ T68] team0 (unregistering): Port device team_slave_1 removed [ 310.228883][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.9.325'. [ 310.228921][ T7306] netlink: 'syz.9.325': attribute type 5 has an invalid length. [ 310.228937][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.9.325'. [ 310.290155][ T68] team0 (unregistering): Port device team_slave_0 removed [ 312.585478][ T7306] geneve2: entered promiscuous mode [ 312.585506][ T7306] geneve2: entered allmulticast mode [ 312.780999][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.392945][ T37] audit: type=1326 audit(6059978199.447:93): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 313.393212][ T37] audit: type=1326 audit(6059978199.447:94): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 313.393412][ T37] audit: type=1326 audit(6059978199.457:95): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 313.393643][ T37] audit: type=1326 audit(6059978199.457:96): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 313.393939][ T37] audit: type=1326 audit(6059978199.457:97): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 313.393989][ T37] audit: type=1326 audit(6059978199.457:98): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 313.394211][ T37] audit: type=1326 audit(6059978199.457:99): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 313.394360][ T37] audit: type=1326 audit(6059978199.457:100): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 313.394561][ T37] audit: type=1326 audit(6059978199.467:101): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98a024df90 code=0x7ffc0000 [ 313.394763][ T37] audit: type=1326 audit(6059978199.477:102): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7310 comm="syz.9.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 314.291876][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.306224][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.324793][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.326277][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.331006][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.749869][ T7330] netlink: 14 bytes leftover after parsing attributes in process `syz.9.330'. [ 315.808643][ T7330] hsr_slave_0: left promiscuous mode [ 315.875119][ T7330] hsr_slave_1: left promiscuous mode [ 316.404488][ T5807] Bluetooth: hci2: command tx timeout [ 316.880888][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.885258][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.886684][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.888254][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.889196][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.108921][ T7315] chnl_net:caif_netlink_parms(): no params data found [ 318.110100][ T7346] netlink: 'syz.9.333': attribute type 1 has an invalid length. [ 318.110278][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.9.333'. [ 318.336298][ T7144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 318.793671][ T37] kauditd_printk_skb: 57 callbacks suppressed [ 318.793738][ T37] audit: type=1326 audit(6059978204.729:160): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 318.793956][ T37] audit: type=1326 audit(6059978204.729:161): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 318.794172][ T37] audit: type=1326 audit(6059978204.739:162): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 318.794380][ T37] audit: type=1326 audit(6059978204.739:163): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 318.794632][ T37] audit: type=1326 audit(6059978204.739:164): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 318.794681][ T37] audit: type=1326 audit(6059978204.739:165): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 318.794915][ T37] audit: type=1326 audit(6059978204.749:166): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 318.795118][ T37] audit: type=1326 audit(6059978204.749:167): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 318.795344][ T37] audit: type=1326 audit(6059978204.769:168): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98a024df90 code=0x7ffc0000 [ 318.795665][ T37] audit: type=1326 audit(6059978204.769:169): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 319.065719][ T5809] Bluetooth: hci0: command tx timeout [ 319.416320][ T5809] Bluetooth: hci2: command tx timeout [ 319.521133][ T7144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 320.764405][ T7144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.781675][ T5807] Bluetooth: hci2: command tx timeout [ 321.781770][ T5809] Bluetooth: hci0: command tx timeout [ 321.940989][ T7144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.398382][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.398625][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.398806][ T7315] bridge_slave_0: entered allmulticast mode [ 322.403186][ T7315] bridge_slave_0: entered promiscuous mode [ 322.451546][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.451719][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.451964][ T7315] bridge_slave_1: entered allmulticast mode [ 322.453933][ T7315] bridge_slave_1: entered promiscuous mode [ 322.491155][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.494006][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.035608][ T7315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.056964][ T7148] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 323.344402][ T7315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.345490][ T7148] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 323.618456][ T7148] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 323.840217][ T5807] Bluetooth: hci2: command tx timeout [ 323.840271][ T5809] Bluetooth: hci0: command tx timeout [ 324.033837][ T7336] chnl_net:caif_netlink_parms(): no params data found [ 324.054785][ T7148] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.111763][ T7315] team0: Port device team_slave_0 added [ 324.137909][ T7315] team0: Port device team_slave_1 added [ 324.463960][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.463982][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.464012][ T7315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.586479][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.586501][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.586533][ T7315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.180117][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.182143][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.182305][ T7336] bridge_slave_0: entered allmulticast mode [ 325.187770][ T7336] bridge_slave_0: entered promiscuous mode [ 325.312963][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.313063][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.313233][ T7336] bridge_slave_1: entered allmulticast mode [ 325.314851][ T7336] bridge_slave_1: entered promiscuous mode [ 325.704031][ T7315] hsr_slave_0: entered promiscuous mode [ 325.705106][ T7315] hsr_slave_1: entered promiscuous mode [ 325.825158][ T7336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.919193][ T5809] Bluetooth: hci0: command tx timeout [ 326.016295][ T7336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.532700][ T7336] team0: Port device team_slave_0 added [ 326.554250][ T7336] team0: Port device team_slave_1 added [ 326.597392][ T7424] netlink: 72 bytes leftover after parsing attributes in process `syz.9.352'. [ 327.240661][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.240675][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.240693][ T7336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.256958][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.256972][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.256990][ T7336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.686610][ T7336] hsr_slave_0: entered promiscuous mode [ 327.698678][ T7336] hsr_slave_1: entered promiscuous mode [ 327.699776][ T7336] debugfs: 'hsr0' already exists in 'hsr' [ 327.699814][ T7336] Cannot create hsr debugfs directory [ 328.026170][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.689914][ T68] bridge_slave_1: left allmulticast mode [ 328.689946][ T68] bridge_slave_1: left promiscuous mode [ 328.690204][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.748437][ T68] bridge_slave_0: left allmulticast mode [ 328.748462][ T68] bridge_slave_0: left promiscuous mode [ 328.748650][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.851929][ T68] bridge_slave_1: left allmulticast mode [ 328.851954][ T68] bridge_slave_1: left promiscuous mode [ 328.852118][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.930053][ T68] bridge_slave_0: left allmulticast mode [ 328.930086][ T68] bridge_slave_0: left promiscuous mode [ 328.930256][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.728042][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.809754][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.850667][ T68] bond0 (unregistering): Released all slaves [ 332.546479][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.611407][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.627938][ T68] bond0 (unregistering): Released all slaves [ 333.023862][ T7449] fuse: Bad value for 'fd' [ 333.043632][ T7144] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.117495][ T7451] netlink: zone id is out of range [ 333.117508][ T7451] netlink: zone id is out of range [ 333.117587][ T7451] netlink: zone id is out of range [ 333.117592][ T7451] netlink: zone id is out of range [ 333.117597][ T7451] netlink: zone id is out of range [ 333.117603][ T7451] netlink: zone id is out of range [ 333.117607][ T7451] netlink: zone id is out of range [ 333.117612][ T7451] netlink: zone id is out of range [ 333.117616][ T7451] netlink: zone id is out of range [ 333.117621][ T7451] netlink: zone id is out of range [ 333.372019][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.410397][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.410911][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.525149][ T68] hsr_slave_0: left promiscuous mode [ 333.568492][ T68] hsr_slave_1: left promiscuous mode [ 333.569662][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.608535][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.744888][ T68] hsr_slave_0: left promiscuous mode [ 333.765355][ T68] hsr_slave_1: left promiscuous mode [ 333.768000][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.822770][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.534554][ T68] team0 (unregistering): Port device team_slave_1 removed [ 335.786394][ T68] team0 (unregistering): Port device team_slave_0 removed [ 338.773952][ T68] team0 (unregistering): Port device team_slave_1 removed [ 339.047070][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.058865][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.063785][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.065498][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.066660][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.099105][ T68] team0 (unregistering): Port device team_slave_0 removed [ 339.578084][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.591036][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.630843][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.642794][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.669279][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.111276][ T5807] Bluetooth: hci1: command tx timeout [ 341.661519][ T7460] net_ratelimit: 6 callbacks suppressed [ 341.661527][ T7460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.755012][ T5807] Bluetooth: hci4: command tx timeout [ 343.190204][ T5807] Bluetooth: hci1: command tx timeout [ 343.830019][ T5807] Bluetooth: hci4: command tx timeout [ 344.605529][ T7471] chnl_net:caif_netlink_parms(): no params data found [ 344.739477][ T7465] chnl_net:caif_netlink_parms(): no params data found [ 345.269129][ T5807] Bluetooth: hci1: command tx timeout [ 345.659297][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.659514][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.659742][ T7471] bridge_slave_0: entered allmulticast mode [ 345.662450][ T7471] bridge_slave_0: entered promiscuous mode [ 345.776901][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 345.776924][ T37] audit: type=1326 audit(6059978232.093:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 345.777129][ T37] audit: type=1326 audit(6059978232.093:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 345.777770][ T37] audit: type=1326 audit(6059978232.093:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 345.778606][ T37] audit: type=1326 audit(6059978232.093:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 345.882773][ T37] audit: type=1326 audit(6059978232.203:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 345.886718][ T37] audit: type=1326 audit(6059978232.203:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 345.896381][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.896536][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.896777][ T7471] bridge_slave_1: entered allmulticast mode [ 345.908809][ T5807] Bluetooth: hci4: command tx timeout [ 345.963077][ T7511] fuse: Bad value for 'user_id' [ 345.963097][ T7511] fuse: Bad value for 'user_id' [ 345.964041][ T37] audit: type=1326 audit(6059978232.243:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 345.964095][ T37] audit: type=1326 audit(6059978232.283:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 345.964125][ T37] audit: type=1326 audit(6059978232.283:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 345.992026][ T7471] bridge_slave_1: entered promiscuous mode [ 346.061015][ T37] audit: type=1326 audit(6059978232.383:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.9.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 346.563925][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.564041][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.564215][ T7465] bridge_slave_0: entered allmulticast mode [ 346.565794][ T7465] bridge_slave_0: entered promiscuous mode [ 346.575040][ T7315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 346.723264][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.723723][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.723897][ T7465] bridge_slave_1: entered allmulticast mode [ 346.725480][ T7465] bridge_slave_1: entered promiscuous mode [ 347.019137][ T7315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 347.091466][ T7471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.214785][ T7315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 347.248566][ T7471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.343366][ T7315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.350404][ T5807] Bluetooth: hci1: command tx timeout [ 347.987895][ T5807] Bluetooth: hci4: command tx timeout [ 348.146821][ T7465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.502649][ T7465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.530623][ T7471] team0: Port device team_slave_0 added [ 349.281243][ T7471] team0: Port device team_slave_1 added [ 349.776233][ T7465] team0: Port device team_slave_0 added [ 350.001730][ T7465] team0: Port device team_slave_1 added [ 350.020099][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.020117][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.020145][ T7471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.152672][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.152693][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.152723][ T7471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.154730][ T7336] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 350.373944][ T7336] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 350.430510][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.430532][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.430561][ T7465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.504334][ T7336] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 350.553618][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.553638][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.553669][ T7465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.669695][ T7336] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.109037][ T7471] hsr_slave_0: entered promiscuous mode [ 351.110667][ T7471] hsr_slave_1: entered promiscuous mode [ 351.112252][ T7471] debugfs: 'hsr0' already exists in 'hsr' [ 351.112270][ T7471] Cannot create hsr debugfs directory [ 351.677026][ T7465] hsr_slave_0: entered promiscuous mode [ 351.679233][ T7465] hsr_slave_1: entered promiscuous mode [ 351.680126][ T7465] debugfs: 'hsr0' already exists in 'hsr' [ 351.680144][ T7465] Cannot create hsr debugfs directory [ 355.251245][ T7315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.549560][ T7336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.550015][ T68] bridge_slave_1: left allmulticast mode [ 355.550042][ T68] bridge_slave_1: left promiscuous mode [ 355.550320][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.615905][ T68] bridge_slave_0: left allmulticast mode [ 355.615943][ T68] bridge_slave_0: left promiscuous mode [ 355.616300][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.676879][ T68] bridge_slave_1: left allmulticast mode [ 355.676904][ T68] bridge_slave_1: left promiscuous mode [ 355.677066][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.766090][ T68] bridge_slave_0: left allmulticast mode [ 355.766115][ T68] bridge_slave_0: left promiscuous mode [ 355.766282][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.794840][ T7655] process 'syz.9.374' launched '/dev/fd/5' with NULL argv: empty string added [ 356.856090][ T7662] tipc: Can't bind to reserved service type 2 [ 356.860854][ T7662] netlink: 277 bytes leftover after parsing attributes in process `syz.9.375'. [ 358.549915][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.634538][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.674532][ T68] bond0 (unregistering): Released all slaves [ 360.774044][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.872355][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.934972][ T68] bond0 (unregistering): Released all slaves [ 360.988921][ T7315] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.053884][ T7668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.308163][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.308370][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.338706][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.338996][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.528532][ T7336] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.671125][ T68] hsr_slave_0: left promiscuous mode [ 361.691062][ T68] hsr_slave_1: left promiscuous mode [ 361.691933][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.731757][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.910977][ T68] hsr_slave_0: left promiscuous mode [ 361.950970][ T68] hsr_slave_1: left promiscuous mode [ 361.951664][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.974531][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.693036][ T68] team0 (unregistering): Port device team_slave_1 removed [ 362.851251][ T68] team0 (unregistering): Port device team_slave_0 removed [ 363.758282][ T7689] mmap: syz.9.383 (7689) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 364.310201][ T68] team0 (unregistering): Port device team_slave_1 removed [ 364.530244][ T68] team0 (unregistering): Port device team_slave_0 removed [ 366.757442][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.759845][ T7314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.922071][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.922307][ T7314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.814451][ T7471] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 367.933035][ T7471] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 368.067761][ T7471] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 368.107801][ T7471] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 368.192393][ T7315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.353321][ T7336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.501931][ T7465] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.580360][ T7465] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.642540][ T7465] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.716183][ T7465] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.436708][ T7315] veth0_vlan: entered promiscuous mode [ 369.535068][ T7315] veth1_vlan: entered promiscuous mode [ 369.599598][ T7471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.752626][ T7336] veth0_vlan: entered promiscuous mode [ 369.806759][ T7465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.904035][ T7471] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.923963][ T7336] veth1_vlan: entered promiscuous mode [ 369.980868][ T7315] veth0_macvtap: entered promiscuous mode [ 370.010179][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.014243][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.062044][ T7465] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.077853][ T7315] veth1_macvtap: entered promiscuous mode [ 370.159372][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.159541][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.219598][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.219699][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.275712][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.276099][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.324632][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.350445][ T7336] veth0_macvtap: entered promiscuous mode [ 370.354765][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.413380][ T7336] veth1_macvtap: entered promiscuous mode [ 370.450196][ T7314] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.483139][ T7314] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.509089][ T7314] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.529206][ T7314] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.653929][ T7336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.830631][ T7336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.051574][ T1157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.128917][ T1157] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.131096][ T1157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.133660][ T1157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.159851][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.159872][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.602315][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.602339][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.903311][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.903335][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.955135][ T7465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.983278][ T7471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.471109][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.471134][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.138023][ T7807] FAULT_INJECTION: forcing a failure. [ 375.138023][ T7807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.138061][ T7807] CPU: 1 UID: 0 PID: 7807 Comm: syz.6.151 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.138087][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.138100][ T7807] Call Trace: [ 375.138109][ T7807] [ 375.138119][ T7807] dump_stack_lvl+0xe8/0x150 [ 375.138155][ T7807] should_fail_ex+0x46c/0x600 [ 375.138192][ T7807] _copy_from_user+0x2d/0xb0 [ 375.138216][ T7807] do_sys_poll+0x23d/0xed0 [ 375.138258][ T7807] ? __lock_acquire+0x6b6/0x2cf0 [ 375.138289][ T7807] ? __pfx_do_sys_poll+0x10/0x10 [ 375.138314][ T7807] ? is_bpf_text_address+0x292/0x2b0 [ 375.138341][ T7807] ? is_bpf_text_address+0x26/0x2b0 [ 375.138368][ T7807] ? do_sys_openat2+0x15a/0x200 [ 375.138486][ T7807] ? set_user_sigmask+0xc1/0x250 [ 375.138512][ T7807] ? __pfx_set_user_sigmask+0x10/0x10 [ 375.138547][ T7807] __se_sys_ppoll+0x1ff/0x260 [ 375.138571][ T7807] ? __pfx___se_sys_ppoll+0x10/0x10 [ 375.138591][ T7807] ? __pfx_ksys_write+0x10/0x10 [ 375.138626][ T7807] ? __x64_sys_ppoll+0x20/0xc0 [ 375.138649][ T7807] do_syscall_64+0xec/0xf80 [ 375.138672][ T7807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.138693][ T7807] ? trace_irq_disable+0x37/0x100 [ 375.138715][ T7807] ? clear_bhb_loop+0x60/0xb0 [ 375.138741][ T7807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.138763][ T7807] RIP: 0033:0x7f314bb1f749 [ 375.138782][ T7807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.138801][ T7807] RSP: 002b:00007f3149d86038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 375.138826][ T7807] RAX: ffffffffffffffda RBX: 00007f314bd75fa0 RCX: 00007f314bb1f749 [ 375.138842][ T7807] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 375.138857][ T7807] RBP: 00007f3149d86090 R08: 0000000000000000 R09: 0000000000000000 [ 375.138872][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.138884][ T7807] R13: 00007f314bd76038 R14: 00007f314bd75fa0 R15: 00007ffc81bdecb8 [ 375.138916][ T7807] [ 375.867338][ T7465] veth0_vlan: entered promiscuous mode [ 375.952800][ T7471] veth0_vlan: entered promiscuous mode [ 376.019734][ T7465] veth1_vlan: entered promiscuous mode [ 376.083148][ T7471] veth1_vlan: entered promiscuous mode [ 376.317790][ T7465] veth0_macvtap: entered promiscuous mode [ 376.371805][ T7823] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 376.384244][ T7465] veth1_macvtap: entered promiscuous mode [ 376.385874][ T7471] veth0_macvtap: entered promiscuous mode [ 376.418610][ T7471] veth1_macvtap: entered promiscuous mode [ 376.507130][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.529071][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.549836][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.654905][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.702564][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.721742][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.952276][ T68] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.156713][ T7314] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.679976][ T7314] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.766361][ T7314] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.776330][ T7314] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.776530][ T7314] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.016369][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.016395][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.429305][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.429332][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.438090][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.438115][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.776333][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.776352][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.898846][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.898929][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.619625][ T7921] syz.8.433 (7921) used greatest stack depth: 18488 bytes left [ 386.085212][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 386.085228][ T37] audit: type=1326 audit(6059978272.423:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7963 comm="syz.6.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314bb1f749 code=0x7ffc0000 [ 386.085263][ T37] audit: type=1326 audit(6059978272.423:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7963 comm="syz.6.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f314bb1f749 code=0x7ffc0000 [ 386.085290][ T37] audit: type=1326 audit(6059978272.423:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7963 comm="syz.6.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314bb1f749 code=0x7ffc0000 [ 386.085316][ T37] audit: type=1326 audit(6059978272.423:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7963 comm="syz.6.