last executing test programs: 2m38.90220005s ago: executing program 2 (id=54): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x100000000000000}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f0000000680), 0x0, 0x0, &(0x7f0000000780)=""/246, 0xf6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB='\t\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0100000002000000010100000000000000000000000000000000b848a7634b09abad02a861d67ae3ed4ec23e191dac9dd87829a313e79dab17b7ffb5bfc9ac5d26640948367e73a5a0e09fefd5ecea57cf2c992418429eab5be34d32c1dc2ecfed150a8cfed03253bc46724ee3e40ccbe9e364b3be56e064313b8780bc1f1f37694a3591bf5e2d97b0b008b9fc7028e412461ad0bfb99a5722da1262268c9164aefac8721a87ed7e81bdbd58f2cc6221"], 0x50) unshare(0x26000400) fdatasync(0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r7, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000900)=r8}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a7ffffff000000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018230000", @ANYRES32=r7, @ANYBLOB="00000000050000e6a37c2a0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x70, &(0x7f0000000280)=""/112, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x16, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xc, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r5, r8, 0xffffffffffffffff], 0x0, 0x10, 0x7d48}, 0x94) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000640)={0x6, &(0x7f0000000080)=[{}, {}, {}]}) 2m37.012471306s ago: executing program 2 (id=57): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4040) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) write$dsp(r0, &(0x7f0000002200)='D', 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) 2m35.719882421s ago: executing program 2 (id=62): memfd_create(&(0x7f0000000140)='ZZ\xceJ\x90\x90\x10\x85v\xcbI\x17\x8e\xc4\\\x95\xd8\x98\x90\xaa\xe0\x1d\xb8\xa7F\v\xc8s\x95\xd8j\x99\xfdR\xd2\t\xd8A\xa2\xb8\x01\xa8m=/\xb4\x9f\x94\xf7P\xc6\xa3\xdb\xa0\x8e\x1fV\xea\xed!m\xfc\x9d\xd1ry\x18C\xaf\x86Z5F\xefI\x1e\x18\xfe\xf2M%\x05\xbc\x1aq\x1b\r\'U\xdew\x87$\xd1]\\\x9a\tgrn\xf4\xea\xdc\x13\x17\xa415^_o\x1e}\xe2\xcf]Y\x93\x01\xbd\x9b\x9f\b \x9a\xac\x92\xcd\xc7\xf0/\x17\x96\xdb\xb6e1[\x9c\x19)\xdc\x8e\x1c\x8bb\xe5\xd0\xf2\xbfET\r\xc0\x00%$\x7f\x8c\tHb\x9c\xc4u\x82s\x82\xc4J2\xb6\xf0\xa1(\xc3SBK\x17pA\xfb\x10\xba\xa6\xb0\x1e9U\x95\xa0\xd27\xcb\xb2[+\xa4\x99xs,\xb1\xc12\xd6\xeda\xd8\x84\xf8\x7f9\x97\xd5\xf5\x80\xb0\xe1m\t\xbc\x81a\xfd\xfb\x85\x83\xfcf\x01\x98\x92\ap>\xd5\x1a!\\$\x89E\xf3\x1cD\xd0N\xb7q\x1bDa}b\x8aJ\x9e\xa9\x1e/Y\xa7P\xfc\x82`k\xf6\x11\x8f\xd9\xca\xa6w\xaef\x92\x85\x03\x010\xa3\xb6\x9e;\x94b\xc2\xebN\x19\xfd\x91A\xd4[\x90\x1b\xf9o\x87\x06%\xcd\xa9\xc3\xf9\"\x95\xccN\xa4\x1bV\xb1\x95\x89Z`1L\x8f\x8du\xc0\xb3pC\x0e\x9cG<\xe4\x8eWH|\xdb\x92\xa1\x81i\xb5\x06\xe4\xf5`H\x1a{\x9b', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r6, 0x0, 0x0) fstat(r1, &(0x7f00000073c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001040)="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", 0x2000, &(0x7f0000007580)={&(0x7f0000000500)={0x50, 0x0, 0x8, {0x7, 0x2b, 0xd, 0x82101, 0x4b04, 0x1, 0x10001, 0x1ff, 0x0, 0x0, 0x1, 0x2}}, &(0x7f00000002c0)={0x18, 0x0, 0x3, {0xfffffffffffffff9}}, &(0x7f0000000580)={0x18, 0xfffffffffffffffe, 0x1, {0x80000000}}, &(0x7f00000005c0)={0x18, 0xfffffffffffffffe, 0xffffffffffff8001, {0x200}}, &(0x7f0000000600)={0x18, 0xffffffffffffffda, 0x1, {0x9}}, &(0x7f0000000840)={0x28, 0x0, 0xffffffff, {{0x1, 0xf4, 0x1}}}, &(0x7f0000000880)={0x60, 0xfffffffffffffff5, 0xd, {{0x2, 0x8000, 0x6, 0x1, 0xffffffff7fffffff, 0x101, 0x3, 0x8}}}, &(0x7f0000000900)={0x18, 0x0, 0x7, {0x9}}, &(0x7f0000000640)={0x172, 0x0, 0x3, {'ZZ\xceJ\x90\x90\x10\x85v\xcbI\x17\x8e\xc4\\\x95\xd8\x98\x90\xaa\xe0\x1d\xb8\xa7F\v\xc8s\x95\xd8j\x99\xfdR\xd2\t\xd8A\xa2\xb8\x01\xa8m=/\xb4\x9f\x94\xf7P\xc6\xa3\xdb\xa0\x8eJc\x1fV\xea\xed!m\xfc\x9d\xd1ry\x18C\xaf\x86Z5F\xefI\x1e\x18\xfe\xf2M%\x05\xbc\x1aq\x1b\r\'U\xdew\x87$\xd1]\\\x9al:\xdci\x8cT\x94\x82\x17\xa415^_o\x1e}\xe2\xcf]Y\x93\x01\xbd\x9b\x9f\b \x9a\xac\x92\xcd\xc7\xf0/\x17\x96\xdb\xb6e1[\x9c\x19)\xdc\x8e\x1c\x8bb\xe5\xd0\xf2\xbfET\r\xc0\x00%$\x7f\x8c\tHb\x9c\xc4u\x82s\x82\xc4J2\xb6\xf0\xa1(\xc3SBK\x17pA\xfb\x10\xba\xa6\xb0\x1e9U\x95\xa0\xd27\xcb\xb2[+\xa4\x99xs,\xb1\xc12\xd6\xeda\xd8\x84\xf8\x7f9\x97\xd5\xf5\x80\xb0\xe1m\t\xbc\x81a\xfd\xfb\x85\x83\xfcf\x01\x98\x92\ap>\xd5\x1a!\\$\x89E\xf3\x1cD\xd0N\xb7q\x1bDa}b\x8aJ\x9e\xa9\x1e/Y\xa7P\xfc\x82`k\xf6\x11\x8f\xd9\xca\xa6w\xaef\x92\x85\x03\x010\xa3\xb6\x9e;\x94b\xc2\xebN\x19\xfd\x91A\xd4[\x90\x1b\xf9o\x87\x06%\xcd\xa9\xc3\xf9\"\x95\xccN\xa4\x1bV\xb1\x95\x89Z`1L\x8f\x8du\xc0\xb3pC\x0e\x9cG<\xe4\x8eWH|\xdb\x92\xa1\x81i\xb5\x06\xe4\xf5`H\x1a'}}, &(0x7f0000000ac0)={0x20, 0x0, 0x1, {0x0, 0x4}}, &(0x7f0000000b40)={0x78, 0x0, 0xc, {0x400, 0x4, 0x0, {0x3, 0x7, 0x5, 0x0, 0x751, 0x6, 0xe, 0x10000000, 0x4, 0x2000, 0x8, 0x0, 0x0, 0xc, 0x2}}}, &(0x7f0000000c80)={0x90, 0xfffffffffffffff5, 0x2, {0x4, 0x0, 0x1, 0x2, 0x9, 0x40, {0x1, 0xab, 0x5, 0x8, 0x1b, 0x6, 0x8, 0xd, 0x4, 0xc000, 0x3, 0x0, 0xee00, 0x9, 0x400}}}, &(0x7f0000000d40)=ANY=[@ANYRES8], &(0x7f0000005080)=ANY=[@ANYBLOB="b0020000000000000700000000000000060000000000000000000000000000000600000000000000f1ffffffffffffff190e00000400000002000000000000005095000000000000010000000000000000000000000000000500000000000000b581276e000000000000000006000000000000380080000001000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="07000000070000000000000001000000000000000000000001000000010000000d0d00005c00000000000000"], &(0x7f0000000f40)={0xa0, 0x0, 0x1, {{0x0, 0x2, 0xf3, 0x9, 0x4, 0x0, {0x0, 0x5, 0x4, 0x6, 0xad, 0xfffffffffffffc23, 0x4, 0x7, 0x0, 0x2000, 0xfab, 0x0, r4, 0x40, 0xf}}, {0x0, 0x1}}}, &(0x7f0000007380)={0x20, 0xfffffffffffffff5, 0x0, {0x51, 0x0, 0x0, 0x8}}, &(0x7f0000007440)={0x130, 0x0, 0x2f88, {0x10, 0xf8, 0x0, '\x00', {0x8, 0x6, 0x100000000, 0x800, r6, r7, 0xc000, '\x00', 0x7, 0x63f7, 0x6, 0x9d, {0x24, 0xe08}, {0x9, 0x80000000}, {0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x5}, 0x3, 0x80, 0x0, 0x1}}}}) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r8, r0, 0x0, r0}, 0x10) r10 = msgget$private(0x0, 0x414) msgctl$IPC_SET(r10, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0x0, 0x1}) 2m34.69688623s ago: executing program 2 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000580), &(0x7f0000000940)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0xeff9, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2m26.791812767s ago: executing program 2 (id=88): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000001ac0)=""/175, 0xaf}], 0x1, 0x8001, 0x2081) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_sctp(0x2, 0x1, 0x84) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xd, 0xc95a, 0x11, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0x3, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x6, 0x0, 0x9, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xc, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x0, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xffffff7d, 0x100, 0x4, 0x2000009, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x6, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1003, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xc, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x8, 0x3, 0x7e, 0x102, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27050200420014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440)="cb4e86ddaf3288a8eef1", 0xa}, {&(0x7f00000006c0)="1120d726fdc4acfcb00bb9f01e35b2f1404a36b90a0184600e38221312a5d4abf1ffcbb6271866349b56e3ec2240e58570d908c078ac092e9d1849882e5a2d96e0586f", 0x43}], 0x3}, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='pipefs\x00', 0x80000, &(0x7f0000000280)=']-\x00') r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000480)={0x3, {{0xa, 0x4e23, 0x11, @mcast2}}, {{0xa, 0x1935, 0x2f5d, @mcast1, 0x1}}}, 0x108) 2m23.97002067s ago: executing program 2 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48403, 0x0) r1 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x80, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x74, 0x30, 0xb, 0x4, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xe4}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x44044) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 2m8.648550342s ago: executing program 32 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48403, 0x0) r1 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x80, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x74, 0x30, 0xb, 0x4, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xe4}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x44044) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 1m18.244524633s ago: executing program 4 (id=217): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16, @ANYRES16], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000400)=""/64, 0x33) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000010) 1m17.779927203s ago: executing program 0 (id=220): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a6e6574"], 0x60}}, 0x0) r4 = userfaultfd(0x80801) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r5, 0x10000000005, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x98}) r6 = syz_io_uring_setup(0xa0, &(0x7f0000000380)={0x0, 0xe8ce, 0x4, 0x3, 0x40000313}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000001800)=""/183, 0xb7}, {&(0x7f0000000500)=""/195, 0xc3}], 0x2, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)}}], 0x48}, 0x4001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000008, 0x10010, r6, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r4, 0x0, &(0x7f00000002c0)}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r10) setsockopt(r0, 0x3ce, 0xc03, &(0x7f0000000240)="ebe34734c6265427fea01cd234f32fe9869e19ec1da169ce4a384f3f3bc80fd003788dc72fa4c12b7b714e524e80b11d49b5b3eb76990e470303abe0a3a4676322940d5b8d4ee889ff3d02c96b98f9dd857ad9b9dd99bc54ca0ff917c91d08e1028a70d3a7f51395de2981619cf5929b2d4f3af4b4d7", 0x76) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r11, 0x10f, 0x88) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f00000000c0)="e029874e6b45b0b4ad41410b4f4bb2883ad9519f33304748", 0x0, 0x18) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r12, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d202"], 0x0) 1m11.932077776s ago: executing program 4 (id=229): r0 = openat$smackfs_change_rule(0xffffff9c, &(0x7f0000002300), 0x2, 0x0) write$smackfs_change_rule(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="626174616476301a202126292d205262624c206c42425851"], 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2d}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2000) read(r1, &(0x7f00000000c0)=""/163, 0xd0140f23) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60dfa5ef00082f0000000000000000000000000000000000ff02000000000000000000000000000100005f5800089078"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x408, 0x22000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000440)={0x7, 0x6, 0x1, 0x5, '\x00', 0x400}) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r3, &(0x7f0000000480)=ANY=[@ANYBLOB="75706461746520656372797074667320757365723a2f70726f632f6d647374617400006a520b3c252432456e5b32b20766e4b39f44843627b03f1793616fbf9d1e66c45a9eef84c81369750dc5f5069cd10cfd3e7411c622116c805f31900e1c55e6766431f290e1bd527062451c6198e4dbaed65681cfdf387eb4ef88f0a897b3fd56c741897ed8ea50b9a9d54111ba0aadbdf9d9d465f4039da410094e06c5da00551ae55a03144563c268f7038fa895cda65b55222f3e6bf303"], 0x23, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x0, 0x121) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) write$binfmt_misc(r7, &(0x7f0000000140), 0x2000000e) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4800003e, r8, 0x0) write$binfmt_elf64(r6, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x0, 0x0, 0x9, 0x38, 0x1, 0xfffe, 0x2, 0x3}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0xe5, 0x1, 0x3}], "", ['\x00']}, 0x55) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) lseek(r5, 0xfffffffffffffff5, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) 1m11.860560701s ago: executing program 5 (id=230): mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) chdir(&(0x7f0000000000)='./file1\x00') pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200000, 0x76) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket(0x2a, 0x800000002, 0x9) ioctl$SIOCPNENABLEPIPE(r2, 0x890b, 0x1000000000000) 1m11.536046763s ago: executing program 5 (id=232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)="a12f6d01e9b06bb17e4c71c8b5990cb9a30b351c3b147d969bce5dae4b6986c2909038aba72a136e27dc6b40c4eb1dcdced7a8592bd52ae42707356904080a34d6f8b2645ccbe21cab19f5fa02d0e8fac638df25b91a7b33321dc63887", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0xb2) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000200)="5c6df4c55de37b18694019191157dea32030939d753d153a3b4c00564a15e30429125f2a4c86fe1b2d109a3fb3303e4881f5ded5d931ad8a33ad8cb24818457e5cfcb60ff21a12228401efe2fe99aa1f0de5656c413d465d2edb82fc8a0856ad8bc5d7db2cf7ca0a165cc1d912f9e2ea9cec8d899481fe3281aefbd89bb7009ad333930944ddaa00693968969a2bb77727365e547dc01a4810235effeda8e8f77ccc73877f2a4cef1e861fc000db5e69dbe2742ab5c3b1be0a4532366f575cd093b6a06752c46ad0fb1fc344437765a9729c1d51741bcc6fb1da4ed245bcf648bf48b02166d12db21546c1d73ebba01dfe0395f7b8", 0xf5}, {&(0x7f0000000100)="a3bc6412856d6db13fa6eb0d301a7f004ce2c8744673d5772eb1c5302441ad43f9e65c8a08159aa16d47ec7ee185afc866ba2109881db5a5f28f5cded127354c5653936a2a1f1e2577a6450bd6335496dde49bbe1613b66a04ea4384b47f1ea3512573db24baa229d62392699ac369769fd3f457f9863359", 0x78}, {&(0x7f0000000680)="237bcaccc2fe474cef7adb8c1e320eddedbccddacb4b27222fa935844c8cb2828003102b324ff8a13ab8f78e9d62639ac5da1b93756bc923e65b133d0827eb1c3ff30e0709f75467d8e57452c3f4ce4896ca938e5950bc4ba01732e4a2cd4d35a73d24f47de6e359d09ea9c7f840be5d0feab5c33abf38e7d23fcaee46b306d20582987e74b7fce0e6f0e6908373caee230d388c1e78a3fe833e667dfbfa4b921569c77d65ee37fec41e9bbec1d1384c5fd3d0273ecd6dbc88aba1b843450970c1535a8964850e909991dc8b155c793727ba1f28595cb0e526e64b1f07daf59f16ea5fc1d52295ce90c8fa0813d7f9afa168309887e46b3f8533025dc3596ac008a6affda5c2a0293f6cdd8a5c6c9917e7a979e6f9d39986001fb8230e1311e4b71e6a580e79d8d96b47efb4e04843c2749a1533b0343fdba0d463179b83c8cfdb022178c250eec6aeefb1c1c8cdffc74936be191e66b82e79d1c85feeaf8258dc17c8c60f084c94e75717cdb7d561567984e7255eb74f7af4fc5621ef2f9e13dacf04fed35d1d37d47a27c16b12278d5130ce879dfbd7bce0c24f506b65e7f5a3e7bff79663abda6eda9a3711b29bb3e4d9d4977884b27b413c8345305dee8ac17ba040d8191c400145a2ea788cf62bd793810d9fab46e5ce5532fa8919f271f019f198cc16c1c36b9454fd5fadc503d0306a600db7ea0a14049e7137c49d2ad4e21573916e40f6479bcea4ca0a45e8a18e5678645fe3aab25d22827cecc977e90edfc53c4d6703b01f3ddd9ab5591cbaeb730035f31596ef7efe59b8ca8cc776f4b9b984d5a81aff5a768cedbe15316a9e6c9718954545c034220bfbb66823421403811765b2a8a8555ee791fc8d6f15aaf29411372a7c3e1ddb63596a58e15a8ab01a7456588a32eb8af38352ca64eef56379699d810392e8b830e8572f66816038d87ff262afa2551412453aad7dc03775184753af4bf1a1be3d055ee742f009ce517e5cdd821aeb047c86efbbfd74773edaff1000ee80cb34e89d7e5ffcad6f11f6c49b8b2dd6b4e5b56d5407167e28a5101070154401d11250f8ab3fda6c97aecf4e45b6af29b0c25f437011fdfda4095440ff2ac9a2e95312e9d47b073cfc18bbfd72ef7d3c8fe937dff624f03108373922ed328eeafc3f44b89054700719ac4823cbc1a55fea871230b27a2e30a78d419df0152e4d02b739e6587f1ed8199c115ab8be84b29ebf7f7794cd50ccbcfbfd55b0ecb2c761786cfba3e0458e7f02010eea1096c42dd1bbac9c2ccc7c70bd604fb331f85e960326764b22a6660f6d25ca576430f344a980fee81f799d3f7a563e3820dc816bb403c2c7928a9589fd852094e896a2096e761366b561c7d82f2c08ced6d17f700df3ac240295cc797512381d47d569a88c9ffbc40bb02c7bf7aff19c586cef2605511b5549abfd3d203c74bb4a831e9c092302935e24b4402f275400c0f8ecacf6f3bd31fad3789de5e26d5c3f2b0f44d3cb9fe0ff529bbe09b7674458bed26e897351d267140922a0034fe3b09d223ff99ff17d9325a07279ba000dd6d5a9fd5cbed7cedc4e10451b1fafdee65dc91ca682442b4120ac2e9200703e6370e2d4203c6b410bb65eac82374abcb49dd2053f132154c09a30018038f423810015c2878a863964a3c035294236f7ce3053d422f1e58c7d8c44d2a786ba0f9d2464154fa436660b628da1c191bcf1e0c931df5246ff4f37a735871d0fbc4b1027b37d6dc7e06b480fec77f2a383615809bd096490467688f18b2ff3dfb0ba21dabd21d875f72b2b8d11655477a1544bfac104384a8bc9d30ae27356689024073b24ddd90e81ead54f2e8392ae833183dbe3f0287ce3782e6f4ab778e5f26e4bc0f7432d714afedcacc2acb5ce53f2712e73b824f7c759e8e63dae33b1746428b26f3490f14a3158ffbd4f42c8ffb6bdff866c5d9f2fe8cbd9f31a995b1ed9a788461d2e9056c0337e1dc5ea8f7260bb9fffcb0c00328f323dbf96e5a4247d4a9f9a1149f7a376c4c8b4dc4aa304b5c9e0ea9cd4b73d0067944a4d76c6324b261c320a0e084964ab55a6e1e4013e78934fc22494c73804b7d81e889e1642a9a4a72aaa4c4de9e094c52737882cf9cde1d45585391a630c37c57fa9d74257b45ab79fc130dbdc691cef00f955bd3714ea141f66a2d65e16a4c9cd8bbc93afc230cc667607fb111d536893dff977fc78baa9459353ec75374c9c275daf9a7c5a03024cf0e3d4a1e50efbe9c0cab1023a44b46884e3283656af0928ba5ca66aac5f605478093f4d1104e5235deba76dbee8464e78589384a9560c40ec7696c9bfaea9ac7c601bd029bc4477d8fc07b85e05b6cd1ae8cd705513ce3c267d51d3ca1f8e0d893e5dd39aa43b5f609a3488d51a6ddf93b03b74379b653a2e964ab1db8b72de465bac86194f78da656d26a519a8ef38d88c53348a84588438e1543fa1e97623e360000944bb1684a0c0e8d3f74777ad6abe6da2a97bc5c7a7707d4f7acdf697dc10c053c7b0f8fba9ec0d3a25e5ad8bc2b215685af661c2a87f0fccd4394f296f0bd83d6978326a8e1d79858f8b62acb8bc064b48c588f0b1efb5c20da06e27b25a3457bd4738141a0132fbd563c10cb081294a2ad6992bdc9f7a6b231501d540fada5462e3c06e7d31fdfab6a621658dc29508201be75979c67bcb74fa0d242887da7e5af88590d29af9c84d9b9299d4f84394ff9906fcf0bdef75031efdfafa8b33cb4d02d57bf1f5d14445f99246328106b7bb80e2ea93110e99b0878aa26f85fb6dcd3658b47df795016fda11df3ce58a9552f3429374c18bff4ca2ef0c6669e3136808a21d6ec853b5fb41e94130e493903b817bac6945e5661e97e188f66162e367722fa2114b7432185ab8936c944dc0bb5bfa4672701f59604217b79acafb7913af9c42a6aabe886024fc73be3743ddf44297bb08a560222937b60cf806a5e7df0eecc079dde883a4e2f5f461ccbd418f82c7e2eb5c58e7558c03823d8c5e936719d792809ad68f55373468771658f1f92bb04c2b10e1bf2b830d976c89d4b25c89aec652f1c2f3861e3fa07815fc11caf71fe23f6d1653cc50e7837da89929a2fa82c6c7a1c029b9b78681dd22c2897a562b90d798607da3a64e0a5071ce17bca1a440d53b7ecd82f7d602fa020aa4c3da77452a14c055b019868e3f57b6b451966b1b907b7aea05036f09f533d938263645c99ac09c1ed4894f727f8eb72d3577e1db469ecdba808b76743932d6997fccad5e385cfc4fbe8b39feee181a660f333660b3981539014f7af044edff86fe6b34d523fbe96071d648dfd3bf4087990ac6387cf1785869a0e420cb65a94f62a5d59430f62c62519a7ad104211f85f1877e70cff9967ecc0318c53552f4b889c9db7f129067abc8a561a3735054c2692c963e69a496704b8d2fc65473d41d78e5795fb608b3d093f546f2faad6cba58030b39e47269ecb78d5c9805a7f3c3ff3c265f66420de33ebb8dc77bb877246c3bc5a8c2d5931624c50bdccde57aee33a3fa1e065007f3c78f1bfe89d480649c496a4adf24dc0ef142b35b8782ecb54e58935bd87ff17e0802fd699528fe273bfcb237be6b04e11767d081f4854573ae176174ec54387e410a2de6fa349fa3d0d8812a55ce5e6c2ad06b75e479ad6c5a52c6aa223e9861dbf05ce0592701678fa089a39e77b1e5a15a1878c4664f7b0814b6307d615796ef4b29db812d4910c29247e7dfa52845bd092de66551e2dae1eccdf0e0ee52f6c0e4bab28f30cc0868260b812ad018c7cfc41820dab72d480401e79ee3cac7c0a8019a28cdf95ab42c64a5f23d9e8b57b288e9a7beb8eefc3d1fe6f7963d5abf78ba109925633a5bddd7cea6f93dd1621b722404ded4a970501c87f0b9a394be99315d7765a298d778e26a4c0fc8448d110730941386e64b5cbb2caab7f678a95ed8c5300421ac8eb0d11f5bfc99a9aa358f84da8c57b1797d678d8acf1fe9a888667221f3c29d0114525737af6b21ba75180d28e804d8637d471dac3e16240e85b15eaacd9a2eff03c56d57259c299d654bfa51143360289ed56923633a96866ff0cd97067c9485f2e9effdcf4b1cd82266c0620e58c6c9dd6ff08044dcf4e7d0f7081cff7fb8f20e174c8188f52854463ad5ffa08eb7ca749cfc2f7d1330899e18a4ecdf1a3fc653cb3964905c2231618d22668e7649bc5902f9d6e86901dcf22d5aeec8de3edf84bb90b6f02dbb27c2907f45ec1a1bc324b957e13660e899077c1698553296139ce65bf1954f14df4cc9f7b1ea39c011bcf2422054c299d88358f92b4180403e4f67f5101c20e22f36bb71cad8f8e5abcad630859d097de866c3560093047c1eb4430f4f5f63360d6e934240076eb1d0a50e705d88b65ee94a911697fc696974ace791fdd01b251550380ce52db9507c57972046d6161a31a062b58f7a135a9c25500c288f671caded3f71c11d4cef429c545edb5107ca5ee3504cba97adfb97a15e99464ea2481fb73c6cec96adec1244d5c16fc020570344a31b2e27a2f6476bfd3f9aa72ef9d1e4b69068522f9648da09fbb7c5e8f3117c8a68a493d7870b4ea0ead87b11afbee52013bf40abb81fcc52ab70a443247c0b7d420f76b82283ea303b81b14f28b85d209df04f827b9a1484843fbb5c0fbce1e7f1c4ab44edec7561e47fbedf1a4c616cffb7e32f7d7d5e365f8b4d77df5bea4755962e1253c283997d2ac26e6c985b8ac734d43c74cc3b3c34c9f2f422d03ecb0aa7e2a04529b20f5b7f26cd4470f07a262a1de2b5c530d99149f449c484ee16691106d948004d76f21ddf80c150c0253d41e72c8cd803b2dadc477810a4145f606584bb4e0394f48b0e4673c23f76f17835be701179debe0bd85d73b1ced116e63a87c4acf0d8b12ce70be9bebd4f3ff5306287ca941cd521a3d53db468c2b24e97e4e7b48932ca06cb02e1c015773ced76fc5aa0647a3f202eb570f880b6ed3d133ff99dc73618d33366cd976ab6e07ce39e2e839620e660b895e2d8c7d0010c7c0b8e49ce664de8159bde8e7049044d7f3af40146ee6e37cde8c0bc0c79bb5bc896210f0138eeec50b9099ea1eb698c42b049d6787bdb7ab48bab07741571231c666a4f11b2962dc91906d46e99367cf5e0a2b1011bf52faf41c0a5c8c8eaa567ab5d21052d26e9ae6ad679fb3f60e14109eb8512d67efb8f275c6828141725d045634a411b13013a3f7e867e38569f67d3358bf312045214c5a55c0dd18d88759e27e4be6170bbdbf382890107ddfb14f4d8410487f8f703fd261a5f1f04ce6f43bd23efe529fdb00af2eba1a734746ce4d42951de90a558d3cc3fa466c4f78524f8f141c314856fd1fd8fb0bc22dad3c02c0be19cf7879354bed1dc0dd20fa3859475ef93608107e68eb3bd7d616a5faca2d724d76104aefd8ef00bfbb2a8e157c2004fe6d847b3df977ea12d8d7b9b734e41db53e35e9193dd85a91e2e7902fbd3cdc1a8b65d2c03b4646494b262729fe205649537d5e92628c2b5568bfa2739cd8f27630074ee8f5c0c0734c7a2899728da7f3b8cb237264932634295f70f545dae09ac53a9befd93f4c3b3db4bf90cba30857d4fdcf32e614ec44943fe8208185f3e026d8478e109154d88f7b8a55854ed1597f3baaf25b706781870ef02ee3cd88f7a7915d783bf77db845d45b69cd09627a2c00645291b97ff010899f92732d7bd456a9eeccb960cb695def9b5f53671d000ceece3e382cc60c6a35d62976d1ce493c9de", 0x1000}, {&(0x7f0000000180)="7b201b0303712b4f2992c4b40356449bf776", 0x12}], 0x4) tkill(r1, 0x12) tkill(r2, 0x14) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000380)=0x5) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r5, 0x4, 0x7c00) dup3(r6, r5, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0xc, 0x4, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7, 0xf, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', r7, 0x20, 0x7800, 0x33, 0x3, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @multicast1, {[@end]}}}}}) 1m11.153761918s ago: executing program 4 (id=233): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a3129"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) (fail_nth: 2) 1m10.463762929s ago: executing program 1 (id=235): socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) pipe2$watch_queue(0x0, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m10.463281159s ago: executing program 4 (id=236): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff, 0x1}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x400, 0x0, 0x32, 0x0, 0xc}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x400, 0x0, 0x0, 0xa}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000400e309906a21e9217a357b4e83cab8104330622151cdf8f59bfa61e1de842b79d2df14d39fc9a918b9226d2a5d7c0d4869a0455111c398c683e1f0bb32c24deea57d2aef8999847dcb6f381dda2662ae9997b4a253fa4c2359d600989b54c572280d82d431bbe8341627f6627976a85821a2dc6824f7c34524351ec06a8f52f6f8d6bdf25129d5792786223b39054b03d2f64a68b262d1af7515afbb0f908b9cd3c456aaa74500e139624427beb2687b56c2cd6058860159912fa21264e41ba84d083e287160991328f666cce5273d195114e66f46d06cdb20eed918b670bcf2fdef36e929dc748b47d587a709ddfa9832d429aa14a2059c9cd67ef86fb8187934a07a8d0dc3", @ANYRES16=r6, @ANYBLOB="000225bd7000fcdbdf250a000000040028000f000a006c33b98f6d5029434cb27f00"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2000000}, 0x1c) shutdown(r5, 0x1) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m10.134132468s ago: executing program 5 (id=237): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b215"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x2, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f91", 0x54}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d6", 0x16}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2eaaa3b786e6a14e457460793e0fdd4bdc6ef20050bc1ae8a5de6e0f84a007c740a9d6f1169a9b196652b0ee3e9d2dd06ceed861", 0x92}, {&(0x7f0000000000)="3136400c7f9162c983c8b25911369541ae29f40471710c496ff78aec15d1df90088eb440a9f438db5089654a6466e7c76fcd2bf0c1dfa0e22c4701184c2f2e44076e9e", 0x43}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1m9.754441611s ago: executing program 0 (id=238): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m9.304030917s ago: executing program 0 (id=239): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x6f3a7000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}], 0x1}) 1m8.500167471s ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) 1m8.353981825s ago: executing program 5 (id=243): syz_create_resource$binfmt(0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x80, 0x8000, 0xff1, 0x2, {{0x7, 0x4, 0x0, 0x22, 0x1c, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x4, 0xa6, 0x1, 0x3}, @noop, @lsrr={0x83, 0x3, 0x73}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1m8.286533556s ago: executing program 4 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x13) r2 = dup(r1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6]) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0xfff8, &(0x7f0000000200)=0x2) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_vlan\x00'}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m7.223554305s ago: executing program 1 (id=246): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xe00c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r5], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r6, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2, 0x20, 0x0, 0xfffffffd, 0x3, 0x7}}}}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r11, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) 1m7.032034595s ago: executing program 5 (id=248): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x80ff, 0x84) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x1, 0xa) fchdir(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x20) ftruncate(r5, 0x2007ffb) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 1m5.572764372s ago: executing program 0 (id=249): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000faff000010000000000000"], 0x48) socket(0xa, 0x2400000001, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa40, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x41a977d21f419030, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000990506000a0000000000000025b2de73068622f793005d8df7638100bb195909e881c91de7f5d719648c23f402bf2da7c0750b12d831f02fe71798ee608d3e69cea66957c52c46215f45fbf294052d8d4a9a443f799c18ac08b5dbfc20ffafca98a8d4c895e2eabe14447e381abbf58dd252ac4b82f8a291c31444e330129ef68e3ed36634c28957cc4146741d67037802b1bb11aad61964e8807f1c7acef169f860d1dbd7f0e29a52f6c6f7ec727fc745cd3d0fe02bab0cd667a7c5e28b1c196f9ec49e83cd636465c50951", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8e", 0x40}], 0x2) io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@udp=r6}, 0x20) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000010000000000000004"], 0x48) 1m5.17783132s ago: executing program 3 (id=250): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2d000000010001", 0x7) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20044800}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x8000}], 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x228040, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x54, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x32, 0x0, @wg=@data={0x4, 0x8, 0x7, "1083a66e9ec7619976f435146154d92432d8b2225dc095fb945e"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xfffffffffffffd57, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = io_uring_setup(0x54a0, &(0x7f00000007c0)={0x0, 0x70e6, 0x400, 0x0, 0xf2}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r6}, 0x10) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}, 0x10}], 0x1, 0x10000, 0x0) 57.899043982s ago: executing program 0 (id=251): memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)="5c00000012006bab9a3fe3d86e17aa0a076a876c1d0048007ea60864160af36504001a0038001d00791de976af59120c85acf624c98515c4d3b55a8e1a57ce400b3e489e14f26b9d178c27b849dddc302315bf3cd6a88de3c432172e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200c00}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4895) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x221f, 0x0, 0x23, 0x0, 0x0) 57.876762582s ago: executing program 1 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0xff) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x1) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5, 0x1}, &(0x7f0000000200)=0x8) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) (async) r6 = dup(r1) (async) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f000007f000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x100010, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000140)=0x101, 0x4) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) (async) r12 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) (async, rerun: 32) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r12, 0x4020565b, &(0x7f0000000480)={0x6, 0x0, 0x1}) (rerun: 32) 56.285294901s ago: executing program 5 (id=253): r0 = openat$smackfs_change_rule(0xffffff9c, &(0x7f0000002300), 0x2, 0x0) write$smackfs_change_rule(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="626174616476301a202126292d205262624c206c42425851"], 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2d}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2000) read(r1, &(0x7f00000000c0)=""/163, 0xd0140f23) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60dfa5ef00082f0000000000000000000000000000000000ff02000000000000000000000000000100005f5800089078"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x408, 0x22000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000440)={0x7, 0x6, 0x1, 0x5, '\x00', 0x400}) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r3, &(0x7f0000000480)=ANY=[@ANYBLOB="75706461746520656372797074667320757365723a2f70726f632f6d647374617400006a520b3c252432456e5b32b20766e4b39f44843627b03f1793616fbf9d1e66c45a9eef84c81369750dc5f5069cd10cfd3e7411c622116c805f31900e1c55e6766431f290e1bd527062451c6198e4dbaed65681cfdf387eb4ef88f0a897b3fd56c741897ed8ea50b9a9d54111ba0aadbdf9d9d465f4039da410094e06c5da00551ae55a03144563c268f7038fa895cda65b55222f3e6bf303"], 0x23, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x0, 0x121) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) write$binfmt_misc(r7, &(0x7f0000000140), 0x2000000e) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4800003e, r8, 0x0) write$binfmt_elf64(r6, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x0, 0x0, 0x9, 0x38, 0x1, 0xfffe, 0x2, 0x3}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0xe5, 0x1, 0x3}], "", ['\x00']}, 0x55) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) lseek(r5, 0xfffffffffffffff5, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 56.284190728s ago: executing program 3 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) 50.641896167s ago: executing program 33 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x13) r2 = dup(r1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6]) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0xfff8, &(0x7f0000000200)=0x2) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_vlan\x00'}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 50.447058613s ago: executing program 0 (id=256): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x311a}, 'syz1\x00', 0x2b}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 50.446886341s ago: executing program 1 (id=257): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x5) 50.445921489s ago: executing program 3 (id=258): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x0, 0x0, 0x1d}, &(0x7f0000000840)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2000, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) ioctl$sock_ifreq(r4, 0x8918, &(0x7f0000000180)={'batadv0\x00', @ifru_flags=0x2}) 38.678632663s ago: executing program 34 (id=253): r0 = openat$smackfs_change_rule(0xffffff9c, &(0x7f0000002300), 0x2, 0x0) write$smackfs_change_rule(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="626174616476301a202126292d205262624c206c42425851"], 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2d}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2000) read(r1, &(0x7f00000000c0)=""/163, 0xd0140f23) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60dfa5ef00082f0000000000000000000000000000000000ff02000000000000000000000000000100005f5800089078"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x408, 0x22000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000440)={0x7, 0x6, 0x1, 0x5, '\x00', 0x400}) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r3, &(0x7f0000000480)=ANY=[@ANYBLOB="75706461746520656372797074667320757365723a2f70726f632f6d647374617400006a520b3c252432456e5b32b20766e4b39f44843627b03f1793616fbf9d1e66c45a9eef84c81369750dc5f5069cd10cfd3e7411c622116c805f31900e1c55e6766431f290e1bd527062451c6198e4dbaed65681cfdf387eb4ef88f0a897b3fd56c741897ed8ea50b9a9d54111ba0aadbdf9d9d465f4039da410094e06c5da00551ae55a03144563c268f7038fa895cda65b55222f3e6bf303"], 0x23, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x0, 0x121) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) write$binfmt_misc(r7, &(0x7f0000000140), 0x2000000e) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4800003e, r8, 0x0) write$binfmt_elf64(r6, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x0, 0x0, 0x9, 0x38, 0x1, 0xfffe, 0x2, 0x3}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0xe5, 0x1, 0x3}], "", ['\x00']}, 0x55) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) lseek(r5, 0xfffffffffffffff5, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 38.608489986s ago: executing program 1 (id=260): prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000000140)={0x0, [0x4c, 0x7ff, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) listen(r3, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) prctl$PR_SET_DUMPABLE(0x4, 0x1) 38.608177264s ago: executing program 3 (id=261): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc"], 0x120}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000004100)=0x3, 0x4) 38.251639458s ago: executing program 3 (id=262): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8000) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x56) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x601, 0x2, 0x7f, r3}, &(0x7f0000000140)=0x10) 37.728024653s ago: executing program 3 (id=263): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000240)={r3, r4, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x1, 0x0, 0x3}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000380)={'syz0\x00', {0x4, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0x6, 0xfff, 0xffffffff, 0x8, 0x1, 0x6, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x6, 0x3ff, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0xd27e, 0x1, 0x1, 0x7, 0x9, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x5, 0x0, 0x2000007, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x3, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x8, 0x7, 0x9, 0x8001, 0x6, 0x8, 0x2, 0xb, 0xfff, 0x7ff, 0x7ff, 0x7, 0xb, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x6, 0x9, 0x9, 0x4d26, 0x10000, 0x4, 0x2, 0x7, 0xfffffffc, 0x4, 0x6, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffb, 0xe0, 0x8e, 0x7, 0x4, 0x401, 0x20000ade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x2, 0x9, 0xe, 0x8, 0xff, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7fffffff, 0x3, 0x6, 0x5, 0x2, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80009, 0x9, 0x3, 0x200, 0x800fc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5e, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x359, 