last executing test programs: 1m29.727707244s ago: executing program 3 (id=380): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xe}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x2cea, 0x0, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) 1m24.889899848s ago: executing program 3 (id=388): r0 = openat$kvm(0x0, 0x0, 0x102, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x10001, 0x0, {{0x7, 0x4, 0x1, 0x33, 0x1c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x88, 0x6, "f173076c"}]}}}}}) getpeername$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}}, 0x80) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0fc75830d9fb0f20e06635000100000f22e026f30f090fc7ae2c8c0f3566b898bc00000f23d00f21f866351000000b0f23f866b99d0000400f32d8ce0f8ae590", 0x40}], 0x1, 0xa, &(0x7f0000000200)=[@cr4={0x1, 0x10}, @flags={0x3, 0x2400}], 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = userfaultfd(0x80801) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r11, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x7, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) recvfrom$inet(r11, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) getrlimit(0x0, &(0x7f00000005c0)) syz_emit_ethernet(0xb2, &(0x7f0000000780)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@llc={0x4, {@snap={0xab, 0x0, "81", "7e1e44", 0x8100, "445d35d75f19def6c78a2f4f8a8c3f96dfdb571673e34d3f80581421fffa910b0f53f5b09f95fa8503b9ce75713612b8b3ec43b18465c1fe3290d0a8802ac648d4e4457f817b9b4480c353f0415df9dd09a857144e3cbbfc1c42ded8f58807fe47b22fd362da1d47e590b9de52d8b28461dd7114247c24c51ff0acb79044ba4ec28d5c9b6c56399b18ffcd251fb87d82db94d97c"}}}}}, &(0x7f0000000840)={0x0, 0x1, [0x1bf, 0x87a, 0x223, 0x688]}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 1m24.694773579s ago: executing program 2 (id=390): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000380)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0x4b) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r3, &(0x7f0000000700)=""/90, 0x20000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 1m24.646150564s ago: executing program 3 (id=391): r0 = socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0x41, 0xf4, 0x10, 0x8, 0xdba, 0x5000, 0xf541, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x0, 0xb, 0xac, 0xa5, 0x1}}]}}]}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x22}, 0x1c) close_range(r1, r3, 0x0) timer_create(0x7, &(0x7f0000000280)={0x0, 0x3f, 0x4}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x1, &(0x7f0000000840)={{}, {0x0, 0x989680}}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigaction(0x3f, &(0x7f0000000940)={0x0, 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) sendmmsg$inet6(r3, &(0x7f0000001980), 0x4000000000003af, 0x4004844) 1m24.403880566s ago: executing program 2 (id=392): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) 1m24.27145807s ago: executing program 2 (id=394): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 1m24.186895634s ago: executing program 2 (id=395): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01062abd7000ffdbdf250600000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlockall() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2d}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 1m22.366221534s ago: executing program 3 (id=400): r0 = openat$kvm(0x0, 0x0, 0x102, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) getpgid(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x10001, 0x0, {{0x7, 0x4, 0x1, 0x33, 0x1c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x88, 0x6, "f173076c"}]}}}}}) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}}, 0x80) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = userfaultfd(0x80801) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x7, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) recvfrom$inet(r10, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_emit_ethernet(0xb2, &(0x7f0000000780)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@llc={0x4, {@snap={0xab, 0x0, "81", "7e1e44", 0x8100, "445d35d75f19def6c78a2f4f8a8c3f96dfdb571673e34d3f80581421fffa910b0f53f5b09f95fa8503b9ce75713612b8b3ec43b18465c1fe3290d0a8802ac648d4e4457f817b9b4480c353f0415df9dd09a857144e3cbbfc1c42ded8f58807fe47b22fd362da1d47e590b9de52d8b28461dd7114247c24c51ff0acb79044ba4ec28d5c9b6c56399b18ffcd251fb87d82db94d97c"}}}}}, &(0x7f0000000840)={0x0, 0x1, [0x1bf, 0x87a, 0x223, 0x688]}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 1m22.22125815s ago: executing program 4 (id=402): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000380)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0x4b) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r3, &(0x7f0000000700)=""/90, 0x20000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 1m22.00831099s ago: executing program 4 (id=403): preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x10}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1m21.908008554s ago: executing program 3 (id=405): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m21.817893598s ago: executing program 4 (id=407): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)={0x58, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000480)={0x0, 0x12, 0x4, "e1255b96"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x18, 0x4, "e8ad9f53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000a00)={0x40, 0x13, 0x4, "450ef392"}, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_open_pts(r5, 0x703082) socket(0x1e, 0xa, 0x80) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x229) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 1m21.626244041s ago: executing program 2 (id=409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="030307006cbb190010004525002b00670000fc0690780ae0e42cdc1414bb4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x35) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m20.800336854s ago: executing program 4 (id=411): setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "d965c27e4e0cad0a40a358c0fff49c93"}, 0x11, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000180)={[{@favordynmods}, {@memory_hugetlb_accounting}], [{@smackfsroot={'smackfsroot', 0x3d, 'security.evm\x00'}}, {@subj_type={'subj_type', 0x3d, 'security.evm\x00'}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '\'!^'}}, {@smackfsroot={'smackfsroot', 0x3d, '&^!'}}, {@euid_eq={'euid', 0x3d, r1}}]}) chroot(&(0x7f0000000240)='./file0\x00') (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000280)='\x00', &(0x7f00000002c0)='./file0\x00', r0) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = getpgrp(0xffffffffffffffff) syz_fuse_handle_req(r3, &(0x7f0000000340)="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", 0x2000, &(0x7f0000002b40)={&(0x7f0000002340)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x1, 0xffffffff80000000, 0x4, 0x3, 0x6, 0x6, 0x0, 0x0, 0x4, 0x80}}, &(0x7f00000023c0)={0x18, 0xffffffffffffffda, 0x8, {0x2}}, &(0x7f0000002400)={0x18, 0xfffffffffffffffe, 0x12e4, {0x40}}, &(0x7f0000002440)={0x18, 0x0, 0x9, {0x4}}, &(0x7f0000002480)={0x18, 0x0, 0xb}, &(0x7f00000024c0)={0x28, 0x0, 0x8, {{0x2, 0x1, 0x2, r4}}}, &(0x7f0000002500)={0x60, 0x0, 0x4, {{0x2, 0x80000000, 0x81, 0x3, 0x3, 0x5, 0x0, 0x5}}}, &(0x7f0000002580)={0x18, 0x0, 0x4}, &(0x7f00000025c0)={0x13, 0x0, 0x5, {'\'!^'}}, &(0x7f0000002600)={0x20, 0xfffffffffffffff5, 0xb, {0x0, 0x11}}, &(0x7f0000002640)={0x78, 0x0, 0x10, {0x80, 0x0, 0x0, {0x2, 0x6, 0x1ff, 0x1, 0x9, 0x100, 0x81, 0x6, 0x401, 0x9000, 0x6, r1, r2, 0x4, 0x2}}}, &(0x7f00000026c0)={0x90, 0x0, 0x100000001, {0x4, 0x2, 0x3, 0xf1e, 0x1000, 0x81, {0x0, 0x5, 0x2, 0x2, 0x1, 0x1, 0xff, 0x3, 0x2, 0xa000, 0xfffffffd, r1, r2, 0x3, 0xfffffffc}}}, &(0x7f0000002780)={0xa0, 0x0, 0x71, [{0x2, 0x564, 0x8, 0x9, 'cgroup2\x00'}, {0x2, 0x1, 0x3, 0x2, '{^\x9b'}, {0x2, 0x0, 0x9, 0x2, 'subj_type'}, {0x4, 0x1, 0x9, 0x9, '%\xf2//:\'[^)'}]}, &(0x7f0000002840)={0xb0, 0x0, 0x26, [{{0x3, 0x0, 0x5, 0x7f, 0xf, 0x7, {0x1, 0x80000001, 0x1, 0xb427, 0x646, 0x66f, 0x67, 0x3, 0x0, 0x2000, 0x1ff, r1, r2, 0x6, 0x5}}, {0x4, 0x9, 0x2, 0xffff0001, '\xee:'}}]}, &(0x7f0000002900)={0xa0, 0x0, 0x10, {{0x6, 0x3, 0x6, 0xf50, 0xfffffffd, 0x2, {0x2, 0x2, 0x0, 0x1, 0x3, 0x9, 0x101, 0x6, 0x96e, 0x4000, 0x4, r1, r2, 0x7f, 0x5}}, {0x0, 0x6d85a86e9f882d3e}}}, &(0x7f00000029c0)={0x20, 0xfffffffffffffffe, 0x8, {0x8, 0x0, 0x3, 0x9}}, &(0x7f0000002a00)={0x130, 0x0, 0xf, {0x1, 0x10, 0x0, '\x00', {0x1080, 0x0, 0x3ff, 0x30000000, r1, r2, 0xc000, '\x00', 0x2, 0x7, 0x9, 0x0, {0x4, 0x2}, {0x6}, {0x8, 0x2}, {0x100, 0x9}, 0x7d2, 0x6, 0x7, 0x3}}}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002c00)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) (async) r5 = syz_pidfd_open(r4, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002c80)={&(0x7f0000002c40)='spi_message_done\x00', r0, 0x0, 0x3cd}, 0x18) (async) sched_setscheduler(r4, 0x3, &(0x7f0000002cc0)=0x5) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000002d00)) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000002e40)={0x3, 0x81, 0xcb, &(0x7f0000002d40)=""/203}) (async) geteuid() getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000002e80)={0x0, 0x10001}, &(0x7f0000002ec0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002fc0)={r7, 0xac, &(0x7f0000002f00)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x7, @remote}]}, &(0x7f0000003000)=0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000003040)={0xa0002011}) (async) socketpair(0x2a, 0x2, 0x1, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003100), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000003340)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003300)={&(0x7f0000003140)={0x18c, r9, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffff5b6}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0x7f}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x3}, {0x5}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40802}, 0x0) (async) getsockname(r0, &(0x7f0000003380)=@isdn, &(0x7f0000003400)=0x80) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_pidfd_open(r4, 0x0) (async) fcntl$setown(r5, 0x8, r4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000003440), 0x801, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000003480)={0xfffffffffffffff9, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r10, 0xc0106438, &(0x7f00000034c0)={0xfffffffffffffffe, r11}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000003500)={r7, @in6={{0xa, 0x4e24, 0x6, @empty, 0x3}}}, &(0x7f00000035c0)=0x84) 1m20.168173634s ago: executing program 4 (id=413): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000380)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0x4b) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r3, &(0x7f0000000700)=""/90, 0x20000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 1m18.830747542s ago: executing program 4 (id=415): r0 = openat$kvm(0x0, 0x0, 0x102, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) getpgid(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x10001, 0x0, {{0x7, 0x4, 0x1, 0x33, 0x1c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x88, 0x6, "f173076c"}]}}}}}) getpeername$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}}, 0x80) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0fc75830d9fb0f20e06635000100000f22e026f30f090fc7ae2c8c0f3566b898bc00000f23d00f21f866351000000b0f23f866b99d0000400f32d8ce0f8ae590", 0x40}], 0x1, 0xa, &(0x7f0000000200)=[@cr4={0x1, 0x10}, @flags={0x3, 0x2400}], 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = userfaultfd(0x80801) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r11, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x7, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) recvfrom$inet(r11, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) getrlimit(0x0, &(0x7f00000005c0)) syz_emit_ethernet(0xb2, &(0x7f0000000780)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@llc={0x4, {@snap={0xab, 0x0, "81", "7e1e44", 