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314bb1f749 code=0x7ffc0000 [ 390.078308][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.464'. [ 390.160194][ T8058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.464'. [ 390.509612][ T8054] bond1 (unregistering): Released all slaves [ 391.268289][ T8058] team_slave_0: entered promiscuous mode [ 391.268338][ T8058] team_slave_0: entered allmulticast mode [ 391.337469][ T8064] syz.8.466 (8064) used greatest stack depth: 18032 bytes left [ 394.135740][ T8123] syz.9.479 (8123) used greatest stack depth: 17992 bytes left [ 395.355295][ T5889] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 395.563962][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 395.584488][ T5889] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 395.584524][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.657417][ T5889] pvrusb2: Hardware description: Terratec Grabster AV400 [ 395.657440][ T5889] pvrusb2: ********** [ 395.657447][ T5889] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 395.657461][ T5889] pvrusb2: Important functionality might not be entirely working. [ 395.657471][ T5889] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 395.657484][ T5889] pvrusb2: ********** [ 395.926365][ T5889] usb 9-1: USB disconnect, device number 2 [ 395.967339][ T2368] pvrusb2: Invalid write control endpoint [ 396.661458][ T2368] pvrusb2: Invalid write control endpoint [ 396.661477][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 396.661488][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 396.661497][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 396.661508][ T2368] pvrusb2: Device being rendered inoperable [ 396.677594][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 396.678135][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 396.710638][ T2368] pvrusb2: Attached sub-driver cx25840 [ 396.710657][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 396.710669][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 402.176311][ T8289] netlink: 277 bytes leftover after parsing attributes in process `syz.8.525'. [ 405.310685][ T8338] netlink: 277 bytes leftover after parsing attributes in process `syz.5.537'. [ 406.546167][ T8369] netlink: 277 bytes leftover after parsing attributes in process `syz.6.550'. [ 408.863532][ T8422] netlink: 68 bytes leftover after parsing attributes in process `syz.5.565'. [ 413.312447][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.6.583'. [ 417.885858][ T37] audit: type=1326 audit(6059978304.239:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8570 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314bb1f749 code=0x7ffc0000 [ 417.892668][ T37] audit: type=1326 audit(6059978304.239:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8570 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f314bb1f749 code=0x7ffc0000 [ 417.893997][ T37] audit: type=1326 audit(6059978304.239:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8570 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314bb1f749 code=0x7ffc0000 [ 417.894040][ T37] audit: type=1326 audit(6059978304.239:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8570 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314bb1f749 code=0x7ffc0000 [ 418.484684][ T37] audit: type=1326 audit(6059978304.839:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9d5df749 code=0x7ffc0000 [ 418.485889][ T37] audit: type=1326 audit(6059978304.839:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee9d5df749 code=0x7ffc0000 [ 418.486112][ T37] audit: type=1326 audit(6059978304.839:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9d5df749 code=0x7ffc0000 [ 418.486291][ T37] audit: type=1326 audit(6059978304.839:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9d5df749 code=0x7ffc0000 [ 418.486851][ T37] audit: type=1326 audit(6059978304.839:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fee9d5df749 code=0x7ffc0000 [ 418.488193][ T37] audit: type=1326 audit(6059978304.839:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9d5df749 code=0x7ffc0000 [ 419.166929][ T8590] netlink: 132 bytes leftover after parsing attributes in process `syz.5.606'. [ 420.944548][ T8609] netlink: 'syz.6.609': attribute type 2 has an invalid length. [ 423.619949][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 423.619971][ T37] audit: type=1326 audit(6059978309.972:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.9.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 423.622465][ T37] audit: type=1326 audit(6059978309.972:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.9.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 423.622509][ T37] audit: type=1326 audit(6059978309.982:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.9.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 423.622536][ T37] audit: type=1326 audit(6059978309.982:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.9.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a024f749 code=0x7ffc0000 [ 426.005032][ T8676] bridge0: entered promiscuous mode [ 426.024805][ T8676] vlan2: entered promiscuous mode [ 437.143220][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 442.266816][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 445.185221][ T37] audit: type=1326 audit(6059978331.553:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.8.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c981cf749 code=0x7ffc0000 [ 445.201367][ T37] audit: type=1326 audit(6059978331.573:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.8.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5c981cf749 code=0x7ffc0000 [ 445.202083][ T37] audit: type=1326 audit(6059978331.573:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.8.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c981cf749 code=0x7ffc0000 [ 445.229647][ T37] audit: type=1326 audit(6059978331.603:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.8.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c981cf749 code=0x7ffc0000 [ 445.322198][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.322247][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.053731][ T9023] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 447.056760][ T9023] netlink: 'syz.7.705': attribute type 6 has an invalid length. [ 447.306014][ T9029] netlink: 60 bytes leftover after parsing attributes in process `syz.8.708'. [ 447.306319][ T9029] netlink: 60 bytes leftover after parsing attributes in process `syz.8.708'. [ 449.218747][ T9071] netlink: 60 bytes leftover after parsing attributes in process `syz.6.721'. [ 449.218997][ T9071] netlink: 60 bytes leftover after parsing attributes in process `syz.6.721'. [ 451.686478][ T9111] netlink: 60 bytes leftover after parsing attributes in process `syz.7.735'. [ 451.686751][ T9111] netlink: 60 bytes leftover after parsing attributes in process `syz.7.735'. [ 453.321526][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.7.744'. [ 453.398960][ T9146] netlink: 60 bytes leftover after parsing attributes in process `syz.5.746'. [ 453.399100][ T9146] netlink: 60 bytes leftover after parsing attributes in process `syz.5.746'. [ 456.653618][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.6.758'. [ 456.795650][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.8.759'. [ 456.795922][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.8.759'. [ 462.395012][ T9278] netlink: 277 bytes leftover after parsing attributes in process `syz.5.776'. [ 462.800296][ T9248] Bluetooth: hci1: command 0x0406 tx timeout [ 462.812600][ T9248] Bluetooth: hci4: command 0x0406 tx timeout [ 465.357409][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.782'. [ 465.531088][ T9312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.782'. [ 467.054955][ T9337] ip6gretap0: entered promiscuous mode [ 467.055287][ T9337] vlan2: entered promiscuous mode [ 468.803728][ T9367] netlink: 277 bytes leftover after parsing attributes in process `syz.7.795'. [ 474.761514][ T9448] netlink: 277 bytes leftover after parsing attributes in process `syz.7.814'. [ 477.594861][ T9467] netlink: 68 bytes leftover after parsing attributes in process `syz.7.819'. [ 478.141562][ T9480] syzkaller1: entered promiscuous mode [ 478.141592][ T9480] syzkaller1: entered allmulticast mode [ 480.247099][ T9528] netlink: 277 bytes leftover after parsing attributes in process `syz.9.829'. [ 483.010680][ T9551] netlink: 173 bytes leftover after parsing attributes in process `syz.6.833'. [ 484.229525][ T5967] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 484.388830][ T5967] usb 6-1: Using ep0 maxpacket: 32 [ 484.398986][ T5967] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 484.416069][ T5967] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 484.416104][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 484.416126][ T5967] usb 6-1: Product: syz [ 484.416141][ T5967] usb 6-1: Manufacturer: syz [ 484.416156][ T5967] usb 6-1: SerialNumber: syz [ 484.457570][ T5967] usb 6-1: config 0 descriptor?? [ 484.458585][ T9570] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 484.671071][ T9584] vlan2: entered promiscuous mode [ 484.728272][ T5967] usb 6-1: USB disconnect, device number 2 [ 485.155780][ T9590] netlink: 173 bytes leftover after parsing attributes in process `syz.8.845'. [ 485.614312][ T9603] netlink: 277 