last executing test programs: 24m50.493071231s ago: executing program 4 (id=592): r0 = userfaultfd(0x80801) r1 = userfaultfd(0x80001) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0x300, 0xce5ba66a3b447375}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 24m50.206551149s ago: executing program 4 (id=596): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x401) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 24m49.637218758s ago: executing program 4 (id=600): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x101b, &(0x7f0000001640)=""/4123}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="18"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @private=0xa010102}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 24m48.758415686s ago: executing program 4 (id=605): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'bridge0\x00', 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x181, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) write$vhost_msg_v2(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x102, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x800) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0x37) sendto$inet(r6, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) 24m47.366271286s ago: executing program 4 (id=611): openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) syz_open_dev$dri(0x0, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) 24m43.770786892s ago: executing program 4 (id=623): r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) waitid(0x1, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) 24m28.365953087s ago: executing program 32 (id=623): r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) waitid(0x1, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) 20m59.830329951s ago: executing program 0 (id=2470): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf2501000000080001", @ANYRES32=0x0], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24040084) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsetxattr$smack_xattr_label(r1, &(0x7f0000000400)='security.SMACK64MMAP\x00', &(0x7f0000000440)={'*]*]'}, 0x5, 0x1) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) read(r1, &(0x7f0000000100)=""/217, 0xd9) 20m58.691808959s ago: executing program 0 (id=2479): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8a, "f700", '\x00\x00G\x00', "0500000c", "2600ffff", ["50d59404000100", "818e71e2e9fffffff2ff00", "0c436d743c97c443084000", '5\x00']}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4400) 20m58.377115451s ago: executing program 0 (id=2480): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d80"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 20m58.036907101s ago: executing program 0 (id=2481): openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen(0xffffffffffffffff, 0x10040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 20m57.706501937s ago: executing program 0 (id=2482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xc0=\x8f\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xde\xc3\x1e\xb8\xd6w\xb0\"~\x15G\xe6\xe5U\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#S\xd9\xe3~Sj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j\x15U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\x11\xe7\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, 0x0, 0x20000000) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendfile(r6, r1, &(0x7f00000001c0), 0x10000000000074) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1}, 0x94) 20m56.293774051s ago: executing program 0 (id=2484): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}}, 0x0) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000280), 0x1001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x0, 0x8, 0x3, 0x0, 0x6}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x10003e, r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000380)={0x0, 0xbae1, 0xac, '\x00', &(0x7f0000000340)=0x40}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r8, 0x10, 0x7800, 0x0, 0x80, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @broadcast}}}}) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x3, 0x6, 0x44, 0x66, 0x0, 0xdf, 0x1, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x14, 0x49, 0x0, 0x4, [0x1, 0x9, 0x0, 0x5]}, @lsrr={0x83, 0x13, 0x57, [@multicast2, @remote, @private=0xa010100, @rand_addr=0x64010100]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x7}}}}}, 0x0) syz_usb_connect$rtl8150(0x59193627f6b6df34, 0xffffffffffffff26, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b04a5, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 20m41.112486352s ago: executing program 33 (id=2484): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}}, 0x0) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000280), 0x1001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x0, 0x8, 0x3, 0x0, 0x6}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x10003e, r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000380)={0x0, 0xbae1, 0xac, '\x00', &(0x7f0000000340)=0x40}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r8, 0x10, 0x7800, 0x0, 0x80, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @broadcast}}}}) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x3, 0x6, 0x44, 0x66, 0x0, 0xdf, 0x1, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x14, 0x49, 0x0, 0x4, [0x1, 0x9, 0x0, 0x5]}, @lsrr={0x83, 0x13, 0x57, [@multicast2, @remote, @private=0xa010100, @rand_addr=0x64010100]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x7}}}}}, 0x0) syz_usb_connect$rtl8150(0x59193627f6b6df34, 0xffffffffffffff26, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b04a5, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 15m17.684714517s ago: executing program 2 (id=3883): openat$vcsa(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000000100)=[{&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000000c0)=""/25, 0x19}], 0x3, 0x0) 15m17.350203813s ago: executing program 2 (id=3885): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000300", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r3], 0x0) pwrite64(r2, &(0x7f0000000400)="c8cd56ef", 0x4, 0x7) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0xe, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7, 0xf7, 0x1, {0x22, 0xbbd}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf8, 0xdf, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x4, 0x9, 0x10}, 0x1c, &(0x7f0000000080)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "71d64f098f9f4f56730bd8aa639210f0"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x423}}, {0x14, &(0x7f0000000100)=@string={0x14, 0x3, "b7dbab27082602985de133407e40b7ff83e2"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2817}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x142b}}]}) 15m17.069894052s ago: executing program 2 (id=3888): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00', @ANYBLOB="010000000000000000003900000008"], 0x40}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@md0, 0x0, &(0x7f0000000e40)='./cgroup.cpu/cpuset.cpus\x00') syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000600), &(0x7f0000000200)=0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fanotify_init(0x10, 0x101000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r6, 0x7e, 0x800003a, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 15m16.993234673s ago: executing program 2 (id=3889): prlimit64(0x0, 0x12, 0x0, 0x0) (fail_nth: 1) 15m16.866836629s ago: executing program 2 (id=3890): r0 = socket(0x15, 0x5, 0x0) unshare(0x20000400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0xb, 0x0, &(0x7f0000000340)) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) unshare(0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="e1"]}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 15m16.64998806s ago: executing program 2 (id=3891): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00', @ANYBLOB="010000000000000000003900000008"], 0x40}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@md0, 0x0, &(0x7f0000000e40)='./cgroup.cpu/cpuset.cpus\x00') close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 14m2.993093725s ago: executing program 6 (id=4032): r0 = getpgrp(0x0) mount(&(0x7f0000000e00)=@md0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='iso9660\x00', 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x77, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca3", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x51, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c) futex(&(0x7f000000cffc)=0x1, 0x6, 0x1, &(0x7f000000b000), 0x0, 0x0) 14m1.25567276s ago: executing program 6 (id=4036): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) 14m0.998552091s ago: executing program 6 (id=4038): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000081100", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe5}, 0x94) r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x10401, 0x189140) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x9b, 0x5001, 0x5, 0x7, 0x8, 0x0, 0x7}}) mount$afs(&(0x7f0000000180)=@cell={0x23, 'syz1:', 'syz1', '.backup'}, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x2, 0xffff, 0x303e0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000122, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r1]}, 0x94) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0xfff, 0x0, 0x3005, 0x0, 0xa856, {0xe, 0x4}, 0x1}) 14m0.610038374s ago: executing program 6 (id=4041): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x13, 0x80801) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000400)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, 0x0, 0x40004010) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002800)={0x2020}, 0x2020) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000020000000200000604000000010000106cf7fd7b0a0000000a000000002e2e"], 0x0, 0x38}, 0x28) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001d00)={0x2020}, 0x2020) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x5}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030328bd7000000000000a000000040003"], 0x1c}}, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 13m58.351272374s ago: executing program 6 (id=4045): r0 = getpgrp(0x0) mount(&(0x7f0000000e00)=@md0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='iso9660\x00', 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x77, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca3", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x51, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x1, &(0x7f000000b000), 0x0, 0x0) 13m56.712859658s ago: executing program 6 (id=4047): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x40002102, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)="cb", 0x1}], 0x1}, 0x4000010) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000900)}], 0x3}}], 0x1, 0x20000044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x17}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3ff, &(0x7f0000000100)={0x0, 0x9441, 0x80, 0x3, 0x6f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000500)=0xc) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d02"], 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) 13m41.557401204s ago: executing program 34 (id=4047): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x40002102, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)="cb", 0x1}], 0x1}, 0x4000010) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000900)}], 0x3}}], 0x1, 0x20000044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x17}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3ff, &(0x7f0000000100)={0x0, 0x9441, 0x80, 0x3, 0x6f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000500)=0xc) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d02"], 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) 11m52.112985618s ago: executing program 1 (id=4237): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4400) 11m52.043630324s ago: executing program 1 (id=4238): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4f, 0x0, 0x0, 0x2}, 0x28) 11m51.988028389s ago: executing program 1 (id=4239): syz_emit_ethernet(0x19e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, [{0x3, 0x9, "bd3e8080a8038080a8030037ff0b00ffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d34ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "77f9290b6e87290b6e87f278e94724e20c43c95f9b49204a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02a2a380eb697adf4e1d9090705f85ddf041bc076775f5d27555d3f60c44192fa92eee16828c1c4aa17f4a743e212cd2c084e5acc9aae96852cd54afd2d60786"}]}}}}}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0xffffff6a) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) 11m50.768500857s ago: executing program 1 (id=4242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 11m50.385973323s ago: executing program 1 (id=4244): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0x5) sendmmsg$inet_sctp(r1, &(0x7f0000008080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@authinfo={0x12, 0x84, 0x6, {0x1}}], 0x18, 0x40440c0}], 0x1, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001ceef38a2200030000000000080001400000000c08000240000000018f00010073797a3000000000140000001100010000000000000000000000000a5f37f0f3"], 0xcc}}, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/freeze_filesystems', 0x42, 0x0) pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000340)={0x401, 0x9}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x100008, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r4}, 0x38) eventfd2(0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000200)=')', &(0x7f0000000080)=""/59}, 0x20) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x33}, 0x0, @in6=@mcast1}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="4030040000002e101dce"], 0x0, 0x0, 0x0, 0x0}) 11m46.544171693s ago: executing program 1 (id=4248): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df25020000000800011f61", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x7880, 0x40, 0x5, {{0x28, 0x4, 0x0, 0x7, 0xa0, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @private=0xa010101, {[@rr={0x7, 0x2b, 0x7e, [@private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0xf, [{@rand_addr=0x64010100, 0x7}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x3, 0x45}, @timestamp_addr={0x44, 0x4, 0x76, 0x1, 0x2}, @rr={0x7, 0x13, 0xbd, [@remote, @remote, @broadcast, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x32, 0x1, [{0x7, 0x6, "afbd9f9a"}, {0x2, 0x4, '<&'}, {0x6, 0x7, "d24cb91433"}, {0x6, 0xc, "b97280937e623a9ecad5"}, {0x5, 0xf, "9a9c2db9ad8a353e4c2b16fb45"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0xc, 0xf, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x64, 0x0, 0x6, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xe1, 0x3, 0x9, [{@broadcast, 0xe2e7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x93d, 0x8, {{0x2c, 0x4, 0x3, 0x2e, 0xb0, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x18, 0x2d, 0x0, 0x1, [0x2333, 0x2, 0x5, 0xaf5d, 0xe]}, @timestamp_prespec={0x44, 0x14, 0x9e, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0x82}]}, @cipso={0x86, 0x17, 0x3, [{0x2, 0xa, "eb8707288210eb64"}, {0x7, 0x7, "a7944043e5"}]}, @rr={0x7, 0x23, 0x5f, [@dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @private=0xa010102]}, @rr={0x7, 0x17, 0x98, [@empty, @rand_addr=0x64010102, @rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x2, [0x4, 0x2, 0xa789, 0x2, 0x80000001, 0x1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x6, 0xd6e8ea2, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8, 0xb978, 0x2d}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x1, 0x5, {{0x14, 0x4, 0x2, 0x14, 0x50, 0x67, 0x0, 0x8f, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@lsrr={0x83, 0x1f, 0xab, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @local, @multicast1]}, @timestamp={0x44, 0x14, 0xaa, 0x0, 0x8, [0x5, 0xd56, 0x7, 0x161b]}, @generic={0x44, 0x8, "5866ca46ecc9"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 11m31.238493985s ago: executing program 35 (id=4248): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df25020000000800011f61", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x7880, 0x40, 0x5, {{0x28, 0x4, 0x0, 0x7, 0xa0, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @private=0xa010101, {[@rr={0x7, 0x2b, 0x7e, [@private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0xf, [{@rand_addr=0x64010100, 0x7}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x3, 0x45}, @timestamp_addr={0x44, 0x4, 0x76, 0x1, 0x2}, @rr={0x7, 0x13, 0xbd, [@remote, @remote, @broadcast, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x32, 0x1, [{0x7, 0x6, "afbd9f9a"}, {0x2, 0x4, '<&'}, {0x6, 0x7, "d24cb91433"}, {0x6, 0xc, "b97280937e623a9ecad5"}, {0x5, 0xf, "9a9c2db9ad8a353e4c2b16fb45"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0xc, 0xf, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x64, 0x0, 0x6, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xe1, 0x3, 0x9, [{@broadcast, 0xe2e7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x93d, 0x8, {{0x2c, 0x4, 0x3, 0x2e, 0xb0, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x18, 0x2d, 0x0, 0x1, [0x2333, 0x2, 0x5, 0xaf5d, 0xe]}, @timestamp_prespec={0x44, 0x14, 0x9e, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0x82}]}, @cipso={0x86, 0x17, 0x3, [{0x2, 0xa, "eb8707288210eb64"}, {0x7, 0x7, "a7944043e5"}]}, @rr={0x7, 0x23, 0x5f, [@dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @private=0xa010102]}, @rr={0x7, 0x17, 0x98, [@empty, @rand_addr=0x64010102, @rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x2, [0x4, 0x2, 0xa789, 0x2, 0x80000001, 0x1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x6, 0xd6e8ea2, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8, 0xb978, 0x2d}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x1, 0x5, {{0x14, 0x4, 0x2, 0x14, 0x50, 0x67, 0x0, 0x8f, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@lsrr={0x83, 0x1f, 0xab, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @local, @multicast1]}, @timestamp={0x44, 