0x3, 0x0, 0x4, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0x2, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000440, 0xffffffff, 0xfffffffb, 0x40, 0x1, 0x4, 0x7, 0xfff, 0x4, 0x9, 0x0, 0x6, 0x1, 0x0, 0x3, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x6, 0xf, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x2]}, 0x45c) 37.727652583s ago: executing program 1 (id=264): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 27.993910662s ago: executing program 35 (id=256): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x311a}, 'syz1\x00', 0x2b}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 16.517479556s ago: executing program 36 (id=264): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 14.92374463s ago: executing program 37 (id=263): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000240)={r3, r4, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x1, 0x0, 0x3}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000380)={'syz0\x00', {0x4, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0x6, 0xfff, 0xffffffff, 0x8, 0x1, 0x6, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x6, 0x3ff, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0xd27e, 0x1, 0x1, 0x7, 0x9, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x5, 0x0, 0x2000007, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x3, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x8, 0x7, 0x9, 0x8001, 0x6, 0x8, 0x2, 0xb, 0xfff, 0x7ff, 0x7ff, 0x7, 0xb, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x6, 0x9, 0x9, 0x4d26, 0x10000, 0x4, 0x2, 0x7, 0xfffffffc, 0x4, 0x6, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffb, 0xe0, 0x8e, 0x7, 0x4, 0x401, 0x20000ade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x2, 0x9, 0xe, 0x8, 0xff, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7fffffff, 0x3, 0x6, 0x5, 0x2, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80009, 0x9, 0x3, 0x200, 0x800fc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5e, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x359, 0x3, 0x0, 0x4, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0x2, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000440, 0xffffffff, 0xfffffffb, 0x40, 0x1, 0x4, 0x7, 0xfff, 0x4, 0x9, 0x0, 0x6, 0x1, 0x0, 0x3, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x6, 0xf, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x2]}, 0x45c) 0s ago: executing program 7 (id=259): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000002880)=0x8, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. [ 81.849544][ T5826] cgroup: Unknown subsys name 'net' [ 82.098586][ T5826] cgroup: Unknown subsys name 'cpuset' [ 82.154153][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.820568][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.600747][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.606233][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.609151][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.611245][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.612728][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.614437][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.616454][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.616903][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.617384][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.619100][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.619357][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.620862][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.621748][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.633450][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.673515][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.674832][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.678509][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.687738][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.690841][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.692024][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.697254][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.698958][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.699336][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.701515][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.701981][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.880115][ T1197] cfg80211: failed to load regulatory.db [ 87.592178][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.670232][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.812662][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.922577][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.940098][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.432302][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.433599][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.434470][ T5841] bridge_slave_0: entered allmulticast mode [ 88.437205][ T5841] bridge_slave_0: entered promiscuous mode [ 88.563394][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.563533][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.563727][ T5841] bridge_slave_1: entered allmulticast mode [ 88.566496][ T5841] bridge_slave_1: entered promiscuous mode [ 88.605963][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.606098][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.606268][ T5838] bridge_slave_0: entered allmulticast mode [ 88.608959][ T5838] bridge_slave_0: entered promiscuous mode [ 88.785339][ T5157] Bluetooth: hci0: command tx timeout [ 88.785345][ T5850] Bluetooth: hci3: command tx timeout [ 88.785486][ T5157] Bluetooth: hci1: command tx timeout [ 88.785495][ T5850] Bluetooth: hci2: command tx timeout [ 88.785579][ T5157] Bluetooth: hci4: command tx timeout [ 88.831665][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.831757][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.831872][ T5838] bridge_slave_1: entered allmulticast mode [ 88.834548][ T5838] bridge_slave_1: entered promiscuous mode [ 89.304784][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.305862][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.306062][ T5842] bridge_slave_0: entered allmulticast mode [ 89.308772][ T5842] bridge_slave_0: entered promiscuous mode [ 89.320118][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.574272][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.574407][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.574583][ T5842] bridge_slave_1: entered allmulticast mode [ 89.576420][ T5842] bridge_slave_1: entered promiscuous mode [ 89.580845][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.581073][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.581203][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.581316][ T5840] bridge_slave_0: entered allmulticast mode [ 89.582772][ T5840] bridge_slave_0: entered promiscuous mode [ 89.590111][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.605753][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.605902][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.606116][ T5837] bridge_slave_0: entered allmulticast mode [ 89.608726][ T5837] bridge_slave_0: entered promiscuous mode [ 89.780928][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.781026][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.781138][ T5840] bridge_slave_1: entered allmulticast mode [ 89.782600][ T5840] bridge_slave_1: entered promiscuous mode [ 89.789185][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.884424][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.884523][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.884653][ T5837] bridge_slave_1: entered allmulticast mode [ 89.886158][ T5837] bridge_slave_1: entered promiscuous mode [ 90.299738][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.304058][ T5841] team0: Port device team_slave_0 added [ 90.559211][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.580680][ T5841] team0: Port device team_slave_1 added [ 90.587926][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.590109][ T5838] team0: Port device team_slave_0 added [ 90.598323][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.757342][ T5838] team0: Port device team_slave_1 added [ 90.761160][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.779606][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.863500][ T5853] Bluetooth: hci4: command tx timeout [ 90.863515][ T5157] Bluetooth: hci2: command tx timeout [ 90.863533][ T5853] Bluetooth: hci3: command tx timeout [ 90.863542][ T5157] Bluetooth: hci1: command tx timeout [ 90.863553][ T5853] Bluetooth: hci0: command tx timeout [ 91.358779][ T5842] team0: Port device team_slave_0 added [ 91.364245][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.364260][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.364284][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.627794][ T5842] team0: Port device team_slave_1 added [ 91.629186][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.629199][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.629223][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.630814][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.630826][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.630849][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.636356][ T5840] team0: Port device team_slave_0 added [ 91.639887][ T5837] team0: Port device team_slave_0 added [ 91.749516][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.749526][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.749539][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.751253][ T5840] team0: Port device team_slave_1 added [ 91.752962][ T5837] team0: Port device team_slave_1 added [ 91.986294][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.986310][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.986333][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.134840][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.134855][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.134877][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.227012][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.227027][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.227051][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.228437][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.228448][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.228471][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.524750][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.524764][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.524784][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.525739][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.525756][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.525769][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.532942][ T5841] hsr_slave_0: entered promiscuous mode [ 92.536749][ T5841] hsr_slave_1: entered promiscuous mode [ 92.742259][ T5838] hsr_slave_0: entered promiscuous mode [ 92.743077][ T5838] hsr_slave_1: entered promiscuous mode [ 92.745004][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 92.745116][ T5838] Cannot create hsr debugfs directory [ 92.943611][ T5157] Bluetooth: hci0: command tx timeout [ 92.943642][ T5157] Bluetooth: hci3: command tx timeout [ 92.943663][ T5157] Bluetooth: hci4: command tx timeout [ 92.953414][ T5850] Bluetooth: hci1: command tx timeout [ 92.953441][ T5850] Bluetooth: hci2: command tx timeout [ 93.180095][ T5842] hsr_slave_0: entered promiscuous mode [ 93.181508][ T5842] hsr_slave_1: entered promiscuous mode [ 93.182393][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 93.182415][ T5842] Cannot create hsr debugfs directory [ 93.646824][ T5840] hsr_slave_0: entered promiscuous mode [ 93.648081][ T5840] hsr_slave_1: entered promiscuous mode [ 93.648972][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 93.648995][ T5840] Cannot create hsr debugfs directory [ 93.661546][ T5837] hsr_slave_0: entered promiscuous mode [ 93.662876][ T5837] hsr_slave_1: entered promiscuous mode [ 93.665295][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 93.665319][ T5837] Cannot create hsr debugfs directory [ 95.023391][ T5157] Bluetooth: hci2: command tx timeout [ 95.023420][ T5157] Bluetooth: hci1: command tx timeout [ 95.023440][ T5157] Bluetooth: hci4: command tx timeout [ 95.023459][ T5157] Bluetooth: hci3: command tx timeout [ 95.023478][ T5157] Bluetooth: hci0: command tx timeout [ 95.066704][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.118086][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.152515][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.216695][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.323973][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.378439][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.419158][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.468799][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.620572][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.664938][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.691696][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.742127][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.913955][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.947856][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.983144][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.042576][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.181827][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.195728][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.254156][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.291340][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.330028][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.440268][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.477462][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.501592][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.502087][ T4130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.560831][ T1494] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.560984][ T1494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.634893][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.687772][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.687960][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.718627][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.760778][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.760881][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.860264][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.901341][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.901468][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.949832][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.970804][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.970941][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.164377][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.172865][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.238043][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.240999][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.340795][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.342718][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.382552][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.459795][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.463411][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.534863][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.535011][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.567695][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.757020][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.931384][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.043759][ T5841] veth0_vlan: entered promiscuous mode [ 98.108693][ T5841] veth1_vlan: entered promiscuous mode [ 98.217919][ T5838] veth0_vlan: entered promiscuous mode [ 98.282573][ T5838] veth1_vlan: entered promiscuous mode [ 98.339832][ T5842] veth0_vlan: entered promiscuous mode [ 98.385727][ T5841] veth0_macvtap: entered promiscuous mode [ 98.391462][ T5842] veth1_vlan: entered promiscuous mode [ 98.409237][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.425591][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.437275][ T5841] veth1_macvtap: entered promiscuous mode [ 98.586492][ T5838] veth0_macvtap: entered promiscuous mode [ 98.622296][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.643931][ T5838] veth1_macvtap: entered promiscuous mode [ 98.687650][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.731999][ T5842] veth0_macvtap: entered promiscuous mode [ 98.770398][ T4130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.788910][ T4130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.804630][ T4130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.805940][ T5842] veth1_macvtap: entered promiscuous mode [ 98.829522][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.846888][ T4130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.878742][ T5840] veth0_vlan: entered promiscuous mode [ 98.885356][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.976893][ T3508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.027434][ T3508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.038862][ T3508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.045586][ T5840] veth1_vlan: entered promiscuous mode [ 99.050202][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.050794][ T3508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.171662][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.312663][ T3622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.323612][ T3622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.370626][ T1494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.370651][ T1494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.395787][ T3622] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.402686][ T3622] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.564067][ T4130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.564087][ T4130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.673963][ T5837] veth0_vlan: entered promiscuous mode [ 99.677092][ T5840] veth0_macvtap: entered promiscuous mode [ 99.764500][ T4130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.764519][ T4130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.798079][ T5840] veth1_macvtap: entered promiscuous mode [ 99.853324][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.853339][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.862739][ T5837] veth1_vlan: entered promiscuous mode [ 99.940373][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.940392][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.987957][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.029226][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.092936][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.092953][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.110398][ T4130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.132302][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.134813][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.140449][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.293117][ T5837] veth0_macvtap: entered promiscuous mode [ 100.378368][ T5837] veth1_macvtap: entered promiscuous mode [ 100.626267][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.774410][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.868902][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.868922][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.914651][ T5975] lo: entered promiscuous mode [ 100.920231][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'. [ 100.938493][ T1177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.940532][ T1177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.969034][ T1177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.970989][ T3622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.115220][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.115239][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.577793][ T4130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.577812][ T4130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.899005][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.899023][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.491696][ T5991] Zero length message leads to an empty skb [ 102.829903][ T5994] mmap: syz.2.15 (5994) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.896059][ T37] audit: type=1326 audit(1758639373.281:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 102.896099][ T37] audit: type=1326 audit(1758639373.281:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 102.900091][ T37] audit: type=1326 audit(1758639373.291:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 102.904865][ T37] audit: type=1326 audit(1758639373.291:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 102.904911][ T37] audit: type=1326 audit(1758639373.291:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 102.904948][ T37] audit: type=1326 audit(1758639373.291:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 102.904986][ T37] audit: type=1326 audit(1758639373.291:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 102.905022][ T37] audit: type=1326 audit(1758639373.291:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 102.905060][ T37] audit: type=1326 audit(1758639373.291:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 102.909210][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.937657][ T37] audit: type=1326 audit(1758639373.331:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f438feec9 code=0x7ffc0000 [ 103.030737][ T5994] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET) [ 103.607276][ T5999] sctp: [Deprecated]: syz.4.5 (pid 5999) Use of int in max_burst socket option. [ 103.607276][ T5999] Use struct sctp_assoc_value instead [ 104.701131][ T6013] netlink: 212 bytes leftover after parsing attributes in process `syz.3.19'. [ 105.605604][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'. [ 105.663253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.723239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.052043][ T6035] FAULT_INJECTION: forcing a failure. [ 106.052043][ T6035] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.052078][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.052090][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.052101][ T6035] Call Trace: [ 106.052106][ T6035] [ 106.052110][ T6035] dump_stack_lvl+0x189/0x250 [ 106.052134][ T6035] ? __pfx____ratelimit+0x10/0x10 [ 106.052149][ T6035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.052162][ T6035] ? __pfx__printk+0x10/0x10 [ 106.052172][ T6035] ? __might_fault+0xb0/0x130 [ 106.052192][ T6035] should_fail_ex+0x46c/0x600 [ 106.052213][ T6035] _copy_from_user+0x2d/0xb0 [ 106.052241][ T6035] mptcp_setsockopt+0x250f/0x35b0 [ 106.052260][ T6035] ? __lock_acquire+0xab9/0xd20 [ 106.052289][ T6035] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 106.052318][ T6035] ? __fget_files+0x2a/0x420 [ 106.052343][ T6035] ? sock_common_setsockopt+0x36/0xc0 [ 106.052364][ T6035] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 106.052387][ T6035] do_sock_setsockopt+0x179/0x1b0 [ 106.052416][ T6035] __x64_sys_setsockopt+0x145/0x1b0 [ 106.052438][ T6035] do_syscall_64+0xfa/0x3b0 [ 106.052454][ T6035] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.052482][ T6035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.052499][ T6035] ? clear_bhb_loop+0x60/0xb0 [ 106.052520][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.052536][ T6035] RIP: 0033:0x7f9f438feec9 [ 106.052558][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.052571][ T6035] RSP: 002b:00007f9f41b45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.052590][ T6035] RAX: ffffffffffffffda RBX: 00007f9f43b56090 RCX: 00007f9f438feec9 [ 106.052603][ T6035] RDX: 000000000000000d RSI: 0000000000000001 RDI: 0000000000000006 [ 106.052614][ T6035] RBP: 00007f9f41b45090 R08: 0000000000000008 R09: 0000000000000000 [ 106.052625][ T6035] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.052636][ T6035] R13: 00007f9f43b56128 R14: 00007f9f43b56090 R15: 00007ffeec784fa8 [ 106.052664][ T6035] [ 106.183225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.188245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.213214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.263704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.263956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.264203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.264582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.264680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.072300][ T6034] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.234448][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 107.254458][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 107.657001][ T6050] syz.4.29 (6050) used greatest stack depth: 18584 bytes left [ 108.005191][ T5932] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.442593][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.449714][ T5932] usb 4-1: config 1 interface 0 has no altsetting 0 [ 108.456277][ T5932] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 108.456305][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.456324][ T5932] usb 4-1: Product: syz [ 108.456338][ T5932] usb 4-1: Manufacturer: syz [ 108.456352][ T5932] usb 4-1: SerialNumber: syz [ 108.811351][ T6045] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 110.201294][ T6045] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.299322][ T6071] x_tables: ip_tables: quota.0 match: invalid size 24 (kernel) != (user) 40 [ 110.363024][ T5932] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 110.409194][ T5193] bcm5974 4-1:1.0: could not read from device [ 110.490114][ T5932] usb 4-1: USB disconnect, device number 2 [ 110.955557][ T6081] openvswitch: netlink: Message has 72 unknown bytes. [ 110.987695][ T5932] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.993347][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.133319][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 111.135345][ T5932] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 111.135368][ T5932] usb 4-1: config 0 has no interface number 0 [ 111.138471][ T5932] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 111.138497][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.138514][ T5932] usb 4-1: Product: syz [ 111.138536][ T5932] usb 4-1: Manufacturer: syz [ 111.138550][ T5932] usb 4-1: SerialNumber: syz [ 111.144795][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 111.147299][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.147327][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.147364][ T31] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 111.147384][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.189188][ T31] usb 1-1: config 0 descriptor?? [ 111.245423][ T5932] usb 4-1: config 0 descriptor?? [ 111.263097][ T5932] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 112.262809][ C0] usb-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 112.354985][ T5932] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 112.427751][ T31] hid-picolcd 0003:04D8:F002.0001: item fetching failed at offset 8/11 [ 112.428891][ T5932] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 112.442250][ T31] hid-picolcd 0003:04D8:F002.0001: device report parse failed [ 112.442361][ T31] hid-picolcd 0003:04D8:F002.0001: probe with driver hid-picolcd failed with error -22 [ 112.507725][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 112.542721][ T5932] usb 4-1: USB disconnect, device number 3 [ 112.619528][ T5932] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 112.703084][ T31] usb 1-1: USB disconnect, device number 2 [ 112.719960][ T5932] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 112.751345][ T5932] quatech2 4-1:0.51: device disconnected [ 113.070449][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b166800: rx timeout, send abort [ 113.073233][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b166800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.075189][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b15cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.879005][ T6126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.43'. [ 118.125931][ T6130] fuse: Bad value for 'fd' [ 118.205213][ T6130] FAULT_INJECTION: forcing a failure. [ 118.205213][ T6130] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 118.205292][ T6130] CPU: 1 UID: 0 PID: 6130 Comm: syz.2.47 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.205314][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.205325][ T6130] Call Trace: [ 118.205333][ T6130] [ 118.205341][ T6130] dump_stack_lvl+0x189/0x250 [ 118.205377][ T6130] ? __pfx____ratelimit+0x10/0x10 [ 118.205401][ T6130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.205424][ T6130] ? __pfx__printk+0x10/0x10 [ 118.205457][ T6130] should_fail_ex+0x46c/0x600 [ 118.205487][ T6130] prepare_alloc_pages+0x213/0x670 [ 118.205514][ T6130] __alloc_frozen_pages_noprof+0x123/0x370 [ 118.205538][ T6130] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 118.205560][ T6130] ? irqentry_exit+0x74/0x90 [ 118.205587][ T6130] ? policy_nodemask+0x27c/0x720 [ 118.205616][ T6130] alloc_pages_mpol+0xd1/0x380 [ 118.205643][ T6130] folio_alloc_mpol_noprof+0x39/0xe0 [ 118.205668][ T6130] shmem_get_folio_gfp+0x633/0x1a70 [ 118.205720][ T6130] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 118.205741][ T6130] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 118.205765][ T6130] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.205790][ T6130] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 118.205819][ T6130] shmem_write_begin+0xef/0x2a0 [ 118.205850][ T6130] generic_perform_write+0x29d/0x8c0 [ 118.205883][ T6130] ? __pfx_generic_perform_write+0x10/0x10 [ 118.205903][ T6130] ? __rcu_read_unlock+0x84/0xe0 [ 118.205923][ T6130] ? mnt_put_write_access_file+0xc6/0x100 [ 118.205944][ T6130] ? file_update_time+0x41c/0x490 [ 118.205968][ T6130] shmem_file_write_iter+0xfb/0x120 [ 118.205991][ T6130] aio_write+0x53f/0x7b0 [ 118.206020][ T6130] ? __pfx_aio_write+0x10/0x10 [ 118.206035][ T6130] ? preempt_schedule_irq+0xde/0x150 [ 118.206071][ T6130] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.206106][ T6130] ? io_submit_one+0x76f/0x1310 [ 118.206130][ T6130] io_submit_one+0x78b/0x1310 [ 118.206164][ T6130] ? __pfx_io_submit_one+0x10/0x10 [ 118.206182][ T6130] ? __might_fault+0xb0/0x130 [ 118.206219][ T6130] ? __might_fault+0xb0/0x130 [ 118.206246][ T6130] __se_sys_io_submit+0x185/0x2f0 [ 118.206273][ T6130] ? __pfx___se_sys_io_submit+0x10/0x10 [ 118.206316][ T6130] do_syscall_64+0xfa/0x3b0 [ 118.206334][ T6130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.206351][ T6130] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 118.206367][ T6130] ? clear_bhb_loop+0x60/0xb0 [ 118.206389][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.206406][ T6130] RIP: 0033:0x7f4d3f93eec9 [ 118.206427][ T6130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.206440][ T6130] RSP: 002b:00007f4d3db5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 118.206466][ T6130] RAX: ffffffffffffffda RBX: 00007f4d3fb96180 RCX: 00007f4d3f93eec9 [ 118.206479][ T6130] RDX: 0000200000000780 RSI: 0000000000000002 RDI: 00007f4d406d3000 [ 118.206491][ T6130] RBP: 00007f4d3db5c090 R08: 0000000000000000 R09: 0000000000000000 [ 118.206502][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.206512][ T6130] R13: 00007f4d3fb96218 R14: 00007f4d3fb96180 R15: 00007ffee117d158 [ 118.206543][ T6130] [ 126.776765][ T6186] tty tty25: ldisc open failed (-12), clearing slot 24 [ 127.629313][ T6202] warning: `syz.0.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.024241][ T6198] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.167456][ T6208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.136805][ T6228] Bluetooth: MGMT ver 1.23 [ 132.130319][ T6236] netlink: 104 bytes leftover after parsing attributes in process `syz.3.73'. [ 132.155852][ T6238] FAULT_INJECTION: forcing a failure. [ 132.155852][ T6238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.155884][ T6238] CPU: 0 UID: 0 PID: 6238 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.155905][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.155915][ T6238] Call Trace: [ 132.155922][ T6238] [ 132.155930][ T6238] dump_stack_lvl+0x189/0x250 [ 132.155958][ T6238] ? __pfx____ratelimit+0x10/0x10 [ 132.155983][ T6238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.156016][ T6238] ? __pfx__printk+0x10/0x10 [ 132.156050][ T6238] should_fail_ex+0x46c/0x600 [ 132.156080][ T6238] _copy_to_user+0x31/0xb0 [ 132.156104][ T6238] simple_read_from_buffer+0xe1/0x170 [ 132.156132][ T6238] proc_fail_nth_read+0x1b6/0x220 [ 132.156152][ T6238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.156174][ T6238] ? rw_verify_area+0x2ac/0x4e0 [ 132.156194][ T6238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.156214][ T6238] vfs_read+0x206/0xa30 [ 132.156244][ T6238] ? __pfx_vfs_read+0x10/0x10 [ 132.156260][ T6238] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 132.156291][ T6238] ? mutex_lock_nested+0x154/0x1d0 [ 132.156310][ T6238] ? fdget_pos+0x253/0x320 [ 132.156341][ T6238] ksys_read+0x14b/0x260 [ 132.156360][ T6238] ? __fget_files+0x3a6/0x420 [ 132.156383][ T6238] ? __pfx_ksys_read+0x10/0x10 [ 132.156408][ T6238] ? do_syscall_64+0xbe/0x3b0 [ 132.156429][ T6238] do_syscall_64+0xfa/0x3b0 [ 132.156445][ T6238] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.156468][ T6238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.156485][ T6238] ? clear_bhb_loop+0x60/0xb0 [ 132.156506][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.156523][ T6238] RIP: 0033:0x7f0a7ea2d8dc [ 132.156548][ T6238] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.156561][ T6238] RSP: 002b:00007f0a7cc96030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.156580][ T6238] RAX: ffffffffffffffda RBX: 00007f0a7ec85fa0 RCX: 00007f0a7ea2d8dc [ 132.156594][ T6238] RDX: 000000000000000f RSI: 00007f0a7cc960a0 RDI: 0000000000000004 [ 132.156605][ T6238] RBP: 00007f0a7cc96090 R08: 0000000000000000 R09: 0000000000000000 [ 132.156616][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.156630][ T6238] R13: 00007f0a7ec86038 R14: 00007f0a7ec85fa0 R15: 00007ffe7e0ed3b8 [ 132.156661][ T6238] [ 132.869469][ T6249] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.953108][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.955141][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.979208][ T6253] capability: warning: `syz.0.79' uses deprecated v2 capabilities in a way that may be insecure [ 135.753301][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.963637][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 135.967718][ T9] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 135.967746][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.008269][ T9] usb 4-1: config 0 descriptor?? [ 136.152039][ T9] as10x_usb: device has been detected [ 136.163638][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 136.341704][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 136.473083][ T9] as10x_usb: error during firmware upload part1 [ 136.480549][ T9] Registered device nBox DVB-T Dongle [ 136.566118][ T9] usb 4-1: USB disconnect, device number 4 [ 136.623350][ T5968] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.693505][ T9] Unregistered device nBox DVB-T Dongle [ 136.700805][ T9] as10x_usb: device has been disconnected [ 136.780485][ T5968] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 136.780552][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.840164][ T5968] usb 3-1: config 0 descriptor?? [ 