last executing test programs: 6m34.304465263s ago: executing program 2 (id=849): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 6m33.229727007s ago: executing program 2 (id=852): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="dfb672a593b040c400955906b6ff0fe339c1569243107f220b28", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, &(0x7f0000000780)={0x0, 0x16, 0x4, @thr={&(0x7f0000000680)="d253ab8a967c5732aaabb815554eb74d97e8f9be76d401e5ad32bccdc312dddb6945ecfd3dfe43f39272ff10cea6da4b3a5222f591d49d9c3c500732f0dcf36ecce80014c7110dd45400d9ae4a152065ef0436bd734ca06551abb2ca5796d07916c7b0d0ed81c4367bd601faadc3935fb81f8f295d9f71f25c49d74fec18c5671019f02a87840a9d989c5a10dc4aaf8fdd8decd7d604cb", &(0x7f0000002800)}}, &(0x7f00000007c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r7, 0x4bfa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000280)=0xc) 6m23.438186808s ago: executing program 2 (id=868): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20001) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa237}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0x5, 0x2, 0xfff, 0x6, 0x4, 0x0, 0x5, 0xae19, 0xbd, 0x80000000, 0x102f, 0x5, 0x1, 0x3, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x3, 0x8d8, 0x7, 0x800000000000f, 0x42, 0x2, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x4, 0x0, 0x800000004, 0x101, 0x3, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x4, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0x1, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf, 0xb, 0x9, 0x1800000, 0x7, 0x828, 0x200, 0x5, 0x9, 0x9, 0x0, 0x1, 0x100000000000004, 0x2, 0x402b, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000004, 0x200, 0x77d, 0xb3, 0x5, 0x2, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x96, 0x8, 0xffff, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x80000000, 0x10000001003, 0x325, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x5, 0x46b, 0x3, 0x6, 0x4, 0x20000000004, 0x1, 0x7f, 0x3]}) 6m23.130010039s ago: executing program 2 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="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", 0x27c}], 0x1}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/255, 0xff}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f0000000bc0)=""/116, 0x74}, {&(0x7f0000000c40)=""/82, 0x52}], 0x7, &(0x7f0000000d40)=""/78, 0x4e}, 0xd}], 0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x3ff, 0x2, 0xcc6, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x1, 0xe1cc, 0x4, 0xbf, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x2, 0x30001e56, 0xa, 0xe65, 0x3c, 0x8, 0x7f, 0x8000000, 0xdffffff8]}) ioctl$COMEDI_SETWSUBD(r6, 0x6411) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r7, 0x80044704, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r8, 0x4010ae74, &(0x7f0000000180)={0x67, 0xff, 0x1}) 6m22.808541015s ago: executing program 2 (id=874): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001a0001000000000000000000800020", @ANYRES32=0x0, @ANYRES16=r0], 0x38}}, 0x0) 6m21.213848412s ago: executing program 2 (id=877): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7970}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r7, r8, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m5.587480286s ago: executing program 32 (id=877): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7970}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r7, r8, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m1.434144288s ago: executing program 1 (id=1243): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x34) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000000)=""/176) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000300)="99a6e6134e6b37ed5742949114eccd5823d87068298e474196f47e112901796b34393b1ee3c67ca20d1867579c3d930c4cf9685cde6fa3fe9148f65acb936433144d3de46d29d11c4205830c7955c09ae9a1edb432d80e25c6c1bb9933f4caf82a61951ee32e9da7fe6eb9fccf450c939b3c63fe67914e3d93e6d5f5105aa4158e5ad05a78f65d4c71cb15eca8af2cf32dfa0312292b17eb298a3b82ce0dabb1cfe8", &(0x7f0000000280)}}, &(0x7f0000000240)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='rxrpc_rx_ack\x00', r5, 0x0, 0x4}, 0x18) mkdir(0x0, 0x81) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) setsockopt(r0, 0x84, 0x83, 0x0, 0x0) 4m0.178317071s ago: executing program 1 (id=1247): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 3m59.865389996s ago: executing program 1 (id=1248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x5, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0xfffffffd, 0x1, 0x4000000000c, 0x8000000000006, 0x800040068], 0x2000, 