0x8100, "445d35d75f19def6c78a2f4f8a8c3f96dfdb571673e34d3f80581421fffa910b0f53f5b09f95fa8503b9ce75713612b8b3ec43b18465c1fe3290d0a8802ac648d4e4457f817b9b4480c353f0415df9dd09a857144e3cbbfc1c42ded8f58807fe47b22fd362da1d47e590b9de52d8b28461dd7114247c24c51ff0acb79044ba4ec28d5c9b6c56399b18ffcd251fb87d82db94d97c"}}}}}, &(0x7f0000000840)={0x0, 0x1, [0x1bf, 0x87a, 0x223, 0x688]}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 1m18.598619932s ago: executing program 2 (id=416): r0 = openat$kvm(0x0, 0x0, 0x102, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) getpgid(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x10001, 0x0, {{0x7, 0x4, 0x1, 0x33, 0x1c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x88, 0x6, "f173076c"}]}}}}}) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}}, 0x80) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = userfaultfd(0x80801) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x7, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) recvfrom$inet(r10, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_emit_ethernet(0xb2, &(0x7f0000000780)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@llc={0x4, {@snap={0xab, 0x0, "81", "7e1e44", 0x8100, "445d35d75f19def6c78a2f4f8a8c3f96dfdb571673e34d3f80581421fffa910b0f53f5b09f95fa8503b9ce75713612b8b3ec43b18465c1fe3290d0a8802ac648d4e4457f817b9b4480c353f0415df9dd09a857144e3cbbfc1c42ded8f58807fe47b22fd362da1d47e590b9de52d8b28461dd7114247c24c51ff0acb79044ba4ec28d5c9b6c56399b18ffcd251fb87d82db94d97c"}}}}}, &(0x7f0000000840)={0x0, 0x1, [0x1bf, 0x87a, 0x223, 0x688]}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 1m13.545394178s ago: executing program 3 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) 56.767505773s ago: executing program 32 (id=416): r0 = openat$kvm(0x0, 0x0, 0x102, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) getpgid(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x10001, 0x0, {{0x7, 0x4, 0x1, 0x33, 0x1c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x88, 0x6, "f173076c"}]}}}}}) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}}, 0x80) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = userfaultfd(0x80801) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x7, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) recvfrom$inet(r10, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_emit_ethernet(0xb2, &(0x7f0000000780)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@llc={0x4, {@snap={0xab, 0x0, "81", "7e1e44", 0x8100, "445d35d75f19def6c78a2f4f8a8c3f96dfdb571673e34d3f80581421fffa910b0f53f5b09f95fa8503b9ce75713612b8b3ec43b18465c1fe3290d0a8802ac648d4e4457f817b9b4480c353f0415df9dd09a857144e3cbbfc1c42ded8f58807fe47b22fd362da1d47e590b9de52d8b28461dd7114247c24c51ff0acb79044ba4ec28d5c9b6c56399b18ffcd251fb87d82db94d97c"}}}}}, &(0x7f0000000840)={0x0, 0x1, [0x1bf, 0x87a, 0x223, 0x688]}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 56.592139143s ago: executing program 33 (id=415): r0 = openat$kvm(0x0, 0x0, 0x102, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) getpgid(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x10001, 0x0, {{0x7, 0x4, 0x1, 0x33, 0x1c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x88, 0x6, "f173076c"}]}}}}}) getpeername$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}}, 0x80) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0fc75830d9fb0f20e06635000100000f22e026f30f090fc7ae2c8c0f3566b898bc00000f23d00f21f866351000000b0f23f866b99d0000400f32d8ce0f8ae590", 0x40}], 0x1, 0xa, &(0x7f0000000200)=[@cr4={0x1, 0x10}, @flags={0x3, 0x2400}], 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = userfaultfd(0x80801) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r11, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x7, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) recvfrom$inet(r11, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) getrlimit(0x0, &(0x7f00000005c0)) syz_emit_ethernet(0xb2, &(0x7f0000000780)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@llc={0x4, {@snap={0xab, 0x0, "81", "7e1e44", 0x8100, "445d35d75f19def6c78a2f4f8a8c3f96dfdb571673e34d3f80581421fffa910b0f53f5b09f95fa8503b9ce75713612b8b3ec43b18465c1fe3290d0a8802ac648d4e4457f817b9b4480c353f0415df9dd09a857144e3cbbfc1c42ded8f58807fe47b22fd362da1d47e590b9de52d8b28461dd7114247c24c51ff0acb79044ba4ec28d5c9b6c56399b18ffcd251fb87d82db94d97c"}}}}}, &(0x7f0000000840)={0x0, 0x1, [0x1bf, 0x87a, 0x223, 0x688]}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 56.325819831s ago: executing program 34 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) 34.937601133s ago: executing program 0 (id=438): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100fefffff5000000000a00000a20000000000a01080000000000000000010000090900010073797a310008000070000000030a010400000000000000000100000a0900010073797a31000000000900030073797a30000000002800"], 0xb8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x340040c1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 33.424638154s ago: executing program 1 (id=439): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r2) r3 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20004810}, 0x4800) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000008500000005000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 32.728300656s ago: executing program 1 (id=440): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r2) r3 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20004810}, 0x4800) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000008500000005000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 32.044975074s ago: executing program 1 (id=441): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x7fff}) 31.368385853s ago: executing program 1 (id=442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xa5c}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8000, 0xe}, 0x9c) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"]) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x963b81) r8 = socket$pppoe(0x18, 0x1, 0x0) r9 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r11 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000080)={r11, 0x4}) close_range(r8, 0xffffffffffffffff, 0x0) 30.035596948s ago: executing program 0 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000440)={0x0, 0x0}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5, 0x1}, {0x8, 0x207}], 0x3, 0x6, 0x2, 0x1, 0x3}}, 0xfffffffd}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x8}, 0x18) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 29.878424812s ago: executing program 1 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000840), &(0x7f0000000480), 0x20000802, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0xffffffffffffffff, 0x6c, r0}, 0x38) 28.019506163s ago: executing program 0 (id=445): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 27.997842024s ago: executing program 1 (id=446): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffe, 0x0, 0xa40}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f0000000300)={0x0, "10f8b00f37651afa3619457e9e16eb9a2732bd7ca767a320c4c57e2370e6e4ac36d5cd133c26f88778b60974c73dc649dc65676cea8fc6ebfe50a657648e37bd", 0x20}, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000380)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) 16.963297863s ago: executing program 0 (id=447): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r2) r3 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20004810}, 0x4800) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000008500000005000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 16.302268531s ago: executing program 0 (id=448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800010000000009000000b7080000000000007baa00fe000000"], 0x0, 0x3, 0xfffffe98}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000380), 0x0, 0x24000000}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@delchain={0x38, 0x65, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff3, 0x9}, {0x9, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000804) 16.219449468s ago: executing program 0 (id=449): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a090400000000000000000200000009"], 0xc4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x58}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 12.552548828s ago: executing program 35 (id=446): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffe, 0x0, 0xa40}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f0000000300)={0x0, "10f8b00f37651afa3619457e9e16eb9a2732bd7ca767a320c4c57e2370e6e4ac36d5cd133c26f88778b60974c73dc649dc65676cea8fc6ebfe50a657648e37bd", 0x20}, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000380)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) 0s ago: executing program 36 (id=449): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a090400000000000000000200000009"], 0xc4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x58}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 86.772532][ T992] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 91.998716][ T5824] cgroup: Unknown subsys name 'net' [ 92.224325][ T5824] cgroup: Unknown subsys name 'cpuset' [ 92.269470][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.254707][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.847175][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.849986][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.876831][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.877743][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.897372][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.909711][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.911272][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.911757][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.912696][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.983650][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.987494][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.993383][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.010773][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.034246][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.036109][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.039053][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.045095][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.067816][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.095200][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.096230][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.108559][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.118790][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.137516][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.144485][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.145708][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.066642][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 100.214442][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 100.353723][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 100.376184][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 100.524506][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 101.039245][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.039597][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.040207][ T5843] bridge_slave_0: entered allmulticast mode [ 101.042594][ T5843] bridge_slave_0: entered promiscuous mode [ 101.099995][ T5855] Bluetooth: hci1: command tx timeout [ 101.100273][ T59] Bluetooth: hci0: command tx timeout [ 101.169025][ T59] Bluetooth: hci2: command tx timeout [ 101.169715][ T59] Bluetooth: hci3: command tx timeout [ 101.182884][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.183373][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.184018][ T5843] bridge_slave_1: entered allmulticast mode [ 101.187173][ T5843] bridge_slave_1: entered promiscuous mode [ 101.248601][ T59] Bluetooth: hci4: command tx timeout [ 