0x14, 0xaa, 0x0, 0x8, [0x5, 0xd56, 0x7, 0x161b]}, @generic={0x44, 0x8, "5866ca46ecc9"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 8m51.8264026s ago: executing program 5 (id=4502): syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010009d0000000000000000000000000a60000000060a0b1600000000000000000200000a200004801c000180090001006d617371000089510c00028008004afe000000100900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a4b4140007fa17d40db9c388083a861f6740b28d0ad0436eb7f8c823cbd1da98fa7f574b14003d8a0f5af04209c01c7d277800145f5bed02aa687aa10d9761b9670e676e9735890c59ad72dddec76add1010304d440610e2f25949cf4c345e2a415de248b"], 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x3, 0xff, 0xe4, 0x0, 0x6, 0x70, 0x3, 0x5, 0x9, 0x5, 0xc, 0x2, 0x0, 0xc, 0x4, 0x10}}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000024000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip6_vti0\x00'}}, 0x1e) unshare(0x400) 8m50.574997389s ago: executing program 5 (id=4504): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x100}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = syz_io_uring_setup(0x4d0d, &(0x7f0000000200)={0x0, 0x0, 0x80}, &(0x7f0000000280), &(0x7f0000000380), &(0x7f00000002c0)) r8 = syz_io_uring_setup(0xa91, &(0x7f00000003c0)={0x0, 0xb402, 0x2, 0x0, 0x367}, &(0x7f0000000340), &(0x7f00000005c0), &(0x7f0000000000)) io_uring_enter(r8, 0x50d2, 0x6db7, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x40, 0x2, 0x7fff000a}]}) process_mrelease(0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000180)=[0x200, 0x4], 0x2) 8m49.327638959s ago: executing program 5 (id=4508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) sendfile(r8, r1, &(0x7f00000001c0), 0x10000000000074) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m47.922636387s ago: executing program 5 (id=4512): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4a0f0000}, 0xc0c0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8) 8m47.912107017s ago: executing program 5 (id=4513): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x10, 0x10, 0x9, 0x2, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x67, 0x8, 0x27, 0x29, 0x0, @multicast1, @multicast2}}}}) 8m47.034265437s ago: executing program 5 (id=4515): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x20, 0x0, 0x6}, 0x28) 8m46.56336385s ago: executing program 36 (id=4515): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x20, 0x0, 0x6}, 0x28) 9.992017324s ago: executing program 3 (id=5519): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1], 0x1, 0x400}) 9.834012351s ago: executing program 3 (id=5520): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x40040c0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x4040) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001880)=[{&(0x7f0000000280)={0x27, r7, 0xffffffffffffffff, 0x6, 0x37, 0x9, "14f9a217fe3a5856beddb19248952c547be0c260002c7b33d8a98d7aa2afde04187ab745ca18609b835e2057678ae33ddc3b7c12070fdf7ae07627ec824ddf", 0x27}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000300)="22a972977c0f34e35e0fb2dbcf8dae0986f552ecf3a3a2945694cbb685227f6ffe03965a37993121d4ad210dbcd584b9842b358f91c7ea3e0ac9845318ccceb3e992e6305768cec4a4b1c8ad6b4b2fe4e3e76da9e23b08a6e4b6bb35763ba265bccd4ed7ca96ba86811bb12d03fd3172f1833a2a608d27df23f27c53c4cb9689c95ec550333f592e09a9c71840c1459b59fe46f63b124b8352502ac4dae779ea6995dbc3fd5d299665ddec50e2f86e54bf393454da0965d4", 0xb8}, {&(0x7f00000003c0)="eaddcba05c4ecb54ee926d30dfe3ca666778d10cb474827e11741c395ab1cbb6502c976c354081851cf3c5cf7ecbd0c4fefc3d06ea0b55fa457c8c06d7f7de293ff4dee5e3b88b13928c61013f3f9f2261b1afa3b165bda6", 0x58}, {&(0x7f0000000540)="5c13bf690d7820725978c7aa701878e15113fafb61e455df151782cc9c89847a5db9e0673ffc3201924df5de4e256c0b751fa01e9bb76fa2a7768555aa9a9fabbf8512171d68cc4e0320c7992fb19d092e4e3f14dde9c46a68a86cba6e17f20e3617bec6259c6c13262a504684edcccb99d64932811e3cfd0900cc58561a93616d0346344881a009", 0x88}, {&(0x7f0000000600)="7f533d1e8d7ae9dafdcd669a48e8f139c05e78e74e60b3faf978885a896c169cc59e95c1c9e881b1ac056e0100c30dd7820d2121aacf12958dcf49b7bdd593966236a6b786d0d00214b3f216bf247f2f53bef8ad7cf86b5be8956aaa9b1751ed1b2af8583d9dcbae94b2d4cd1e04ccb0419722a78503193e79f778208e6136f9faeafab35e4abc14ebe54151c900d31b76887531f39996dd135bfd68b4ff6d7f0cb0da65c0f670c1f047badca9287ecf43bdfea10a9164942fe20d308e5bc91ff8ed26aad38e1d94c5f3edf57a588a151a8622543f9d84e30bca620b44d967ab0214a6b124300bc4dfd3e271f1cdaa", 0xef}], 0x4, &(0x7f0000000740)={0x20, 0x114, 0xff, "b1f293b289ad82622512b5"}, 0x20, 0x40000}, {&(0x7f0000000780)={0x27, 0x0, 0x0, 0x1, 0x2, 0x4f, "e9a80b742d00c939988a8d6c9dd241617bd8d9bb5ca50f0bfd582f91dc5872b8020a23202cd98dda90aa8e150a16bb55d7135e484839776318efd68a227005", 0xb}, 0x60, &(0x7f0000001800)=[{&(0x7f0000000800)="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", 0x1000}], 0x1, &(0x7f0000001840)={0x30, 0x109, 0x6, "0f6a746a4794f34c99dfed967fa2964091f1283c214a7448e7813d28"}, 0x30, 0x804}], 0x2, 0x4) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r6, 0x1, 0x70bd25, 0x21d7dbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3e}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc084}, 0x4000000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 9.09359339s ago: executing program 7 (id=5522): socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40880, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffa, 0x1fd, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x28}}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x400000000007, 0x100}, 0x0) 8.802624621s ago: executing program 7 (id=5523): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 8.294137381s ago: executing program 3 (id=5524): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pread64(r0, 0x0, 0x0, 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) 5.069222843s ago: executing program 9 (id=5529): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io(r1, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x26020480) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xac01, 0x4f, &(0x7f00000003c0)="2fa4aaca555c80e980979899f7a2d0a79e57e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5"}], 0x1}) listen(r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000180)={r4, &(0x7f0000000080)='7\x00', 0x10000, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x1]}, {0xd2, 0xf93c, 0xffff, 0x80000001}}, 0x0, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5) bind$l2tp6(r5, &(0x7f00000005c0)={0xa, 0x0, 0xfffffffb, @loopback, 0x3, 0x4}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r7, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040090}, 0x20004004) 4.962836061s ago: executing program 3 (id=5530): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) umount2(0x0, 0x0) 4.866016639s ago: executing program 7 (id=5531): r0 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x21, 0x0, 0x0, 0x0, 0x132, 0x3}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4.702251113s ago: executing program 3 (id=5532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x8a, 0x1000, 0x0, 0x0}, {0x0, 0x2411, 0x8b, &(0x7f0000000080)="6befec46ac0481cbf093bc0e8aea76c81ed725fa1b6613c970d4662c987d2485fca55b558c2d6c00cc0be4183dadb32166549c40aac58894e5746968d94c236a1b62803a913d839579b17bf6859e19d2e3a71c63205062b5e95f71d4ad39ebd22d11cad357d05ef79cb988da430655453924e0e6456cad56d51cd72c327217b882675caaf2da261e204a60"}], 0x2}) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7004000000002c0000002000018008000100", @ANYRES32=r5, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf252800000005002b0000e3ee0000000000000000000c0005000203aaaaaaaaaaaa0a0001007770616e30000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r12 = syz_pidfd_open(r11, 0x0) ioctl$FS_IOC_GETVERSION(r12, 0xc040ff0b, &(0x7f0000000180)) r13 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r10, &(0x7f0000000140)={0xc0000012}) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c0, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "ab6c9030d4f8de514d6bdc34defff21f8fcb0fc2a8d8fad827e544cb5ac3470c127b8ef3feb018dd5935"}, @NL80211_ATTR_FRAME_MATCH={0xfd, 0x5b, "65638ec53bdab82f3ce3c0ed19d509b72f473c23e02bad4dcd6397895eca4239fbf162880e1ee52077080e653e52592c2b66efb836c07fba3d3451418ced02b4a59bdcd812071176fc10298ca1cb014a9780ffa912a0c51e66e18249cd67aa50a9ef1a3411927546b19d74f8cd95982c4538a93bf53711d3c0cc12cbd06f55f0f3705f4139d33ca08bab3964ec68bab7fcfe4382fe6ed0878e4806787d600b04abe2d9164faa35a9a942cbc9a824be06eefe398dd8b5423b3ec57bb49d78bcdc35bbfb24a21a21ca84789e8f8df396d29ff41cf9bacfb7be336c28b62958bd6ac5432f435433ae586635756e746453feca08834af932a320be"}, @NL80211_ATTR_FRAME_MATCH={0x74, 0x5b, "510e6c5477f2354ce5d2b78d4a47262e8d8d0ef8a81f1b90bb6cc0a72bfb831519c5589d52be05bb8d1e861668f62dd0a532cb88d198c7eeb18976689c729dcc1e0f8bb4cc247707f5f37bcc349f449c1647930d72741adb723aba9270f66eaf5c5bc961b3f844d0c879571472ac30f6"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20}, 0x10000000) 3.669456922s ago: executing program 7 (id=5533): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x400, @remote, 0x2010}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) (fail_nth: 4) 3.555323632s ago: executing program 9 (id=5534): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (fail_nth: 4) 3.217961866s ago: executing program 9 (id=5535): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1], 0x1, 0x400}) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x3ff}) 3.128417509s ago: executing program 7 (id=5536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001500010301000000000000000a000000352079bef00fdcc81366a607e7671932b65fc464cf17a10df663b2e39e34d54108139c2b216c17d04f011dc0ac1e529a3343bbe68ca8f3da25618eb0c61aeec268d308ef13f85dbbe35e5619ede04a42ab5b8b113b183a6ce5524f32352a84cb33b216c0d0c1580e88b86ebeb0"], 0x14}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18}, 0xfc40) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x1bb, 0x0, 0x0, 0x0, 0x55}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f00000003c0)={"6035215d63d8392b993c6010a0788137", 0x0, 0x0, {0x3, 0xe2b8}, {0x1, 0xfff}, 0x9, [0x3, 0x0, 0x8, 0x3, 0x6, 0x4, 0x6, 0x9, 0xff, 0x8000000000000001, 0x4, 0x4, 0xff, 0xff, 0x7fffffffffffffff, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f00000014c0)={{r6}, r9, 0x1a, @unused=[0xd4, 0x1, 0x10, 0x1ff], @subvolid=0xc}) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x0) 3.101517915s ago: executing program 9 (id=5537): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000f140125"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x200001d, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) recvmsg$can_raw(r5, &(0x7f0000000800)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000600)=""/179, 0xb3}], 0x2, &(0x7f0000000700)=""/249, 0xf9}, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000040000000000000000000000000000000000000000000000fc59f66a807cbaaf7a90db949f3042a639892877125c98edab7e8d82e6f35cfd057506e5e40d8a0d19afca69a02f2fa45fb3abe63d95fc6b53a0b6a247d30ceebbb2e00fedfb90980cdf348455e0d74523dac293f5d8806fe979adc6a5f8f2db23b4be947b952226d8dbad506561df16ba72a36d8ded2c911e600e5da088d364c29647f3bad3d2a659", @ANYRES32=0x0], 0x30}], 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) socket$key(0xf, 0x3, 0x2) 1.506634977s ago: executing program 9 (id=5538): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pread64(r0, 0x0, 0x0, 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) 674.326223ms ago: executing program 3 (id=5539): r0 = syz_usb_connect$hid(0x2, 0xfffffdfb, &(0x7f00000000c0)={{0x12, 0x1, 0x151, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c0b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x28, 0x2, 0x1, {0x22, 0x2ce}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb3, 0x9, 0x9}}}}}]}}]}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x9, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x5, 0x1}]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x163, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x151, 0x2, 0x1, 0xf, 0x80, 0xfd, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "dd22"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x48af, 0x5, 0x7, 0x3e}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x60, 0x3}, @mdlm={0x15, 0x24, 0x12, 0xb9a4}, @mdlm_detail={0xd7, 0x24, 0x13, 0x9, "7d1a4f159898f8144ec333d2c8f9ec4e8b6fb9f4adb830c503ddcd909b29631dcecdd80e9720bdd04ff9dacd479f8fbdf008fc111f61195d95e6c9d871e2f21df757c264e858d925583f28ba11bf3ba652d20ae14ddaa853d2fe5cc3316568eed794ccb593a88792de46a8918b230559c9cf45ed9d69973daaf9c67593d6eb988fb144564395f75fcddf793317bcd28aaec3c56e03a4645f0045616673ee31cd093470fb5f5e9d868bc83fe3fd17773b3a72e4f25edb28d67feef18a902ec82b6894515ad267e29fdbdbf0622d3cb49ffeb414"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7f, 0x3, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9ff122fe6af6c5af, 0xff, 0xc, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x10, 0x5, 0x7}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x10, 0x5, 0x5, 0x20, 0xe}, 0x18, &(0x7f00000003c0)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0xb, 0x40}, @ssp_cap={0xc, 0x10, 0xa, 0xf7, 0x0, 0x3, 0xf000, 0x9}]}, 0xa, [{0xc9, &(0x7f0000000400)=@string={0xc9, 0x3, "00882d3913ddb2003083e5c5f9051571d4c3e7fcd06d489248014512a4ecea3facc74ea4ad2c2b2700871f1caeab72fc23e66533425d513fbaa6e0898898944a9edea9752c6726f50a4f2d454fc84586192f101dc52ba64599a3a919a2e2f88dae1ecd4da0fd55af01ecf5651070d7a8cc703544400d46118b43764f99eac5c2683d04a44c02737691deceda705f8e85a3ab0e6ff665fa2f3c642c89c9867c8ed4539aed8ada17168d7cc2894d5824af99b370061102d0609a1dfeb00076b4efce900214db44a7"}}, {0xd1, &(0x7f0000000500)=@string={0xd1, 0x3, "1487ffbf5eb5ddab2ee8cc63e0da8e05e6f7ccba1402d0ee0682da9446f7127f779a542750549743f1ef5c8d50d7611575e3765c372c4e4fc5e9a862d8356e360b0e9c5292d0d72613e124518fed74edc20a24778b3259cdc6a9df2b8566f99cd409d44318d11f8ecd673deb62a6d9f2278ff94ca577b9648f068fb6a7a97d75553d2b3dd231bdf01ebef249fa6419fd8b3d66af1e57d909e33bbf7d3131325a5df9258e850eebacc6d41411818b9ab92b7e747c0c2c707aa6a6813543584caabf9449235fefc8cde42f008bedcd18"}}, {0xc3, &(0x7f0000000600)=@string={0xc3, 0x3, "ad7a2afc6180f529f867cdc0da2359e371742f76deec0854cb2c7b769da29f70dc92243536d8a009cd34fb9429f0c1c7ddf7e82bdb4271a2a7ac48324418853e23e2e065b0cc460fe0c8c1bb53d4546eb5d75dd069203ad4a29e079c5fed50b848c735baf9dead489b70d3dfbe19fb0775c09db66a6d060878cdcbb7c99c81f174e12acabfb2f1b321a42315c0dbb3fd3f0814ea78dda05ebfeb8d7d576361158b988f3c2161cbc7c00961c8bbcb976097166f1171c87aa85711dc7d7987122bc5"}}, {0x8f, &(0x7f0000000700)=@string={0x8f, 0x3, "be23ccdf291202a0ae3a730553aa762bcd077e7644d7474738d255d3b298d9f2fc1498a1a749649d7b9762725fb2d8f7e63cdc23e1d54254dfe8020964f5340b240bda1b12680904e9d799bd97f02707c68ecca28070a2d3b108013ec2cf73339b0940c1928be6754a6ce112d664437de92c4d4384947feeb22a04e19c342e4fb802807687b992d39e29e93152"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x38, &(0x7f0000000800)=@string={0x38, 0x3, "6328c150c5e7ab8137c750652755f5849ce96cb9cd47bdc93f47669921d4567309ca9778d578fb11fccb1d1c86e03ec95ce0a6528c58"}}, {0xe, &(0x7f0000000840)=@string={0xe, 0x3, "b0aa090c8d95c8ff0ff61a6d"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xad, &(0x7f0000000900)=@string={0xad, 0x3, "ee1b9e221ed6ac3228cf8ce66534fa192a53ddc548e88b15d9a5fc9d257eb1f2214e1040cdeb1d26183a6dccd319535556536d781318e11c8a51a37562800017dd5fbb7194cfd95dea200e1bd6efb968ae8de65a9837126d92b11abff982b427541f6ff4189da570b4082e73c77a2be784f8c0fffcde69c8613616edeb88a388441d95db7abd0a5af25798518d7d0bc5b22d849aed4329c9121219cdaf81632fdaa6d099b7461c4f3d4ca3"}}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 332.073602ms ago: executing program 9 (id=5540): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb73a000008000000b70400000100000085000000a6000000850000000e00000095", @ANYBLOB="0dabf5ce913a6534444404310d18563c56ced17938fc785edbcb45495c6554433f840a55759d208e3f092e7e9353ce62156c21a77a3073bcc5e7226356dced45f0"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4008) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x20044801) socket$inet6(0xa, 0x8080d, 0x3) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x40}, 0x40008d0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 0s ago: executing program 7 (id=5541): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000000000)={0x0, 0x0, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffcd0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x3, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c64d2, &(0x7f0000000180)={r4, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r4}) close(r0) r5 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000001000)=[{&(0x7f00000000c0)="3a910f2ceb1c", 0x6}, {0x0}], 0x2}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x1a}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup(r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x1, r11}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): T24333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.138547][T24333] RIP: 0033:0x7f8ed75ccdd9 [ 1649.138565][T24333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.138581][T24333] RSP: 002b:00007f8ed5826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1649.138601][T24333] RAX: ffffffffffffffda RBX: 00007f8ed7845fa0 RCX: 00007f8ed75ccdd9 [ 1649.138614][T24333] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1649.138625][T24333] RBP: 00007f8ed5826090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.138637][T24333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.138649][T24333] R13: 00007f8ed7846038 R14: 00007f8ed7845fa0 R15: 00007ffeeccbdde8 [ 1649.138679][T24333] [ 1649.172397][T15421] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.172421][T15421] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1649.172457][T15421] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1649.174849][T15421] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1649.174875][T15421] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.174893][T15421] usb 10-1: Product: syz [ 1649.174907][T15421] usb 10-1: Manufacturer: syz [ 1649.174920][T15421] usb 