0x15010}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=""/51, 0x10000}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 3m57.041065575s ago: executing program 1 (id=1252): shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) syz_clone(0x8000200, 0x0, 0xfffffffffffffeda, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00004c4000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x69870000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x72}], 0x18}], 0x1, 0x40800) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000004c0)={0x6e52d77017801d17, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r6, 0x1000, &(0x7f0000001540)=""/4096}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0x9362, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) 3m53.440325417s ago: executing program 1 (id=1262): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fstat(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000000f240)={0x0, 0x0, &(0x7f000000f200)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000150001002dbd7000fcdbdf25ac1e0001000000000000000000000000000000000000000000000000000000014e2101ff4e2200800a0020a02b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b2796e009f3395550a0010"], 0x64}, 0x1, 0x0, 0x0, 0xd0}, 0x4000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='cq_alloc_error\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$char_usb(r5, &(0x7f0000000080)=""/139, 0x8b) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, 0x0) ustat(0x801, &(0x7f0000000300)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) 3m44.285367983s ago: executing program 1 (id=1275): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x3b05, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m43.429169383s ago: executing program 33 (id=1275): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x3b05, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m41.419165577s ago: executing program 3 (id=1402): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x7f, 0x88}}]}}]}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ptrace$setregs(0xd, r1, 0x7, &(0x7f0000000180)="91c3fae89fa8a42d6b9174364e3d8ed3929bde0c92609355f68556a2b70d5320b500d7eb256466e46f5c516b17b30c465d7f0181deb1580d47853631c74c397e4b4a60350df6c3cb659c040a51e2d1eb52dc21fb8a7a8ff8c6eabb7825349c90f6396e9ad99bf0d7e824a9fe93f2d3f3d5df4f52b7c8c1e1e40efafad4b94884aecf871f856fbcce4966f806df7b30416147eb2b3a6d8bc421a4cfe9ad73079d4bd2a747ef5172421969892c24cc6ebc720eca4e0a96d9") 2m37.942269307s ago: executing program 3 (id=1409): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x10) tkill(r1, 0xb) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) socket$alg(0x26, 0x5, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xd8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setregid(r4, r5) 2m36.0934521s ago: executing program 3 (id=1412): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000005c0)=0x8000000000000001, 0x8) connect$vsock_stream(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0xfffffffd}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000200)={r3, 0xfffffffd, 0x3, r3}) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r4) socket(0x80000000000000a, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 2m34.976972195s ago: executing program 3 (id=1417): prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) sendto$netrom(r1, 0x0, 0x4, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 2m34.223266405s ago: executing program 3 (id=1420): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08831b0c"], 0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0xfd, @local, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f00000005c0)="407cc34ecfaf91bcff9ff784f5efe2b98b65532d67a3ae38f280172c19b4cd689eb823952bad42b591b3c11687f8a4be03028576c22130cb9840fd4b0461b213e4f813af5ba73e0a0a37af36c2cafeea3d3092fe7b593fdd87fe59455102fc2b15b01042dab8a31915028f6f06c46915541fb44a92fdb37b247b65815b61fcf59d1166d189876ec7ce5879908e", &(0x7f0000000400)=@udp=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xec, 0x0, &(0x7f00000004c0)="b9ff03076804268c989e14f088a82c2bee9986d4ca1c538820cbd50162b505180000001f959e836e075383c67b9c9770d8f07d0254fcf064a63ad6b26ca6e5bb848273bb2804fa027d509d7718c9acc67f191e9dfa1c698cb9c8af8245394b3290965ddd9621ad902b52298e7f7144c1c28b9126f21729b30584b29c968ec6467f2f0ff062301e336b3255acbe9d2f03ae6afcf45868760eb84d883f8d9c6a40cdf7eae8d3fe17b763f3ac86c5f51421667547d68732e4cf1e34b43cce778c3a0b9a6b1d53b9991d718b37e94f8b80c378b14df3007e54d26257613dc209baec9ffc22aace708b15a2c1ef3a", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0426c6100000000001090224000100000000090400000103000000092100000001220b00090581030004"], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r5, 