101.550699][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.550797][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.550952][ T5852] bridge_slave_0: entered allmulticast mode [ 101.552857][ T5852] bridge_slave_0: entered promiscuous mode [ 101.811028][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.811261][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.811793][ T5852] bridge_slave_1: entered allmulticast mode [ 101.814463][ T5852] bridge_slave_1: entered promiscuous mode [ 101.815953][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.816083][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.816222][ T5842] bridge_slave_0: entered allmulticast mode [ 101.818033][ T5842] bridge_slave_0: entered promiscuous mode [ 101.915625][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.915930][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.916081][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.916262][ T5853] bridge_slave_0: entered allmulticast mode [ 101.922210][ T5853] bridge_slave_0: entered promiscuous mode [ 102.019746][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.019877][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.020015][ T5842] bridge_slave_1: entered allmulticast mode [ 102.021968][ T5842] bridge_slave_1: entered promiscuous mode [ 102.135427][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.135909][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.136057][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.136234][ T5853] bridge_slave_1: entered allmulticast mode [ 102.141193][ T5853] bridge_slave_1: entered promiscuous mode [ 102.363228][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.363367][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.363510][ T5846] bridge_slave_0: entered allmulticast mode [ 102.365370][ T5846] bridge_slave_0: entered promiscuous mode [ 102.513550][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.593899][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.594056][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.594207][ T5846] bridge_slave_1: entered allmulticast mode [ 102.596016][ T5846] bridge_slave_1: entered promiscuous mode [ 102.804495][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.808130][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.921339][ T5843] team0: Port device team_slave_0 added [ 102.926127][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.017315][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.104052][ T5843] team0: Port device team_slave_1 added [ 103.108230][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.168765][ T59] Bluetooth: hci0: command tx timeout [ 103.168797][ T59] Bluetooth: hci1: command tx timeout [ 103.248747][ T59] Bluetooth: hci2: command tx timeout [ 103.248843][ T5855] Bluetooth: hci3: command tx timeout [ 103.294019][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.328697][ T5855] Bluetooth: hci4: command tx timeout [ 103.462025][ T5852] team0: Port device team_slave_0 added [ 103.567404][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.913195][ T5852] team0: Port device team_slave_1 added [ 103.915778][ T5842] team0: Port device team_slave_0 added [ 104.002073][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.002091][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.002120][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.005580][ T5853] team0: Port device team_slave_0 added [ 104.124361][ T5842] team0: Port device team_slave_1 added [ 104.210501][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.210517][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.210553][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.212822][ T5853] team0: Port device team_slave_1 added [ 104.365936][ T5846] team0: Port device team_slave_0 added [ 104.445200][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.445213][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.445231][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.553355][ T5846] team0: Port device team_slave_1 added [ 104.622031][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.622049][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.622077][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.623754][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.623767][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.623793][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.852324][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.852341][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.852370][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.863767][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.863784][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.863816][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.089173][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.089190][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.089217][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.110569][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.110585][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.110612][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.231265][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.231282][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.231310][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.242595][ T5843] hsr_slave_0: entered promiscuous mode [ 105.244208][ T5843] hsr_slave_1: entered promiscuous mode [ 105.248773][ T5855] Bluetooth: hci1: command tx timeout [ 105.248797][ T5855] Bluetooth: hci0: command tx timeout [ 105.338751][ T5855] Bluetooth: hci2: command tx timeout [ 105.338843][ T59] Bluetooth: hci3: command tx timeout [ 105.408677][ T59] Bluetooth: hci4: command tx timeout [ 105.617163][ T5852] hsr_slave_0: entered promiscuous mode [ 105.622885][ T5852] hsr_slave_1: entered promiscuous mode [ 105.624118][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 105.624248][ T5852] Cannot create hsr debugfs directory [ 105.861010][ T5842] hsr_slave_0: entered promiscuous mode [ 105.862690][ T5842] hsr_slave_1: entered promiscuous mode [ 105.863849][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 105.863873][ T5842] Cannot create hsr debugfs directory [ 106.078784][ T5853] hsr_slave_0: entered promiscuous mode [ 106.080207][ T5853] hsr_slave_1: entered promiscuous mode [ 106.081117][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 106.081143][ T5853] Cannot create hsr debugfs directory [ 106.344027][ T5846] hsr_slave_0: entered promiscuous mode [ 106.345040][ T5846] hsr_slave_1: entered promiscuous mode [ 106.345879][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 106.345902][ T5846] Cannot create hsr debugfs directory [ 107.328687][ T5855] Bluetooth: hci1: command tx timeout [ 107.328739][ T59] Bluetooth: hci0: command tx timeout [ 107.418746][ T5855] Bluetooth: hci2: command tx timeout [ 107.418794][ T59] Bluetooth: hci3: command tx timeout [ 107.488966][ T59] Bluetooth: hci4: command tx timeout [ 107.921483][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.975121][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.004020][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.043905][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.189577][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.225844][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.265975][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.331539][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.515052][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.554511][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.586712][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.650792][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.817198][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.865154][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.901669][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.972115][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.118220][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.181424][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.239974][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.279771][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.332430][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.401370][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.452426][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.453041][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.517599][ T3193] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.517707][ T3193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.537534][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.664096][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.679909][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.737430][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.738066][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.794100][ T3193] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.794212][ T3193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.856200][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.888505][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.888647][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.900251][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.953909][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.954090][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.064630][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.146308][ T3193] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.147693][ T3193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.191113][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.220057][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.220219][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.330813][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.401268][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.401530][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.440434][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.440579][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.502404][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.854953][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.178367][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.227769][ T5852] veth0_vlan: entered promiscuous mode [ 111.304576][ T5852] veth1_vlan: entered promiscuous mode [ 111.466255][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.507917][ T5842] veth0_vlan: entered promiscuous mode [ 111.575740][ T5842] veth1_vlan: entered promiscuous mode [ 111.581950][ T5852] veth0_macvtap: entered promiscuous mode [ 111.601733][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.625060][ T5852] veth1_macvtap: entered promiscuous mode [ 111.702100][ T5843] veth0_vlan: entered promiscuous mode [ 111.747041][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.785642][ T5843] veth1_vlan: entered promiscuous mode [ 111.792882][ T5853] veth0_vlan: entered promiscuous mode [ 111.797072][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.836393][ T5842] veth0_macvtap: entered promiscuous mode [ 111.860295][ T3193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.879020][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.895359][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.896617][ T5853] veth1_vlan: entered promiscuous mode [ 111.899091][ T5842] veth1_macvtap: entered promiscuous mode [ 111.931110][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.034815][ T5846] veth0_vlan: entered promiscuous mode [ 112.132926][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.193514][ T5846] veth1_vlan: entered promiscuous mode [ 112.220267][ T5843] veth0_macvtap: entered promiscuous mode [ 112.228045][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.269009][ T5843] veth1_macvtap: entered promiscuous mode [ 