137.077641][ T5968] kaweth 3-1:0.0: Firmware present in device. [ 137.505779][ T5968] kaweth 3-1:0.0: Statistics collection: 0 [ 137.507264][ T5968] kaweth 3-1:0.0: Multicast filter limit: 0 [ 137.507343][ T5968] kaweth 3-1:0.0: MTU: 0 [ 137.507416][ T5968] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 138.179856][ T5968] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 138.212471][ T5968] usb 3-1: USB disconnect, device number 2 [ 140.608470][ T6304] overlayfs: overlapping lowerdir path [ 140.795050][ T6322] netlink: 'syz.3.101': attribute type 11 has an invalid length. [ 140.848844][ T6324] ======================================================= [ 140.848844][ T6324] WARNING: The mand mount option has been deprecated and [ 140.848844][ T6324] and is ignored by this kernel. Remove the mand [ 140.848844][ T6324] option from the mount to silence this warning. [ 140.848844][ T6324] ======================================================= [ 141.578699][ T6338] fuse: Bad value for 'fd' [ 141.579361][ T6338] fuse: Bad value for 'fd' [ 142.553370][ T5968] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.707150][ T5968] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 142.707179][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.749711][ T5968] usb 4-1: config 0 descriptor?? [ 143.023608][ T5968] kaweth 4-1:0.0: Firmware present in device. [ 143.159724][ T5968] kaweth 4-1:0.0: Statistics collection: 0 [ 143.159746][ T5968] kaweth 4-1:0.0: Multicast filter limit: 0 [ 143.159760][ T5968] kaweth 4-1:0.0: MTU: 0 [ 143.159773][ T5968] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 143.478210][ T5968] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 143.487563][ T5968] usb 4-1: USB disconnect, device number 5 [ 144.723340][ T5968] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.875756][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 145.030735][ T5968] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.030843][ T5968] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 145.030866][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.472656][ T5968] usb 4-1: config 0 descriptor?? [ 145.947253][ T5968] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 146.132402][ T6366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.176096][ T6366] bond0: (slave rose0): Enslaving as an active interface with an up link [ 146.715612][ T6382] 9pnet_fd: Insufficient options for proto=fd [ 147.393947][ T5968] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.519452][ T31] usb 4-1: USB disconnect, device number 6 [ 147.546538][ T5968] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.546569][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.597324][ T5968] usb 2-1: config 0 descriptor?? [ 147.602348][ T5968] cp210x 2-1:0.0: cp210x converter detected [ 148.001949][ T5968] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 148.041446][ T5968] usb 2-1: cp210x converter now attached to ttyUSB0 [ 148.205649][ T6391] syz_tun: entered allmulticast mode [ 148.220837][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.221389][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.226472][ T5932] usb 2-1: USB disconnect, device number 2 [ 148.291181][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.298657][ T6389] syz_tun: left allmulticast mode [ 148.403849][ T5932] cp210x 2-1:0.0: device disconnected [ 149.216825][ T6414] netlink: 36 bytes leftover after parsing attributes in process `syz.1.123'. [ 149.216847][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 149.271378][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 149.271403][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.271427][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.271440][ T5850] Workqueue: hci3 hci_rx_work [ 149.271466][ T5850] Call Trace: [ 149.271474][ T5850] [ 149.271482][ T5850] dump_stack_lvl+0x189/0x250 [ 149.271516][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.271542][ T5850] ? __pfx__printk+0x10/0x10 [ 149.271567][ T5850] ? kernfs_path_from_node+0x2c/0x280 [ 149.271588][ T5850] ? kernfs_path_from_node+0x243/0x280 [ 149.271607][ T5850] ? kernfs_path_from_node+0x2c/0x280 [ 149.271627][ T5850] sysfs_create_dir_ns+0x259/0x280 [ 149.271646][ T5850] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 149.271671][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 149.271690][ T5850] ? rt_spin_unlock+0x65/0x80 [ 149.271713][ T5850] kobject_add_internal+0x5a5/0xb50 [ 149.271736][ T5850] kobject_add+0x155/0x220 [ 149.271756][ T5850] ? __pfx_kobject_add+0x10/0x10 [ 149.271777][ T5850] ? get_device_parent+0x370/0x3a0 [ 149.271799][ T5850] device_add+0x408/0xb50 [ 149.271817][ T5850] hci_conn_add_sysfs+0xd5/0x1e0 [ 149.271837][ T5850] le_conn_complete_evt+0xc3a/0x1220 [ 149.271870][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 149.271892][ T5850] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 149.271914][ T5850] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.271940][ T5850] ? skb_pull_data+0xfb/0x200 [ 149.271962][ T5850] hci_le_conn_complete_evt+0x187/0x450 [ 149.271989][ T5850] hci_event_packet+0x78f/0x1200 [ 149.272009][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 149.272032][ T5850] ? __pfx_hci_event_packet+0x10/0x10 [ 149.272050][ T5850] ? __pfx_migrate_enable+0x10/0x10 [ 149.272075][ T5850] ? hci_send_to_monitor+0xe2/0x570 [ 149.272100][ T5850] hci_rx_work+0x46a/0xe80 [ 149.272132][ T5850] ? process_scheduled_works+0x9ef/0x17b0 [ 149.272154][ T5850] process_scheduled_works+0xade/0x17b0 [ 149.272198][ T5850] ? __pfx_process_scheduled_works+0x10/0x10 [ 149.272234][ T5850] worker_thread+0x8a0/0xda0 [ 149.272275][ T5850] kthread+0x70e/0x8a0 [ 149.272300][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 149.272318][ T5850] ? __pfx_kthread+0x10/0x10 [ 149.272344][ T5850] ? __pfx_kthread+0x10/0x10 [ 149.272366][ T5850] ret_from_fork+0x436/0x7d0 [ 149.272388][ T5850] ? __pfx_ret_from_fork+0x10/0x10 [ 149.272412][ T5850] ? __switch_to_asm+0x39/0x70 [ 149.272425][ T5850] ? __switch_to_asm+0x33/0x70 [ 149.272438][ T5850] ? __pfx_kthread+0x10/0x10 [ 149.272460][ T5850] ret_from_fork_asm+0x1a/0x30 [ 149.272488][ T5850] [ 149.273941][ T5850] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 149.273983][ T5850] Bluetooth: hci3: failed to register connection device [ 149.668152][ T6422] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 150.675974][ T6435] netlink: 'syz.1.126': attribute type 1 has an invalid length. [ 150.676021][ T6435] netlink: 'syz.1.126': attribute type 2 has an invalid length. [ 150.680478][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 152.426266][ T5896] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.603310][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 152.605658][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.605704][ T5896] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 152.605726][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.657688][ T5896] usb 2-1: config 0 descriptor?? [ 152.744469][ T5896] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 154.501156][ T6482] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 155.186624][ T5968] usb 2-1: USB disconnect, device number 3 [ 155.323309][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.517433][ T5896] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 155.517462][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.547895][ T5896] usb 4-1: config 0 descriptor?? [ 155.908799][ T5896] kaweth 4-1:0.0: Firmware present in device. [ 156.181252][ T6494] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 156.181298][ T6494] netlink: 'syz.1.140': attribute type 2 has an invalid length. [ 156.181531][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 156.922297][ T5896] kaweth 4-1:0.0: Statistics collection: 0 [ 156.922319][ T5896] kaweth 4-1:0.0: Multicast filter limit: 0 [ 156.922333][ T5896] kaweth 4-1:0.0: MTU: 0 [ 156.922346][ T5896] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 156.968931][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.111213][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.116277][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.125412][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.134335][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.448228][ T5896] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 157.544881][ T6497] process 'syz.0.139' launched './file1' with NULL argv: empty string added [ 157.553353][ T5896] usb 4-1: USB disconnect, device number 7 [ 158.051779][ T6501] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 158.480318][ T6501] syz.1.141 (6501) used greatest stack depth: 17304 bytes left [ 159.273243][ T5850] Bluetooth: hci5: command tx timeout [ 161.066401][ T6493] chnl_net:caif_netlink_parms(): no params data found [ 161.316168][ T5968] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.343313][ T5850] Bluetooth: hci5: command tx timeout [ 161.507144][ T5968] usb 2-1: Using ep0 maxpacket: 32 [ 161.513084][ T5968] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 161.513113][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.513131][ T5968] usb 2-1: Product: syz [ 161.513145][ T5968] usb 2-1: Manufacturer: syz [ 161.513345][ T5968] usb 2-1: SerialNumber: syz [ 161.525366][ T5968] usb 2-1: config 0 descriptor?? [ 162.995868][ T6542] i2c i2c-1: adapter quirk: no zero length (addr 0x0001, size 0, read) [ 163.090328][ T5968] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 004 [ 163.218651][ T5968] usb 2-1: USB disconnect, device number 4 [ 163.271140][ T6547] loop2: detected capacity change from 0 to 1 [ 163.305649][ T6547] ldm_validate_privheads(): Disk read failed. [ 163.305732][ T6547] Dev loop2: unable to read RDB block 1 [ 163.305764][ T6547] loop2: AHDI p2 p3 [ 163.305800][ T6547] loop2: partition table partially beyond EOD, truncated [ 163.306643][ T6547] loop2: p3 start 335544320 is beyond EOD, truncated [ 163.423441][ T5850] Bluetooth: hci5: command tx timeout [ 163.795107][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.803762][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.803995][ T6493] bridge_slave_0: entered allmulticast mode [ 163.826834][ T6493] bridge_slave_0: entered promiscuous mode [ 163.831409][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.850114][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.850353][ T6493] bridge_slave_1: entered allmulticast mode [ 163.853120][ T6493] bridge_slave_1: entered promiscuous mode [ 164.272414][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.319768][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.696617][ T6493] team0: Port device team_slave_0 added [ 164.707642][ T6493] team0: Port device team_slave_1 added [ 165.565147][ T5850] Bluetooth: hci5: command tx timeout [ 166.255877][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.255892][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.255915][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.285425][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.285441][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.285464][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.326208][ T6571] netlink: 68 bytes leftover after parsing attributes in process `syz.4.157'. [ 167.196919][ T6493] hsr_slave_0: entered promiscuous mode [ 167.204165][ T6493] hsr_slave_1: entered promiscuous mode [ 167.205038][ T6493] debugfs: 'hsr0' already exists in 'hsr' [ 167.205060][ T6493] Cannot create hsr debugfs directory [ 167.505137][ T6592] fuse: Unknown parameter 'g' [ 168.439412][ T6610] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 168.439764][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 168.440207][ T6607] 8021q: VLANs not supported on ip6tnl0 [ 169.157302][ T6607] Can't find ip_set type hash:net,por‡ [ 169.717316][ T6624] netlink: 'syz.0.167': attribute type 29 has an invalid length. [ 170.143465][ T5896] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 170.204564][ T6493] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.256197][ T6493] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.293350][ T5896] usb 5-1: device descriptor read/64, error -71 [ 170.328274][ T6493] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.374499][ T6493] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.547480][ T5896] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.678011][ T5896] usb 5-1: device descriptor read/64, error -71 [ 170.879462][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.932181][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.956677][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.956978][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.998692][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.999498][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.316371][ T5896] usb usb5-port1: attempt power cycle [ 171.693332][ T5896] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.719676][ T5896] usb 5-1: device descriptor read/8, error -71 [ 171.953461][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.978835][ T5896] usb 5-1: device descriptor read/8, error -71 [ 172.066918][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.078370][ T49] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.083860][ T5896] usb usb5-port1: unable to enumerate USB device [ 172.243447][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 172.246088][ T49] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.246113][ T49] usb 4-1: config 0 has no interface number 0 [ 172.253496][ T49] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 172.253523][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.253539][ T49] usb 4-1: Product: syz [ 172.253550][ T49] usb 4-1: Manufacturer: syz [ 172.253564][ T49] usb 4-1: SerialNumber: syz [ 172.310119][ T49] usb 4-1: config 0 descriptor?? [ 172.348236][ T49] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 172.529695][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.530227][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.813333][ T5896] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.994995][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 173.016238][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.019362][ T5896] usb 2-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.019389][ T5896] usb 2-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 173.019412][ T5896] usb 2-1: config 12 interface 0 has no altsetting 0 [ 173.063587][ T49] gspca_spca1528: reg_w err -110 [ 173.075551][ T5896] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 173.075578][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.075597][ T5896] usb 2-1: Product: syz [ 173.075610][ T5896] usb 2-1: Manufacturer: syz [ 173.075624][ T5896] usb 2-1: SerialNumber: syz [ 173.083456][ T49] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 173.309253][ T1158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.557456][ T5896] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.557523][ T5896] usb 2-1: selecting invalid altsetting 0 [ 174.882075][ T5896] snd-usb-audio 2-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 174.935366][ T5896] usb 2-1: USB disconnect, device number 5 [ 175.083457][ T6051] usb 4-1: USB disconnect, device number 8 [ 175.212881][ T6673] udevd[6673]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.323457][ T1158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.098797][ T1158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.245831][ T6493] veth0_vlan: entered promiscuous mode [ 176.298593][ T6493] veth1_vlan: entered promiscuous mode [ 176.313623][ T992] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.463948][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 176.466668][ T992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.468206][ T992] usb 4-1: config 14 has an invalid interface number: 115 but max is 0 [ 176.468230][ T992] usb 4-1: config 14 has no interface number 0 [ 176.468260][ T992] usb 4-1: config 14 interface 115 has no altsetting 0 [ 176.472359][ T992] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 176.472376][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.472386][ T992] usb 4-1: Product: syz [ 176.472393][ T992] usb 4-1: Manufacturer: syz [ 176.472401][ T992] usb 4-1: SerialNumber: syz [ 177.067501][ T1158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.135789][ T992] xr_serial 4-1:14.115: More than one union descriptor, skipping ... [ 177.179711][ T992] usb 4-1: USB disconnect, device number 9 [ 177.443012][ T6493] veth0_macvtap: entered promiscuous mode [ 177.478018][ T6493] veth1_macvtap: entered promiscuous mode [ 177.579604][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.635774][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.802232][ T2834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.880392][ T4130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.560008][ T4130] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.612784][ T3546] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.775787][ T1158] bridge_slave_1: left allmulticast mode [ 181.776223][ T1158] bridge_slave_1: left promiscuous mode [ 181.777115][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.798737][ T5850] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 182.562834][ T6716] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 182.562902][ T6716] netlink: 'syz.4.185': attribute type 2 has an invalid length. [ 182.563228][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 183.171945][ T1158] bridge_slave_0: left allmulticast mode [ 183.171977][ T1158] bridge_slave_0: left promiscuous mode [ 183.173569][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.963373][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 184.157079][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 184.193743][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.193768][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.199064][ T5932] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.199092][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.199111][ T5932] usb 2-1: Product: syz [ 184.199125][ T5932] usb 2-1: Manufacturer: syz [ 184.199139][ T5932] usb 2-1: SerialNumber: syz [ 184.495031][ T5932] usb 2-1: 0:2 : does not exist [ 184.572873][ T5932] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 184.753902][ T5932] usb 2-1: USB disconnect, device number 6 [ 186.025292][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.303319][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.453309][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 187.455856][ T5896] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 187.455882][ T5896] usb 2-1: config 0 has no interface number 0 [ 187.455933][ T5896] usb 2-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 187.459049][ T5896] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 187.459078][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.459097][ T5896] usb 2-1: Product: syz [ 187.459111][ T5896] usb 2-1: Manufacturer: syz [ 187.459125][ T5896] usb 2-1: SerialNumber: syz [ 187.614870][ T5896] usb 2-1: config 0 descriptor?? [ 187.980492][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.981040][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.522717][ T5896] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 188.638153][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.674105][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.697916][ T1158] bond0 (unregistering): Released all slaves [ 188.750809][ T6730] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 188.750856][ T6730] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 188.750876][ T6730] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 188.960277][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 188.960299][ T37] audit: type=1800 audit(1758639459.141:17): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.194" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 189.114430][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.114450][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.224381][ T5968] usb 2-1: USB disconnect, device number 7 [ 189.338826][ T6747] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 189.338853][ T6747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.399790][ T6754] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 189.399817][ T6754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.399902][ T6754] vhci_hcd vhci_hcd.0: Device attached [ 189.421816][ T6747] vhci_hcd vhci_hcd.0: Device attached [ 190.173367][ T5968] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.333455][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 190.337253][ T5968] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 190.337280][ T5968] usb 2-1: config 0 has no interface number 0 [ 190.337325][ T5968] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.337346][ T5968] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 190.337369][ T5968] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.337394][ T5968] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.337434][ T5968] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 190.337455][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.387609][ T37] audit: type=1326 audit(1758639460.771:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74e72eec9 code=0x7ffc0000 [ 190.387659][ T37] audit: type=1326 audit(1758639460.781:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74e72eec9 code=0x7ffc0000 [ 190.387696][ T37] audit: type=1326 audit(1758639460.781:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc74e72eec9 code=0x7ffc0000 [ 190.387733][ T37] audit: type=1326 audit(1758639460.781:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74e72eec9 code=0x7ffc0000 [ 190.387770][ T37] audit: type=1326 audit(1758639460.781:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74e72eec9 code=0x7ffc0000 [ 190.387808][ T37] audit: type=1326 audit(1758639460.781:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fc74e72eec9 code=0x7ffc0000 [ 190.387844][ T37] audit: type=1326 audit(1758639460.781:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74e72eec9 code=0x7ffc0000 [ 190.387881][ T37] audit: type=1326 audit(1758639460.781:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74e72eec9 code=0x7ffc0000 [ 190.388566][ T37] audit: type=1326 audit(1758639460.781:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc74e72eec9 code=0x7ffc0000 [ 190.393316][ T5896] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 190.643701][ T5968] usb 2-1: config 0 descriptor?? [ 190.670831][ T6755] vhci_hcd: connection closed [ 190.676505][ T6750] vhci_hcd: connection reset by peer [ 190.697289][ T5968] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 190.743489][ T3546] vhci_hcd: stop threads [ 190.744266][ T3546] vhci_hcd: release socket [ 190.744552][ T3546] vhci_hcd: disconnect device [ 190.745515][ T3546] vhci_hcd: stop threads [ 190.745525][ T3546] vhci_hcd: release socket [ 190.757594][ T3546] vhci_hcd: disconnect device [ 190.942539][ T5932] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 191.008633][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 191.008716][ T5968] usb 2-1: USB disconnect, device number 8 [ 191.113387][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 191.119720][ T5932] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 191.119779][ T5932] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.119804][ T5932] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.119825][ T5932] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 191.119850][ T5932] usb 4-1: config 7 interface 0 has no altsetting 0 [ 191.119892][ T5932] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 191.119912][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.274069][ T6756] ldusb: No device or device unplugged -19 [ 191.274132][ T5968] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 191.541042][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.541136][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.754151][ T5932] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0002/input/input7 [ 192.291973][ T5932] kye 0003:0458:5010.0002: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 193.133818][ T5968] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 193.363440][ T5968] usb 4-1: device descriptor read/64, error -32 [ 193.603413][ T5968] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 193.733323][ T5968] usb 4-1: device descriptor read/64, error -32 [ 193.817114][ T1158] hsr_slave_0: left promiscuous mode [ 193.903938][ T1158] hsr_slave_1: left promiscuous mode [ 193.905034][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.905114][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.993383][ T5968] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 194.013821][ T5968] usb 4-1: device descriptor read/8, error -32 [ 194.026678][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.026710][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.273338][ T5968] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 194.298557][ T5968] usb 4-1: device descriptor read/8, error -32 [ 194.403687][ T5968] raw-gadget.2 gadget.3: failed to queue suspend event [ 194.411198][ T31] usb 4-1: USB disconnect, device number 10 [ 194.467683][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.467757][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.821983][ T1158] veth1_macvtap: left promiscuous mode [ 194.822247][ T1158] veth0_macvtap: left promiscuous mode [ 194.837052][ T1158] veth1_vlan: left promiscuous mode [ 194.837512][ T1158] veth0_vlan: left promiscuous mode [ 195.119816][ T31] raw-gadget.2 gadget.3: failed to queue reset event [ 195.369997][ T31] raw-gadget.2 gadget.3: failed to queue resume event [ 195.424494][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 195.425782][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 195.426048][ T31] raw-gadget.2 gadget.3: failed to queue reset event [ 195.506573][ T31] raw-gadget.2 gadget.3: failed to queue resume event [ 195.523517][ T5896] vhci_hcd: vhci_device speed not set [ 195.694629][ T31] usb 4-1: device descriptor read/64, error -32 [ 196.086900][ T6822] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 196.086921][ T6822] netlink: 'syz.4.208': attribute type 2 has an invalid length. [ 196.086953][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 196.795067][ T31] raw-gadget.2 gadget.3: failed to queue suspend event [ 196.795508][ T31] raw-gadget.2 gadget.3: failed to queue reset event [ 197.081518][ T31] raw-gadget.2 gadget.3: failed to queue resume event [ 197.133311][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 197.133580][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 197.133783][ T31] raw-gadget.2 gadget.3: failed to queue reset event [ 197.223635][ T31] raw-gadget.2 gadget.3: failed to queue resume event [ 197.287355][ T31] usb 4-1: device descriptor read/64, error -32 [ 197.393460][ T31] raw-gadget.2 gadget.3: failed to queue suspend event [ 197.393711][ T31] usb usb4-port1: attempt power cycle [ 197.393892][ T31] raw-gadget.2 gadget.3: failed to queue disconnect event [ 197.394537][ T31] raw-gadget.2 gadget.3: failed to queue reset event [ 197.463480][ T31] raw-gadget.2 gadget.3: failed to queue resume event [ 197.464128][ T31] raw-gadget.2 gadget.3: failed to queue reset event [ 197.691632][ T31] raw-gadget.2 gadget.3: failed to queue resume event [ 197.743467][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 197.765792][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 197.765957][ T31] usb 4-1: device descriptor read/8, error -32 [ 198.091609][ T31] raw-gadget.2 gadget.3: failed to queue suspend event [ 198.093902][ T31] raw-gadget.2 gadget.3: failed to queue reset event [ 198.169386][ T31] raw-gadget.2 gadget.3: failed to queue resume event [ 198.434206][ T6832] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.211'. [ 198.434279][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'. [ 199.085518][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 199.103569][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 199.103729][ T31] usb 4-1: device descriptor read/8, error -32 [ 199.213411][ T31] raw-gadget.2 gadget.3: failed to queue suspend event [ 199.213635][ T31] usb usb4-port1: unable to enumerate USB device [ 199.825775][ T5896] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.993748][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.993780][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.993817][ T5896] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 199.993837][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.076138][ T5896] usb 2-1: config 0 descriptor?? [ 200.193380][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 200.237626][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 200.403803][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 200.404046][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.435890][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 200.476276][ T9] usb 6-1: config 0 descriptor?? [ 201.889165][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 201.889295][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 201.910959][ T5896] arvo 0003:1E7D:30D4.0003: unbalanced collection at end of report description [ 201.934249][ T5896] arvo 0003:1E7D:30D4.0003: parse failed [ 201.934323][ T5896] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22 [ 202.002822][ T9] usb 6-1: USB disconnect, device number 2 [ 202.348628][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 204.537066][ T6837] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 204.537109][ T6837] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 204.537129][ T6837] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 204.620874][ T37] kauditd_printk_skb: 55 callbacks suppressed [ 204.620893][ T37] audit: type=1800 audit(1758639474.931:82): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.210" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 204.742832][ T6765] raw-gadget.2 gadget.3: failed to queue disconnect event [ 205.090445][ T9] usb 2-1: USB disconnect, device number 9 [ 205.323452][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 205.497090][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.497116][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.499060][ T5896] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.499086][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.499105][ T5896] usb 5-1: SerialNumber: syz [ 207.461537][ T6889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.736118][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.860254][ T6859] netlink: 5 bytes leftover after parsing attributes in process `syz.4.217'. [ 207.860823][ T6859] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 208.057551][ T6859] 0ªî{X¹¦: entered allmulticast mode [ 208.058069][ T6859] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 208.585978][ T37] audit: type=1326 audit(1758639478.901:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f664944af79 code=0x7ffc0000 [ 208.586023][ T37] audit: type=1326 audit(1758639478.901:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f664944af79 code=0x7ffc0000 [ 208.586046][ T37] audit: type=1326 audit(1758639478.901:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f664944af79 code=0x7ffc0000 [ 208.586067][ T37] audit: type=1326 audit(1758639478.901:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f664944af79 code=0x7ffc0000 [ 208.586088][ T37] audit: type=1326 audit(1758639478.901:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66494aeec9 code=0x7ffc0000 [ 208.586108][ T37] audit: type=1326 audit(1758639478.901:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f664944af79 code=0x7ffc0000 [ 208.586130][ T37] audit: type=1326 audit(1758639478.901:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f664944af79 code=0x7ffc0000 [ 208.586150][ T37] audit: type=1326 audit(1758639478.901:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66494aeec9 code=0x7ffc0000 [ 208.586171][ T37] audit: type=1326 audit(1758639478.911:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f664944af79 code=0x7ffc0000 [ 208.823880][ T5896] usb 5-1: 0:2 : does not exist [ 208.823999][ T5896] usb 5-1: unit 255 not found! [ 208.908305][ T5896] usb 5-1: USB disconnect, device number 6 [ 208.957756][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.520113][ T6908] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 209.520133][ T6908] netlink: 'syz.3.226': attribute type 2 has an invalid length. [ 209.520173][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 210.297331][ T37] kauditd_printk_skb: 61 callbacks suppressed [ 210.297348][ T37] audit: type=1326 audit(1758639480.691:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f664944af79 code=0x7ffc0000 [ 211.373395][ T6915] netlink: 'syz.5.230': attribute type 15 has an invalid length. [ 211.950016][ T6924] mkiss: ax0: crc mode is auto. [ 212.021872][ T6931] FAULT_INJECTION: forcing a failure. [ 212.021872][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 212.021904][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.4.233 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.021925][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.021935][ T6931] Call Trace: [ 212.021943][ T6931] [ 212.021950][ T6931] dump_stack_lvl+0x189/0x250 [ 212.021979][ T6931] ? __pfx____ratelimit+0x10/0x10 [ 212.022004][ T6931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.022027][ T6931] ? __pfx__printk+0x10/0x10 [ 212.022051][ T6931] ? __pfx___might_resched+0x10/0x10 [ 212.022068][ T6931] ? fs_reclaim_acquire+0x7d/0x100 [ 212.022090][ T6931] should_fail_ex+0x46c/0x600 [ 212.022118][ T6931] ? __alloc_skb+0x112/0x2d0 [ 212.022140][ T6931] should_failslab+0xa8/0x100 [ 212.022163][ T6931] ? __alloc_skb+0x112/0x2d0 [ 212.022183][ T6931] kmem_cache_alloc_node_noprof+0x77/0x330 [ 212.022212][ T6931] __alloc_skb+0x112/0x2d0 [ 212.022239][ T6931] netlink_sendmsg+0x5c6/0xb30 [ 212.022273][ T6931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.022304][ T6931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.022321][ T6931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.022344][ T6931] __sock_sendmsg+0x21c/0x270 [ 212.022369][ T6931] ____sys_sendmsg+0x508/0x820 [ 212.022391][ T6931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.022417][ T6931] ? import_iovec+0x74/0xa0 [ 212.022449][ T6931] ___sys_sendmsg+0x21f/0x2a0 [ 212.022468][ T6931] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.022524][ T6931] ? __fget_files+0x2a/0x420 [ 212.022545][ T6931] ? __fget_files+0x3a6/0x420 [ 212.022578][ T6931] __x64_sys_sendmsg+0x1a1/0x260 [ 212.022598][ T6931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.022623][ T6931] ? __pfx_ksys_write+0x10/0x10 [ 212.022641][ T6931] ? rcu_is_watching+0x15/0xb0 [ 212.022670][ T6931] ? do_syscall_64+0xbe/0x3b0 [ 212.022691][ T6931] do_syscall_64+0xfa/0x3b0 [ 212.022706][ T6931] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.022729][ T6931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.022747][ T6931] ? clear_bhb_loop+0x60/0xb0 [ 212.022768][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.022785][ T6931] RIP: 0033:0x7f66494aeec9 [ 212.022801][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.022814][ T6931] RSP: 002b:00007f664770e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.022833][ T6931] RAX: ffffffffffffffda RBX: 00007f6649705fa0 RCX: 00007f66494aeec9 [ 212.022847][ T6931] RDX: 0000000020000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 212.022859][ T6931] RBP: 00007f664770e090 R08: 0000000000000000 R09: 0000000000000000 [ 212.022870][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.022880][ T6931] R13: 00007f6649706038 R14: 00007f6649705fa0 R15: 00007ffe66cc6f18 [ 212.022910][ T6931] [ 