10-1: SerialNumber: syz [ 1649.199896][ T9] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1649.441774][T24335] 9p: Bad value for 'wfdno' [ 1649.499968][ T9] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1649.499996][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.500016][ T9] usb 8-1: Product: syz [ 1649.500028][ T9] usb 8-1: Manufacturer: syz [ 1649.500041][ T9] usb 8-1: SerialNumber: syz [ 1649.561988][ T9] usb 8-1: config 0 descriptor?? [ 1649.794398][ T37] kauditd_printk_skb: 1101 callbacks suppressed [ 1649.794474][ T37] audit: type=1326 audit(1778474389.555:12585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1649.796552][ T37] audit: type=1326 audit(1778474389.555:12586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1649.796597][ T37] audit: type=1326 audit(1778474389.555:12587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1649.796631][ T37] audit: type=1326 audit(1778474389.555:12588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1649.796755][ T37] audit: type=1326 audit(1778474389.555:12589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1649.806002][ T37] audit: type=1326 audit(1778474389.555:12590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1649.806141][ T37] audit: type=1326 audit(1778474389.555:12591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1649.806233][ T37] audit: type=1326 audit(1778474389.555:12592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1649.806272][ T37] audit: type=1326 audit(1778474389.555:12593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1649.806318][ T37] audit: type=1326 audit(1778474389.555:12594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24336 comm="syz.3.5254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1650.969946][T21023] Bluetooth: hci5: command tx timeout [ 1651.102763][T15421] uvcvideo 10-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1651.102796][T15421] uvcvideo 10-1:220.0: No valid video chain found. [ 1651.108780][T15421] usb 10-1: USB disconnect, device number 58 [ 1651.342190][ T5737] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1651.500581][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 1651.507198][ T5737] usb 4-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1651.507226][ T5737] usb 4-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1651.507246][ T5737] usb 4-1: config 218 has no interface number 0 [ 1651.507288][ T5737] usb 4-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1651.507322][ T5737] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1651.507343][ T5737] usb 4-1: config 218 interface 95 has no altsetting 0 [ 1651.510647][ T5737] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1651.510673][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.510693][ T5737] usb 4-1: Product: syz [ 1651.510705][ T5737] usb 4-1: Manufacturer: syz [ 1651.510718][ T5737] usb 4-1: SerialNumber: syz [ 1651.573139][T24342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5251'. [ 1652.868267][ T5737] usb 4-1: USB disconnect, device number 126 [ 1652.980467][T21023] Bluetooth: hci5: command tx timeout [ 1653.744827][T24356] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1653.790195][ T9] usb 8-1: f81604_read: reg: 100f failed: -ETIMEDOUT [ 1654.132161][T24346] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1654.132914][T24346] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1654.466404][ T9] usb 8-1: f81604_read: reg: 200f failed: -EPROTO [ 1654.520494][ T9] usb 8-1: USB disconnect, device number 62 [ 1655.101117][T21023] Bluetooth: hci5: command tx timeout [ 1655.690575][T24368] netlink: 'syz.3.5261': attribute type 61 has an invalid length. [ 1655.718965][ T9] usb 8-1: f81604_read: reg: 100f failed: -ENODEV [ 1656.844546][ T9] usb 8-1: f81604_read: reg: 200f failed: -ENODEV [ 1657.257027][T24381] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5265'. [ 1657.270385][ T9] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1657.290608][T19697] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1657.290955][ T40] bridge_slave_1: left allmulticast mode [ 1657.291320][ T40] bridge_slave_1: left promiscuous mode [ 1657.294811][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.381440][ T40] bridge_slave_0: left allmulticast mode [ 1657.381464][ T40] bridge_slave_0: left promiscuous mode [ 1657.381691][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.442295][ T9] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.442321][ T9] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1657.442355][ T9] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1657.444167][T19697] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1657.444193][T19697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.444647][ T9] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1657.444671][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.444688][ T9] usb 8-1: Product: syz [ 1657.444701][ T9] usb 8-1: Manufacturer: syz [ 1657.444714][ T9] usb 8-1: SerialNumber: syz [ 1657.458088][T19697] usb 4-1: config 0 descriptor?? [ 1657.493409][T19697] cp210x 4-1:0.0: cp210x converter detected [ 1657.696421][T19697] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1657.696449][T19697] cp210x 4-1:0.0: querying part number failed [ 1657.705418][T19697] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1658.043323][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.142303][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.244261][ T40] bond0 (unregistering): Released all slaves [ 1658.897222][ T9] uvcvideo 8-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1658.897256][ T9] uvcvideo 8-1:220.0: No valid video chain found. [ 1658.901860][ T9] usb 8-1: USB disconnect, device number 63 [ 1659.121271][ T40] hsr_slave_0: left promiscuous mode [ 1659.170530][ T40] hsr_slave_1: left promiscuous mode [ 1659.171520][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.224723][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.888241][ T5737] usb 4-1: USB disconnect, device number 127 [ 1659.909868][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1659.993880][ T5737] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1660.000129][ T5737] cp210x 4-1:0.0: device disconnected [ 1660.087071][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1660.360052][T24412] FAULT_INJECTION: forcing a failure. [ 1660.360052][T24412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1660.360086][T24412] CPU: 0 UID: 0 PID: 24412 Comm: syz.3.5270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1660.360112][T24412] Tainted: [L]=SOFTLOCKUP [ 1660.360119][T24412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1660.360129][T24412] Call Trace: [ 1660.360137][T24412] [ 1660.360144][T24412] dump_stack_lvl+0xe8/0x150 [ 1660.360172][T24412] should_fail_ex+0x46b/0x600 [ 1660.360205][T24412] prepare_alloc_pages+0x22a/0x6b0 [ 1660.360237][T24412] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1660.360259][T24412] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1660.360279][T24412] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 1660.360301][T24412] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1660.360324][T24412] ? __pfx_policy_nodemask+0x10/0x10 [ 1660.360347][T24412] __alloc_pages_noprof+0x10/0x100 [ 1660.360368][T24412] alloc_pages_bulk_noprof+0x6c0/0x8c0 [ 1660.360395][T24412] ? alloc_pages_noprof+0x161/0x2f0 [ 1660.360419][T24412] __kasan_populate_vmalloc+0xc1/0x1d0 [ 1660.360444][T24412] ? rt_spin_unlock+0x160/0x200 [ 1660.360465][T24412] alloc_vmap_area+0xd47/0x1480 [ 1660.360499][T24412] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1660.360519][T24412] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1660.360541][T24412] ? __get_vm_area_node+0x171/0x350 [ 1660.360558][T24412] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1660.360582][T24412] __get_vm_area_node+0x226/0x350 [ 1660.360606][T24412] __vmalloc_node_range_noprof+0x36a/0x1750 [ 1660.360633][T24412] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1660.360657][T24412] ? __lock_acquire+0x6b5/0x2cf0 [ 1660.360697][T24412] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1660.360723][T24412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1660.360745][T24412] ? ktime_get+0x45/0x220 [ 1660.360763][T24412] ? lock_acquire+0x106/0x350 [ 1660.360792][T24412] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1660.360811][T24412] __vmalloc_noprof+0xd2/0x120 [ 1660.360831][T24412] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1660.360855][T24412] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1660.360880][T24412] bpf_prog_alloc+0x3c/0x1a0 [ 1660.360904][T24412] bpf_prog_load+0x779/0x1a10 [ 1660.360937][T24412] ? __pfx_bpf_prog_load+0x10/0x10 [ 1660.360959][T24412] ? __might_fault+0xaf/0x130 [ 1660.360993][T24412] ? bpf_lsm_bpf+0x9/0x20 [ 1660.361013][T24412] ? security_bpf+0x7e/0x2d0 [ 1660.361040][T24412] __sys_bpf+0x618/0x950 [ 1660.361063][T24412] ? __pfx___sys_bpf+0x10/0x10 [ 1660.361101][T24412] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1660.361133][T24412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.361152][T24412] __x64_sys_bpf+0x7c/0x90 [ 1660.361173][T24412] do_syscall_64+0x15f/0xf80 [ 1660.361195][T24412] ? clear_bhb_loop+0x40/0x90 [ 1660.361217][T24412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.361235][T24412] RIP: 0033:0x7f8ed75ccdd9 [ 1660.361252][T24412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1660.361268][T24412] RSP: 002b:00007f8ed5826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1660.361288][T24412] RAX: ffffffffffffffda RBX: 00007f8ed7845fa0 RCX: 00007f8ed75ccdd9 [ 1660.361301][T24412] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1660.361327][T24412] RBP: 00007f8ed5826090 R08: 0000000000000000 R09: 0000000000000000 [ 1660.361338][T24412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1660.361350][T24412] R13: 00007f8ed7846038 R14: 00007f8ed7845fa0 R15: 00007ffeeccbdde8 [ 1660.361376][T24412] [ 1660.405827][T24412] syz.3.5270: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1660.405894][T24412] CPU: 1 UID: 0 PID: 24412 Comm: syz.3.5270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1660.405919][T24412] Tainted: [L]=SOFTLOCKUP [ 1660.405925][T24412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1660.405936][T24412] Call Trace: [ 1660.405944][T24412] [ 1660.405951][T24412] dump_stack_lvl+0xe8/0x150 [ 1660.405977][T24412] warn_alloc+0x263/0x3e0 [ 1660.406001][T24412] ? kasan_quarantine_put+0xbb/0x1f0 [ 1660.406022][T24412] ? __pfx_warn_alloc+0x10/0x10 [ 1660.406043][T24412] ? __get_vm_area_node+0x23f/0x350 [ 1660.406060][T24412] ? __get_vm_area_node+0x171/0x350 [ 1660.406077][T24412] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1660.406100][T24412] ? __get_vm_area_node+0x23f/0x350 [ 1660.406124][T24412] __vmalloc_node_range_noprof+0x38f/0x1750 [ 1660.406147][T24412] ? __lock_acquire+0x6b5/0x2cf0 [ 1660.406187][T24412] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1660.406211][T24412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1660.406233][T24412] ? ktime_get+0x45/0x220 [ 1660.406250][T24412] ? lock_acquire+0x106/0x350 [ 1660.406278][T24412] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1660.406296][T24412] __vmalloc_noprof+0xd2/0x120 [ 1660.406315][T24412] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1660.406337][T24412] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1660.406370][T24412] bpf_prog_alloc+0x3c/0x1a0 [ 1660.406393][T24412] bpf_prog_load+0x779/0x1a10 [ 1660.406426][T24412] ? __pfx_bpf_prog_load+0x10/0x10 [ 1660.406447][T24412] ? __might_fault+0xaf/0x130 [ 1660.406481][T24412] ? bpf_lsm_bpf+0x9/0x20 [ 1660.406501][T24412] ? security_bpf+0x7e/0x2d0 [ 1660.406528][T24412] __sys_bpf+0x618/0x950 [ 1660.406549][T24412] ? __pfx___sys_bpf+0x10/0x10 [ 1660.406587][T24412] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1660.406618][T24412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.406637][T24412] __x64_sys_bpf+0x7c/0x90 [ 1660.406656][T24412] do_syscall_64+0x15f/0xf80 [ 1660.406677][T24412] ? clear_bhb_loop+0x40/0x90 [ 1660.406699][T24412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.406716][T24412] RIP: 0033:0x7f8ed75ccdd9 [ 1660.406734][T24412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1660.406749][T24412] RSP: 002b:00007f8ed5826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1660.406766][T24412] RAX: ffffffffffffffda RBX: 00007f8ed7845fa0 RCX: 00007f8ed75ccdd9 [ 1660.406780][T24412] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1660.406791][T24412] RBP: 00007f8ed5826090 R08: 0000000000000000 R09: 0000000000000000 [ 1660.406803][T24412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1660.406813][T24412] R13: 00007f8ed7846038 R14: 00007f8ed7845fa0 R15: 00007ffeeccbdde8 [ 1660.406843][T24412] [ 1660.406850][T24412] Mem-Info: [ 1660.406859][T24412] active_anon:217 inactive_anon:17310 isolated_anon:0 [ 1660.406859][T24412] active_file:27395 inactive_file:38987 isolated_file:0 [ 1660.406859][T24412] unevictable:768 dirty:184 writeback:0 [ 1660.406859][T24412] slab_reclaimable:12847 slab_unreclaimable:112016 [ 1660.406859][T24412] mapped:40090 shmem:10936 pagetables:1676 [ 1660.406859][T24412] sec_pagetables:0 bounce:0 [ 1660.406859][T24412] kernel_misc_reclaimable:0 [ 1660.406859][T24412] free:1275571 free_pcp:1885 free_cma:0 [ 1660.406908][T24412] Node 0 active_anon:868kB inactive_anon:69240kB active_file:109280kB inactive_file:155948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152092kB dirty:704kB writeback:0kB shmem:42208kB kernel_stack:14408kB pagetables:6540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1660.406955][T24412] Node 1 active_anon:0kB inactive_anon:0kB active_file:300kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8268kB dirty:32kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1660.407001][T24412] Node 0 DMA free:11264kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1660.407051][T24412] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1660.407081][T24412] Node 0 DMA32 free:1181456kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:868kB inactive_anon:69240kB active_file:109280kB inactive_file:155948kB unevictable:1536kB writepending:704kB zspages:0kB present:3129332kB managed:2566552kB mlocked:0kB bounce:0kB free_pcp:7540kB local_pcp:4724kB free_cma:0kB [ 1660.407136][T24412] lowmem_reserve[]: 0 0 0 0 0 [ 1660.407163][T24412] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1660.416431][T24412] lowmem_reserve[]: 0 0 0 0 0 [ 1660.416467][T24412] Node 1 Normal free:3909564kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:300kB inactive_file:0kB unevictable:1536kB writepending:32kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1660.416522][T24412] lowmem_reserve[]: 0 0 0 0 0 [ 1660.416551][T24412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 1660.416650][T24412] Node 0 DMA32: 2712*4kB (UME) 3961*8kB (UE) 2645*16kB (UE) 840*32kB (UME) 894*64kB (UM) 804*128kB (UME) 681*256kB (UM) 423*512kB (UM) 248*1024kB (UME) 121*2048kB (UM) 4*4096kB (U) = 1180920kB [ 1660.416797][T24412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1660.416881][T24412] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 7*16kB (UM) 5*32kB (U) 4*64kB (U) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 3*2048kB (M) 952*4096kB (M) = 3909564kB [ 1660.417016][T24412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.417031][T24412] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1660.417045][T24412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.417059][T24412] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1660.417073][T24412] 77339 total pagecache pages [ 1660.417081][T24412] 0 pages in swap cache [ 1660.417087][T24412] Free swap = 124996kB [ 1660.417094][T24412] Total swap = 124996kB [ 1660.417101][T24412] 2097051 pages RAM [ 1660.417107][T24412] 0 pages HighMem/MovableOnly [ 1660.417114][T24412] 423745 pages reserved [ 1660.417120][T24412] 0 pages cma reserved [ 1661.329698][T24419] FAULT_INJECTION: forcing a failure. [ 1661.329698][T24419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1661.329731][T24419] CPU: 1 UID: 0 PID: 24419 Comm: syz.3.5272 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1661.329757][T24419] Tainted: [L]=SOFTLOCKUP [ 1661.329763][T24419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1661.329773][T24419] Call Trace: [ 1661.329780][T24419] [ 1661.329787][T24419] dump_stack_lvl+0xe8/0x150 [ 1661.329814][T24419] should_fail_ex+0x46b/0x600 [ 1661.329847][T24419] prepare_alloc_pages+0x22a/0x6b0 [ 1661.329876][T24419] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1661.329901][T24419] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1661.329927][T24419] ? __pfx_policy_nodemask+0x10/0x10 [ 1661.329945][T24419] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1661.329963][T24419] ? reacquire_held_locks+0x104/0x190 [ 1661.329991][T24419] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1661.330009][T24419] alloc_pages_mpol+0xd1/0x380 [ 1661.330032][T24419] alloc_pages_noprof+0xd2/0x2f0 [ 1661.330054][T24419] __pmd_alloc+0x3a/0x5e0 [ 1661.330078][T24419] handle_mm_fault+0xe91/0x13c0 [ 1661.330103][T24419] ? handle_mm_fault+0xe7/0x13c0 [ 1661.330122][T24419] ? __lock_acquire+0x6b5/0x2cf0 [ 1661.330144][T24419] ? __pfx_handle_mm_fault+0x10/0x10 [ 1661.330175][T24419] ? __lock_acquire+0x6b5/0x2cf0 [ 1661.330201][T24419] ? lock_mm_and_find_vma+0xa7/0x340 [ 1661.330229][T24419] do_user_addr_fault+0x75b/0x1340 [ 1661.330295][T24419] exc_page_fault+0x6a/0xc0 [ 1661.330318][T24419] asm_exc_page_fault+0x26/0x30 [ 1661.330335][T24419] RIP: 0010:__put_user_4+0xd/0x20 [ 1661.330356][T24419] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1661.330370][T24419] RSP: 0018:ffffc900054ff6f8 EFLAGS: 00050202 [ 1661.330386][T24419] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000040 [ 1661.330398][T24419] RDX: 0000000000000000 RSI: ffffffff8d863266 RDI: ffffffff8ba74fe0 [ 1661.330411][T24419] RBP: ffffc900054ff870 R08: ffffffff8214169f R09: ffff88802f849db0 [ 