112.305403][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.336963][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.355997][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.361436][ T5853] veth0_macvtap: entered promiscuous mode [ 112.374974][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.390884][ T984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.390911][ T984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.418191][ T5853] veth1_macvtap: entered promiscuous mode [ 112.525286][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.590266][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.591275][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.591294][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.673992][ T5846] veth0_macvtap: entered promiscuous mode [ 112.711434][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.713136][ T5846] veth1_macvtap: entered promiscuous mode [ 112.784550][ T984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.800531][ T984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.806552][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.806636][ T984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.841555][ T984] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.843606][ T3193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.843643][ T3193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.947316][ T1004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.991086][ T1004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.007909][ T1004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.047125][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.084514][ T1004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.148371][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.148516][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.207043][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.354555][ T3630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.372016][ T3630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.407934][ T3630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.440982][ T5961] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.533588][ T3630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.671974][ T3630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.671997][ T3630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.088460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.148737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.675491][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.675511][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.848735][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.848754][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.950077][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.950097][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.100453][ T5972] syz.0.8 (5972) used greatest stack depth: 18712 bytes left [ 115.148727][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.148747][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.429693][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.546427][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.546447][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.744979][ T38] audit: type=1326 audit(1758793403.508:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 115.745037][ T38] audit: type=1326 audit(1758793403.508:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 115.776454][ T38] audit: type=1326 audit(1758793403.528:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85948f5d67 code=0x7ffc0000 [ 115.781981][ T38] audit: type=1326 audit(1758793403.548:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 115.820310][ T38] audit: type=1326 audit(1758793403.588:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85948f5d67 code=0x7ffc0000 [ 115.820379][ T38] audit: type=1326 audit(1758793403.588:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 115.820430][ T38] audit: type=1326 audit(1758793403.588:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85948f5d67 code=0x7ffc0000 [ 115.820479][ T38] audit: type=1326 audit(1758793403.588:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 115.826201][ T38] audit: type=1326 audit(1758793403.588:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85948f5d67 code=0x7ffc0000 [ 115.826253][ T38] audit: type=1326 audit(1758793403.588:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 120.855633][ T38] kauditd_printk_skb: 842 callbacks suppressed [ 120.855656][ T38] audit: type=1326 audit(1758793408.368:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f137e355d67 code=0x7ffc0000 [ 120.855706][ T38] audit: type=1326 audit(1758793408.618:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f137e2faf79 code=0x7ffc0000 [ 120.892058][ T38] audit: type=1326 audit(1758793408.648:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f137e355d67 code=0x7ffc0000 [ 120.892117][ T38] audit: type=1326 audit(1758793408.648:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f137e2faf79 code=0x7ffc0000 [ 120.892164][ T38] audit: type=1326 audit(1758793408.658:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f137e355d67 code=0x7ffc0000 [ 120.892211][ T38] audit: type=1326 audit(1758793408.658:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f137e2faf79 code=0x7ffc0000 [ 120.911145][ T38] audit: type=1326 audit(1758793408.678:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f137e355d67 code=0x7ffc0000 [ 120.911200][ T38] audit: type=1326 audit(1758793408.678:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f137e2faf79 code=0x7ffc0000 [ 120.916471][ T38] audit: type=1326 audit(1758793408.678:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f137e355d67 code=0x7ffc0000 [ 120.916523][ T38] audit: type=1326 audit(1758793408.678:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f137e2faf79 code=0x7ffc0000 [ 121.555265][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 121.555326][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 121.579043][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 121.579076][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 122.402152][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 122.523551][ T6044] fuse: Unknown parameter 'user_i00000000000000000000' [ 125.187690][ T6074] fuse: Unknown parameter 'user_i00000000000000000000' [ 126.211205][ T6080] Zero length message leads to an empty skb [ 126.383317][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 126.383352][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 126.455079][ T38] kauditd_printk_skb: 30 callbacks suppressed [ 126.455098][ T38] audit: type=1326 audit(1758793414.218:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 126.455149][ T38] audit: type=1326 audit(1758793414.218:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 126.455618][ T38] audit: type=1326 audit(1758793414.218:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 126.456370][ T38] audit: type=1326 audit(1758793414.218:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 126.456432][ T38] audit: type=1326 audit(1758793414.218:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 126.456799][ T38] audit: type=1326 audit(1758793414.218:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 126.457190][ T38] audit: type=1326 audit(1758793414.218:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 126.457556][ T38] audit: type=1326 audit(1758793414.218:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 126.457968][ T38] audit: type=1326 audit(1758793414.218:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 126.458350][ T38] audit: type=1326 audit(1758793414.218:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 127.263189][ T6089] process 'syz.2.43' launched './file0' with NULL argv: empty string added [ 129.519611][ T6113] fuse: Unknown parameter 'user_i00000000000000000000' [ 129.668628][ T5926] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.831717][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 129.863428][ T5926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.863459][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.863484][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.863508][ T5926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.863554][ T5926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.863575][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.446339][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.447629][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.478576][ T5926] usb 5-1: GET_CAPABILITIES returned 0 [ 130.478621][ T5926] usbtmc 5-1:16.0: can't read capabilities [ 130.609061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.816653][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.848665][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.850222][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.850315][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.851218][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.851306][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.853586][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.853675][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.853756][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.859525][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.891258][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.891367][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.891454][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.891855][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.892184][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.892271][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.956420][ T9] usb 5-1: USB disconnect, device number 2 [ 131.458477][ T38] kauditd_printk_skb: 1693 callbacks suppressed [ 131.458496][ T38] audit: type=1326 audit(1758793419.218:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 131.460385][ T38] audit: type=1326 audit(1758793419.228:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 131.461259][ T38] audit: type=1326 audit(1758793419.228:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 131.462738][ T38] audit: type=1326 audit(1758793419.228:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 131.574234][ T38] audit: type=1326 audit(1758793419.308:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 131.574771][ T38] audit: type=1326 audit(1758793419.338:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 131.575061][ T38] audit: type=1326 audit(1758793419.338:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 131.576178][ T38] audit: type=1326 audit(1758793419.338:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 131.576552][ T38] audit: type=1326 audit(1758793419.338:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 131.577177][ T38] audit: type=1326 audit(1758793419.338:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6091 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 133.147266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.420876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.422125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.423358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.424213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.446376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.449087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 138.023998][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.024291][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.968617][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.129767][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 140.136157][ T5900] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.136189][ T5900] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.136216][ T5900] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.136240][ T5900] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.136287][ T5900] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.136312][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.830280][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.838007][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.850597][ T5900] usb 5-1: GET_CAPABILITIES returned 0 [ 141.850629][ T5900] usbtmc 5-1:16.0: can't read capabilities [ 141.953144][ T5827] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.069105][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.069164][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.069212][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.069260][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.070828][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.070881][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.070929][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.071720][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.071773][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.071823][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.071872][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.072120][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.072171][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.072220][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.072269][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.072563][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 142.117976][ T5900] usb 5-1: USB disconnect, device number 3 [ 142.173301][ T5827] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.173332][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.173352][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.173408][ T5827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.296889][ T5827] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.296919][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.296948][ T5827] usb 2-1: Product: syz [ 142.296964][ T5827] usb 2-1: Manufacturer: syz [ 142.639489][ T6190] fuse: Bad value for 'fd' [ 142.672390][ T5827] cdc_wdm 2-1:1.0: skipping garbage [ 142.672412][ T5827] cdc_wdm 2-1:1.0: skipping garbage [ 142.815790][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.816759][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.917471][ T5827] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 142.917502][ T5827] cdc_wdm 2-1:1.0: Unknown control protocol [ 143.886230][ T5827] usb 2-1: USB disconnect, device number 2 [ 148.120066][ T6220] Bluetooth: MGMT ver 1.23 [ 151.187295][ T38] kauditd_printk_skb: 138 callbacks suppressed [ 151.187314][ T38] audit: type=1326 audit(1758793438.948:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 151.219038][ T38] audit: type=1326 audit(1758793438.988:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 151.220766][ T38] audit: type=1326 audit(1758793438.988:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 151.220818][ T38] audit: type=1326 audit(1758793438.988:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 151.220865][ T38] audit: type=1326 audit(1758793438.988:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 151.269516][ T38] audit: type=1326 audit(1758793439.038:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 151.274833][ T38] audit: type=1326 audit(1758793439.038:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 151.274889][ T38] audit: type=1326 audit(1758793439.038:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 151.274935][ T38] audit: type=1326 audit(1758793439.038:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 151.298172][ T38] audit: type=1326 audit(1758793439.038:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 151.579814][ T6251] overlayfs: failed to clone upperpath [ 159.060770][ T5900] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.218606][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 159.223675][ T5900] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 159.223704][ T5900] usb 5-1: config 0 has no interface number 0 [ 159.229517][ T5900] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=f5.41 [ 159.229552][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.229577][ T5900] usb 5-1: Product: syz [ 159.229594][ T5900] usb 5-1: Manufacturer: syz [ 159.229612][ T5900] usb 5-1: SerialNumber: syz [ 159.267452][ T5900] usb 5-1: config 0 descriptor?? [ 166.355883][ T5900] usb 5-1: MBOX3: Invalid descriptor size=18. [ 167.770768][ T6008] usb 5-1: USB disconnect, device number 4 [ 169.924354][ T6347] fuse: Bad value for 'fd' [ 169.939738][ T6339] fuse: Bad value for 'rootmode' [ 170.888034][ T38] kauditd_printk_skb: 207 callbacks suppressed [ 170.888054][ T38] audit: type=1326 audit(1758793458.648:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137e35eec9 code=0x7ffc0000 [ 170.888332][ T38] audit: type=1326 audit(1758793458.648:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137e35eec9 code=0x7ffc0000 [ 170.943658][ T38] audit: type=1326 audit(1758793458.708:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f137e35eec9 code=0x7ffc0000 [ 170.943951][ T38] audit: type=1326 audit(1758793458.708:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137e35eec9 code=0x7ffc0000 [ 170.944222][ T38] audit: type=1326 audit(1758793458.708:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137e35eec9 code=0x7ffc0000 [ 171.139933][ T6364] overlayfs: failed to clone upperpath [ 176.208214][ T38] audit: type=1326 audit(1758793463.968:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 176.208272][ T38] audit: type=1326 audit(1758793463.968:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 176.667276][ T38] audit: type=1326 audit(1758793464.428:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff13c3d5d67 code=0x7ffc0000 [ 176.667976][ T38] audit: type=1326 audit(1758793464.428:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 176.690567][ T38] audit: type=1326 audit(1758793464.458:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff13c3d5d67 code=0x7ffc0000 [ 176.690631][ T38] audit: type=1326 audit(1758793464.458:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 176.691645][ T38] audit: type=1326 audit(1758793464.458:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff13c3d5d67 code=0x7ffc0000 [ 176.691702][ T38] audit: type=1326 audit(1758793464.458:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 176.692749][ T38] audit: type=1326 audit(1758793464.458:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff13c3d5d67 code=0x7ffc0000 [ 176.692805][ T38] audit: type=1326 audit(1758793464.458:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 177.123230][ T6403] overlayfs: failed to clone upperpath [ 181.861295][ T38] kauditd_printk_skb: 158 callbacks suppressed [ 181.861349][ T38] audit: type=1326 audit(1758793468.718:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 181.861669][ T38] audit: type=1326 audit(1758793468.718:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 181.861876][ T38] audit: type=1326 audit(1758793468.718:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 181.862142][ T38] audit: type=1326 audit(1758793468.718:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 181.862376][ T38] audit: type=1326 audit(1758793468.718:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 181.862618][ T38] audit: type=1326 audit(1758793468.718:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 181.862852][ T38] audit: type=1326 audit(1758793468.718:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 181.863078][ T38] audit: type=1326 audit(1758793468.718:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 181.863304][ T38] audit: type=1326 audit(1758793469.618:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d55205d67 code=0x7ffc0000 [ 181.924711][ T38] audit: type=1326 audit(1758793469.618:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6430 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 182.468949][ T6442] overlayfs: failed to clone upperpath [ 185.367493][ T6464] overlayfs: failed to clone upperpath [ 185.623679][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 185.623706][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 190.164104][ T38] kauditd_printk_skb: 453 callbacks suppressed [ 190.164123][ T38] audit: type=1326 audit(1758793477.928:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff58f67af79 code=0x7ffc0000 [ 190.165075][ T38] audit: type=1326 audit(1758793477.928:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff58f67af79 code=0x7ffc0000 [ 190.166006][ T38] audit: type=1326 audit(1758793477.928:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff58f67af79 code=0x7ffc0000 [ 190.179140][ T38] audit: type=1326 audit(1758793477.938:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58f6deec9 code=0x7ffc0000 [ 190.181001][ T38] audit: type=1326 audit(1758793477.948:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff58f67af79 code=0x7ffc0000 [ 190.182367][ T38] audit: type=1326 audit(1758793477.948:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff58f67af79 code=0x7ffc0000 [ 190.183268][ T38] audit: type=1326 audit(1758793477.948:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff58f67af79 code=0x7ffc0000 [ 190.184019][ T38] audit: type=1326 audit(1758793477.948:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58f6deec9 code=0x7ffc0000 [ 190.188904][ T38] audit: type=1326 audit(1758793477.948:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58f6deec9 code=0x7ffc0000 [ 190.189947][ T38] audit: type=1326 audit(1758793477.958:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6506 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff58f67af79 code=0x7ffc0000 [ 193.788848][ T5913] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 193.970586][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.970619][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.970654][ T5913] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 193.970670][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.036258][ T5913] usb 5-1: config 0 descriptor?? [ 194.575098][ T5913] usbhid 5-1:0.0: can't add hid device: -71 [ 194.575187][ T5913] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 194.603430][ T5913] usb 5-1: USB disconnect, device number 5 [ 199.413159][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.413213][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.978518][ T5955] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 200.626924][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 200.631239][ T5955] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.631269][ T5955] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.631295][ T5955] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.631321][ T5955] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.631366][ T5955] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.631391][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.390623][ T6599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.396191][ T6599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.424884][ T5955] usb 5-1: GET_CAPABILITIES returned 0 [ 201.424933][ T5955] usbtmc 5-1:16.0: can't read capabilities [ 202.629960][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.630052][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.630129][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.630461][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.630539][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.630622][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.631019][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.631099][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.631186][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.631581][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.631662][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.632049][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.632126][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.632202][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.632583][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 