bytes leftover after parsing attributes in process `syz.9.846'. [ 486.594493][ T31] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 486.758258][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 486.761353][ T31] usb 9-1: config 5 has an invalid interface number: 67 but max is 0 [ 486.761373][ T31] usb 9-1: config 5 has no interface number 0 [ 486.761404][ T31] usb 9-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=37.04 [ 486.761419][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.767308][ T31] quatech2 9-1:5.67: Quatech 2nd gen USB to Serial Driver converter detected [ 486.981368][ T31] usb 9-1: qt2_attach - failed to power on unit: -71 [ 486.981601][ T31] quatech2 9-1:5.67: probe with driver quatech2 failed with error -71 [ 486.986714][ T31] usb 9-1: USB disconnect, device number 3 [ 488.569285][ T9638] netlink: 173 bytes leftover after parsing attributes in process `syz.9.857'. [ 488.887467][ T5955] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 489.041154][ T5955] usb 7-1: Using ep0 maxpacket: 32 [ 489.045440][ T5955] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 489.063546][ T5955] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 489.063577][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 489.063600][ T5955] usb 7-1: Product: syz [ 489.063616][ T5955] usb 7-1: Manufacturer: syz [ 489.063631][ T5955] usb 7-1: SerialNumber: syz [ 489.115977][ T5955] usb 7-1: config 0 descriptor?? [ 489.117273][ T9637] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 489.383259][ T806] usb 7-1: USB disconnect, device number 2 [ 491.351605][ T9681] netlink: 277 bytes leftover after parsing attributes in process `syz.8.867'. [ 491.962583][ T9686] netlink: 173 bytes leftover after parsing attributes in process `syz.6.869'. [ 495.100557][ T9740] netlink: 68 bytes leftover after parsing attributes in process `syz.8.884'. [ 497.002592][ T9781] netlink: 277 bytes leftover after parsing attributes in process `syz.5.886'. [ 500.280712][ T9816] netlink: 68 bytes leftover after parsing attributes in process `syz.8.898'. [ 500.713963][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.7.900'. [ 501.421365][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.902'. [ 503.553572][ T9878] ip6gretap0: entered promiscuous mode [ 503.553696][ T9878] vlan2: entered promiscuous mode [ 504.542215][ T9896] netlink: 68 bytes leftover after parsing attributes in process `syz.7.912'. [ 505.461563][ T44] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 505.613858][ T44] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 505.613894][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.613916][ T44] usb 6-1: Product: syz [ 505.613940][ T44] usb 6-1: Manufacturer: syz [ 505.613956][ T44] usb 6-1: SerialNumber: syz [ 505.677035][ T44] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 505.931405][ T31] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 506.832183][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.832269][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 612.195321][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 612.195344][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9936/4:b..l P9940/1:b..l P9935/1:b..l P1341/2:b..l P9937/1:b..l [ 612.195455][ C1] rcu: (detected by 1, t=10502 jiffies, g=56401, q=1026 ncpus=2) [ 612.195469][ C1] task:cmp state:R running task stack:22784 pid:9937 tgid:9937 ppid:9886 task_flags:0x400000 flags:0x00080000 [ 612.195505][ C1] Call Trace: [ 612.195510][ C1] [ 612.195518][ C1] __schedule+0x145f/0x5070 [ 612.195548][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 612.195566][ C1] ? kmem_cache_alloc_noprof+0x18d/0x6c0 [ 612.195581][ C1] ? security_file_alloc+0x34/0x330 [ 612.195599][ C1] ? __pfx___schedule+0x10/0x10 [ 612.195609][ C1] ? do_filp_open+0x1fa/0x410 [ 612.195628][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.195647][ C1] preempt_schedule_irq+0x4d/0xa0 [ 612.195659][ C1] irqentry_exit+0x5e3/0x670 [ 612.195676][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 612.195688][ C1] RIP: 0010:try_to_unlazy+0xa6/0x650 [ 612.195702][ C1] Code: 00 00 0f 84 a6 05 00 00 48 89 de 48 81 e6 00 02 00 00 31 ff e8 db 59 8c ff 48 81 e3 00 02 00 00 0f 85 fc 02 00 00 4d 8d 66 54 <4c> 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 3f 04 00 00 41 8b [ 612.195712][ C1] RSP: 0018:ffffc9000e41f7e8 EFLAGS: 00000246 [ 612.195722][ C1] RAX: ffffffff823358a5 RBX: 0000000000000000 RCX: ffff88802b95bc80 [ 612.195731][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.195738][ C1] RBP: 00000000fffffff6 R08: 0000000000000000 R09: 0000000000000000 [ 612.195745][ C1] R10: ffffc9000e41f740 R11: fffff52001c83ef1 R12: ffffc9000e41fc74 [ 612.195753][ C1] R13: dffffc0000000000 R14: ffffc9000e41fc20 R15: 1ffff92001c83f85 [ 612.195766][ C1] ? try_to_unlazy+0x95/0x650 [ 612.195782][ C1] ? try_to_unlazy+0x95/0x650 [ 612.195798][ C1] link_path_walk+0xadc/0x18d0 [ 612.195820][ C1] path_openat+0x2bf/0x3df0 [ 612.195852][ C1] ? __pfx_path_openat+0x10/0x10 [ 612.195867][ C1] ? kasan_save_track+0x4f/0x80 [ 612.195882][ C1] ? kasan_save_track+0x3e/0x80 [ 612.195896][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 612.195912][ C1] ? kmem_cache_alloc_noprof+0x18d/0x6c0 [ 612.195927][ C1] ? getname_flags+0xb8/0x540 [ 612.195937][ C1] ? do_sys_openat2+0xbc/0x200 [ 612.195953][ C1] ? do_raw_spin_lock+0x121/0x290 [ 612.195973][ C1] do_filp_open+0x1fa/0x410 [ 612.195989][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 612.196003][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 612.196031][ C1] ? alloc_fd+0x64f/0x6c0 [ 612.196048][ C1] do_sys_openat2+0x121/0x200 [ 612.196060][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 612.196078][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.196091][ C1] ? fput_close_sync+0x1e6/0x220 [ 612.196104][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 612.196121][ C1] __x64_sys_openat+0x138/0x170 [ 612.196137][ C1] do_syscall_64+0xec/0xf80 [ 612.196150][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.196161][ C1] ? trace_irq_disable+0x37/0x100 [ 612.196173][ C1] ? clear_bhb_loop+0x60/0xb0 [ 612.196187][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.196198][ C1] RIP: 0033:0x7f8813f440ba [ 612.196207][ C1] RSP: 002b:00007fff0823e588 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 612.196218][ C1] RAX: ffffffffffffffda RBX: 00007fff0823e600 RCX: 00007f8813f440ba [ 612.196227][ C1] RDX: 0000000000080000 RSI: 00007fff0823e600 RDI: 00000000ffffff9c [ 612.196234][ C1] RBP: 00007fff0823e5f0 R08: 00007fff0823e7f7 R09: 0000000000000000 [ 612.196242][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000018 [ 612.196249][ C1] R13: 00007f8813f18000 R14: 00007fff0823e810 R15: 0000000000000000 [ 612.196266][ C1] [ 612.196270][ C1] task:kworker/u8:10 state:R running task stack:21144 pid:1341 tgid:1341 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 612.196302][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 612.196321][ C1] Call Trace: [ 612.196324][ C1] [ 612.196331][ C1] __schedule+0x145f/0x5070 [ 612.196356][ C1] ? __pfx___schedule+0x10/0x10 [ 612.196381][ C1] preempt_schedule_irq+0x4d/0xa0 [ 612.196394][ C1] irqentry_exit+0x5e3/0x670 [ 612.196412][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 612.196424][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 612.196436][ C1] Code: 89 f7 e8 5c 46 7c 00 48 c7 c3 58 7c b4 91 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 29 9f 0d 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 c7 1e 30 09 cc e8 91 76 [ 612.196445][ C1] RSP: 0018:ffffc90004e973f8 EFLAGS: 00000286 [ 612.196454][ C1] RAX: 00000000002aaebc RBX: ffff8880b8833c58 RCX: 0000000080000001 [ 612.196462][ C1] RDX: ffffc90004e97501 RSI: ffffffff8b3f5bc0 RDI: ffffffff8b3f5b80 [ 612.196470][ C1] RBP: dffffc0000000000 R08: ffffc90004e97938 R09: 0000000000000000 [ 612.196478][ C1] R10: ffffc90004e97538 R11: fffff520009d2ea9 R12: ffffc90004e97948 [ 612.196486][ C1] R13: ffffc90004e90000 R14: ffffffff8d018dd0 R15: dffffc0000000000 [ 612.196506][ C1] ? rcu_is_watching+0x15/0xb0 [ 612.196517][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 612.196530][ C1] unwind_next_frame+0x1a6d/0x23d0 [ 612.196549][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 612.196563][ C1] ? kmalloc_reserve+0x136/0x290 [ 612.196580][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.196595][ C1] arch_stack_walk+0x11c/0x150 [ 612.196613][ C1] ? __alloc_skb+0x204/0x3a0 [ 612.196632][ C1] stack_trace_save+0x9c/0xe0 [ 612.196646][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 612.196660][ C1] ? do_raw_spin_lock+0x121/0x290 [ 612.196678][ C1] kasan_save_track+0x3e/0x80 [ 612.196692][ C1] ? kasan_save_track+0x3e/0x80 [ 612.196707][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 612.196725][ C1] ? __kmalloc_node_track_caller_noprof+0x3a2/0x810 [ 612.196742][ C1] ? kmalloc_reserve+0x136/0x290 [ 612.196778][ C1] ? __slab_alloc+0xc6/0x1f0 [ 612.196790][ C1] __kasan_kmalloc+0x93/0xb0 [ 612.196807][ C1] __kmalloc_node_track_caller_noprof+0x3a2/0x810 [ 612.196827][ C1] ? __alloc_skb+0x1dc/0x3a0 [ 612.196840][ C1] ? __alloc_skb+0x204/0x3a0 [ 612.196854][ C1] ? __alloc_skb+0x204/0x3a0 [ 612.196867][ C1] kmalloc_reserve+0x136/0x290 [ 612.196881][ C1] ? __alloc_skb+0x198/0x3a0 [ 612.196895][ C1] __alloc_skb+0x204/0x3a0 [ 612.196910][ C1] nsim_dev_trap_report_work+0x29f/0xbc0 [ 