1661.330423][T24419] R10: dffffc0000000000 R11: fffffbfff1f11dff R12: 0000000000000000 [ 1661.330436][T24419] R13: ffffffff8f581488 R14: dffffc0000000000 R15: 1ffff92000a9fee4 [ 1661.330456][T24419] ? __might_fault+0xaf/0x130 [ 1661.330484][T24419] sk_ioctl+0x3f8/0x6d0 [ 1661.330501][T24419] ? is_bpf_text_address+0x26/0x2b0 [ 1661.330526][T24419] ? __pfx_sk_ioctl+0x10/0x10 [ 1661.330543][T24419] ? is_bpf_text_address+0x292/0x2b0 [ 1661.330564][T24419] ? is_bpf_text_address+0x26/0x2b0 [ 1661.330589][T24419] ? kernel_text_address+0xa5/0xe0 [ 1661.330614][T24419] ? __kernel_text_address+0xd/0x30 [ 1661.330637][T24419] ? unwind_get_return_address+0x4d/0x90 [ 1661.330659][T24419] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1661.330679][T24419] ? arch_stack_walk+0xfb/0x150 [ 1661.330713][T24419] inet_ioctl+0x484/0x560 [ 1661.330738][T24419] ? __pfx_inet_ioctl+0x10/0x10 [ 1661.330790][T24419] sock_do_ioctl+0x101/0x320 [ 1661.330817][T24419] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1661.330856][T24419] sock_ioctl+0x5c9/0x7f0 [ 1661.330880][T24419] ? kasan_quarantine_put+0xbb/0x1f0 [ 1661.330897][T24419] ? __pfx_sock_ioctl+0x10/0x10 [ 1661.330926][T24419] ? tomoyo_path_number_perm+0x219/0x630 [ 1661.330950][T24419] ? tomoyo_path_number_perm+0x219/0x630 [ 1661.330971][T24419] ? __pfx_sock_ioctl+0x10/0x10 [ 1661.330995][T24419] do_vfs_ioctl+0xf6d/0x1540 [ 1661.331019][T24419] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1661.331059][T24419] ? __asan_memset+0x22/0x50 [ 1661.331083][T24419] ? smack_file_ioctl+0x263/0x360 [ 1661.331105][T24419] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1661.331136][T24419] ? __fget_files+0x2a/0x420 [ 1661.331152][T24419] ? __fget_files+0x3a6/0x420 [ 1661.331167][T24419] ? __fget_files+0x2a/0x420 [ 1661.331186][T24419] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1661.331209][T24419] __se_sys_ioctl+0x82/0x170 [ 1661.331229][T24419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.331248][T24419] do_syscall_64+0x15f/0xf80 [ 1661.331274][T24419] ? trace_irq_disable+0x3b/0x140 [ 1661.331294][T24419] ? clear_bhb_loop+0x40/0x90 [ 1661.331316][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.331333][T24419] RIP: 0033:0x7f8ed75ccdd9 [ 1661.331350][T24419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1661.331365][T24419] RSP: 002b:00007f8ed5826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1661.331382][T24419] RAX: ffffffffffffffda RBX: 00007f8ed7845fa0 RCX: 00007f8ed75ccdd9 [ 1661.331396][T24419] RDX: 0000200000000040 RSI: 000000000000541b RDI: 0000000000000003 [ 1661.331406][T24419] RBP: 00007f8ed5826090 R08: 0000000000000000 R09: 0000000000000000 [ 1661.331417][T24419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1661.331427][T24419] R13: 00007f8ed7846038 R14: 00007f8ed7845fa0 R15: 00007ffeeccbdde8 [ 1661.331457][T24419] [ 1661.802069][ T5737] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1661.972042][ T5737] usb 4-1: Using ep0 maxpacket: 32 [ 1661.977949][ T5737] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1661.977977][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.977994][ T5737] usb 4-1: Product: syz [ 1661.978006][ T5737] usb 4-1: Manufacturer: syz [ 1661.978019][ T5737] usb 4-1: SerialNumber: syz [ 1661.986734][ T5737] usb 4-1: config 0 descriptor?? [ 1661.996848][ T5737] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1661.996947][ T5737] dvb-usb: bulk message failed: -22 (4/0) [ 1661.996962][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1661.997081][ T5737] dvb-usb: bulk message failed: -22 (5/0) [ 1661.997094][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1662.018831][ T5737] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1662.019581][ T5737] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1662.019631][ T5737] usb 4-1: media controller created [ 1662.073304][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1662.113114][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1662.240068][ T5737] usb 4-1: selecting invalid altsetting 3 [ 1662.240088][ T5737] ttusb2: set interface to alts=3 failed [ 1662.460634][ T5737] DVB: Unable to find symbol tda10086_attach() [ 1662.460650][ T5737] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1662.461539][ T5737] dvb-usb: bulk message failed: -22 (4/0) [ 1662.461558][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1662.461669][ T5737] dvb-usb: bulk message failed: -22 (5/0) [ 1662.461682][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1662.461738][ T5737] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1662.475311][ T5737] usb 4-1: USB disconnect, device number 2 [ 1662.935088][ T5737] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1663.130085][T24438] FAULT_INJECTION: forcing a failure. [ 1663.130085][T24438] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1663.130120][T24438] CPU: 1 UID: 0 PID: 24438 Comm: syz.3.5279 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1663.130146][T24438] Tainted: [L]=SOFTLOCKUP [ 1663.130152][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1663.130163][T24438] Call Trace: [ 1663.130171][T24438] [ 1663.130179][T24438] dump_stack_lvl+0xe8/0x150 [ 1663.130210][T24438] should_fail_ex+0x46b/0x600 [ 1663.130244][T24438] prepare_alloc_pages+0x22a/0x6b0 [ 1663.130272][T24438] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1663.130298][T24438] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1663.130324][T24438] ? __pfx_policy_nodemask+0x10/0x10 [ 1663.130344][T24438] ? unwind_get_return_address+0x4d/0x90 [ 1663.130367][T24438] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1663.130398][T24438] alloc_pages_mpol+0xd1/0x380 [ 1663.130423][T24438] ___kmalloc_large_node+0x4e/0x120 [ 1663.130446][T24438] __kmalloc_large_node_noprof+0x18/0x90 [ 1663.130469][T24438] __kmalloc_noprof+0x4a3/0x7b0 [ 1663.130487][T24438] ? vb2_core_reqbufs+0x8fa/0x1410 [ 1663.130507][T24438] ? vb2_core_reqbufs+0x89e/0x1410 [ 1663.130531][T24438] vb2_core_reqbufs+0x8fa/0x1410 [ 1663.130571][T24438] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1663.130602][T24438] ? vb2_verify_memory_type+0x1fc/0x570 [ 1663.130624][T24438] vb2_ioctl_reqbufs+0x4c3/0x840 [ 1663.130655][T24438] __video_do_ioctl+0xade/0xca0 [ 1663.130686][T24438] ? __pfx___video_do_ioctl+0x10/0x10 [ 1663.130720][T24438] video_usercopy+0x876/0x1450 [ 1663.130750][T24438] ? __pfx___video_do_ioctl+0x10/0x10 [ 1663.130774][T24438] ? __pfx_video_usercopy+0x10/0x10 [ 1663.130793][T24438] ? smack_file_ioctl+0x2c2/0x360 [ 1663.130828][T24438] ? __fget_files+0x2a/0x420 [ 1663.130844][T24438] ? __fget_files+0x3a6/0x420 [ 1663.130862][T24438] v4l2_ioctl+0x190/0x1e0 [ 1663.130883][T24438] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1663.130902][T24438] __se_sys_ioctl+0xff/0x170 [ 1663.130921][T24438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.130940][T24438] do_syscall_64+0x15f/0xf80 [ 1663.130958][T24438] ? trace_irq_disable+0x3b/0x140 [ 1663.130977][T24438] ? clear_bhb_loop+0x40/0x90 [ 1663.130998][T24438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.131015][T24438] RIP: 0033:0x7f8ed75ccdd9 [ 1663.131029][T24438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.131043][T24438] RSP: 002b:00007f8ed5826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.131062][T24438] RAX: ffffffffffffffda RBX: 00007f8ed7845fa0 RCX: 00007f8ed75ccdd9 [ 1663.131083][T24438] RDX: 0000200000000100 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1663.131095][T24438] RBP: 00007f8ed5826090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.131105][T24438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.131115][T24438] R13: 00007f8ed7846038 R14: 00007f8ed7845fa0 R15: 00007ffeeccbdde8 [ 1663.131146][T24438] [ 1663.144003][T24439] netlink: 'syz.7.5278': attribute type 1 has an invalid length. [ 1663.275511][T24439] comedi comedi0: Minor 2 could not be opened [ 1663.529355][T24295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.531372][T24295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.531636][T24295] bridge_slave_0: entered allmulticast mode [ 1663.550917][T24295] bridge_slave_0: entered promiscuous mode [ 1663.585341][T24295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.585472][T24295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.585798][T24295] bridge_slave_1: entered allmulticast mode [ 1663.637493][T24295] bridge_slave_1: entered promiscuous mode [ 1663.919669][T24295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.949264][T24295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.700891][T15419] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1664.799634][T22837] Bluetooth: hci5: command 0x0405 tx timeout [ 1664.905214][T15419] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.905240][T15419] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1664.905273][T15419] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1664.922774][T15419] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1664.922803][T15419] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.922820][T15419] usb 10-1: Product: syz [ 1664.922832][T15419] usb 10-1: Manufacturer: syz [ 1664.922844][T15419] usb 10-1: SerialNumber: syz [ 1665.218719][T24462] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1665.478360][T24475] FAULT_INJECTION: forcing a failure. [ 1665.478360][T24475] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.478389][T24475] CPU: 1 UID: 0 PID: 24475 Comm: syz.7.5285 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1665.478414][T24475] Tainted: [L]=SOFTLOCKUP [ 1665.478419][T24475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1665.478427][T24475] Call Trace: [ 1665.478433][T24475] [ 1665.478439][T24475] dump_stack_lvl+0xe8/0x150 [ 1665.478463][T24475] should_fail_ex+0x46b/0x600 [ 1665.478493][T24475] should_failslab+0xa8/0x100 [ 1665.478514][T24475] __kvmalloc_node_noprof+0x170/0x8e0 [ 1665.478536][T24475] ? v4l2_event_subscribe+0x84/0x770 [ 1665.478561][T24475] v4l2_event_subscribe+0x84/0x770 [ 1665.478577][T24475] ? __lock_acquire+0x6b5/0x2cf0 [ 1665.478599][T24475] ? __pfx_v4l2_ctrl_subdev_subscribe_event+0x10/0x10 [ 1665.478623][T24475] subdev_do_ioctl_lock+0x12a9/0x3010 [ 1665.478645][T24475] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 1665.478658][T24475] ? __might_fault+0xaf/0x130 [ 1665.478675][T24475] ? __might_fault+0xaf/0x130 [ 1665.478706][T24475] video_usercopy+0x876/0x1450 [ 1665.478734][T24475] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 1665.478749][T24475] ? __pfx_video_usercopy+0x10/0x10 [ 1665.478764][T24475] ? smack_file_ioctl+0x263/0x360 [ 1665.478791][T24475] ? __fget_files+0x2a/0x420 [ 1665.478803][T24475] ? __fget_files+0x3a6/0x420 [ 1665.478819][T24475] v4l2_ioctl+0x190/0x1e0 [ 1665.478836][T24475] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1665.478852][T24475] __se_sys_ioctl+0xff/0x170 [ 1665.478867][T24475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.478881][T24475] do_syscall_64+0x15f/0xf80 [ 1665.478897][T24475] ? trace_irq_disable+0x3b/0x140 [ 1665.478913][T24475] ? clear_bhb_loop+0x40/0x90 [ 1665.478929][T24475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.478943][T24475] RIP: 0033:0x7f097cb2cdd9 [ 1665.478957][T24475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.478970][T24475] RSP: 002b:00007f097ad86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1665.478985][T24475] RAX: ffffffffffffffda RBX: 00007f097cda5fa0 RCX: 00007f097cb2cdd9 [ 1665.478995][T24475] RDX: 00002000000000c0 RSI: 000000004020565a RDI: 0000000000000003 [ 1665.479004][T24475] RBP: 00007f097ad86090 R08: 0000000000000000 R09: 0000000000000000 [ 1665.479013][T24475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.479022][T24475] R13: 00007f097cda6038 R14: 00007f097cda5fa0 R15: 00007ffe5214e998 [ 1665.479047][T24475] [ 1665.839113][T24468] "syz.3.5284" (24468) uses obsolete ecb(arc4) skcipher [ 1665.863828][T24295] team0: Port device team_slave_0 added [ 1665.991078][T24295] team0: Port device team_slave_1 added [ 1666.756334][T15419] uvcvideo 10-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1666.756367][T15419] uvcvideo 10-1:220.0: No valid video chain found. [ 1666.774390][T15419] usb 10-1: USB disconnect, device number 59 [ 1667.102762][T24295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.102776][T24295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.102795][T24295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.110019][T24295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1667.110035][T24295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.110060][T24295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1667.260416][T15419] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1667.387955][T24295] hsr_slave_0: entered promiscuous mode [ 1667.405330][T24295] hsr_slave_1: entered promiscuous mode [ 1667.406353][T24295] debugfs: 'hsr0' already exists in 'hsr' [ 1667.406375][T24295] Cannot create hsr debugfs directory [ 1667.410423][T15419] usb 10-1: Using ep0 maxpacket: 16 [ 1667.412459][T15419] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.412504][T15419] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.412529][T15419] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1667.412565][T15419] usb 10-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1667.412585][T15419] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.496787][T15419] usb 10-1: config 0 descriptor?? [ 1667.588363][T24503] program syz.7.5293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1668.596319][ T37] kauditd_printk_skb: 980 callbacks suppressed [ 1668.596335][ T37] audit: type=1326 audit(1778474408.345:13575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1668.596798][ T37] audit: type=1326 audit(1778474408.345:13576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1668.596841][ T37] audit: type=1326 audit(1778474408.345:13577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1668.597115][ T37] audit: type=1326 audit(1778474408.345:13578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1668.597642][ T37] audit: type=1326 audit(1778474408.345:13579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1668.597685][ T37] audit: type=1326 audit(1778474408.345:13580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1668.597962][ T37] audit: type=1326 audit(1778474408.345:13581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1668.598449][ T37] audit: type=1326 audit(1778474408.345:13582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1668.598489][ T37] audit: type=1326 audit(1778474408.345:13583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1668.599017][ T37] audit: type=1326 audit(1778474408.345:13584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24509 comm="syz.7.5295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1669.060795][T15419] nintendo 0003:057E:2019.000D: item fetching failed at offset 0/5 [ 1669.061376][T15419] nintendo 0003:057E:2019.000D: HID parse failed [ 1669.148366][T15419] nintendo 0003:057E:2019.000D: probe - fail = -22 [ 1669.148486][T15419] nintendo 0003:057E:2019.000D: probe with driver nintendo failed with error -22 [ 1669.360507][ T5722] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1669.478070][T15421] usb 10-1: USB disconnect, device number 60 [ 1669.520411][ T5722] usb 8-1: Using ep0 maxpacket: 8 [ 1669.557207][ T5722] usb 8-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1669.557247][ T5722] usb 8-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1669.557267][ T5722] usb 8-1: config 218 has no interface number 0 [ 1669.557309][ T5722] usb 8-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1669.557336][ T5722] usb 8-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1669.557356][ T5722] usb 8-1: config 218 interface 95 has no altsetting 0 [ 1669.622914][ T5722] usb 8-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1669.622942][ T5722] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.622961][ T5722] usb 8-1: Product: syz [ 1669.622973][ T5722] usb 8-1: Manufacturer: syz [ 1669.622986][ T5722] usb 8-1: SerialNumber: syz [ 1671.084036][T24528] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5300'. [ 1671.675543][ T5722] usb 8-1: USB disconnect, device number 64 [ 1671.813924][T24534] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5302'. [ 1671.971604][T24052] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1672.008890][T24052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1672.254053][T24538] syz_tun: entered allmulticast mode [ 1672.254758][T24052] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1672.324853][T24052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1672.325279][T24539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5303'. [ 1672.325507][T24540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5303'. [ 1672.353092][T24052] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1672.412302][T24052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1672.416871][T24052] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1672.458980][T24052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1672.490431][ T5722] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1672.660540][ T5722] usb 10-1: Using ep0 maxpacket: 8 [ 1672.695927][ T5722] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1672.695956][ T5722] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.695973][ T5722] usb 10-1: Product: syz [ 1672.695985][ T5722] usb 10-1: Manufacturer: syz [ 1672.695998][ T5722] usb 10-1: SerialNumber: syz [ 1672.743346][ T5722] usb 10-1: config 0 descriptor?? [ 1672.802918][ T5722] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1672.904482][T22837] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1672.952159][T22837] Bluetooth: hci1: ACL packet for unknown connection handle 1688 [ 1673.030089][T24052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.166370][T24052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.218908][ T1555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.219148][ T1555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.128499][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.128568][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.401560][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.401683][T13032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.651790][T24052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1674.651813][T24052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1675.389535][T13614] usb 10-1: USB disconnect, device number 61 [ 1675.420286][T24537] syz_tun: left allmulticast mode [ 1675.776538][ T40] bridge_slave_1: left allmulticast mode [ 1675.776573][ T40] bridge_slave_1: left promiscuous mode [ 1675.776815][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.876141][ T40] bridge_slave_0: left allmulticast mode [ 1675.876177][ T40] bridge_slave_0: left promiscuous mode [ 1675.876452][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.301605][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.381448][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.443323][ T40] bond0 (unregistering): Released all slaves [ 1677.030382][ T5736] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1677.194524][ T5736] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1677.218247][ T5736] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1677.218267][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.218277][ T5736] usb 4-1: Product: syz [ 1677.218284][ T5736] usb 4-1: Manufacturer: syz [ 1677.218291][ T5736] usb 4-1: SerialNumber: syz [ 1677.260848][ T40] hsr_slave_0: left promiscuous mode [ 1677.290769][ T40] hsr_slave_1: left promiscuous mode [ 1677.292278][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.342016][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1677.468245][T24624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1678.147734][T24645] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1678.191958][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1678.259343][T24653] FAULT_INJECTION: forcing a failure. [ 1678.259343][T24653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1678.259398][T24653] CPU: 1 UID: 0 PID: 24653 Comm: syz.9.5320 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1678.259424][T24653] Tainted: [L]=SOFTLOCKUP [ 1678.259431][T24653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1678.259442][T24653] Call Trace: [ 1678.259450][T24653] [ 1678.259459][T24653] dump_stack_lvl+0xe8/0x150 [ 1678.259485][T24653] should_fail_ex+0x46b/0x600 [ 1678.259533][T24653] _copy_from_iter+0x1d3/0x1670 [ 1678.259561][T24653] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1678.259580][T24653] ? __alloc_skb+0x27d/0x7d0 [ 1678.259601][T24653] ? __pfx__copy_from_iter+0x10/0x10 [ 1678.259618][T24653] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1678.259638][T24653] ? __alloc_skb+0x27d/0x7d0 [ 1678.259663][T24653] ? netlink_sendmsg+0x650/0xb40 [ 1678.259683][T24653] ? skb_put+0x11b/0x210 [ 1678.259707][T24653] netlink_sendmsg+0x6c0/0xb40 [ 1678.259737][T24653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1678.259767][T24653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1678.259795][T24653] ____sys_sendmsg+0x94c/0x9c0 [ 1678.259824][T24653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1678.259855][T24653] ? import_iovec+0x73/0xa0 [ 1678.259879][T24653] ___sys_sendmsg+0x2a5/0x360 [ 1678.259906][T24653] ? __pfx____sys_sendmsg+0x10/0x10 [ 1678.259963][T24653] ? __fget_files+0x2a/0x420 [ 1678.259980][T24653] ? __fget_files+0x3a6/0x420 [ 1678.260006][T24653] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1678.260032][T24653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1678.260064][T24653] ? __pfx_ksys_write+0x10/0x10 [ 1678.260082][T24653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.260110][T24653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.260129][T24653] do_syscall_64+0x15f/0xf80 [ 1678.260152][T24653] ? clear_bhb_loop+0x40/0x90 [ 1678.260175][T24653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.260193][T24653] RIP: 0033:0x7f3a2e47cdd9 [ 1678.260211][T24653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.260231][T24653] RSP: 002b:00007f3a2c68c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.260248][T24653] RAX: ffffffffffffffda RBX: 00007f3a2e6f6180 RCX: 00007f3a2e47cdd9 [ 1678.260261][T24653] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1678.260273][T24653] RBP: 00007f3a2c68c090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.260284][T24653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.260297][T24653] R13: 00007f3a2e6f6218 R14: 00007f3a2e6f6180 R15: 00007fff0a244848 [ 1678.260328][T24653] [ 1679.483429][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1680.147451][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1680.157760][ T5736] cdc_ncm 4-1:1.0: failed to get mac address [ 1680.535640][ T5736] cdc_ncm 4-1:1.0: bind() failure [ 1680.548839][ T5736] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1680.549694][ T5736] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1680.551653][ T5736] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1680.557029][ T5736] usb 4-1: USB disconnect, device number 3 [ 1684.270070][T21023] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1684.292460][T21023] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1684.294021][T21023] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1684.295399][T21023] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1684.341641][T21023] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1686.631154][T24709] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5330'. [ 1686.820381][T22837] Bluetooth: hci3: command tx timeout [ 1687.147465][ T37] kauditd_printk_skb: 909 callbacks suppressed [ 1687.147481][ T37] audit: type=1326 audit(1778474426.895:14494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.148226][ T37] audit: type=1326 audit(1778474426.895:14495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.148275][ T37] audit: type=1326 audit(1778474426.895:14496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.148857][ T37] audit: type=1326 audit(1778474426.895:14497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.148907][ T37] audit: type=1326 audit(1778474426.895:14498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.149489][ T37] audit: type=1326 audit(1778474426.895:14499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.149589][ T37] audit: type=1326 audit(1778474426.895:14500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.150192][ T37] audit: type=1326 audit(1778474426.895:14501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.151638][ T37] audit: type=1326 audit(1778474426.895:14502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.152324][ T37] audit: type=1326 audit(1778474426.905:14503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24760 comm="syz.7.5341" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1687.724961][T24758] overlayfs: statfs failed on './file0' [ 1687.763290][ T5736] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1687.916350][ T5736] usb 8-1: Using ep0 maxpacket: 8 [ 1687.919034][ T5736] usb 8-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1687.919068][ T5736] usb 8-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1687.919088][ T5736] usb 8-1: config 218 has no interface number 0 [ 1687.919135][ T5736] usb 8-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1687.919162][ T5736] usb 8-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1687.919183][ T5736] usb 8-1: config 218 interface 95 has no altsetting 0 [ 1687.922398][ T5736] usb 8-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1687.922424][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.922442][ T5736] usb 8-1: Product: syz [ 1687.922455][ T5736] usb 8-1: Manufacturer: syz [ 1687.922468][ T5736] usb 8-1: SerialNumber: syz [ 1688.914848][T22837] Bluetooth: hci3: command tx timeout [ 1689.674633][T24793] sctp: [Deprecated]: syz.9.5344 (pid 24793) Use of int in max_burst socket option deprecated. [ 1689.674633][T24793] Use struct sctp_assoc_value instead [ 1689.970395][ T5737] usb 10-1: new low-speed USB device number 62 using dummy_hcd [ 1690.107512][ T5737] usb 10-1: device descriptor read/64, error -71 [ 1690.438331][ T5737] usb 10-1: new low-speed USB device number 63 using dummy_hcd [ 1690.561065][ T5737] usb 10-1: device descriptor read/64, error -71 [ 1690.685146][ T5737] usb usb10-port1: attempt power cycle [ 1691.262816][ T5736] usb 8-1: USB disconnect, device number 65 [ 1691.387501][T22837] Bluetooth: hci3: command tx timeout [ 1691.390619][ T5737] usb 10-1: new low-speed USB device number 64 using dummy_hcd [ 1691.411392][ T5737] usb 10-1: device descriptor read/8, error -71 [ 1691.650393][ T5737] usb 10-1: new low-speed USB device number 65 using dummy_hcd [ 1691.671565][ T5737] usb 10-1: device descriptor read/8, error -71 [ 1691.784905][ T5737] usb usb10-port1: unable to enumerate USB device [ 1693.387267][T24817] input: syz0 as /devices/virtual/input/input48 [ 1693.460685][T22837] Bluetooth: hci3: command tx timeout [ 1694.821020][ T37] kauditd_printk_skb: 1175 callbacks suppressed [ 1694.821037][ T37] audit: type=1326 audit(1778474434.575:15679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1694.821526][ T37] audit: type=1326 audit(1778474434.575:15680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1694.821566][ T37] audit: type=1326 audit(1778474434.575:15681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1694.821923][ T37] audit: type=1326 audit(1778474434.575:15682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1694.822332][ T37] audit: type=1326 audit(1778474434.575:15683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1694.822372][ T37] audit: type=1326 audit(1778474434.575:15684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1694.822792][ T37] audit: type=1326 audit(1778474434.575:15685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1694.823280][ T37] audit: type=1326 audit(1778474434.575:15686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1694.823321][ T37] audit: type=1326 audit(1778474434.575:15687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1694.823685][ T37] audit: type=1326 audit(1778474434.575:15688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.7.5355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1695.350589][ T5606] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1695.430396][ T5737] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1695.522623][ T5606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1695.522669][ T5606] usb 4-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 1695.522690][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.529875][ T5606] usb 4-1: config 0 descriptor?? [ 1695.640716][ T5737] usb 8-1: Using ep0 maxpacket: 8 [ 1695.643932][ T5737] usb 8-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1695.643958][ T5737] usb 8-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1695.643978][ T5737] usb 8-1: config 218 has no interface number 0 [ 1695.644033][ T5737] usb 8-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1695.644060][ T5737] usb 8-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1695.644081][ T5737] usb 8-1: config 218 interface 95 has no altsetting 0 [ 1695.648884][ T5737] usb 8-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1695.648910][ T5737] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.648929][ T5737] usb 8-1: Product: syz [ 1695.648941][ T5737] usb 8-1: Manufacturer: syz [ 1695.648955][ T5737] usb 8-1: SerialNumber: syz [ 1697.951502][ T5737] usb 8-1: USB disconnect, device number 66 [ 1698.830433][T24869] netlink: 'syz.7.5362': attribute type 8 has an invalid length. [ 1699.432646][T24705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.432771][T24705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.433023][T24705] bridge_slave_0: entered allmulticast mode [ 1699.467941][T24705] bridge_slave_0: entered promiscuous mode [ 1699.469269][ T5606] usbhid 4-1:0.0: can't add hid device: -71 [ 1699.469482][ T5606] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1699.476787][ T5606] usb 4-1: USB disconnect, device number 4 [ 1699.523047][T24705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.523285][T24705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.526365][T24705] bridge_slave_1: entered allmulticast mode [ 1699.536410][T24871] FAULT_INJECTION: forcing a failure. [ 1699.536410][T24871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.536445][T24871] CPU: 0 UID: 0 PID: 24871 Comm: syz.3.5364 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1699.536470][T24871] Tainted: [L]=SOFTLOCKUP [ 1699.536476][T24871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1699.536487][T24871] Call Trace: [ 1699.536494][T24871] [ 1699.536502][T24871] dump_stack_lvl+0xe8/0x150 [ 1699.536528][T24871] should_fail_ex+0x46b/0x600 [ 1699.536559][T24871] _copy_from_user+0x2d/0xb0 [ 1699.536578][T24871] do_sock_getsockopt+0x200/0x7e0 [ 1699.536605][T24871] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1699.536640][T24871] ? __fget_files+0x3a6/0x420 [ 1699.536656][T24871] ? __fget_files+0x2a/0x420 [ 1699.536679][T24871] __x64_sys_getsockopt+0x1aa/0x250 [ 1699.536705][T24871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.536725][T24871] do_syscall_64+0x15f/0xf80 [ 1699.536745][T24871] ? trace_irq_disable+0x3b/0x140 [ 1699.536766][T24871] ? clear_bhb_loop+0x40/0x90 [ 1699.536788][T24871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.536805][T24871] RIP: 0033:0x7f8ed75ccdd9 [ 1699.536822][T24871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.536836][T24871] RSP: 002b:00007f8ed5826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1699.536855][T24871] RAX: ffffffffffffffda RBX: 00007f8ed7845fa0 RCX: 00007f8ed75ccdd9 [ 1699.536868][T24871] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 1699.536879][T24871] RBP: 00007f8ed5826090 R08: 00002000000000c0 R09: 0000000000000000 [ 1699.536891][T24871] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1699.536902][T24871] R13: 00007f8ed7846038 R14: 00007f8ed7845fa0 R15: 00007ffeeccbdde8 [ 1699.536931][T24871] [ 1699.596090][T24705] bridge_slave_1: entered promiscuous mode [ 1699.740889][T24295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1699.895373][T24295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1699.939774][T24295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1700.015576][T24295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1700.044699][T24705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1700.044824][T24295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1700.108353][ T37] kauditd_printk_skb: 588 callbacks suppressed [ 1700.108377][ T37] audit: type=1326 audit(1778474439.855:16277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.108423][ T37] audit: type=1326 audit(1778474439.855:16278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.108461][ T37] audit: type=1326 audit(1778474439.855:16279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.117105][ T37] audit: type=1326 audit(1778474439.865:16280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.117150][ T37] audit: type=1326 audit(1778474439.865:16281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.117192][ T37] audit: type=1326 audit(1778474439.865:16282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.117231][ T37] audit: type=1326 audit(1778474439.865:16283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.117284][ T37] audit: type=1326 audit(1778474439.865:16284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.117338][ T37] audit: type=1326 audit(1778474439.865:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.117383][ T37] audit: type=1326 audit(1778474439.865:16286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.3.5370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1700.231269][T24295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1700.788245][T24705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1700.791794][T24295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1700.807451][T24895] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5372'. [ 1700.885203][T24295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1701.018613][ T5736] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1701.149744][T24900] netlink: 'syz.7.5373': attribute type 8 has an invalid length. [ 1701.365305][ T5736] usb 4-1: Using ep0 maxpacket: 8 [ 1701.432382][ T5736] usb 4-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1701.432465][ T5736] usb 4-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1701.432511][ T5736] usb 4-1: config 218 has no interface number 0 [ 1701.432931][ T5736] usb 4-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1701.433005][ T5736] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1701.433075][ T5736] usb 4-1: config 218 interface 95 has no altsetting 0 [ 1701.445210][ T5736] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1701.445289][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.445332][ T5736] usb 4-1: Product: syz [ 1701.445370][ T5736] usb 4-1: Manufacturer: syz [ 1701.445407][ T5736] usb 4-1: SerialNumber: syz [ 1702.315354][T24909] 9p: Bad value for 'rfdno' [ 1702.407001][T24705] team0: Port device team_slave_0 added [ 1702.429363][T24705] team0: Port device team_slave_1 added [ 1702.941680][T24705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.941696][T24705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.941720][T24705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.951589][T24705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.951603][T24705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.951992][T24705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.060880][T24925] netlink: 'syz.9.5380': attribute type 8 has an invalid length. [ 1703.957101][ T5736] usb 4-1: USB disconnect, device number 5 [ 1703.988980][T24931] fuse: Bad value for 'fd' [ 1705.679055][T24705] hsr_slave_0: entered promiscuous mode [ 1705.683058][T24705] hsr_slave_1: entered promiscuous mode [ 1705.683972][T24705] debugfs: 'hsr0' already exists in 'hsr' [ 1705.684001][T24705] Cannot create hsr debugfs directory [ 1705.790551][ T40] bridge_slave_1: left allmulticast mode [ 1705.790586][ T40] bridge_slave_1: left promiscuous mode [ 1705.790847][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.883546][ T40] bridge_slave_0: left allmulticast mode [ 1705.883581][ T40] bridge_slave_0: left promiscuous mode [ 1705.883848][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.681174][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.763479][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.801036][ T40] bond0 (unregistering): Released all slaves [ 1707.068131][T22837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1707.191945][T22837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1707.224095][T22837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1707.227878][T22837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1707.315467][T22837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1707.949120][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5391'. [ 1708.060462][ T40] hsr_slave_0: left promiscuous mode [ 1708.080735][ T40] hsr_slave_1: left promiscuous mode [ 1708.081587][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.132058][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.723562][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1708.790957][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1709.040132][T24961] batadv0: entered promiscuous mode [ 1709.041984][T24961] macvlan2: entered allmulticast mode [ 1709.042003][T24961] batadv0: entered allmulticast mode [ 1709.046779][T24961] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1709.184041][T24971] kAFS: unable to lookup cell 'syz1' [ 1709.380551][ T9] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1709.549941][T22837] Bluetooth: hci4: command tx timeout [ 1709.587559][ T9] usb 8-1: device descriptor read/64, error -71 [ 1709.962338][ T9] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1710.140402][ T9] usb 8-1: device descriptor read/64, error -71 [ 1710.252370][ T9] usb usb8-port1: attempt power cycle [ 1710.693915][ T9] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1710.823320][ T9] usb 8-1: device descriptor read/8, error -71 [ 1711.202238][ T9] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1711.247300][ T9] usb 8-1: device descriptor read/8, error -71 [ 1711.366955][ T9] usb usb8-port1: unable to enumerate USB device [ 1711.455896][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1711.635578][T22837] Bluetooth: hci4: command tx timeout [ 1712.990650][ T37] kauditd_printk_skb: 848 callbacks suppressed [ 1712.990668][ T37] audit: type=1326 audit(1778474452.745:17135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25023 comm="syz.9.5404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a2e47cdd9 code=0x0 [ 1713.649853][ T37] audit: type=1326 audit(1778474453.395:17136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25039 comm="syz.3.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1713.649901][ T37] audit: type=1326 audit(1778474453.395:17137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25039 comm="syz.3.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1713.649944][ T37] audit: type=1326 audit(1778474453.395:17138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25039 comm="syz.3.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1713.652773][ T37] audit: type=1326 audit(1778474453.405:17139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25039 comm="syz.3.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1713.652823][ T37] audit: type=1326 audit(1778474453.405:17140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25039 comm="syz.3.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1713.652861][ T37] audit: type=1326 audit(1778474453.405:17141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25039 comm="syz.3.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1713.652897][ T37] audit: type=1326 audit(1778474453.405:17142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25039 comm="syz.3.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1713.652936][ T37] audit: type=1326 audit(1778474453.405:17143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25039 comm="syz.3.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1713.654518][ T37] audit: type=1326 audit(1778474453.405:17144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25039 comm="syz.3.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed75ccdd9 code=0x7ffc0000 [ 1713.701022][T22837] Bluetooth: hci4: command tx timeout [ 1713.710451][ T5736] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1713.867012][ T5736] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1713.867040][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.867058][ T5736] usb 8-1: Product: syz [ 1713.867072][ T5736] usb 8-1: Manufacturer: syz [ 1713.867085][ T5736] usb 8-1: SerialNumber: syz [ 1713.980475][T13614] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1714.141258][T13614] usb 4-1: Using ep0 maxpacket: 8 [ 1714.151426][T13614] usb 4-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1714.151451][T13614] usb 4-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1714.151470][T13614] usb 4-1: config 218 has no interface number 0 [ 1714.151512][T13614] usb 4-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1714.151538][T13614] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1714.151560][T13614] usb 4-1: config 218 interface 95 has no altsetting 0 [ 1714.157429][T13614] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1714.157455][T13614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.157473][T13614] usb 4-1: Product: syz [ 1714.157486][T13614] usb 4-1: Manufacturer: syz [ 1714.157499][T13614] usb 4-1: SerialNumber: syz [ 1714.498315][T25038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.499127][T25038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.522504][T25038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.523664][T25038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.540167][T25038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.619925][T25038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.658955][T25038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.683762][T25038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.733773][T13614] usb 4-1: USB disconnect, device number 6 [ 1714.945526][ T5736] net_ratelimit: 8 callbacks suppressed [ 1714.945549][ T5736] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1714.945603][ T5736] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1714.946065][ T5736] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1714.946113][ T5736] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1714.962242][ T5736] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1715.007028][ T5736] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1715.046697][ T5736] usb 8-1: USB disconnect, device number 71 [ 1715.789942][T22837] Bluetooth: hci4: command tx timeout [ 1715.957490][T24942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.957703][T24942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.957948][T24942] bridge_slave_0: entered allmulticast mode [ 1715.959978][T24942] bridge_slave_0: entered promiscuous mode [ 1715.967962][T24942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.968271][T24942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.968465][T24942] bridge_slave_1: entered allmulticast mode [ 1715.972425][T24942] bridge_slave_1: entered promiscuous mode [ 1716.950829][T25059] FAULT_INJECTION: forcing a failure. [ 1716.950829][T25059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.950851][T25059] CPU: 1 UID: 0 PID: 25059 Comm: syz.7.5411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1716.950867][T25059] Tainted: [L]=SOFTLOCKUP [ 1716.950871][T25059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1716.950877][T25059] Call Trace: [ 1716.950881][T25059] [ 1716.950886][T25059] dump_stack_lvl+0xe8/0x150 [ 1716.950902][T25059] should_fail_ex+0x46b/0x600 [ 1716.950922][T25059] set_fd_set+0x3a/0xa0 [ 1716.950937][T25059] core_sys_select+0x9f2/0xc30 [ 1716.950959][T25059] ? __pfx_core_sys_select+0x10/0x10 [ 1716.950984][T25059] ? __pfx_set_user_sigmask+0x10/0x10 [ 1716.950994][T25059] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1716.951005][T25059] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1716.951018][T25059] __se_sys_pselect6+0x267/0x320 [ 1716.951034][T25059] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1716.951048][T25059] ? __pfx_ksys_write+0x10/0x10 [ 1716.951062][T25059] ? __x64_sys_pselect6+0x21/0xf0 [ 1716.951075][T25059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.951085][T25059] do_syscall_64+0x15f/0xf80 [ 1716.951097][T25059] ? trace_irq_disable+0x3b/0x140 [ 1716.951108][T25059] ? clear_bhb_loop+0x40/0x90 [ 1716.951121][T25059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.951130][T25059] RIP: 0033:0x7f097cb2cdd9 [ 1716.951140][T25059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.951148][T25059] RSP: 002b:00007f097ad86028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1716.951160][T25059] RAX: ffffffffffffffda RBX: 00007f097cda5fa0 RCX: 00007f097cb2cdd9 [ 1716.951167][T25059] RDX: 0000200000000200 RSI: 0000200000000180 RDI: 0000000000000040 [ 1716.951173][T25059] RBP: 00007f097ad86090 R08: 0000000000000000 R09: 0000000000000000 [ 1716.951179][T25059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.951185][T25059] R13: 00007f097cda6038 R14: 00007f097cda5fa0 R15: 00007ffe5214e998 [ 1716.951201][T25059] [ 1716.992680][T24942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1717.033103][T25068] loop5: detected capacity change from 0 to 7 [ 1717.123679][T25068] loop5: [POWERTEC] p1 [ 1717.123954][T25068] loop5: p1 start 29360128 is beyond EOD, truncated [ 1717.289151][T24942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.287579][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5417'. [ 1718.351166][T25088] netlink: 'syz.3.5417': attribute type 8 has an invalid length. [ 1718.351185][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5417'. [ 1718.571872][ T37] kauditd_printk_skb: 331 callbacks suppressed [ 1718.571890][ T37] audit: type=1326 audit(1778474458.305:17476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.571935][ T37] audit: type=1326 audit(1778474458.305:17478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.571975][ T37] audit: type=1326 audit(1778474458.305:17479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.572015][ T37] audit: type=1326 audit(1778474458.305:17480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.572056][ T37] audit: type=1326 audit(1778474458.305:17477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.572096][ T37] audit: type=1326 audit(1778474458.305:17481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.572136][ T37] audit: type=1326 audit(1778474458.305:17482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.572178][ T37] audit: type=1326 audit(1778474458.305:17483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.572219][ T37] audit: type=1326 audit(1778474458.305:17484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.572258][ T37] audit: type=1326 audit(1778474458.305:17485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25089 comm="syz.9.5418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1718.575749][T25094] fuse: fd is not a fuse device [ 1720.148891][T25088] bond0: entered promiscuous mode [ 1720.148914][T25088] bond_slave_0: entered promiscuous mode [ 1720.149115][T25088] bond_slave_1: entered promiscuous mode [ 1720.149285][T25088] team0: entered promiscuous mode [ 1720.149310][T25088] team_slave_0: entered promiscuous mode [ 1720.149522][T25088] : entered promiscuous mode [ 1720.212467][T25088] gretap0: entered promiscuous mode [ 1720.227343][T25088] hsr1: entered promiscuous mode [ 1720.255495][T24942] team0: Port device team_slave_0 added [ 1720.389902][T24942] team0: Port device team_slave_1 added [ 1722.796724][T24942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.796741][T24942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1722.796766][T24942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.836686][T24942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.836703][T24942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1722.836727][T24942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.932228][T15419] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1723.082066][T15419] usb 4-1: Using ep0 maxpacket: 32 [ 1723.084439][T15419] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1723.084470][T15419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64 [ 1723.087147][T15419] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1723.087172][T15419] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1723.087191][T15419] usb 4-1: Product: syz [ 1723.087203][T15419] usb 4-1: Manufacturer: syz [ 1723.087215][T15419] usb 4-1: SerialNumber: syz [ 1723.099777][T15419] usb 4-1: config 0 descriptor?? [ 1723.261321][T15419] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1723.394579][T25140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.395214][T25140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.457646][T20220] usb 4-1: Failed to submit usb control message: -71 [ 1723.457680][T20220] usb 4-1: unable to send the bmi data to the device: -71 [ 1723.457696][T20220] usb 4-1: unable to get target info from device [ 1723.457709][T20220] usb 4-1: could not get target info (-71) [ 1723.461398][T15419] usb 4-1: USB disconnect, device number 7 [ 1723.558550][T20220] usb 4-1: could not probe fw (-71) [ 1723.699326][T25170] binder_alloc: 25168: binder_alloc_buf, no vma [ 1725.172424][T24942] hsr_slave_0: entered promiscuous mode [ 1725.179042][T24942] hsr_slave_1: entered promiscuous mode [ 1725.189405][T24942] debugfs: 'hsr0' already exists in 'hsr' [ 1725.189433][T24942] Cannot create hsr debugfs directory [ 1725.210408][ T5736] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1725.273817][T24705] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1725.308873][T24705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1725.354294][T24705] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1725.394375][T24705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1725.400487][ T5736] usb 8-1: Using ep0 maxpacket: 8 [ 1725.416039][ T5736] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1725.416066][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1725.416085][ T5736] usb 8-1: Product: syz [ 1725.416097][ T5736] usb 8-1: Manufacturer: syz [ 1725.416109][ T5736] usb 8-1: SerialNumber: syz [ 1725.419350][ T5736] usb 8-1: config 0 descriptor?? [ 1725.474678][ T5736] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1725.526033][T24705] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1725.628386][T24705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1725.664743][T24705] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1725.709081][T24705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1726.226225][ T5736] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1726.226323][ T5736] sq905 8-1:0.0: probe with driver sq905 failed with error -71 [ 1726.237691][ T5736] usb 8-1: USB disconnect, device number 72 [ 1727.395795][T25210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5440'. [ 1727.395870][T25210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1727.395877][T25210] IPv6: NLM_F_CREATE should be set when creating new route [ 1727.901058][ T5736] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1728.059412][ T5736] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1728.059441][ T5736] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.086037][ T5736] usb 8-1: config 0 descriptor?? [ 1728.141319][ T5736] cp210x 8-1:0.0: cp210x converter detected [ 1729.023453][T25220] FAULT_INJECTION: forcing a failure. [ 1729.023453][T25220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.023507][T25220] CPU: 0 UID: 0 PID: 25220 Comm: syz.3.5443 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1729.023533][T25220] Tainted: [L]=SOFTLOCKUP [ 1729.023540][T25220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1729.023549][T25220] Call Trace: [ 1729.023555][T25220] [ 1729.023561][T25220] dump_stack_lvl+0xe8/0x150 [ 1729.023578][T25220] should_fail_ex+0x46b/0x600 [ 1729.023598][T25220] _copy_from_user+0x2d/0xb0 [ 1729.023610][T25220] map_update_elem+0x4e0/0x9d0 [ 1729.023627][T25220] __sys_bpf+0x6fa/0x950 [ 1729.023640][T25220] ? __pfx___sys_bpf+0x10/0x10 [ 1729.023662][T25220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.023675][T25220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.023685][T25220] __x64_sys_bpf+0x7c/0x90 [ 1729.023703][T25220] do_syscall_64+0x15f/0xf80 [ 1729.023717][T25220] ? clear_bhb_loop+0x40/0x90 [ 1729.023729][T25220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.023739][T25220] RIP: 0033:0x7f8ed75ccdd9 [ 1729.023749][T25220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.023758][T25220] RSP: 002b:00007f8ed5805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1729.023769][T25220] RAX: ffffffffffffffda RBX: 00007f8ed7846090 RCX: 00007f8ed75ccdd9 [ 1729.023776][T25220] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000002 [ 1729.023783][T25220] RBP: 00007f8ed5805090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.023789][T25220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.023795][T25220] R13: 00007f8ed7846128 R14: 00007f8ed7846090 R15: 00007ffeeccbdde8 [ 1729.023810][T25220] [ 1729.720972][ T5736] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1729.907814][ T5736] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1729.923361][T25212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.954568][T25212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.293082][ T9] usb 8-1: USB disconnect, device number 73 [ 1730.318639][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1730.371028][ T40] bridge_slave_1: left allmulticast mode [ 1730.371063][ T40] bridge_slave_1: left promiscuous mode [ 1730.371313][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.457241][ T9] cp210x 8-1:0.0: device disconnected [ 1730.475706][ T40] bridge_slave_0: left allmulticast mode [ 1730.477275][ T40] bridge_slave_0: left promiscuous mode [ 1730.477554][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.083407][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.403679][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.736182][ T40] bond0 (unregistering): Released all slaves [ 1731.987272][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1734.526610][T25281] FAULT_INJECTION: forcing a failure. [ 1734.526610][T25281] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.526632][T25281] CPU: 0 UID: 0 PID: 25281 Comm: syz.3.5460 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1734.526647][T25281] Tainted: [L]=SOFTLOCKUP [ 1734.526650][T25281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1734.526657][T25281] Call Trace: [ 1734.526661][T25281] [ 1734.526666][T25281] dump_stack_lvl+0xe8/0x150 [ 1734.526683][T25281] should_fail_ex+0x46b/0x600 [ 1734.526704][T25281] should_failslab+0xa8/0x100 [ 1734.526717][T25281] kmem_cache_alloc_noprof+0x87/0x680 [ 1734.526728][T25281] ? __netlink_lookup+0xc6/0x8b0 [ 1734.526741][T25281] ? skb_clone+0x212/0x3a0 [ 1734.526762][T25281] skb_clone+0x212/0x3a0 [ 1734.526786][T25281] __netlink_deliver_tap+0x404/0x850 [ 1734.526817][T25281] ? netlink_deliver_tap+0x2e/0x1b0 [ 1734.526838][T25281] netlink_deliver_tap+0x19c/0x1b0 [ 1734.526864][T25281] netlink_unicast+0x754/0x920 [ 1734.526891][T25281] netlink_sendmsg+0x813/0xb40 [ 1734.526920][T25281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1734.526942][T25281] ? unwind_get_return_address+0x4d/0x90 [ 1734.526967][T25281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1734.526989][T25281] ____sys_sendmsg+0x94c/0x9c0 [ 1734.527014][T25281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1734.527045][T25281] ? import_iovec+0x73/0xa0 [ 1734.527068][T25281] ___sys_sendmsg+0x2a5/0x360 [ 1734.527088][T25281] ? __lock_acquire+0x6b5/0x2cf0 [ 1734.527115][T25281] ? __pfx____sys_sendmsg+0x10/0x10 [ 1734.527179][T25281] ? __fget_files+0x2a/0x420 [ 1734.527195][T25281] ? __fget_files+0x3a6/0x420 [ 1734.527226][T25281] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1734.527251][T25281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1734.527280][T25281] ? __pfx_ksys_write+0x10/0x10 [ 1734.527307][T25281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.527326][T25281] do_syscall_64+0x15f/0xf80 [ 1734.527346][T25281] ? trace_irq_disable+0x3b/0x140 [ 1734.527365][T25281] ? clear_bhb_loop+0x40/0x90 [ 1734.527387][T25281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.527403][T25281] RIP: 0033:0x7f8ed75ccdd9 [ 1734.527419][T25281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.527433][T25281] RSP: 002b:00007f8ed5826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1734.527451][T25281] RAX: ffffffffffffffda RBX: 00007f8ed7845fa0 RCX: 00007f8ed75ccdd9 [ 1734.527464][T25281] RDX: 0000000000004400 RSI: 0000200000000140 RDI: 0000000000000003 [ 1734.527475][T25281] RBP: 00007f8ed5826090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.527486][T25281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.527497][T25281] R13: 00007f8ed7846038 R14: 00007f8ed7845fa0 R15: 00007ffeeccbdde8 [ 1734.527526][T25281] [ 1735.084600][ T40] hsr_slave_0: left promiscuous mode [ 1735.102025][ T40] hsr_slave_1: left promiscuous mode [ 1735.103129][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.146699][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.385528][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.385569][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.691726][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1735.721031][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1735.740506][T19697] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1735.916676][T19697] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1735.919765][T19697] usb 8-1: config 114 has an invalid interface number: 5 but max is 0 [ 1735.919791][T19697] usb 8-1: config 114 has no interface number 0 [ 1735.919835][T19697] usb 8-1: config 114 interface 5 altsetting 232 bulk endpoint 0xE has invalid maxpacket 1023 [ 1735.919857][T19697] usb 8-1: config 114 interface 5 has no altsetting 0 [ 1735.973855][T19697] usb 8-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=46.61 [ 1735.973884][T19697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.973903][T19697] usb 8-1: Product: ໕둸㌐⇩埗ꋍ⹗ꥭȋ㒍Ⅵ눒ꂖ镖⋕䖛盱鯿韫据舏鄰햍倎엡䅤㦆荿˔鄓Ἄ냜압赴⹸ⴿ줹夸刲⾾ꗰ驑五ꆱ꟦암먳㞋鱰걐騁罴멷ꮢ戆рﬓⱋ뎣⠔䏣怅衋㎰‰䷱ᬥ뻩䖬헃징ヺ更슯넟䪑⨳秠ሂ뤧禳ꌽ勨蕸䛧ࣜ굺췛 [ 1735.973928][T19697] usb 8-1: Manufacturer: ꋝ좰㗿┫簮孞箞᝔垓䂨㯮䙧ꂏ⁾䏌⧗탢꼨楃྇㱇ヿ譛䦛┭깁倿뀐뵉㙣婓␠ꉶ⥐笝옻韕餀䱿뛀潍兹㲉躦䅆 [ 1736.053338][T25290] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1736.156319][T24705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.293236][T19697] usb 8-1: USB disconnect, device number 74 [ 1736.879917][T24705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1737.026900][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.027120][T13024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1737.029456][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.029576][T13024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1737.280167][T25315] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5468'. [ 1737.363075][T25315] FAULT_INJECTION: forcing a failure. [ 1737.363075][T25315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.363097][T25315] CPU: 0 UID: 0 PID: 25315 Comm: syz.3.5468 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1737.363112][T25315] Tainted: [L]=SOFTLOCKUP [ 1737.363116][T25315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1737.363122][T25315] Call Trace: [ 1737.363126][T25315] [ 1737.363131][T25315] dump_stack_lvl+0xe8/0x150 [ 1737.363147][T25315] should_fail_ex+0x46b/0x600 [ 1737.363167][T25315] _copy_from_iter+0x1d3/0x1670 [ 1737.363181][T25315] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1737.363192][T25315] ? __alloc_skb+0x27d/0x7d0 [ 1737.363204][T25315] ? __pfx__copy_from_iter+0x10/0x10 [ 1737.363213][T25315] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1737.363223][T25315] ? __alloc_skb+0x27d/0x7d0 [ 1737.363236][T25315] ? netlink_sendmsg+0x650/0xb40 [ 1737.363248][T25315] ? skb_put+0x11b/0x210 [ 1737.363261][T25315] netlink_sendmsg+0x6c0/0xb40 [ 1737.363277][T25315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1737.363290][T25315] ? unwind_get_return_address+0x4d/0x90 [ 1737.363305][T25315] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1737.363318][T25315] ____sys_sendmsg+0x94c/0x9c0 [ 1737.363334][T25315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1737.363351][T25315] ? import_iovec+0x73/0xa0 [ 1737.363363][T25315] ___sys_sendmsg+0x2a5/0x360 [ 1737.363375][T25315] ? __lock_acquire+0x6b5/0x2cf0 [ 1737.363391][T25315] ? __pfx____sys_sendmsg+0x10/0x10 [ 1737.363420][T25315] ? __fget_files+0x2a/0x420 [ 1737.363429][T25315] ? __fget_files+0x3a6/0x420 [ 1737.363443][T25315] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1737.363457][T25315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1737.363474][T25315] ? __pfx_ksys_write+0x10/0x10 [ 1737.363490][T25315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.363501][T25315] do_syscall_64+0x15f/0xf80 [ 1737.363513][T25315] ? trace_irq_disable+0x3b/0x140 [ 1737.363525][T25315] ? clear_bhb_loop+0x40/0x90 [ 1737.363538][T25315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.363547][T25315] RIP: 0033:0x7f8ed75ccdd9 [ 1737.363558][T25315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.363566][T25315] RSP: 002b:00007f8ed5826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1737.363578][T25315] RAX: ffffffffffffffda RBX: 00007f8ed7845fa0 RCX: 00007f8ed75ccdd9 [ 1737.363585][T25315] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1737.363591][T25315] RBP: 00007f8ed5826090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.363598][T25315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.363606][T25315] R13: 00007f8ed7846038 R14: 00007f8ed7845fa0 R15: 00007ffeeccbdde8 [ 1737.363621][T25315] [ 1738.638909][T25344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1739.562960][T25358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5479'. [ 1739.654392][T22837] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 1740.612026][T24705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1741.740708][T25397] 9p: Bad value for 'rfdno' [ 1744.587136][T24942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1744.616655][T24942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1744.619405][T24942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1744.667114][T24942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1744.676489][T24942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1744.919290][T24942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1744.922081][T24942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1745.006246][T24942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1745.438286][T24942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1745.566900][T24942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1745.727643][T21023] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1745.757619][T25450] loop8: detected capacity change from 0 to 8 [ 1745.777361][T21023] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1745.794897][T21023] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1745.796926][T21023] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1745.797788][T21023] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1746.066640][T25450] Dev loop8: unable to read RDB block 8 [ 1746.066685][T25450] loop8: unable to read partition table [ 1746.066947][T25450] loop8: partition table beyond EOD, truncated [ 1746.066968][T25450] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1746.472540][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.472796][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1746.521784][ T1555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.521960][ T1555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.940627][T21023] Bluetooth: hci3: command tx timeout [ 1748.159968][T25500] FAULT_INJECTION: forcing a failure. [ 1748.159968][T25500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.160012][T25500] CPU: 0 UID: 0 PID: 25500 Comm: syz.7.5504 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1748.160033][T25500] Tainted: [L]=SOFTLOCKUP [ 1748.160039][T25500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1748.160047][T25500] Call Trace: [ 1748.160053][T25500] [ 1748.160060][T25500] dump_stack_lvl+0xe8/0x150 [ 1748.160084][T25500] should_fail_ex+0x46b/0x600 [ 1748.160113][T25500] _copy_to_user+0x31/0xb0 [ 1748.160133][T25500] simple_read_from_buffer+0xe1/0x170 [ 1748.160163][T25500] proc_fail_nth_read+0x1be/0x230 [ 1748.160187][T25500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1748.160210][T25500] ? rw_verify_area+0x2ac/0x4e0 [ 1748.160229][T25500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1748.160251][T25500] vfs_read+0x212/0xa80 [ 1748.160273][T25500] ? __pfx_vfs_read+0x10/0x10 [ 1748.160289][T25500] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1748.160308][T25500] ? lockdep_hardirqs_on+0x7a/0x110 [ 1748.160325][T25500] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1748.160344][T25500] ? mutex_lock_nested+0x152/0x1d0 [ 1748.160365][T25500] ? fdget_pos+0x252/0x320 [ 1748.160384][T25500] ksys_read+0x156/0x270 [ 1748.160401][T25500] ? __pfx_ksys_read+0x10/0x10 [ 1748.160421][T25500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.160436][T25500] do_syscall_64+0x15f/0xf80 [ 1748.160450][T25500] ? trace_irq_disable+0x3b/0x140 [ 1748.160466][T25500] ? clear_bhb_loop+0x40/0x90 [ 1748.160482][T25500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.160504][T25500] RIP: 0033:0x7f097caed60e [ 1748.160518][T25500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1748.160530][T25500] RSP: 002b:00007f097ad64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1748.160544][T25500] RAX: ffffffffffffffda RBX: 00007f097ad656c0 RCX: 00007f097caed60e [ 1748.160554][T25500] RDX: 000000000000000f RSI: 00007f097ad650a0 RDI: 0000000000000003 [ 1748.160562][T25500] RBP: 00007f097ad65090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.160570][T25500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.160578][T25500] R13: 00007f097cda6128 R14: 00007f097cda6090 R15: 00007ffe5214e998 [ 1748.160602][T25500] [ 1748.233183][T25492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.913094][T25508] FAULT_INJECTION: forcing a failure. [ 1748.913094][T25508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.913124][T25508] CPU: 1 UID: 0 PID: 25508 Comm: syz.7.5507 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1748.913143][T25508] Tainted: [L]=SOFTLOCKUP [ 1748.913147][T25508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1748.913155][T25508] Call Trace: [ 1748.913161][T25508] [ 1748.913167][T25508] dump_stack_lvl+0xe8/0x150 [ 1748.913189][T25508] should_fail_ex+0x46b/0x600 [ 1748.913214][T25508] _copy_from_user+0x2d/0xb0 [ 1748.913232][T25508] __sys_connect+0x156/0x450 [ 1748.913250][T25508] ? __pfx___sys_connect+0x10/0x10 [ 1748.913274][T25508] ? __pfx_ksys_write+0x10/0x10 [ 1748.913294][T25508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.913309][T25508] __x64_sys_connect+0x7a/0x90 [ 1748.913326][T25508] do_syscall_64+0x15f/0xf80 [ 1748.913345][T25508] ? trace_irq_disable+0x3b/0x140 [ 1748.913362][T25508] ? clear_bhb_loop+0x40/0x90 [ 1748.913382][T25508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.913398][T25508] RIP: 0033:0x7f097cb2cdd9 [ 1748.913413][T25508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.913426][T25508] RSP: 002b:00007f097ad86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1748.913441][T25508] RAX: ffffffffffffffda RBX: 00007f097cda5fa0 RCX: 00007f097cb2cdd9 [ 1748.913450][T25508] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000006 [ 1748.913458][T25508] RBP: 00007f097ad86090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.913466][T25508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.913474][T25508] R13: 00007f097cda6038 R14: 00007f097cda5fa0 R15: 00007ffe5214e998 [ 1748.913496][T25508] [ 1749.148077][ T37] kauditd_printk_skb: 1129 callbacks suppressed [ 1749.148094][ T37] audit: type=1326 audit(1778474488.895:18615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.148765][ T37] audit: type=1326 audit(1778474488.895:18616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.148809][ T37] audit: type=1326 audit(1778474488.895:18617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.149152][ T37] audit: type=1326 audit(1778474488.895:18618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.149549][ T37] audit: type=1326 audit(1778474488.895:18619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.149592][ T37] audit: type=1326 audit(1778474488.895:18620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.150065][ T37] audit: type=1326 audit(1778474488.895:18621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.179601][ T37] audit: type=1326 audit(1778474488.895:18622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.179648][ T37] audit: type=1326 audit(1778474488.925:18623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.180064][ T37] audit: type=1326 audit(1778474488.925:18624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25511 comm="syz.7.5508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097cb2cdd9 code=0x7ffc0000 [ 1749.420189][ T5736] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1749.620781][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 1749.627535][ T5736] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1749.627632][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.627653][ T5736] usb 4-1: Product: syz [ 1749.627667][ T5736] usb 4-1: Manufacturer: syz [ 1749.627679][ T5736] usb 4-1: SerialNumber: syz [ 1749.634078][ T5736] usb 4-1: config 0 descriptor?? [ 1749.685935][ T5736] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1750.020421][T21023] Bluetooth: hci3: command tx timeout [ 1750.561080][ T9] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1750.720326][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1750.737740][ T9] usb 8-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1750.737764][ T9] usb 8-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1750.737784][ T9] usb 8-1: config 218 has no interface number 0 [ 1750.737821][ T9] usb 8-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1750.737847][ T9] usb 8-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1750.737868][ T9] usb 8-1: config 218 interface 95 has no altsetting 0 [ 1750.861821][ T9] usb 8-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1750.861849][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.861867][ T9] usb 8-1: Product: syz [ 1750.861880][ T9] usb 8-1: Manufacturer: syz [ 1750.861894][ T9] usb 8-1: SerialNumber: syz [ 1751.246751][ T5736] gspca_ov534_9: reg_w failed -110 [ 1751.530683][ T5736] gspca_ov534_9: Unknown sensor 0000 [ 1751.530780][ T5736] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1751.940088][ T5736] usb 4-1: USB disconnect, device number 8 [ 1752.111849][T21023] Bluetooth: hci3: command tx timeout [ 1752.184877][T24942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.495239][T25550] FAULT_INJECTION: forcing a failure. [ 1753.495239][T25550] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.495299][T25550] CPU: 0 UID: 0 PID: 25550 Comm: syz.3.5515 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1753.495324][T25550] Tainted: [L]=SOFTLOCKUP [ 1753.495330][T25550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1753.495340][T25550] Call Trace: [ 1753.495346][T25550] [ 1753.495354][T25550] dump_stack_lvl+0xe8/0x150 [ 1753.495379][T25550] should_fail_ex+0x46b/0x600 [ 1753.495405][T25550] should_failslab+0xa8/0x100 [ 1753.495427][T25550] __kmalloc_noprof+0xdf/0x7b0 [ 1753.495446][T25550] ? security_sk_alloc+0x52/0x360 [ 1753.495470][T25550] security_sk_alloc+0x52/0x360 [ 1753.495491][T25550] sk_prot_alloc+0x101/0x210 [ 1753.495515][T25550] sk_alloc+0x3a/0x390 [ 1753.495537][T25550] inet_create+0x7a0/0x1010 [ 1753.495559][T25550] ? inet_create+0x9c/0x1010 [ 1753.495583][T25550] __sock_create+0x4b2/0x9d0 [ 1753.495609][T25550] __sys_socket+0xd6/0x1b0 [ 1753.495627][T25550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.495646][T25550] __x64_sys_socket+0x7a/0x90 [ 1753.495664][T25550] do_syscall_64+0x15f/0xf80 [ 1753.495686][T25550] ? clear_bhb_loop+0x40/0x90 [ 1753.495715][T25550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.495732][T25550] RIP: 0033:0x7f8ed75ccdd9 [ 1753.495749][T25550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1753.495763][T25550] RSP: 002b:00007f8ed5805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1753.495782][T25550] RAX: ffffffffffffffda RBX: 00007f8ed7846090 RCX: 00007f8ed75ccdd9 [ 1753.495796][T25550] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 1753.495805][T25550] RBP: 00007f8ed5805090 R08: 0000000000000000 R09: 0000000000000000 [ 1753.495815][T25550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.495826][T25550] R13: 00007f8ed7846128 R14: 00007f8ed7846090 R15: 00007ffeeccbdde8 [ 1753.495853][T25550] [ 1754.041860][ T9] usb 8-1: USB disconnect, device number 75 [ 1754.180388][T21023] Bluetooth: hci3: command tx timeout [ 1754.431727][T25447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.431884][T25447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.432136][T25447] bridge_slave_0: entered allmulticast mode [ 1754.436350][T25447] bridge_slave_0: entered promiscuous mode [ 1754.455001][T25447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.455136][T25447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.455390][T25447] bridge_slave_1: entered allmulticast mode [ 1754.459606][T25447] bridge_slave_1: entered promiscuous mode [ 1755.333232][T25447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1755.394930][T25447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1755.410110][T24942] veth0_vlan: entered promiscuous mode [ 1755.833380][T25447] team0: Port device team_slave_0 added [ 1755.856413][T25447] team0: Port device team_slave_1 added [ 1755.974902][T24942] veth1_vlan: entered promiscuous mode [ 1756.321114][T25447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.321131][T25447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.321155][T25447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.379180][T25447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1756.379195][T25447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.379222][T25447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1756.621054][ T13] bridge_slave_1: left allmulticast mode [ 1756.621091][ T13] bridge_slave_1: left promiscuous mode [ 1756.621367][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.673007][T25580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5523'. [ 1756.740138][ T13] bridge_slave_0: left allmulticast mode [ 1756.740173][ T13] bridge_slave_0: left promiscuous mode [ 1756.742606][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.709521][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.262746][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.296402][ T13] bond0 (unregistering): Released all slaves [ 1760.737492][T25447] hsr_slave_0: entered promiscuous mode [ 1760.743144][T25447] hsr_slave_1: entered promiscuous mode [ 1760.745111][T25447] debugfs: 'hsr0' already exists in 'hsr' [ 1760.745133][T25447] Cannot create hsr debugfs directory [ 1761.849946][T25618] FAULT_INJECTION: forcing a failure. [ 1761.849946][T25618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.849981][T25618] CPU: 1 UID: 0 PID: 25618 Comm: syz.7.5533 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1761.850005][T25618] Tainted: [L]=SOFTLOCKUP [ 1761.850012][T25618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1761.850022][T25618] Call Trace: [ 1761.850029][T25618] [ 1761.850037][T25618] dump_stack_lvl+0xe8/0x150 [ 1761.850064][T25618] should_fail_ex+0x46b/0x600 [ 1761.850095][T25618] _copy_from_iter+0x1d3/0x1670 [ 1761.850120][T25618] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1761.850140][T25618] ? __alloc_skb+0x27d/0x7d0 [ 1761.850159][T25618] ? __pfx__copy_from_iter+0x10/0x10 [ 1761.850174][T25618] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1761.850193][T25618] ? __alloc_skb+0x27d/0x7d0 [ 1761.850217][T25618] ? __alloc_skb+0x4e5/0x7d0 [ 1761.850236][T25618] ? skb_put+0x11b/0x210 [ 1761.850257][T25618] pfkey_sendmsg+0x265/0x1120 [ 1761.850285][T25618] ? unwind_next_frame+0xa6/0x2550 [ 1761.850311][T25618] ? smack_socket_sendmsg+0x1a9/0x590 [ 1761.850339][T25618] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1761.850377][T25618] ? __lock_acquire+0x6b5/0x2cf0 [ 1761.850407][T25618] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1761.850435][T25618] ? __kernel_text_address+0xd/0x30 [ 1761.850458][T25618] ? unwind_get_return_address+0x4d/0x90 [ 1761.850481][T25618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1761.850504][T25618] ____sys_sendmsg+0x94c/0x9c0 [ 1761.850530][T25618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1761.850560][T25618] ? import_iovec+0x73/0xa0 [ 1761.850583][T25618] ___sys_sendmsg+0x2a5/0x360 [ 1761.850601][T25618] ? __lock_acquire+0x6b5/0x2cf0 [ 1761.850626][T25618] ? __pfx____sys_sendmsg+0x10/0x10 [ 1761.850678][T25618] ? __fget_files+0x2a/0x420 [ 1761.850693][T25618] ? __fget_files+0x3a6/0x420 [ 1761.850715][T25618] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1761.850739][T25618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1761.850767][T25618] ? __pfx_ksys_write+0x10/0x10 [ 1761.850793][T25618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.850812][T25618] do_syscall_64+0x15f/0xf80 [ 1761.850833][T25618] ? trace_irq_disable+0x3b/0x140 [ 1761.850853][T25618] ? clear_bhb_loop+0x40/0x90 [ 1761.850875][T25618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.850892][T25618] RIP: 0033:0x7f097cb2cdd9 [ 1761.850910][T25618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.850925][T25618] RSP: 002b:00007f097ad86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1761.850944][T25618] RAX: ffffffffffffffda RBX: 00007f097cda5fa0 RCX: 00007f097cb2cdd9 [ 1761.850957][T25618] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 1761.850967][T25618] RBP: 00007f097ad86090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.850978][T25618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.850989][T25618] R13: 00007f097cda6038 R14: 00007f097cda5fa0 R15: 00007ffe5214e998 [ 1761.851018][T25618] [ 1762.080646][T15419] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1762.262630][T15419] usb 4-1: Using ep0 maxpacket: 32 [ 1762.265214][T15419] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1762.265238][T15419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.273446][T15419] usb 4-1: config 0 descriptor?? [ 1762.320759][ T13] hsr_slave_0: left promiscuous mode [ 1762.360727][ T13] hsr_slave_1: left promiscuous mode [ 1762.362481][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1762.407234][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.490652][T15419] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1762.495287][T15419] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1762.496073][T15419] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1762.496122][T15419] usb 4-1: media controller created [ 1762.567687][T15419] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1763.756287][T25613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1763.985632][T15419] DVB: Unable to find symbol dib7000p_attach() [ 1763.985648][T15419] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1764.090369][T15419] rc_core: IR keymap rc-dib0700-rc5 not found [ 1764.090389][T15419] Registered IR keymap rc-empty [ 1764.090702][T15419] dvb-usb: could not initialize remote control. [ 1764.090710][T15419] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1764.180516][T15419] usb 4-1: USB disconnect, device number 9 [ 1764.321552][T15419] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1764.715720][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1764.762334][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1764.940393][ T5870] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1764.974843][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1764.999618][T24942] veth0_macvtap: entered promiscuous mode [ 1765.087739][T24942] veth1_macvtap: entered promiscuous mode [ 1765.100381][ T5870] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1765.100415][ T5870] usb 4-1: can't read configurations, error -22 [ 1765.230371][ T5870] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1765.239475][T24942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1765.378622][T24942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1765.426833][ T5870] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1765.426869][ T5870] usb 4-1: can't read configurations, error -22 [ 1765.427231][ T5870] usb usb4-port1: attempt power cycle [ 1765.684617][ T37] kauditd_printk_skb: 337 callbacks suppressed [ 1765.684631][ T37] audit: type=1326 audit(1778474505.435:18962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.684762][ T37] audit: type=1326 audit(1778474505.435:18963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.684793][ T37] audit: type=1326 audit(1778474505.435:18964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.685389][ T37] audit: type=1326 audit(1778474505.435:18965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.685425][ T37] audit: type=1326 audit(1778474505.435:18966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.685455][ T37] audit: type=1326 audit(1778474505.435:18967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.685484][ T37] audit: type=1326 audit(1778474505.435:18968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.686869][ T37] audit: type=1326 audit(1778474505.435:18969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.686906][ T37] audit: type=1326 audit(1778474505.435:18970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.686934][ T37] audit: type=1326 audit(1778474505.435:18971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25655 comm="syz.9.5540" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a2e47cdd9 code=0x7ffc0000 [ 1765.910396][ T5870] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1766.074372][ T5870] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1766.074411][ T5870] usb 4-1: can't read configurations, error -22 [ 1766.200971][ T5870] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1766.223825][ T5870] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1766.223859][ T5870] usb 4-1: can't read configurations, error -22 [ 1766.224231][ T5870] usb usb4-port1: unable to[ 1766.224231][ T5870] usb usb4-port1: unable to enumerate USB device [ 1766.235575][T25659] macvlan2: entered promiscuous mode [ 1766.235595][T25659] bridge0: entered promiscuous mode [ 1766.246100][T25658] ------------[ cut here ]------------ [ 1766.246112][T25658] !RB_EMPTY_ROOT(&prime_fpriv->dmabufs) [ 1766.246123][T25658] WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x48/0x60, CPU#1: syz.7.5541/25658 [ 1766.246170][T25658] Modules linked in: [ 1766.246189][T25658] CPU: 1 UID: 0 PID: 25658 Comm: syz.7.5541 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1766.246213][T25658] Tainted: [L]=SOFTLOCKUP [ 1766.246220][T25658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1766.246231][T25658] RIP: 0010:drm_prime_destroy_file_private+0x48/0x60 [ 1766.246256][T25658] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 50 6f d2 fc 48 83 3b 00 75 0c e8 95 63 6b fc 5b c3 cc cc cc cc cc e8 89 63 6b fc 90 <0f> 0b 90 5b e9 cf 87 c7 05 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 1766.246271][T25658] RSP: 0018:ffffc90004ecfc48 EFLAGS: 00010293 [ 1766.246286][T25658] RAX: ffffffff85591347 RBX: ffff88806079d4d8 RCX: ffff888036a11ec0 [ 1766.246300][T25658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1766.246312][T25658] RBP: ffff88806079d3b0 R08: ffffffff8f88eff7 R09: 1ffffffff1f11dfe [ 1766.246325][T25658] R10: dffffc0000000000 R11: fffffbfff1f11dff R12: dffffc0000000000 [ 1766.246339][T25658] R13: dead000000000100 R14: 0000000000000000 R15: ffff88806079d3c0 [ 1766.246352][T25658] FS: 000055556074f500(0000) GS:ffff888126276000(0000) knlGS:0000000000000000 [ 1766.246367][T25658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1766.246379][T25658] CR2: 000000110c47249c CR3: 00000000aff42000 CR4: 00000000003526f0 [ 1766.246396][T25658] Call Trace: [ 1766.246404][T25658] [ 1766.246412][T25658] drm_file_free+0x7ea/0x9f0 [ 1766.246439][T25658] ? drm_release+0x2ec/0x400 [ 1766.246467][T25658] drm_release+0x2f4/0x400 [ 1766.246491][T25658] ? __pfx_drm_release+0x10/0x10 [ 1766.246514][T25658] __fput+0x461/0xa70 [ 1766.246548][T25658] task_work_run+0x1d9/0x270 [ 1766.246574][T25658] ? __pfx_task_work_run+0x10/0x10 [ 1766.246607][T25658] exit_to_user_mode_loop+0xf3/0x4d0 [ 1766.246628][T25658] ? rcu_is_watching+0x15/0xb0 [ 1766.246653][T25658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.246672][T25658] do_syscall_64+0x33e/0xf80 [ 1766.246695][T25658] ? clear_bhb_loop+0x40/0x90 [ 1766.246717][T25658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.246735][T25658] RIP: 0033:0x7f097cb2cdd9 [ 1766.246751][T25658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.246766][T25658] RSP: 002b:00007ffe5214eaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1766.246783][T25658] RAX: 0000000000000000 RBX: 00007f097cda7da0 RCX: 00007f097cb2cdd9 [ 1766.246795][T25658] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1766.246805][T25658] RBP: 00007f097cda7da0 R08: 00007f097cda6128 R09: 0000000000000000 [ 1766.246817][T25658] R10: 00000000003ffc3c R11: 0000000000000246 R12: 00000000001af2be [ 1766.246829][T25658] R13: 00007f097cda618c R14: 00000000001af0a0 R15: 00007f097cda6180 [ 1766.246865][T25658] [ 1766.246879][T25658] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1766.246893][T25658] CPU: 1 UID: 0 PID: 25658 Comm: syz.7.5541 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1766.246917][T25658] Tainted: [L]=SOFTLOCKUP [ 1766.246924][T25658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1766.246933][T25658] Call Trace: [ 1766.246941][T25658] [ 1766.246948][T25658] vpanic+0x56c/0xa60 [ 1766.246969][T25658] ? __pfx__printk+0x10/0x10 [ 1766.246991][T25658] ? __pfx_vpanic+0x10/0x10 [ 1766.247009][T25658] ? is_bpf_text_address+0x292/0x2b0 [ 1766.247032][T25658] ? is_bpf_text_address+0x26/0x2b0 [ 1766.247061][T25658] panic+0xc5/0xd0 [ 1766.247080][T25658] ? __pfx_panic+0x10/0x10 [ 1766.247115][T25658] __warn+0x315/0x4c0 [ 1766.247134][T25658] ? drm_prime_destroy_file_private+0x48/0x60 [ 1766.247160][T25658] ? drm_prime_destroy_file_private+0x48/0x60 [ 1766.247185][T25658] __report_bug+0x29a/0x540 [ 1766.247211][T25658] ? drm_prime_destroy_file_private+0x48/0x60 [ 1766.247236][T25658] ? __pfx___report_bug+0x10/0x10 [ 1766.247265][T25658] ? do_raw_spin_lock+0x12b/0x2f0 [ 1766.247288][T25658] ? drm_prime_destroy_file_private+0x48/0x60 [ 1766.247312][T25658] report_bug+0x16a/0x220 [ 1766.247333][T25658] ? drm_prime_destroy_file_private+0x48/0x60 [ 1766.247355][T25658] ? drm_prime_destroy_file_private+0x4a/0x60 [ 1766.247378][T25658] handle_bug+0x9c/0x200 [ 1766.247401][T25658] exc_invalid_op+0x1a/0x50 [ 1766.247423][T25658] asm_exc_invalid_op+0x1a/0x20 [ 1766.247440][T25658] RIP: 0010:drm_prime_destroy_file_private+0x48/0x60 [ 1766.247464][T25658] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 50 6f d2 fc 48 83 3b 00 75 0c e8 95 63 6b fc 5b c3 cc cc cc cc cc e8 89 63 6b fc 90 <0f> 0b 90 5b e9 cf 87 c7 05 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 1766.247477][T25658] RSP: 0018:ffffc90004ecfc48 EFLAGS: 00010293 [ 1766.247491][T25658] RAX: ffffffff85591347 RBX: ffff88806079d4d8 RCX: ffff888036a11ec0 [ 1766.247504][T25658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1766.247515][T25658] RBP: ffff88806079d3b0 R08: ffffffff8f88eff7 R09: 1ffffffff1f11dfe [ 1766.247527][T25658] R10: dffffc0000000000 R11: fffffbfff1f11dff R12: dffffc0000000000 [ 1766.247540][T25658] R13: dead000000000100 R14: 0000000000000000 R15: ffff88806079d3c0 [ 1766.247559][T25658] ? drm_prime_destroy_file_private+0x47/0x60 [ 1766.247588][T25658] ? drm_prime_destroy_file_private+0x47/0x60 [ 1766.247611][T25658] drm_file_free+0x7ea/0x9f0 [ 1766.247637][T25658] ? drm_release+0x2ec/0x400 [ 1766.247664][T25658] drm_release+0x2f4/0x400 [ 1766.247692][T25658] ? __pfx_drm_release+0x10/0x10 [ 1766.247714][T25658] __fput+0x461/0xa70 [ 1766.247748][T25658] task_work_run+0x1d9/0x270 [ 1766.247773][T25658] ? __pfx_task_work_run+0x10/0x10 [ 1766.247806][T25658] exit_to_user_mode_loop+0xf3/0x4d0 [ 1766.247826][T25658] ? rcu_is_watching+0x15/0xb0 [ 1766.247850][T25658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.247876][T25658] do_syscall_64+0x33e/0xf80 [ 1766.247897][T25658] ? clear_bhb_loop+0x40/0x90 [ 1766.247918][T25658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.247936][T25658] RIP: 0033:0x7f097cb2cdd9 [ 1766.247951][T25658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.247966][T25658] RSP: 002b:00007ffe5214eaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1766.247983][T25658] RAX: 0000000000000000 RBX: 00007f097cda7da0 RCX: 00007f097cb2cdd9 [ 1766.247995][T25658] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1766.248006][T25658] RBP: 00007f097cda7da0 R08: 00007f097cda6128 R09: 0000000000000000 [ 1766.248018][T25658] R10: 00000000003ffc3c R11: 0000000000000246 R12: 00000000001af2be [ 1766.248030][T25658] R13: 00007f097cda618c R14: 00000000001af0a0 R15: 00007f097cda6180 [ 1766.248057][T25658] [ 1766.248492][T25658] Kernel Offset: disabled