202.632668][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 202.710434][ T38] kauditd_printk_skb: 1214 callbacks suppressed [ 202.710450][ T38] audit: type=1326 audit(1758793490.478:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff13c3d5d67 code=0x7ffc0000 [ 202.710548][ T38] audit: type=1326 audit(1758793490.478:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 202.711787][ T38] audit: type=1326 audit(1758793490.478:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff13c3d5d67 code=0x7ffc0000 [ 202.711962][ T38] audit: type=1326 audit(1758793490.478:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 202.712259][ T38] audit: type=1326 audit(1758793490.478:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff13c3d5d67 code=0x7ffc0000 [ 202.712452][ T38] audit: type=1326 audit(1758793490.478:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 202.714673][ T38] audit: type=1326 audit(1758793490.478:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff13c3d5d67 code=0x7ffc0000 [ 202.714870][ T38] audit: type=1326 audit(1758793490.478:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 202.715254][ T38] audit: type=1326 audit(1758793490.478:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff13c3d5d67 code=0x7ffc0000 [ 202.715434][ T38] audit: type=1326 audit(1758793490.478:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6604 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 203.135482][ T5955] usb 5-1: USB disconnect, device number 6 [ 205.727922][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 205.727957][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 209.225234][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 209.225269][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 213.759207][ T38] kauditd_printk_skb: 253 callbacks suppressed [ 213.759548][ T38] audit: type=1326 audit(1758793501.528:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 213.759757][ T38] audit: type=1326 audit(1758793501.528:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 213.759949][ T38] audit: type=1326 audit(1758793501.528:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 213.763343][ T38] audit: type=1326 audit(1758793501.528:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859489af79 code=0x7ffc0000 [ 213.763395][ T38] audit: type=1326 audit(1758793501.528:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 213.763839][ T38] audit: type=1326 audit(1758793501.528:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 213.764025][ T38] audit: type=1326 audit(1758793501.528:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 213.764216][ T38] audit: type=1326 audit(1758793501.528:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 213.764413][ T38] audit: type=1326 audit(1758793501.528:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 213.764604][ T38] audit: type=1326 audit(1758793501.528:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85948feec9 code=0x7ffc0000 [ 213.951923][ T6705] fuse: Bad value for 'fd' [ 215.801610][ T5827] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 216.362454][ T5827] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 216.362478][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.424554][ T5827] usb 5-1: config 0 descriptor?? [ 217.354037][ T5827] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 217.373071][ T5827] usb 5-1: USB disconnect, device number 7 [ 217.386170][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 217.386221][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 218.595964][ T6744] fuse: Bad value for 'fd' [ 221.978909][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 221.979023][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 221.979049][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 221.979075][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 221.979122][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 222.546317][ T38] kauditd_printk_skb: 253 callbacks suppressed [ 222.546334][ T38] audit: type=1326 audit(1758793510.308:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 222.546380][ T38] audit: type=1326 audit(1758793510.308:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 222.546423][ T38] audit: type=1326 audit(1758793510.308:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 222.546465][ T38] audit: type=1326 audit(1758793510.308:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 222.546506][ T38] audit: type=1326 audit(1758793510.308:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 222.546555][ T38] audit: type=1326 audit(1758793510.308:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 222.546596][ T38] audit: type=1326 audit(1758793510.308:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 222.546638][ T38] audit: type=1326 audit(1758793510.308:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 222.547257][ T38] audit: type=1326 audit(1758793510.308:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff13c37af79 code=0x7ffc0000 [ 222.547816][ T38] audit: type=1326 audit(1758793510.308:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13c3deec9 code=0x7ffc0000 [ 226.389510][ T6835] mmap: syz.3.282 (6835) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 228.548699][ T6849] capability: warning: `syz.3.288' uses 32-bit capabilities (legacy support in use) [ 234.790370][ T6905] ptrace attach of "./syz-executor exec"[5842] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 235.684263][ T6914] syz.0.308 uses obsolete (PF_INET,SOCK_PACKET) [ 236.400345][ T6920] ptrace attach of "./syz-executor exec"[5842] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 242.915070][ T6989] 9pnet_fd: Insufficient options for proto=fd [ 243.381724][ T38] kauditd_printk_skb: 486 callbacks suppressed [ 243.381749][ T38] audit: type=1326 audit(1758793531.148:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 243.383004][ T38] audit: type=1326 audit(1758793531.148:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5520eec9 code=0x7ffc0000 [ 243.385951][ T38] audit: type=1326 audit(1758793531.148:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5520eec9 code=0x7ffc0000 [ 243.394714][ T38] audit: type=1326 audit(1758793531.158:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d551aaf79 code=0x7ffc0000 [ 243.400582][ T38] audit: type=1326 audit(1758793531.158:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5520eec9 code=0x7ffc0000 [ 243.400641][ T38] audit: type=1326 audit(1758793531.158:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5520eec9 code=0x7ffc0000 [ 243.400696][ T38] audit: type=1326 audit(1758793531.158:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5520eec9 code=0x7ffc0000 [ 243.400742][ T38] audit: type=1326 audit(1758793531.158:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5520eec9 code=0x7ffc0000 [ 243.400788][ T38] audit: type=1326 audit(1758793531.158:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5520eec9 code=0x7ffc0000 [ 243.400834][ T38] audit: type=1326 audit(1758793531.158:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5520eec9 code=0x7ffc0000 [ 245.928578][ T7041] fuse: Unknown parameter 'fd0x0000000000000004' [ 246.502966][ T7053] netlink: 72 bytes leftover after parsing attributes in process `syz.2.356'. [ 248.297508][ T7074] fuse: Unknown parameter 'fd0x0000000000000004' [ 253.374257][ T7114] fuse: Unknown parameter 'fd0x0000000000000004' [ 259.820909][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 259.820961][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.820988][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.821002][ T59] Workqueue: hci0 hci_rx_work [ 259.821060][ T59] Call Trace: [ 259.821069][ T59] [ 259.821079][ T59] dump_stack_lvl+0x189/0x250 [ 259.821119][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.821151][ T59] ? __pfx__printk+0x10/0x10 [ 259.821183][ T59] ? kernfs_path_from_node+0x2c/0x280 [ 259.821206][ T59] ? kernfs_path_from_node+0x243/0x280 [ 259.821226][ T59] ? kernfs_path_from_node+0x2c/0x280 [ 259.821252][ T59] sysfs_create_dir_ns+0x259/0x280 [ 259.821272][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 259.821301][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 259.821323][ T59] ? rt_spin_unlock+0x65/0x80 [ 259.821362][ T59] kobject_add_internal+0x5a5/0xb50 [ 259.821396][ T59] kobject_add+0x155/0x220 [ 259.821445][ T59] ? __pfx_kobject_add+0x10/0x10 [ 259.821478][ T59] ? get_device_parent+0x370/0x3a0 [ 259.821512][ T59] device_add+0x408/0xb50 [ 259.821540][ T59] hci_conn_add_sysfs+0xd5/0x1e0 [ 259.821570][ T59] le_conn_complete_evt+0xc3a/0x1220 [ 259.821620][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 259.821654][ T59] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 259.821689][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.821728][ T59] ? skb_pull_data+0xfb/0x200 [ 259.821759][ T59] hci_le_enh_conn_complete_evt+0x189/0x470 [ 259.821793][ T59] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 259.821832][ T59] hci_event_packet+0x78f/0x1200 [ 259.821863][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 259.821897][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 259.821924][ T59] ? __pfx_migrate_enable+0x10/0x10 [ 259.821961][ T59] ? hci_send_to_monitor+0xe2/0x570 [ 259.821999][ T59] hci_rx_work+0x46a/0xe80 [ 259.822037][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 259.822076][ T59] process_scheduled_works+0xade/0x17b0 [ 259.822141][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.822193][ T59] worker_thread+0x8a0/0xda0 [ 259.822255][ T59] kthread+0x70e/0x8a0 [ 259.822293][ T59] ? __pfx_worker_thread+0x10/0x10 [ 259.822321][ T59] ? __pfx_kthread+0x10/0x10 [ 259.822362][ T59] ? __pfx_kthread+0x10/0x10 [ 259.822399][ T59] ret_from_fork+0x436/0x7d0 [ 259.822433][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 259.822470][ T59] ? __switch_to_asm+0x39/0x70 [ 259.822490][ T59] ? __switch_to_asm+0x33/0x70 [ 259.822510][ T59] ? __pfx_kthread+0x10/0x10 [ 259.822546][ T59] ret_from_fork_asm+0x1a/0x30 [ 259.822587][ T59] [ 259.822633][ T59] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 259.822675][ T59] Bluetooth: hci0: failed to register connection device [ 260.892615][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.892722][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.407981][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'. [ 272.488026][ T7240] syz.1.418 (7240) used greatest stack depth: 18088 bytes left [ 275.229769][ T7249] overlayfs: failed to clone upperpath [ 281.449932][ C1] sched: DL replenish lagged too much [ 286.939026][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 288.149487][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 288.554702][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.567387][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.585238][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.587566][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.632438][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.926715][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.946219][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.947306][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.989169][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.992011][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.404647][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 289.406858][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 289.407840][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 289.508840][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 289.509891][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.688848][ T5851] Bluetooth: hci5: command tx timeout [ 290.689977][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 291.089265][ T5851] Bluetooth: hci6: command tx timeout [ 291.578843][ T5851] Bluetooth: hci7: command tx timeout [ 