212.409938][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 212.409978][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 212.410003][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 212.410066][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 212.884309][ T6845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 213.119228][ T6845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.119285][ T6845] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 213.119336][ T6845] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.119358][ T6845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.134376][ T6845] usb 2-1: config 0 descriptor?? [ 213.149044][ T6845] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 214.013134][ T6957] GUP no longer grows the stack in syz.0.239 (6957): 200000004000-20000000a000 (200000002000) [ 214.013169][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.0.239 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.013190][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.013201][ T6957] Call Trace: [ 214.013209][ T6957] [ 214.013216][ T6957] dump_stack_lvl+0x189/0x250 [ 214.013261][ T6957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.013289][ T6957] ? __pfx__printk+0x10/0x10 [ 214.013307][ T6957] ? find_vma+0xe7/0x160 [ 214.013349][ T6957] __get_user_pages+0x237e/0x2b60 [ 214.013416][ T6957] get_user_pages_remote+0x2f1/0xad0 [ 214.013443][ T6957] ? __pfx_mtree_load+0x10/0x10 [ 214.013479][ T6957] ? __pfx_get_user_pages_remote+0x10/0x10 [ 214.013508][ T6957] ? __access_remote_vm+0x367/0x7d0 [ 214.013542][ T6957] __access_remote_vm+0x211/0x7d0 [ 214.013582][ T6957] ? __pfx___access_remote_vm+0x10/0x10 [ 214.013608][ T6957] ? set_page_refcounted+0xa0/0x1e0 [ 214.013637][ T6957] ? alloc_pages_noprof+0xe4/0x1e0 [ 214.013669][ T6957] proc_pid_cmdline_read+0x433/0x810 [ 214.013699][ T6957] ? __asan_memset+0x22/0x50 [ 214.013727][ T6957] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 214.013760][ T6957] ? rw_verify_area+0x2ac/0x4e0 [ 214.013789][ T6957] vfs_readv+0x5b0/0x850 [ 214.013823][ T6957] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 214.013855][ T6957] ? __pfx_vfs_readv+0x10/0x10 [ 214.013901][ T6957] ? __fget_files+0x2a/0x420 [ 214.013934][ T6957] ? __fget_files+0x3a6/0x420 [ 214.013960][ T6957] ? __fget_files+0x2a/0x420 [ 214.013998][ T6957] __x64_sys_preadv+0x19a/0x2a0 [ 214.014028][ T6957] ? __pfx___x64_sys_preadv+0x10/0x10 [ 214.014052][ T6957] ? rcu_is_watching+0x15/0xb0 [ 214.014087][ T6957] ? do_syscall_64+0xbe/0x3b0 [ 214.014111][ T6957] do_syscall_64+0xfa/0x3b0 [ 214.014128][ T6957] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.014156][ T6957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.014175][ T6957] ? clear_bhb_loop+0x60/0xb0 [ 214.014200][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.014219][ T6957] RIP: 0033:0x7f9f438feec9 [ 214.014237][ T6957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.014259][ T6957] RSP: 002b:00007f9f41b66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 214.014280][ T6957] RAX: ffffffffffffffda RBX: 00007f9f43b55fa0 RCX: 00007f9f438feec9 [ 214.014295][ T6957] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 214.014308][ T6957] RBP: 00007f9f43981f91 R08: 0000000000000000 R09: 0000000000000000 [ 214.014321][ T6957] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 214.014333][ T6957] R13: 00007f9f43b56038 R14: 00007f9f43b55fa0 R15: 00007ffeec784fa8 [ 214.014367][ T6957] [ 215.119842][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.5.243'. [ 215.769572][ T9] usb 2-1: USB disconnect, device number 10 [ 216.774816][ T6998] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.247'. [ 216.774839][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 224.353204][ C1] sched: DL replenish lagged too much [ 226.606088][ T7015] netlink: 'syz.0.251': attribute type 29 has an invalid length. [ 234.863553][ T7037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'. [ 244.180707][ T7043] input: syz1 as /devices/virtual/input/input8 [ 246.292817][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.413590][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.724290][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.705077][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.809944][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.223502][ T5157] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 266.371754][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.371789][ T5157] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 266.390209][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.460592][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.489590][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.491977][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.492795][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.517511][ T5850] Bluetooth: hci4: command tx timeout [ 271.997655][ T5853] Bluetooth: hci4: command tx timeout [ 274.573296][ T59] Bluetooth: hci4: command tx timeout [ 274.578146][ T5850] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 276.663267][ T5157] Bluetooth: hci4: command tx timeout [ 284.624383][ T5157] Bluetooth: hci5: command 0x0406 tx timeout [ 284.721274][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.743695][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.745809][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.747078][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.747937][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.815458][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.843583][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.846011][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.868466][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.869734][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.092710][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.110117][ T5856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.111346][ T5856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.112605][ T5856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.142629][ T5856] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.979696][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 286.013686][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 286.016913][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 286.018083][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 286.018905][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 294.523381][ T59] Bluetooth: hci8: command tx timeout [ 296.543405][ T5850] Bluetooth: hci8: command tx timeout [ 296.543699][ T5850] Bluetooth: hci6: command tx timeout [ 296.543868][ T5850] Bluetooth: hci0: command tx timeout [ 296.544004][ T5850] Bluetooth: hci7: command tx timeout [ 298.863486][ T5853] Bluetooth: hci7: command tx timeout [ 298.863520][ T5853] Bluetooth: hci0: command tx timeout [ 298.863541][ T5853] Bluetooth: hci6: command tx timeout [ 298.863560][ T5853] Bluetooth: hci8: command tx timeout [ 300.943647][ T5850] Bluetooth: hci8: command tx timeout [ 300.943678][ T5850] Bluetooth: hci6: command tx timeout [ 300.943698][ T5850] Bluetooth: hci0: command tx timeout [ 300.943718][ T5850] Bluetooth: hci7: command tx timeout [ 304.403260][ T5853] Bluetooth: hci7: command tx timeout [ 304.403296][ T5853] Bluetooth: hci0: command tx timeout [ 304.403317][ T5853] Bluetooth: hci6: command tx timeout [ 306.795206][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.813471][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.815792][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.820999][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.845362][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.063408][ T5850] Bluetooth: hci1: command tx timeout [ 317.605141][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.243614][ T5850] Bluetooth: hci1: command tx timeout [ 320.815757][ T5850] Bluetooth: hci1: command tx timeout [ 323.968936][ T5850] Bluetooth: hci1: command tx timeout [ 325.006959][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.027053][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.028347][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.070207][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.071016][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.183481][ T5853] Bluetooth: hci2: command tx timeout [ 328.935247][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.956994][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.958223][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.959421][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.960242][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.263343][ T5853] Bluetooth: hci2: command tx timeout [ 329.959284][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.979782][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.981590][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.982741][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.014831][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.103448][ T5853] Bluetooth: hci3: command tx timeout [ 331.343376][ T5853] Bluetooth: hci2: command tx timeout [ 332.070991][ T5853] Bluetooth: hci5: command tx timeout [ 333.183422][ T5853] Bluetooth: hci3: command tx timeout [ 333.423419][ T5853] Bluetooth: hci2: command tx timeout [ 334.143389][ T5853] Bluetooth: hci5: command tx timeout [ 335.269956][ T5853] Bluetooth: hci3: command tx timeout [ 336.223501][ T5853] Bluetooth: hci5: command tx timeout [ 337.343410][ T5853] Bluetooth: hci3: command tx timeout [ 338.303473][ T5853] Bluetooth: hci5: command tx timeout [ 346.815943][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 346.825894][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 346.855137][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 346.856426][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 346.857246][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 348.943542][ T5853] Bluetooth: hci9: command tx timeout [ 351.023868][ T5853] Bluetooth: hci9: command tx timeout [ 353.106923][ T5853] Bluetooth: hci9: command tx timeout [ 355.183781][ T5853] Bluetooth: hci9: command tx timeout [ 368.066641][ T5850] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 368.085611][ T5850] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 368.101036][ T5850] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 368.103119][ T5850] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 368.139400][ T5850] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 370.223664][ T5853] Bluetooth: hci10: command tx timeout [ 372.303610][ T5853] Bluetooth: hci10: command tx timeout [ 374.383627][ T5853] Bluetooth: hci10: command tx timeout [ 376.464113][ T5853] Bluetooth: hci10: command tx timeout [ 378.724532][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.246344][ T5850] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 386.267286][ T5850] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 386.268477][ T5850] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 386.269677][ T5850] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 386.271228][ T5850] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 388.385399][ T5850] Bluetooth: hci11: command tx timeout [ 389.554734][ T5157] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 389.559532][ T5157] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 389.560747][ T5157] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 389.561904][ T5157] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 389.597682][ T5157] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 390.463637][ T5157] Bluetooth: hci11: command tx timeout [ 390.570285][ T5853] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 390.588877][ T5853] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 390.590139][ T5853] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 390.591418][ T5853] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 390.592268][ T5853] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 391.034136][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 391.663639][ T5853] Bluetooth: hci12: command tx timeout [ 392.543666][ T5853] Bluetooth: hci11: command tx timeout [ 392.704556][ T5853] Bluetooth: hci13: command tx timeout [ 393.753564][ T5853] Bluetooth: hci12: command tx timeout [ 394.623408][ T5853] Bluetooth: hci11: command tx timeout [ 394.783388][ T5853] Bluetooth: hci13: command tx timeout [ 395.823676][ T5853] Bluetooth: hci12: command tx timeout [ 396.863491][ T5853] Bluetooth: hci13: command tx timeout [ 397.903477][ T5853] Bluetooth: hci12: command tx timeout [ 398.943394][ T5853] Bluetooth: hci13: command tx timeout [ 407.365590][ T5853] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 407.387737][ T5853] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 407.388939][ T5853] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 407.411147][ T5853] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 407.412037][ T5853] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 409.503419][ T5850] Bluetooth: hci14: command tx timeout [ 411.583576][ T5850] Bluetooth: hci14: command tx timeout [ 413.663520][ T5850] Bluetooth: hci14: command tx timeout [ 415.746491][ T59] Bluetooth: hci14: command tx timeout [ 416.653075][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 416.653128][ T59] Bluetooth: hci7: command 0x0406 tx timeout [ 416.666925][ T5853] Bluetooth: hci8: command 0x0406 tx timeout [ 416.666965][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 435.322266][ T5157] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 435.361295][ T5157] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 435.362908][ T5157] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 435.380353][ T5157] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 435.381257][ T5157] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 440.150955][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.427167][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.448685][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.450004][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.451732][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.452613][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.223610][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 448.383494][ T5850] Bluetooth: hci15: command tx timeout [ 449.503382][ T5850] Bluetooth: hci0: command tx timeout [ 449.764443][ T5157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 449.792906][ T5157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 449.807543][ T5157] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 449.809011][ T5157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 449.809881][ T5157] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 450.465114][ T59] Bluetooth: hci15: command tx timeout [ 450.827344][ T5859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 450.848240][ T5859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 450.850626][ T5859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 450.878304][ T5859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 450.879532][ T5859] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 451.592811][ T59] Bluetooth: hci0: command tx timeout [ 452.474275][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 452.474317][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 452.543430][ T5853] Bluetooth: hci15: command tx timeout [ 453.663500][ T5853] Bluetooth: hci0: command tx timeout [ 454.623493][ T5853] Bluetooth: hci15: command tx timeout [ 455.750956][ T5853] Bluetooth: hci0: command tx timeout [ 457.405435][ T5859] Bluetooth: hci7: command tx timeout [ 459.423503][ T5843] Bluetooth: hci7: command tx timeout [ 459.423802][ T5843] Bluetooth: hci6: command tx timeout [ 461.503463][ T5859] Bluetooth: hci6: command tx timeout [ 461.503497][ T5859] Bluetooth: hci7: command tx timeout [ 463.606860][ T5157] Bluetooth: hci7: command tx timeout [ 463.606894][ T5157] Bluetooth: hci6: command tx timeout [ 465.663303][ T5859] Bluetooth: hci6: command tx timeout [ 468.176579][ T5157] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 468.206811][ T5157] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 468.208444][ T5157] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 468.209654][ T5157] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 468.210429][ T5157] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 470.864314][ T38] INFO: task syz.4.244:6974 blocked for more than 143 seconds. [ 470.864338][ T38] Not tainted syzkaller #0 [ 470.864348][ T38] Blocked by coredump. [ 470.864354][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.864363][ T38] task:syz.4.244 state:D stack:24376 pid:6974 tgid:6974 ppid:5837 task_flags:0x40044c flags:0x00004006 [ 470.864417][ T38] Call Trace: [ 470.864423][ T38] [ 470.864436][ T38] __schedule+0x16f3/0x4c20 [ 470.864489][ T38] ? __lock_acquire+0xab9/0xd20 [ 470.864513][ T38] ? __pfx___schedule+0x10/0x10 [ 470.864560][ T38] ? schedule+0x91/0x360 [ 470.864586][ T38] schedule+0x165/0x360 [ 470.864612][ T38] schedule_timeout+0x9a/0x270 [ 470.864635][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 470.864670][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.864694][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.864716][ T38] ? wait_for_completion+0x267/0x5d0 [ 470.864742][ T38] wait_for_completion+0x2bf/0x5d0 [ 470.864779][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 470.864810][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 470.864836][ T38] rcu_barrier+0x463/0x570 [ 470.864862][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 470.864887][ T38] netdev_run_todo+0x327/0xea0 [ 470.864910][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 470.864933][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 470.864949][ T38] ? kasan_quarantine_put+0xdd/0x220 [ 