612.196937][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 612.196951][ C1] process_scheduled_works+0xad1/0x1770 [ 612.196978][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.196990][ C1] ? do_raw_spin_lock+0x121/0x290 [ 612.197010][ C1] worker_thread+0x8a0/0xda0 [ 612.197036][ C1] kthread+0x711/0x8a0 [ 612.197053][ C1] ? __pfx_worker_thread+0x10/0x10 [ 612.197066][ C1] ? __pfx_kthread+0x10/0x10 [ 612.197081][ C1] ? rt_spin_unlock+0x150/0x200 [ 612.197099][ C1] ? rt_spin_unlock+0x161/0x200 [ 612.197114][ C1] ? __pfx_kthread+0x10/0x10 [ 612.197130][ C1] ret_from_fork+0x510/0xa50 [ 612.197144][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 612.197156][ C1] ? __switch_to+0xc9e/0x1480 [ 612.197175][ C1] ? __pfx_kthread+0x10/0x10 [ 612.197191][ C1] ret_from_fork_asm+0x1a/0x30 [ 612.197216][ C1] [ 612.197221][ C1] task:syz.7.916 state:R running task stack:24888 pid:9935 tgid:9935 ppid:7465 task_flags:0x400040 flags:0x00080000 [ 612.197252][ C1] Call Trace: [ 612.197255][ C1] [ 612.197262][ C1] __schedule+0x145f/0x5070 [ 612.197278][ C1] ? place_entity+0x4b4/0x580 [ 612.197298][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 612.197317][ C1] ? __pfx___schedule+0x10/0x10 [ 612.197330][ C1] ? __pfx___calc_delta+0x10/0x10 [ 612.197350][ C1] preempt_schedule_irq+0x4d/0xa0 [ 612.197361][ C1] irqentry_exit+0x5e3/0x670 [ 612.197383][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 612.197395][ C1] RIP: 0010:unwind_next_frame+0xc7d/0x23d0 [ 612.197409][ C1] Code: 48 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 a0 15 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 b7 15 00 00 48 0f bf 02 <49> 01 c4 48 8d 5e 01 48 8b 44 24 40 0f b6 04 28 84 c0 0f 85 6f 11 [ 612.197419][ C1] RSP: 0000:ffffc9000e37ecb8 EFLAGS: 00000246 [ 612.197427][ C1] RAX: 0000000000000038 RBX: ffffffff8f75d87d RCX: ffffffff8efb3858 [ 612.197436][ C1] RDX: ffffffff8f75d87c RSI: ffffffff8f75d880 RDI: ffffffff8b3f5b80 [ 612.197444][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8d5ae940 [ 612.197451][ C1] R10: ffffc9000e37edd8 R11: ffffffff81ab9960 R12: ffffc9000e37f008 [ 612.197459][ C1] R13: ffffc9000e37edd8 R14: ffffc9000e37ed88 R15: ffffc9000e37edc0 [ 612.197470][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.197489][ C1] ? unwind_next_frame+0xd4/0x23d0 [ 612.197507][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 612.197522][ C1] ? __reset_page_owner+0x71/0x1f0 [ 612.197538][ C1] ? __reset_page_owner+0x71/0x1f0 [ 612.197555][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.197569][ C1] arch_stack_walk+0x11c/0x150 [ 612.197586][ C1] ? __reset_page_owner+0x71/0x1f0 [ 612.197604][ C1] stack_trace_save+0x9c/0xe0 [ 612.197618][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 612.197631][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 612.197651][ C1] save_stack+0xf7/0x1f0 [ 612.197668][ C1] ? __pfx_save_stack+0x10/0x10 [ 612.197683][ C1] ? page_ext_get+0x22/0x2f0 [ 612.197705][ C1] ? page_ext_put+0x97/0xc0 [ 612.197723][ C1] __reset_page_owner+0x71/0x1f0 [ 612.197743][ C1] __free_frozen_pages+0xfe1/0x1170 [ 612.197772][ C1] ? __pfx___free_frozen_pages+0x10/0x10 [ 612.197791][ C1] ? rt_spin_unlock+0x150/0x200 [ 612.197816][ C1] __put_partials+0x149/0x170 [ 612.197834][ C1] __slab_free+0x2af/0x330 [ 612.197850][ C1] ? rt_spin_unlock+0x161/0x200 [ 612.197868][ C1] ? ___cache_free+0x27/0x2f0 [ 612.197886][ C1] qlist_free_all+0x97/0x100 [ 612.197903][ C1] kasan_quarantine_reduce+0x148/0x160 [ 612.197921][ C1] __kasan_slab_alloc+0x22/0x80 [ 612.197938][ C1] ? vm_area_dup+0x2b/0x670 [ 612.197948][ C1] kmem_cache_alloc_noprof+0x18d/0x6c0 [ 612.197968][ C1] vm_area_dup+0x2b/0x670 [ 612.197981][ C1] __split_vma+0x1ad/0x9e0 [ 612.198000][ C1] ? __pfx___split_vma+0x10/0x10 [ 612.198019][ C1] ? mas_next_slot+0xc2a/0xd00 [ 612.198034][ C1] vms_gather_munmap_vmas+0x2e2/0x12f0 [ 612.198054][ C1] ? mtree_range_walk+0x6aa/0x840 [ 612.198070][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 612.198088][ C1] ? mas_find+0xa7d/0xd30 [ 612.198102][ C1] mmap_region+0x73d/0x1cf0 [ 612.198122][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 612.198139][ C1] ? __pfx_mmap_region+0x10/0x10 [ 612.198193][ C1] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 612.198210][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 612.198226][ C1] ? cap_mmap_addr+0xb0/0x100 [ 612.198243][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 612.198260][ C1] ? security_mmap_addr+0x71/0x270 [ 612.198278][ C1] ? shmem_mapping+0xd/0x50 [ 612.198291][ C1] ? memfd_check_seals_mmap+0xcb/0x210 [ 612.198306][ C1] do_mmap+0xc23/0x10c0 [ 612.198325][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 612.198337][ C1] ? __pfx_do_mmap+0x10/0x10 [ 612.198352][ C1] ? rwbase_write_lock+0x56f/0x750 [ 612.198378][ C1] vm_mmap_pgoff+0x2a9/0x4d0 [ 612.198398][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 612.198415][ C1] ? __fget_files+0x2a/0x420 [ 612.198427][ C1] ? __fget_files+0x3a6/0x420 [ 612.198438][ C1] ? __fget_files+0x2a/0x420 [ 612.198452][ C1] ksys_mmap_pgoff+0x4e9/0x720 [ 612.198468][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 612.198483][ C1] do_syscall_64+0xec/0xf80 [ 612.198494][ C1] ? rcu_is_watching+0x15/0xb0 [ 612.198504][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.198515][ C1] ? clear_bhb_loop+0x60/0xb0 [ 612.198529][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.198539][ C1] RIP: 0033:0x7f011d52f783 [ 612.198549][ C1] RSP: 002b:00007ffcc35d1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 612.198560][ C1] RAX: ffffffffffffffda RBX: 00007f011d786308 RCX: 00007f011d52f783 [ 612.198567][ C1] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f011b32b000 [ 612.198575][ C1] RBP: 00007f011d786270 R08: 00000000000000db R09: 0000000000000000 [ 612.198582][ C1] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000003 [ 612.198589][ C1] R13: 00007f011d786270 R14: 00000000000012ca R15: 0000000000000004 [ 612.198605][ C1] [ 612.198610][ C1] task:syz.7.916 state:R running task stack:25728 pid:9940 tgid:9935 ppid:7465 task_flags:0x400040 flags:0x00080000 [ 612.198641][ C1] Call Trace: [ 612.198646][ C1] [ 612.198654][ C1] __schedule+0x145f/0x5070 [ 612.198679][ C1] ? __pfx___schedule+0x10/0x10 [ 612.198696][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 612.198710][ C1] preempt_schedule_common+0x83/0xd0 [ 612.198722][ C1] preempt_schedule_thunk+0x16/0x30 [ 612.198738][ C1] try_to_wake_up+0x82b/0x12b0 [ 612.198754][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 612.198773][ C1] autoremove_wake_function+0x17/0x100 [ 612.198790][ C1] __wake_up_common_lock+0x136/0x1e0 [ 612.198808][ C1] __unix_dgram_recvmsg+0x486/0xd60 [ 612.198829][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 612.198848][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 612.198865][ C1] ? unix_dgram_recvmsg+0xb1/0xd0 [ 612.198881][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 612.198898][ C1] sock_recvmsg_nosec+0x186/0x1c0 [ 612.198913][ C1] ____sys_recvmsg+0x3ab/0x470 [ 612.198934][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 612.198957][ C1] ? import_iovec+0x74/0xa0 [ 612.198972][ C1] ___sys_recvmsg+0x1b5/0x510 [ 612.198991][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 612.199010][ C1] ? irqentry_exit+0x5e8/0x670 [ 612.199036][ C1] do_recvmmsg+0x30d/0x770 [ 612.199057][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 612.199088][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 612.199106][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 612.199129][ C1] do_syscall_64+0xec/0xf80 [ 612.199141][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.199151][ C1] ? trace_irq_disable+0x37/0x100 [ 612.199163][ C1] ? clear_bhb_loop+0x60/0xb0 [ 612.199177][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.199187][ C1] RIP: 0033:0x7f011d52f749 [ 612.199196][ C1] RSP: 002b:00007f011b76d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 612.199206][ C1] RAX: ffffffffffffffda RBX: 00007f011d786090 RCX: 00007f011d52f749 [ 612.199214][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 612.199222][ C1] RBP: 00007f011d5b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 612.199229][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 612.199236][ C1] R13: 00007f011d786128 R14: 00007f011d786090 R15: 00007ffcc35d1d48 [ 612.199253][ C1] [ 612.199257][ C1] task:syz.9.917 state:R running task stack:23936 pid:9936 tgid:9936 ppid:6715 task_flags:0x400040 flags:0x00080000 [ 612.199287][ C1] Call Trace: [ 612.199291][ C1] [ 612.199297][ C1] __schedule+0x145f/0x5070 [ 612.199322][ C1] ? __pfx___schedule+0x10/0x10 [ 612.199334][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 612.199355][ C1] preempt_schedule_irq+0x4d/0xa0 [ 612.199372][ C1] irqentry_exit+0x5e3/0x670 [ 612.199384][ C1] ? rcu_is_watching+0x15/0xb0 [ 612.199397][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 612.199409][ C1] RIP: 0010:lock_is_held_type+0x107/0x150 [ 612.199421][ C1] Code: 18 00 00 b8 ff ff ff ff 65 0f c1 05 63 82 e1 06 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 612.199430][ C1] RSP: 0000:ffffc9000e3ef8e8 EFLAGS: 00000206 [ 612.199439][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 612.199446][ C1] RDX: 0000000000000000 RSI: ffffffff8cfe08a2 RDI: ffffffff8b3f5be0 [ 612.199454][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 612.199461][ C1] R10: dffffc0000000000 R11: fffff94000259cc1 R12: 0000000000000246 [ 612.199469][ C1] R13: ffff88803913bc80 R14: ffffffff8d5ae940 R15: 0000000000000001 [ 612.199488][ C1] xas_reload+0x1a2/0x480 [ 612.199506][ C1] next_uptodate_folio+0x15f/0x5d0 [ 612.199527][ C1] filemap_map_pages+0x123f/0x1cc0 [ 612.199549][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 612.199566][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 612.199581][ C1] ? filemap_map_pages+0x182/0x1cc0 [ 612.199601][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 612.199621][ C1] ? ___pte_offset_map+0x29/0x200 [ 612.199639][ C1] ? do_pte_missing+0x14c6/0x27a0 [ 612.199650][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 612.199665][ C1] do_pte_missing+0x175b/0x27a0 [ 612.199681][ C1] ? handle_mm_fault+0xd1/0x1330 [ 612.199699][ C1] ? handle_mm_fault+0xd1/0x1330 [ 612.199713][ C1] handle_mm_fault+0xcc1/0x1330 [ 612.199733][ C1] ? handle_mm_fault+0xd1/0x1330 [ 612.199750][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 612.199765][ C1] ? lock_vma_under_rcu+0x42c/0x4a0 [ 612.199786][ C1] ? __pfx_do_futex+0x10/0x10 [ 612.199834][ C1] do_user_addr_fault+0xa7c/0x1380 [ 612.199865][ C1] ? rcu_is_watching+0x15/0xb0 [ 612.199883][ C1] ? trace_page_fault_user+0x84/0x1c0 [ 612.199908][ C1] exc_page_fault+0x71/0xd0 [ 612.199929][ C1] asm_exc_page_fault+0x26/0x30 [ 612.199948][ C1] RIP: 0033:0x7f98a012f2ed [ 612.199964][ C1] RSP: 002b:00007fff89c89810 EFLAGS: 00010202 [ 612.199980][ C1] RAX: 000000110c284000 RBX: 00007f98a0fd5720 RCX: 0000000000000007 [ 612.199992][ C1] RDX: 000000000000003a RSI: 0000000000000100 RDI: 0000000000000080 [ 612.200005][ C1] RBP: ffffffff8ad0403a R08: 00007f98a04a6038 R09: 00007f98a0492000 [ 612.200019][ C1] R10: 00007f989fcb7008 R11: 0000000000000000 R12: 0000000000000000 [ 612.200031][ C1] R13: 0000000000000000 R14: ffffffff8ad04f78 R15: 00000000000000c2 [ 612.200045][ C1] ? xa_load+0x28/0x210 [ 612.200067][ C1] ? xas_find_marked+0xf1a/0x1080 [ 612.200104][ C1] [ 612.200112][ C1] rcu: rcu_preempt kthread starved for 10278 jiffies! g56401 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 612.200137][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 612.200147][ C1] rcu: RCU grace-period kthread stack dump: [ 612.200155][ C1] task:rcu_preempt state:R running task stack:27544 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 612.200221][ C1] Call Trace: [ 612.200227][ C1] [ 612.200239][ C1] __schedule+0x145f/0x5070 [ 612.200288][ C1] ? __pfx___schedule+0x10/0x10 [ 612.200319][ C1] ? schedule+0x91/0x360 [ 612.200343][ C1] schedule+0x165/0x360 [ 612.200373][ C1] schedule_timeout+0x12b/0x270 [ 612.200393][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 612.200415][ C1] ? __pfx_process_timeout+0x10/0x10 [ 612.200442][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 612.200464][ C1] ? prepare_to_swait_event+0x341/0x380 [ 612.200494][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 612.200537][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 612.200568][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 612.200593][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 612.200619][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 612.200643][ C1] rcu_gp_kthread+0x99/0x390 [ 612.200675][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 612.200704][ C1] ? __kthread_parkme+0x7b/0x200 [ 612.200729][ C1] ? __kthread_parkme+0x1a1/0x200 [ 612.200761][ C1] kthread+0x711/0x8a0 [ 612.200789][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 612.200815][ C1] ? __pfx_kthread+0x10/0x10 [ 612.200837][ C1] ? rt_spin_unlock+0x150/0x200 [ 612.200869][ C1] ? rt_spin_unlock+0x161/0x200 [ 612.200893][ C1] ? __pfx_kthread+0x10/0x10 [ 612.200921][ C1] ret_from_fork+0x510/0xa50 [ 612.200943][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 612.200963][ C1] ? __switch_to+0xc9e/0x1480 [ 612.200997][ C1] ? __pfx_kthread+0x10/0x10 [ 612.201026][ C1] ret_from_fork_asm+0x1a/0x30 [ 612.201072][ C1] [ 612.201079][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 612.201089][ C1] Sending NMI from CPU 1 to CPUs 0: [ 612.201116][ C0] NMI backtrace for cpu 0 [ 612.201135][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.201159][ C0] Tainted: [L]=SOFTLOCKUP [ 612.201166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.201176][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 612.201193][ C0] Code: e8 fb 7a 2c 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 8d 01 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 5c 46 7c 00 48 c7 c3 58 7c b4 91 49 03 1e 48 89 [ 612.201208][ C0] RSP: 0018:ffffc90000157100 EFLAGS: 00000046 [ 612.201228][ C0] RAX: 1ffffffff1a031ba RBX: 0000000000000000 RCX: 0000000080000002 [ 612.201240][ C0] RDX: 0000000000000001 RSI: ffffffff8b3f5bc0 RDI: ffffffff8b3f5b80 [ 612.201252][ C0] RBP: ffffc90000157288 R08: 0000000000000003 R09: 0000000000000004 [ 612.201263][ C0] R10: dffffc0000000000 R11: fffff5200002ae20 R12: dffffc0000000000 [ 612.201275][ C0] R13: ffffffff8ad460d3 R14: ffffffff8d018dd0 R15: dffffc0000000000 [ 612.201288][ C0] FS: 0000000000000000(0000) GS:ffff888126cec000(0000) knlGS:0000000000000000 [ 612.201303][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.201315][ C0] CR2: 00007f1c7d52ce80 CR3: 0000000031c5e000 CR4: 00000000003526f0 [ 612.201332][ C0] Call Trace: [ 612.201338][ C0] [ 612.201345][ C0] lock_release+0x4b/0x3b0 [ 612.201370][ C0] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 612.201388][ C0] rt_mutex_slowunlock+0x493/0x8a0 [ 612.201412][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 612.201436][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 612.201462][ C0] ? rt_spin_unlock+0x161/0x200 [ 612.201485][ C0] __ieee80211_queue_skb_to_iface+0xa1/0x280 [ 612.201529][ C0] ieee80211_rx_h_mgmt+0x493/0x650 [ 612.201556][ C0] ? ieee80211_rx_h_ext+0x153/0x1f0 [ 612.201580][ C0] ieee80211_rx_handlers+0x8e98/0xba30 [ 612.201611][ C0] ? ieee80211_rx_handlers+0xef/0xba30 [ 612.201640][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 612.201663][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 612.201693][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 612.201719][ C0] ieee80211_prepare_and_rx_handle+0x257f/0x6700 [ 612.201754][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 612.201780][ C0] ? sta_info_get_bss+0x58/0x390 [ 612.201807][ C0] ? ieee80211_rx_data_set_sta+0x20f/0x420 [ 612.201830][ C0] ? ieee80211_rx_for_interface+0x545/0x630 [ 612.201855][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 612.201874][ C0] ieee80211_rx_list+0x2605/0x2fd0 [ 612.201904][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 612.201931][ C0] ? do_raw_spin_lock+0x121/0x290 [ 612.201954][ C0] ? ieee80211_rx_napi+0xca/0x3d0 [ 612.201976][ C0] ? ieee80211_rx_napi+0xca/0x3d0 [ 612.201998][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 612.202021][ C0] ? reacquire_held_locks+0x104/0x190 [ 612.202047][ C0] ? ieee80211_rx_napi+0xca/0x3d0 [ 612.202068][ C0] ieee80211_rx_napi+0x1a8/0x3d0 [ 612.202091][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 612.202113][ C0] ? rt_spin_unlock+0x161/0x200 [ 612.202136][ C0] ? skb_dequeue+0x101/0x140 [ 612.202154][ C0] ieee80211_handle_queued_frames+0xe8/0x1e0 [ 612.202175][ C0] tasklet_action_common+0x2bf/0x540 [ 612.202200][ C0] handle_softirqs+0x1df/0x650 [ 612.202222][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 612.202242][ C0] run_ktimerd+0x69/0x100 [ 612.202262][ C0] smpboot_thread_fn+0x542/0xa60 [ 612.202282][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 612.202305][ C0] kthread+0x711/0x8a0 [ 612.202328][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 612.202347][ C0] ? __pfx_kthread+0x10/0x10 [ 612.202367][ C0] ? rt_spin_unlock+0x150/0x200 [ 612.202391][ C0] ? rt_spin_unlock+0x161/0x200 [ 612.202412][ C0] ? __pfx_kthread+0x10/0x10 [ 612.202434][ C0] ret_from_fork+0x510/0xa50 [ 612.202452][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 612.202468][ C0] ? __switch_to+0xc9e/0x1480 [ 612.202493][ C0] ? __pfx_kthread+0x10/0x10 [ 612.202515][ C0] ret_from_fork_asm+0x1a/0x30 [ 612.202544][ C0] [ 657.672858][ T38] INFO: task syz.6.915:9908 blocked for more than 143 seconds. [ 657.672892][ T38] Tainted: G L syzkaller #0 [ 657.672905][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.672916][ T38] task:syz.6.915 state:D stack:23800 pid:9908 tgid:9908 ppid:7336 task_flags:0x400040 flags:0x00080002 [ 657.672999][ T38] Call Trace: [ 657.673008][ T38] [ 657.673023][ T38] __schedule+0x145f/0x5070 [ 657.673084][ T38] ? __pfx___schedule+0x10/0x10 [ 657.673119][ T38] ? schedule+0x91/0x360 [ 657.673144][ T38] schedule+0x165/0x360 [ 657.673169][ T38] schedule_timeout+0x9a/0x270 [ 657.673192][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 657.673214][ T38] ? do_raw_spin_lock+0x121/0x290 [ 657.673251][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.673274][ T38] ? wait_for_completion+0x267/0x5d0 [ 657.673300][ T38] wait_for_completion+0x2bf/0x5d0 [ 657.673339][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 657.673371][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 657.673402][ T38] rcu_barrier+0x463/0x570 [ 657.673437][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 657.673471][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 657.673503][ T38] kvm_put_kvm+0x6ca/0xa80 [ 657.673540][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 657.673568][ T38] kvm_vm_release+0x46/0x50 [ 657.673594][ T38] __fput+0x45b/0xa80 [ 657.673634][ T38] task_work_run+0x1d4/0x260 [ 657.673671][ T38] ? __pfx_task_work_run+0x10/0x10 [ 657.673714][ T38] exit_to_user_mode_loop+0xef/0x4e0 [ 657.673746][ T38] ? rcu_is_watching+0x15/0xb0 [ 657.673771][ T38] do_syscall_64+0x2c1/0xf80 [ 657.673795][ T38] ? rcu_is_watching+0x15/0xb0 [ 657.673814][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.673836][ T38] ? clear_bhb_loop+0x60/0xb0 [ 657.673865][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.673894][ T38] RIP: 0033:0x7f314bb1f749 [ 657.673914][ T38] RSP: 002b:00007ffc81bdee18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 657.673947][ T38] RAX: 0000000000000000 RBX: 00007f314bd77da0 RCX: 00007f314bb1f749 [ 657.673964][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 657.673978][ T38] RBP: 00007f314bd77da0 R08: 00000000000011f0 R09: 0000001381bdf10f [ 657.673994][ T38] R10: 00007f314bd77cb0 R11: 0000000000000246 R12: 000000000007b6fd [ 657.674009][ T38] R13: 00007f314bd76180 R14: ffffffffffffffff R15: 00007ffc81bdef30 [ 657.674047][ T38] [ 657.674061][ T38] [ 657.674061][ T38] Showing all locks held in the system: [ 657.674073][ T38] 7 locks held by ktimers/1/29: [ 657.674087][ T38] 4 locks held by kworker/1:0/31: [ 657.674100][ T38] 1 lock held by khungtaskd/38: [ 657.674112][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 657.674179][ T38] 3 locks held by kworker/u8:2/43: [ 657.674197][ T38] 2 locks held by kworker/u8:6/146: [ 657.674209][ T38] #0: ffff88813ff69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 657.674265][ T38] #1: ffffc90003a97bc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 657.674325][ T38] 6 locks held by kworker/u8:10/1341: [ 657.674351][ T38] 2 locks held by udevd/5170: [ 657.674362][ T38] #0: ffffffff8d6d48f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 657.674420][ T38] #1: ffff8880b8841968 (&s->lock_key#80){+.+.}-{3:3}, at: put_cpu_partial+0x9d/0x210 [ 657.674481][ T38] 3 locks held by crond/5548: [ 657.674493][ T38] #0: ffffffff8dc71a98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x1e3/0x4b0 [ 657.674554][ T38] #1: ffffffff8d6d48f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 657.674611][ T38] #2: ffff8880b8841968 (&s->lock_key#80){+.+.}-{3:3}, at: put_cpu_partial+0x9d/0x210 [ 657.674670][ T38] 2 locks held by getty/5566: [ 657.674681][ T38] #0: ffff88814e22f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 657.674737][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 657.674791][ T38] 6 locks held by kworker/1:7/5970: [ 657.674803][ T38] 2 locks held by kworker/0:10/5993: [ 657.674816][ T38] 6 locks held by kworker/u8:19/6441: [ 657.674834][ T38] 2 locks held by udevd/7706: [ 657.674846][ T38] 2 locks held by udevd/7707: [ 657.674860][ T38] 5 locks held by kworker/u8:22/8013: [ 657.674872][ T38] 1 lock held by udevd/9585: [ 657.674885][ T38] 2 locks held by syz.5.906/9870: [ 657.674897][ T38] 1 lock held by syz.8.907/9880: [ 657.674909][ T38] 1 lock held by syz.6.915/9908: [ 657.674921][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 657.674983][ T38] 2 locks held by syz.6.915/9910: [ 657.674995][ T38] 1 lock held by syz.6.915/9914: [ 657.675008][ T38] 3 locks held by syz.7.916/9935: [ 657.675020][ T38] 3 locks held by syz.7.916/9940: [ 657.675032][ T38] 6 locks held by syz.9.917/9936: [ 657.675044][ T38] 1 lock held by cmp/9937: [ 657.675057][ T38] [ 657.675063][ T38] ============================================= [ 657.675063][ T38] [ 657.675073][ T38] NMI backtrace for cpu 0 [ 657.675091][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 657.675121][ T38] Tainted: [L]=SOFTLOCKUP [ 657.675129][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 657.675141][ T38] Call Trace: [ 657.675150][ T38] [ 657.675159][ T38] dump_stack_lvl+0xe8/0x150 [ 657.675190][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 657.675219][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 657.675245][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 657.675279][ T38] sys_info+0x135/0x170 [ 657.675304][ T38] watchdog+0xf95/0xfe0 [ 657.675333][ T38] ? watchdog+0x20a/0xfe0 [ 657.675364][ T38] kthread+0x711/0x8a0 [ 657.675397][ T38] ? __pfx_watchdog+0x10/0x10 [ 657.675420][ T38] ? __pfx_kthread+0x10/0x10 [ 657.675447][ T38] ? rt_spin_unlock+0x150/0x200 [ 657.675482][ T38] ? rt_spin_unlock+0x161/0x200 [ 657.675510][ T38] ? __pfx_kthread+0x10/0x10 [ 657.675541][ T38] ret_from_fork+0x510/0xa50 [ 657.675568][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 657.675589][ T38] ? __switch_to+0xc9e/0x1480 [ 657.675625][ T38] ? __pfx_kthread+0x10/0x10 [ 657.675656][ T38] ret_from_fork_asm+0x1a/0x30 [ 657.675704][ T38] [ 657.675712][ T38] Sending NMI from CPU 0 to CPUs 1: [ 657.675741][ C1] NMI backtrace for cpu 1 [ 657.675760][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 657.675783][ C1] Tainted: [L]=SOFTLOCKUP [ 657.675789][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 657.675799][ C1] RIP: 0010:__lock_acquire+0x525/0x2cf0 [ 657.675824][ C1] Code: 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c7 00 00 00 49 83 ff 31 0f 83 83 00 00 00 8b 03 25 ff 1f 00 00 48 0f a3 05 bb 5c 1e 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 90 e3 5b 92 eb 32 83 3d c2 ec [ 657.675839][ C1] RSP: 0000:ffffc90000a3f4a0 EFLAGS: 00000003 [ 657.675855][ C1] RAX: 000000000000000b RBX: ffff88801bea2ab8 RCX: 0000000000000007 [ 657.675867][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000 [ 657.675878][ C1] RBP: ffff88801bea2ae8 R08: ffffffff8ad44faa R09: ffffffff8d604178 [ 657.675890][ C1] R10: dffffc0000000000 R11: fffffbfff1db686f R12: 0000000000000003 [ 657.675902][ C1] R13: ffff88801bea2ae8 R14: ffff88801bea1e40 R15: 0000000000000005 [ 657.675914][ C1] FS: 0000000000000000(0000) GS:ffff888126dec000(0000) knlGS:0000000000000000 [ 657.675927][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.675940][ C1] CR2: 00002000003a0030 CR3: 000000005b408000 CR4: 00000000003526f0 [ 657.675957][ C1] Call Trace: [ 657.675964][ C1] [ 657.675984][ C1] ? kasan_save_free_info+0x46/0x50 [ 657.676004][ C1] ? __kasan_slab_free+0x5c/0x80 [ 657.676026][ C1] ? kfree+0x1bd/0x900 [ 657.676050][ C1] ? rt_spin_lock+0x14a/0x3e0 [ 657.676071][ C1] lock_acquire+0x107/0x340 [ 657.676091][ C1] ? rt_spin_lock+0x14a/0x3e0 [ 657.676118][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 657.676135][ C1] ? rt_spin_lock+0x14a/0x3e0 [ 657.676157][ C1] rt_spin_lock+0x14a/0x3e0 [ 657.676178][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 657.676200][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 657.676223][ C1] ? rt_spin_unlock+0x150/0x200 [ 657.676246][ C1] kcov_remote_start+0x12d/0x710 [ 657.676264][ C1] __usb_hcd_giveback_urb+0x38a/0x5e0 [ 657.676283][ C1] dummy_timer+0x8a0/0x46f0 [ 657.676305][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 657.676328][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 657.676355][ C1] ? do_raw_spin_lock+0x121/0x290 [ 657.676379][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 657.676397][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 657.676416][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 657.676432][ C1] __hrtimer_run_queues+0x542/0xd00 [ 657.676455][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 657.676471][ C1] ? read_tsc+0x9/0x20 [ 657.676488][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 657.676507][ C1] handle_softirqs+0x1df/0x650 [ 657.676529][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 657.676548][ C1] run_ktimerd+0x69/0x100 [ 657.676568][ C1] smpboot_thread_fn+0x542/0xa60 [ 657.676587][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 657.676610][ C1] kthread+0x711/0x8a0 [ 657.676632][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 657.676652][ C1] ? __pfx_kthread+0x10/0x10 [ 657.676672][ C1] ? rt_spin_unlock+0x150/0x200 [ 657.676706][ C1] ? rt_spin_unlock+0x161/0x200 [ 657.676727][ C1] ? __pfx_kthread+0x10/0x10 [ 657.676749][ C1] ret_from_fork+0x510/0xa50 [ 657.676767][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 657.676784][ C1] ? __switch_to+0xc9e/0x1480 [ 657.676808][ C1] ? __pfx_kthread+0x10/0x10 [ 657.676829][ C1] ret_from_fork_asm+0x1a/0x30 [ 657.676858][ C1] [ 657.677739][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 657.677759][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 657.677789][ T38] Tainted: [L]=SOFTLOCKUP [ 657.677797][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 657.677809][ T38] Call Trace: [ 657.677818][ T38] [ 657.677826][ T38] vpanic+0x1e0/0x670 [ 657.677862][ T38] panic+0xb9/0xc0 [ 657.677890][ T38] ? __pfx_panic+0x10/0x10 [ 657.677931][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 657.677975][ T38] watchdog+0xfdf/0xfe0 [ 657.678003][ T38] ? watchdog+0x20a/0xfe0 [ 657.678035][ T38] kthread+0x711/0x8a0 [ 657.678068][ T38] ? __pfx_watchdog+0x10/0x10 [ 657.678091][ T38] ? __pfx_kthread+0x10/0x10 [ 657.678118][ T38] ? rt_spin_unlock+0x150/0x200 [ 657.678154][ T38] ? rt_spin_unlock+0x161/0x200 [ 657.678183][ T38] ? __pfx_kthread+0x10/0x10 [ 657.678212][ T38] ret_from_fork+0x510/0xa50 [ 657.678238][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 657.678260][ T38] ? __switch_to+0xc9e/0x1480 [ 657.678296][ T38] ? __pfx_kthread+0x10/0x10 [ 657.678328][ T38] ret_from_fork_asm+0x1a/0x30 [ 657.678377][ T38] [ 657.679004][ T38] Kernel Offset: disabled