292.798518][ T5851] Bluetooth: hci5: command tx timeout [ 293.178425][ T5851] Bluetooth: hci6: command tx timeout [ 293.648578][ T5851] Bluetooth: hci7: command tx timeout [ 294.860461][ T5851] Bluetooth: hci5: command tx timeout [ 295.250334][ T5851] Bluetooth: hci6: command tx timeout [ 295.728610][ T5851] Bluetooth: hci7: command tx timeout [ 296.928651][ T5851] Bluetooth: hci5: command tx timeout [ 297.338542][ T5851] Bluetooth: hci6: command tx timeout [ 297.808769][ T5851] Bluetooth: hci7: command tx timeout [ 298.610321][ T7270] chnl_net:caif_netlink_parms(): no params data found [ 303.520928][ T7312] overlayfs: failed to resolve './file1': -2 [ 308.323159][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'. [ 309.702737][ T7297] syz.1.432 (7297) used greatest stack depth: 16008 bytes left [ 315.269368][ T7338] overlayfs: failed to resolve './file1': -2 [ 322.311627][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.311713][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.482273][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.503067][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.504369][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.505793][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.507013][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.971308][ T5851] Bluetooth: hci1: command tx timeout [ 336.048609][ T5851] Bluetooth: hci1: command tx timeout [ 338.148574][ T5851] Bluetooth: hci1: command tx timeout [ 340.208600][ T5851] Bluetooth: hci1: command tx timeout [ 344.261297][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.277551][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.291504][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.307641][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.316054][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.448578][ T59] Bluetooth: hci3: command tx timeout [ 347.519480][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.537785][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.552556][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.553941][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.554787][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.529683][ T5851] Bluetooth: hci3: command tx timeout [ 348.977212][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 348.997726][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 349.007417][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 349.017572][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 349.031156][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 349.139343][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 349.159898][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 349.161059][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 349.162469][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 349.163626][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 349.650505][ T5851] Bluetooth: hci4: command tx timeout [ 350.608584][ T5851] Bluetooth: hci3: command tx timeout [ 351.098915][ T59] Bluetooth: hci8: command tx timeout [ 351.258896][ T5851] Bluetooth: hci9: command tx timeout [ 351.728601][ T5851] Bluetooth: hci4: command tx timeout [ 352.688942][ T5851] Bluetooth: hci3: command tx timeout [ 353.168492][ T5851] Bluetooth: hci8: command tx timeout [ 353.338644][ T5851] Bluetooth: hci9: command tx timeout [ 353.808526][ T5851] Bluetooth: hci4: command tx timeout [ 355.248702][ T5851] Bluetooth: hci8: command tx timeout [ 355.408774][ T5851] Bluetooth: hci9: command tx timeout [ 355.888629][ T5851] Bluetooth: hci4: command tx timeout [ 357.328702][ T5851] Bluetooth: hci8: command tx timeout [ 357.498709][ T5851] Bluetooth: hci9: command tx timeout [ 383.741559][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.741645][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.664740][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.667533][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.687859][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.709140][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.729681][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 396.969568][ T5851] Bluetooth: hci0: command tx timeout [ 399.018094][ T59] Bluetooth: hci0: command tx timeout [ 401.088713][ T59] Bluetooth: hci0: command tx timeout [ 403.168629][ T59] Bluetooth: hci0: command tx timeout [ 404.719678][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.747052][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.756308][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.758187][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.775062][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.858621][ T59] Bluetooth: hci2: command tx timeout [ 408.141416][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 408.165236][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 408.166313][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 408.168153][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 408.199238][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 408.938468][ T5851] Bluetooth: hci2: command tx timeout [ 409.656577][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 409.674362][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 409.675436][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 409.700045][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 409.732189][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 409.857793][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 409.876817][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 409.877839][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 409.901496][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 409.902540][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 410.288573][ T5848] Bluetooth: hci6: command tx timeout [ 411.008569][ T5848] Bluetooth: hci2: command tx timeout [ 411.418183][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 411.808538][ T5848] Bluetooth: hci7: command tx timeout [ 411.986619][ T5848] Bluetooth: hci10: command tx timeout [ 412.368598][ T5848] Bluetooth: hci6: command tx timeout [ 413.088702][ T5848] Bluetooth: hci2: command tx timeout [ 413.888821][ T5848] Bluetooth: hci7: command tx timeout [ 414.048525][ T5848] Bluetooth: hci10: command tx timeout [ 414.449947][ T5848] Bluetooth: hci6: command tx timeout [ 415.968630][ T5851] Bluetooth: hci7: command tx timeout [ 416.128650][ T5851] Bluetooth: hci10: command tx timeout [ 416.529862][ T5851] Bluetooth: hci6: command tx timeout [ 418.048557][ T5851] Bluetooth: hci7: command tx timeout [ 418.208539][ T5851] Bluetooth: hci10: command tx timeout [ 443.578596][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.578737][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.579332][ T7266] bridge_slave_0: entered allmulticast mode [ 444.008504][ T7266] bridge_slave_0: entered promiscuous mode [ 445.175086][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.175172][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.248202][ T5848] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 453.268635][ T5848] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 453.269745][ T5848] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 453.271552][ T5848] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 453.323473][ T5848] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 457.508423][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 458.696540][ T5848] Bluetooth: hci11: command tx timeout [ 460.778590][ T5848] Bluetooth: hci11: command tx timeout [ 462.848707][ T5848] Bluetooth: hci11: command tx timeout [ 464.940501][ T5848] Bluetooth: hci11: command tx timeout [ 465.456178][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.474308][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.475396][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.476809][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.506714][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.570187][ T5848] Bluetooth: hci5: command tx timeout [ 467.741594][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 468.526422][ T5844] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 468.546086][ T5844] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 468.547125][ T5844] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 468.565565][ T5844] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 468.566568][ T5844] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 469.668534][ T5848] Bluetooth: hci5: command tx timeout [ 469.981795][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 470.056523][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 470.065856][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 470.067063][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 470.067840][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 470.167688][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 470.184606][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 470.185741][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 470.187153][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 470.188115][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 471.752453][ T59] Bluetooth: hci5: command tx timeout [ 472.048799][ T59] Bluetooth: hci12: command tx timeout [ 472.128855][ T59] Bluetooth: hci13: command tx timeout [ 472.288944][ T59] Bluetooth: hci14: command tx timeout [ 472.857155][ T59] Bluetooth: hci9: command 0x0406 tx timeout [ 472.857271][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 472.857349][ T59] Bluetooth: hci8: command 0x0406 tx timeout [ 473.808395][ T5155] Bluetooth: hci5: command tx timeout [ 474.146598][ T5155] Bluetooth: hci12: command tx timeout [ 474.218766][ T5155] Bluetooth: hci13: command tx timeout [ 474.368961][ T5155] Bluetooth: hci14: command tx timeout [ 476.208564][ T5851] Bluetooth: hci12: command tx timeout [ 476.298640][ T5851] Bluetooth: hci13: command tx timeout [ 476.449018][ T5851] Bluetooth: hci14: command tx timeout [ 478.304196][ T5851] Bluetooth: hci12: command tx timeout [ 478.368692][ T5851] Bluetooth: hci13: command tx timeout [ 478.538888][ T5851] Bluetooth: hci14: command tx timeout [ 504.688936][ T39] INFO: task syz-executor:5852 blocked for more than 143 seconds. [ 504.688977][ T39] Not tainted syzkaller #0 [ 504.688988][ T39] Blocked by coredump. [ 504.688994][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.689004][ T39] task:syz-executor state:D stack:21064 pid:5852 tgid:5852 ppid:1 task_flags:0x40054c flags:0x00004006 [ 504.689074][ T39] Call Trace: [ 504.689089][ T39] [ 504.689105][ T39] __schedule+0x16f3/0x4c20 [ 504.689189][ T39] ? __lock_acquire+0xab9/0xd20 [ 504.689222][ T39] ? __pfx___schedule+0x10/0x10 [ 504.689275][ T39] ? schedule+0x91/0x360 [ 504.689311][ T39] schedule+0x165/0x360 [ 504.689345][ T39] schedule_timeout+0x9a/0x270 [ 504.689377][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 504.689424][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.689458][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.689489][ T39] ? wait_for_completion+0x267/0x5d0 [ 504.689525][ T39] wait_for_completion+0x2bf/0x5d0 [ 504.689575][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 504.689617][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 504.689650][ T39] rcu_barrier+0x463/0x570 [ 504.689683][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 504.689718][ T39] netdev_run_todo+0x327/0xea0 [ 504.689747][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 504.689779][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 504.689801][ T39] ? kasan_quarantine_put+0xdd/0x220 [ 504.689827][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.689872][ T39] ? netdev_state_change+0x1ca/0x220 [ 504.689905][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 504.689939][ T39] tun_chr_close+0x13f/0x1c0 [ 504.689975][ T39] __fput+0x458/0xa80 [ 504.690012][ T39] task_work_run+0x1d4/0x260 [ 504.690039][ T39] ? __pfx_task_work_run+0x10/0x10 [ 504.690064][ T39] ? do_exit+0x6b0/0x2300 [ 504.690091][ T39] ? kmem_cache_free+0x195/0x510 [ 504.690130][ T39] do_exit+0x6b5/0x2300 [ 504.690151][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 504.690192][ T39] ? __lock_acquire+0xab9/0xd20 [ 504.690225][ T39] ? __pfx_do_exit+0x10/0x10 [ 504.690243][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 504.690276][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 504.690315][ T39] do_group_exit+0x21c/0x2d0 [ 504.690345][ T39] get_signal+0x125e/0x1310 [ 504.690400][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 504.690430][ T39] ? kmem_cache_free+0x402/0x510 [ 504.690463][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 504.690509][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 504.690544][ T39] exit_to_user_mode_loop+0x75/0x110 [ 504.690575][ T39] do_syscall_64+0x2bd/0x3b0 [ 504.690596][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.690629][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.690652][ T39] ? clear_bhb_loop+0x60/0xb0 [ 504.690680][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.690708][ T39] RIP: 0033:0x7ff13c3dd8dc [ 504.690732][ T39] RSP: 002b:00007ffc82581990 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.690755][ T39] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00007ff13c3dd8dc [ 504.690772][ T39] RDX: 0000000000000030 RSI: 00007ffc82581a50 RDI: 00000000000000f9 [ 504.690786][ T39] RBP: 00007ffc825819fc R08: 0000000000000000 R09: 00007ffc82581707 [ 504.690801][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000067 [ 504.690815][ T39] R13: 0000000000000000 R14: 0000000000041fdc R15: 00007ffc82581a50 [ 504.690851][ T39] [ 504.690909][ T39] [ 504.690909][ T39] Showing all locks held in the system: [ 504.690920][ T39] 3 locks held by kworker/u8:0/12: [ 504.690933][ T39] #0: ffff88814ce2c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 504.690994][ T39] #1: ffffc90000117bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 504.691052][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 504.691118][ T39] 7 locks held by rcuc/1/28: [ 504.691130][ T39] 2 locks held by ktimers/1/29: [ 504.691142][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 504.691197][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 504.691254][ T39] 2 locks held by ksoftirqd/1/30: [ 504.691267][ T39] 1 lock held by khungtaskd/39: [ 504.691279][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 504.691338][ T39] 3 locks held by kworker/0:2/992: [ 504.691350][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 504.691407][ T39] #1: ffffc90004dd7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 504.691462][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 504.691519][ T39] 3 locks held by kworker/u8:9/1919: [ 504.691531][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 504.691588][ T39] #1: ffffc90005fe7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 504.691644][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 504.691707][ T39] 2 locks held by getty/5596: [ 504.691719][ T39] #0: ffff88823bf6c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 504.691783][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 504.691840][ T39] 1 lock held by syz-executor/5843: [ 504.691853][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 504.691905][ T39] 1 lock held by syz-executor/5852: [ 504.691917][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 504.691968][ T39] 1 lock held by syz-executor/5853: [ 504.691980][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 504.692036][ T39] 2 locks held by kworker/1:6/5928: [ 504.692049][ T39] 3 locks held by kworker/1:8/7224: [ 504.692061][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 504.692125][ T39] #1: ffffc9001c0c7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 504.692180][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 504.692244][ T39] 1 lock held by syz-executor/7266: [ 504.692256][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 504.692316][ T39] 1 lock held by syz-executor/7270: [ 504.692328][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 504.692388][ T39] 1 lock held by syz-executor/7273: [ 504.692400][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 504.692461][ T39] 2 locks held by kworker/1:13/7304: [ 504.692473][ T39] 1 lock held by syz.1.446/7342: [ 504.692484][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 504.692535][ T39] 1 lock held by syz.0.449/7356: [ 504.692547][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 504.692607][ T39] 4 locks held by syz-executor/7364: [ 504.692620][ T39] #0: ffff888065e5ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 504.692677][ T39] #1: ffff888065e5c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 504.692738][ T39] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 504.692790][ T39] #3: ffff888064fd3b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 504.692844][ T39] 3 locks held by syz-executor/7369: [ 504.692856][ T39] #0: ffff888052dace80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 504.692912][ T39] #1: ffff888052dac0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 504.692972][ T39] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 504.693020][ T39] 2 locks held by syz-executor/7375: [ 504.693030][ T39] #0: ffff888051d78e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 504.693100][ T39] #1: ffff888051d780a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 504.693155][ T39] 1 lock held by syz-executor/7388: [ 504.693166][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693217][ T39] 1 lock held by syz-executor/7393: [ 504.693228][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693279][ T39] 1 lock held by syz-executor/7398: [ 504.693290][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693340][ T39] 1 lock held by syz-executor/7403: [ 504.693352][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693402][ T39] 1 lock held by syz-executor/7405: [ 504.693414][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693465][ T39] 1 lock held by syz-executor/7415: [ 504.693476][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693527][ T39] 1 lock held by syz-executor/7424: [ 504.693538][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693589][ T39] 1 lock held by syz-executor/7427: [ 504.693601][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693652][ T39] 1 lock held by syz-executor/7431: [ 504.693664][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693714][ T39] 1 lock held by syz-executor/7433: [ 504.693725][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 504.693776][ T39] [ 504.693782][ T39] ============================================= [ 504.693782][ T39] [ 504.693802][ T39] NMI backtrace for cpu 0 [ 504.693827][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 504.693850][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.693862][ T39] Call Trace: [ 504.693870][ T39] [ 504.693878][ T39] dump_stack_lvl+0x189/0x250 [ 504.693933][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.693966][ T39] ? __pfx__printk+0x10/0x10 [ 504.694005][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 504.694037][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 504.694069][ T39] ? __pfx__printk+0x10/0x10 [ 504.694106][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 504.694137][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 504.694170][ T39] watchdog+0xf93/0xfe0 [ 504.694205][ T39] ? watchdog+0x1de/0xfe0 [ 504.694240][ T39] kthread+0x70e/0x8a0 [ 504.694277][ T39] ? __pfx_watchdog+0x10/0x10 [ 504.694305][ T39] ? __pfx_kthread+0x10/0x10 [ 504.694343][ T39] ? __pfx_kthread+0x10/0x10 [ 504.694378][ T39] ret_from_fork+0x436/0x7d0 [ 504.694410][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 504.694446][ T39] ? __switch_to_asm+0x39/0x70 [ 504.694465][ T39] ? __switch_to_asm+0x33/0x70 [ 504.694485][ T39] ? __pfx_kthread+0x10/0x10 [ 504.694520][ T39] ret_from_fork_asm+0x1a/0x30 [ 504.694559][ T39] [ 504.694567][ T39] Sending NMI from CPU 0 to CPUs 1: [ 504.694595][ C1] NMI backtrace for cpu 1 [ 504.694612][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 504.694644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.694660][ C1] RIP: 0010:lockdep_assert_in_softirq_func+0x0/0xb0 [ 504.694683][ C1] Code: 92 c1 20 c1 0f b6 c1 e9 fe 2d 5e 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 56 53 49 be 00 00 00 00 00 fc ff df 48 c7 c0 40 74 [ 504.694698][ C1] RSP: 0018:ffffc90000a3f808 EFLAGS: 00000246 [ 504.694714][ C1] RAX: abeb1e1797b32500 RBX: ffffffff8d252d18 RCX: 0000000000000000 [ 504.694727][ C1] RDX: 0000000000000002 RSI: ffffffff8d03ad79 RDI: 00000000ffffffff [ 504.694739][ C1] RBP: 0000000000000001 R08: ffffffff8f1d6337 R09: 1ffffffff1e3ac66 [ 504.694752][ C1] R10: dffffc0000000000 R11: fffffbfff1e3ac67 R12: ffff8880b893c5d0 [ 504.694765][ C1] R13: ffff8880b893c830 R14: 0000000000000006 R15: dffffc0000000000 [ 504.694778][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 504.694793][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.694805][ C1] CR2: 00007fd264d76d00 CR3: 0000000038892000 CR4: 00000000003526f0 [ 504.694821][ C1] Call Trace: [ 504.694836][ C1] [ 504.694842][ C1] process_backlog+0xd8/0x900 [ 504.694876][ C1] __napi_poll+0xb3/0x540 [ 504.694902][ C1] net_rx_action+0x707/0xe00 [ 504.694925][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.694964][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 504.695010][ C1] handle_softirqs+0x22f/0x710 [ 504.695039][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 504.695069][ C1] run_ktimerd+0xcf/0x190 [ 504.695095][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 504.695131][ C1] ? schedule+0x91/0x360 [ 504.695159][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 504.695181][ C1] smpboot_thread_fn+0x53f/0xa60 [ 504.695203][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 504.695230][ C1] kthread+0x70e/0x8a0 [ 504.695258][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 504.695279][ C1] ? __pfx_kthread+0x10/0x10 [ 504.695307][ C1] ? __pfx_kthread+0x10/0x10 [ 504.695334][ C1] ret_from_fork+0x436/0x7d0 [ 504.695358][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 504.695384][ C1] ? __switch_to_asm+0x39/0x70 [ 504.695400][ C1] ? __switch_to_asm+0x33/0x70 [ 504.695416][ C1] ? __pfx_kthread+0x10/0x10 [ 504.695443][ C1] ret_from_fork_asm+0x1a/0x30 [ 504.695469][ C1] [ 504.695601][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 504.695617][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 504.695641][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.695653][ T39] Call Trace: [ 504.695661][ T39] [ 504.695669][ T39] dump_stack_lvl+0x99/0x250 [ 504.695702][ T39] ? __asan_memcpy+0x40/0x70 [ 504.695725][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.695757][ T39] ? __pfx__printk+0x10/0x10 [ 504.695795][ T39] vpanic+0x281/0x750 [ 504.695829][ T39] ? __pfx_vpanic+0x10/0x10 [ 504.695858][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 504.695879][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.695924][ T39] panic+0xb9/0xc0 [ 504.695954][ T39] ? __pfx_panic+0x10/0x10 [ 504.695989][ T39] ? irq_work_queue+0xc3/0x140 [ 504.696021][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 504.696052][ T39] watchdog+0xfd2/0xfe0 [ 504.696092][ T39] ? watchdog+0x1de/0xfe0 [ 504.696126][ T39] kthread+0x70e/0x8a0 [ 504.696162][ T39] ? __pfx_watchdog+0x10/0x10 [ 504.696189][ T39] ? __pfx_kthread+0x10/0x10 [ 504.696228][ T39] ? __pfx_kthread+0x10/0x10 [ 504.696261][ T39] ret_from_fork+0x436/0x7d0 [ 504.696292][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 504.696328][ T39] ? __switch_to_asm+0x39/0x70 [ 504.696347][ T39] ? __switch_to_asm+0x33/0x70 [ 504.696366][ T39] ? __pfx_kthread+0x10/0x10 [ 504.696400][ T39] ret_from_fork_asm+0x1a/0x30 [ 504.696438][ T39] [ 504.696851][ T39] Kernel Offset: disabled