470.864970][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.865002][ T38] ? netdev_state_change+0x1ca/0x220 [ 470.865027][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 470.865050][ T38] tun_chr_close+0x13f/0x1c0 [ 470.865076][ T38] __fput+0x458/0xa80 [ 470.865106][ T38] task_work_run+0x1d4/0x260 [ 470.865129][ T38] ? __pfx_task_work_run+0x10/0x10 [ 470.865148][ T38] ? do_exit+0x6b0/0x2300 [ 470.865164][ T38] ? kmem_cache_free+0x195/0x510 [ 470.865193][ T38] do_exit+0x6b5/0x2300 [ 470.865210][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.865240][ T38] ? __lock_acquire+0xab9/0xd20 [ 470.865264][ T38] ? __pfx_do_exit+0x10/0x10 [ 470.865278][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 470.865302][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 470.865333][ T38] do_group_exit+0x21c/0x2d0 [ 470.865356][ T38] get_signal+0x125e/0x1310 [ 470.865401][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 470.865425][ T38] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 470.865445][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.865470][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.865507][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 470.865533][ T38] exit_to_user_mode_loop+0x75/0x110 [ 470.865562][ T38] do_syscall_64+0x2bd/0x3b0 [ 470.865578][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.865600][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.865618][ T38] ? clear_bhb_loop+0x60/0xb0 [ 470.865640][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.865662][ T38] RIP: 0033:0x7f66494aeec9 [ 470.865678][ T38] RSP: 002b:00007ffe66cc7078 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 470.865697][ T38] RAX: 0000000000000000 RBX: 00007f6649707da0 RCX: 00007f66494aeec9 [ 470.865710][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 470.865721][ T38] RBP: 00007f6649707da0 R08: 0000000000000100 R09: 0000000e66cc736f [ 470.865733][ T38] R10: 00007f6649707cb0 R11: 0000000000000246 R12: 0000000000034abc [ 470.865745][ T38] R13: 00007ffe66cc7170 R14: ffffffffffffffff R15: 00007ffe66cc7190 [ 470.865776][ T38] [ 470.865802][ T38] [ 470.865802][ T38] Showing all locks held in the system: [ 470.865811][ T38] 2 locks held by kworker/0:0/9: [ 470.865821][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 470.865868][ T38] #1: ffffc900000e7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 470.865914][ T38] 6 locks held by ktimers/1/29: [ 470.865925][ T38] 2 locks held by ksoftirqd/1/30: [ 470.865936][ T38] 1 lock held by khungtaskd/38: [ 470.865945][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 470.865995][ T38] 3 locks held by kworker/u8:6/1158: [ 470.866005][ T38] #0: ffff8880300e6138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 470.866050][ T38] #1: ffffc90004c77bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 470.866096][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 470.866154][ T38] 3 locks held by kworker/u8:12/3546: [ 470.866165][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 470.866210][ T38] #1: ffffc9000d87fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 470.866253][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 470.866296][ T38] 1 lock held by dhcpcd/5503: [ 470.866306][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 470.866352][ T38] 2 locks held by getty/5600: [ 470.866362][ T38] #0: ffff88823bf3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 470.866410][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 470.866455][ T38] 1 lock held by syz-executor/5838: [ 470.866465][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 470.866507][ T38] 1 lock held by syz-executor/5841: [ 470.866517][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 470.866564][ T38] 4 locks held by kworker/1:3/5844: [ 470.866573][ T38] #0: ffff888058955d38 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 470.866622][ T38] #1: ffffc90004bb7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 470.866679][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 470.866723][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 470.866768][ T38] 4 locks held by kworker/u9:8/5859: [ 470.866778][ T38] #0: ffff88806d7be938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 470.866826][ T38] #1: ffffc90004cf7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 470.866870][ T38] #2: ffff88809bd680a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 470.866914][ T38] #3: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 470.866962][ T38] 3 locks held by kworker/0:4/5930: [ 470.866972][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 470.867016][ T38] #1: ffffc900051c7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 470.867064][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 470.867108][ T38] 4 locks held by kworker/1:5/5931: [ 470.867118][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 470.867162][ T38] #1: ffffc900051d7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 470.867207][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 470.867250][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 470.867293][ T38] 1 lock held by syz-executor/6493: [ 470.867303][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 470.867346][ T38] 1 lock held by syz.4.244/6974: [ 470.867356][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 470.867397][ T38] 4 locks held by kworker/1:9/7012: [ 470.867407][ T38] #0: ffff888058ddf938 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 470.867456][ T38] #1: ffffc90005affbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 470.867512][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 470.867561][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 470.867605][ T38] 1 lock held by syz.3.263/7059: [ 470.867615][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 470.867655][ T38] 2 locks held by syz-executor/7066: [ 470.867665][ T38] #0: ffffffff8ecc6a20 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 470.867709][ T38] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 470.867755][ T38] 2 locks held by syz-executor/7096: [ 470.867765][ T38] #0: ffff8880712ace80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 470.867809][ T38] #1: ffff8880712ac0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 470.867857][ T38] 3 locks held by syz-executor/7106: [ 470.867867][ T38] #0: ffff888052650e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 470.867910][ T38] #1: ffff8880526500a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 470.867956][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 470.867997][ T38] 3 locks held by syz-executor/7110: [ 470.868007][ T38] #0: ffff888059494e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 470.868049][ T38] #1: ffff8880594940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 470.868094][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 470.868136][ T38] 3 locks held by syz-executor/7116: [ 470.868146][ T38] #0: ffff88803d3e8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 470.868189][ T38] #1: ffff88803d3e80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 470.868235][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 470.868276][ T38] 3 locks held by syz-executor/7119: [ 470.868286][ T38] #0: ffff88807f670e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 470.868329][ T38] #1: ffff88807f6700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 470.868374][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 470.868416][ T38] 2 locks held by kworker/1:14/7123: [ 470.868427][ T38] 4 locks held by syz-executor/7125: [ 470.868437][ T38] #0: ffff888072128e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 470.868481][ T38] #1: ffff8880721280a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 470.868526][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 470.868572][ T38] #3: ffff888031252b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 470.868617][ T38] 3 locks held by syz-executor/7131: [ 470.868627][ T38] #0: ffff88805b390e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 470.868670][ T38] #1: ffff88805b3900a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 470.868715][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 470.868757][ T38] 3 locks held by syz-executor/7137: [ 470.868767][ T38] #0: ffff888085894e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 470.868810][ T38] #1: ffff8880858940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 470.868855][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 470.868896][ T38] 3 locks held by syz-executor/7142: [ 470.868907][ T38] #0: ffff888087924e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 470.868950][ T38] #1: ffff8880879240a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 470.868995][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 470.869037][ T38] 1 lock held by syz-executor/7146: [ 470.869047][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 470.869093][ T38] 1 lock held by syz-executor/7151: [ 470.869103][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 470.869145][ T38] 1 lock held by syz-executor/7159: [ 470.869155][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 470.869198][ T38] 1 lock held by syz-executor/7162: [ 470.869208][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 470.869249][ T38] 1 lock held by syz-executor/7165: [ 470.869259][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 470.869301][ T38] 1 lock held by syz-executor/7172: [ 470.869311][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 470.869354][ T38] [ 470.869359][ T38] ============================================= [ 470.869359][ T38] [ 470.869379][ T38] NMI backtrace for cpu 0 [ 470.869400][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 470.869420][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.869430][ T38] Call Trace: [ 470.869437][ T38] [ 470.869444][ T38] dump_stack_lvl+0x189/0x250 [ 470.869472][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.869495][ T38] ? __pfx__printk+0x10/0x10 [ 470.869526][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 470.869556][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 470.869579][ T38] ? __pfx__printk+0x10/0x10 [ 470.869602][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 470.869625][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 470.869649][ T38] watchdog+0xf93/0xfe0 [ 470.869684][ T38] ? watchdog+0x1de/0xfe0 [ 470.869710][ T38] kthread+0x70e/0x8a0 [ 470.869737][ T38] ? __pfx_watchdog+0x10/0x10 [ 470.869756][ T38] ? __pfx_kthread+0x10/0x10 [ 470.869789][ T38] ? __pfx_kthread+0x10/0x10 [ 470.869831][ T38] ret_from_fork+0x436/0x7d0 [ 470.869855][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 470.869881][ T38] ? __switch_to_asm+0x39/0x70 [ 470.869896][ T38] ? __switch_to_asm+0x33/0x70 [ 470.869911][ T38] ? __pfx_kthread+0x10/0x10 [ 470.869953][ T38] ret_from_fork_asm+0x1a/0x30 [ 470.869997][ T38] [ 470.870004][ T38] Sending NMI from CPU 0 to CPUs 1: [ 470.870029][ C1] NMI backtrace for cpu 1 [ 470.870043][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 470.870060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.870069][ C1] RIP: 0010:lock_is_held_type+0xa3/0x190 [ 470.870091][ C1] Code: 65 ff 05 80 6b ff 06 41 83 bd 18 0b 00 00 00 7e 48 4c 89 eb 48 81 c3 20 0b 00 00 45 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 78 02 00 00 85 c0 75 2a 49 ff c7 49 63 85 18 0b 00 00 48 83 c3 [ 470.870103][ C1] RSP: 0018:ffffc90000a3e8d0 EFLAGS: 00000087 [ 470.870116][ C1] RAX: 0000000000000009 RBX: ffff88801c6b2930 RCX: e9785e7aedeb1800 [ 470.870127][ C1] RDX: 0000000000000000 RSI: ffffe8ffffd02098 RDI: ffff88801c6b2930 [ 470.870138][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af95c4b [ 470.870148][ C1] R10: dffffc0000000000 R11: fffffbfff1e3ac67 R12: 0000000000000246 [ 470.870159][ C1] R13: ffff88801c6b1dc0 R14: ffffe8ffffd02098 R15: 0000000000000002 [ 470.870170][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 470.870182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.870193][ C1] CR2: 00007f2c183d25fa CR3: 000000004fac2000 CR4: 00000000003526f0 [ 470.870207][ C1] Call Trace: [ 470.870213][ C1] [ 470.870221][ C1] ___slab_alloc+0x485/0xdc0 [ 470.870237][ C1] ? dst_alloc+0x105/0x170 [ 470.870253][ C1] ? dst_alloc+0x105/0x170 [ 470.870266][ C1] kmem_cache_alloc_noprof+0xe6/0x310 [ 470.870285][ C1] dst_alloc+0x105/0x170 [ 470.870312][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 470.870332][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 470.870347][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 470.870362][ C1] ? __lock_acquire+0xab9/0xd20 [ 470.870379][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 470.870397][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 470.870416][ C1] ip_route_output_flow+0x2a/0x150 [ 470.870429][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 470.870445][ C1] ip_route_me_harder+0x6d2/0x1030 [ 470.870465][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 470.870492][ C1] synproxy_send_tcp+0x359/0x6c0 [ 470.870514][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 470.870538][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 470.870557][ C1] ? nft_synproxy_eval_v4+0x158/0x560 [ 470.870572][ C1] ? synproxy_pernet+0x45/0x270 [ 470.870589][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 470.870606][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 470.870622][ C1] ? nf_ip_checksum+0x13c/0x510 [ 470.870638][ C1] nft_synproxy_do_eval+0x345/0x570 [ 470.870654][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 470.870676][ C1] nft_do_chain+0x40c/0x1920 [ 470.870689][ C1] ? unwind_next_frame+0xa5/0x2390 [ 470.870712][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 470.870729][ C1] ? stack_trace_save+0x9c/0xe0 [ 470.870749][ C1] ? kasan_save_track+0x4f/0x80 [ 470.870765][ C1] ? kmem_cache_alloc_noprof+0x143/0x310 [ 470.870781][ C1] ? fill_pool+0x100/0x570 [ 470.870797][ C1] ? debug_objects_fill_pool+0x107/0x120 [ 470.870813][ C1] ? debug_object_assert_init+0x65/0x300 [ 470.870833][ C1] nft_do_chain_inet+0x25d/0x340 [ 470.870848][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 470.870862][ C1] ? __lock_acquire+0xab9/0xd20 [ 470.870882][ C1] ? NF_HOOK+0x9a/0x3a0 [ 470.870899][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 470.870914][ C1] nf_hook_slow+0xc2/0x220 [ 470.870934][ C1] NF_HOOK+0x206/0x3a0 [ 470.870951][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 470.870968][ C1] ? NF_HOOK+0x9a/0x3a0 [ 470.870985][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 470.871000][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 470.871019][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 470.871037][ C1] ? skb_dst+0x4f/0xd0 [ 470.871053][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 470.871072][ C1] NF_HOOK+0x30c/0x3a0 [ 470.871089][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 470.871106][ C1] ? NF_HOOK+0x9a/0x3a0 [ 470.871122][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 470.871139][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 470.871160][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 470.871176][ C1] __netif_receive_skb+0x143/0x380 [ 470.871192][ C1] ? rt_spin_unlock+0x65/0x80 [ 470.871210][ C1] ? process_backlog+0x27b/0x900 [ 470.871226][ C1] process_backlog+0x31e/0x900 [ 470.871247][ C1] __napi_poll+0xb3/0x540 [ 470.871265][ C1] net_rx_action+0x707/0xe00 [ 470.871293][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 470.871323][ C1] handle_softirqs+0x22f/0x710 [ 470.871343][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 470.871363][ C1] run_ktimerd+0xcf/0x190 [ 470.871380][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 470.871398][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 470.871414][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 470.871430][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 470.871445][ C1] smpboot_thread_fn+0x53f/0xa60 [ 470.871462][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 470.871481][ C1] kthread+0x70e/0x8a0 [ 470.871499][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 470.871515][ C1] ? __pfx_kthread+0x10/0x10 [ 470.871535][ C1] ? __pfx_kthread+0x10/0x10 [ 470.871554][ C1] ret_from_fork+0x436/0x7d0 [ 470.871571][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 470.871590][ C1] ? __switch_to_asm+0x39/0x70 [ 470.871602][ C1] ? __switch_to_asm+0x33/0x70 [ 470.871615][ C1] ? __pfx_kthread+0x10/0x10 [ 470.871633][ C1] ret_from_fork_asm+0x1a/0x30 [ 470.871652][ C1] [ 470.872031][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 470.872045][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 470.872065][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.872075][ T38] Call Trace: [ 470.872082][ T38] [ 470.872089][ T38] dump_stack_lvl+0x99/0x250 [ 470.872114][ T38] ? __asan_memcpy+0x40/0x70 [ 470.872132][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.872155][ T38] ? __pfx__printk+0x10/0x10 [ 470.872186][ T38] vpanic+0x281/0x750 [ 470.872211][ T38] ? __pfx_vpanic+0x10/0x10 [ 470.872231][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 470.872248][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.872282][ T38] panic+0xb9/0xc0 [ 470.872304][ T38] ? __pfx_panic+0x10/0x10 [ 470.872329][ T38] ? irq_work_queue+0xc3/0x140 [ 470.872355][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 470.872379][ T38] watchdog+0xfd2/0xfe0 [ 470.872404][ T38] ? watchdog+0x1de/0xfe0 [ 470.872431][ T38] kthread+0x70e/0x8a0 [ 470.872457][ T38] ? __pfx_watchdog+0x10/0x10 [ 470.872477][ T38] ? __pfx_kthread+0x10/0x10 [ 470.872505][ T38] ? __pfx_kthread+0x10/0x10 [ 470.872529][ T38] ret_from_fork+0x436/0x7d0 [ 470.872559][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 470.872587][ T38] ? __switch_to_asm+0x39/0x70 [ 470.872602][ T38] ? __switch_to_asm+0x33/0x70 [ 470.872618][ T38] ? __pfx_kthread+0x10/0x10 [ 470.872642][ T38] ret_from_fork_asm+0x1a/0x30 [ 470.872673][ T38] [ 470.872943][ T38] Kernel Offset: disabled