0x47f9, 0x0, 0x40, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r9 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r9, 0x0, 0x0, 'syz1\x00', 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/15], 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2m32.262536054s ago: executing program 3 (id=1428): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x58, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x40000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@volatile={0x9, 0x0, 0x0, 0x9, 0x5}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x61, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/220, 0x37, 0xdc, 0x0, 0x8, 0x10000, @value=r3}, 0x28) fanotify_init(0x200, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r4 = socket(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106, 0x3}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5, 0x0, 0x3}) connect$unix(r4, &(0x7f00000002c0)=@file={0xb776c031cf86e6de, './file0\x00'}, 0x6e) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2m30.474955693s ago: executing program 0 (id=1436): socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b47, &(0x7f0000000980)=""/110) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') r3 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80900) r4 = socket(0x2, 0x1, 0x100) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DISCONNECT(r5, 0xab08) mkdir(&(0x7f00000006c0)='./file0\x00', 0x20) mount(&(0x7f0000000e40)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)='omfs\x00', 0x1000000, 0x0) lseek(r2, 0x0, 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfa41}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4040) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, 0x8}, 0x10) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, 0x0, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6(0xa, 0x2, 0x3a) dup(r9) 2m28.464235442s ago: executing program 0 (id=1439): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000005c0)=0x8000000000000001, 0x8) connect$vsock_stream(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0xfffffffd}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000200)={r3, 0xfffffffd, 0x3, r3}) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 2m27.747687658s ago: executing program 0 (id=1443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000300000000000000000000000002e00000020000000000000000000000000000000000000000020020"], 0xc4}}, 0x0) write$smack_current(0xffffffffffffffff, &(0x7f0000000000), 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m27.145301745s ago: executing program 0 (id=1445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0x6c}}, 0x0) 2m27.015847677s ago: executing program 0 (id=1446): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_ENTRY(r2, &(0x7f0000000580)={0x90, 0x0, 0x0, {0x6, 0x300000000, 0x6, 0x5, 0xf59, 0x7, {0x3, 0xe221, 0x3, 0x7fff, 0x8cc, 0x0, 0x9, 0xfffffff9, 0x8, 0x8000, 0x2, 0x0, 0x0, 0x1, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4014, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x1}}, 0xf000) (fail_nth: 5) 2m26.514216256s ago: executing program 0 (id=1447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffa}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0x8b, &(0x7f00000000c0)=""/139, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0xe60, &(0x7f0000000300)="bfc233f0017c4df78f5ded5085b7a672d4e1a2295117bcac876d643dbc6dfd05f7a0ad9d90b6a88b3c7c2d16e9637fdeec58b540735b86fd32567c6341b8fe2fc4372c6f92269f9fa6468f81cc8257e72b172ceea9922eacae90fcb0e10441d38ff0d78564df792a23086136636f3a57de02c431f910a75655435aca626da975912828880f4fdd84f097fd961c6a2a0f7162d73ca0be502c87b7e78c63ce0d1659adab13a2f92ed411ee16cb7fb816c4dcba96069e7494b5e52ea3b966791df53eba016fcdbd20a6826062c7dd76122c"}) 2m16.666989415s ago: executing program 34 (id=1428): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x58, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x40000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@volatile={0x9, 0x0, 0x0, 0x9, 0x5}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x61, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/220, 0x37, 0xdc, 0x0, 0x8, 0x10000, @value=r3}, 0x28) fanotify_init(0x200, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r4 = socket(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106, 0x3}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5, 0x0, 0x3}) connect$unix(r4, &(0x7f00000002c0)=@file={0xb776c031cf86e6de, './file0\x00'}, 0x6e) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2m10.845005684s ago: executing program 35 (id=1447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffa}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0x8b, &(0x7f00000000c0)=""/139, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0xe60, &(0x7f0000000300)="bfc233f0017c4df78f5ded5085b7a672d4e1a2295117bcac876d643dbc6dfd05f7a0ad9d90b6a88b3c7c2d16e9637fdeec58b540735b86fd32567c6341b8fe2fc4372c6f92269f9fa6468f81cc8257e72b172ceea9922eacae90fcb0e10441d38ff0d78564df792a23086136636f3a57de02c431f910a75655435aca626da975912828880f4fdd84f097fd961c6a2a0f7162d73ca0be502c87b7e78c63ce0d1659adab13a2f92ed411ee16cb7fb816c4dcba96069e7494b5e52ea3b966791df53eba016fcdbd20a6826062c7dd76122c"}) 42.231550295s ago: executing program 7 (id=1654): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x6}, 0x18) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9055}, 0x4000000) syz_emit_ethernet(0x22, &(0x7f0000001b80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @link_local, @void, {@ipv4={0x892f, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x2, @multicast2}}}}}, 0x0) r4 = open(&(0x7f0000000040)='.\x00', 0xc00, 0x48) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 41.036838145s ago: executing program 7 (id=1658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000) 40.542143588s ago: executing program 7 (id=1660): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 40.424532766s ago: executing program 7 (id=1661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000180)="a9", 0x1}, {&(0x7f0000001980)='_', 0x1}], 0x2}}], 0x1, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r6) write$cgroup_devices(r6, 0x0, 0xa) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 38.963801521s ago: executing program 7 (id=1663): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) (fail_nth: 2) 38.443993927s ago: executing program 7 (id=1664): sync() r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x7, 0x0) close(r0) sync() r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a00000000000000", 0x58}], 0x1) sync() sync() sync() sync() sync() sync() syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000000000009050a", @ANYRES8=r0, @ANYRESOCT], 0x0) sync() r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x602, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0x0, 0xb, 0x1, 0x3, 0x4, "1c214fe48660a23556ef99a4477283feed5f28", 0x9, 0x56}) sync() sync() sync() sync() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="f7ab0a95a1f485279b4b0f51c0cb8ea00831b6f4286ba514fca7fdd1a352a2ff80a73dec7981afa3c727984c9e009e10b290f14fe02027fe40f5b787b69c085ac54d931f293330411d8c4dc7d3894efb206c5055534d6307e2a897106a890921ba1106abbaff5cca42a74a0f0fab3c391f5424581dfe2a62caa1a6284e6bb8fe54", @ANYRESDEC, @ANYBLOB="ff209fc04af225cae53feaa512bd3567de1c4343b6684d8fda3ccbe546f4e3f424f7372d1a4260f1b9f88f38919ce27cab5460f77ad3e0d315d4625137b4e14dc170294a0e32f45a8484c4c6834dede81be7a5647910b91de1bdcef0e01ec0a0a66ce1da087742ff520030b52b7cb2965189d1e00066dbd8a75b9734b83425eff347d29b2f571e844621a41138a9d9b44e1df17a9014cee48878faf64c1dbe044fd6985f76572dd68b7492597e6fe8967819681377d92559838199f3bf3494174b3d7559c51436a38bc997328faf30af15c7e35f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sync() sync() sync() getrusage(0x1, &(0x7f00000003c0)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x70) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000240)) 22.814211468s ago: executing program 36 (id=1664): sync() r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x7, 0x0) close(r0) sync() r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a00000000000000", 0x58}], 0x1) sync() sync() sync() sync() sync() sync() syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000000000009050a", @ANYRES8=r0, @ANYRESOCT], 0x0) sync() r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x602, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0x0, 0xb, 0x1, 0x3, 0x4, "1c214fe48660a23556ef99a4477283feed5f28", 0x9, 0x56}) sync() sync() sync() sync() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="f7ab0a95a1f485279b4b0f51c0cb8ea00831b6f4286ba514fca7fdd1a352a2ff80a73dec7981afa3c727984c9e009e10b290f14fe02027fe40f5b787b69c085ac54d931f293330411d8c4dc7d3894efb206c5055534d6307e2a897106a890921ba1106abbaff5cca42a74a0f0fab3c391f5424581dfe2a62caa1a6284e6bb8fe54", @ANYRESDEC, @ANYBLOB="ff209fc04af225cae53feaa512bd3567de1c4343b6684d8fda3ccbe546f4e3f424f7372d1a4260f1b9f88f38919ce27cab5460f77ad3e0d315d4625137b4e14dc170294a0e32f45a8484c4c6834dede81be7a5647910b91de1bdcef0e01ec0a0a66ce1da087742ff520030b52b7cb2965189d1e00066dbd8a75b9734b83425eff347d29b2f571e844621a41138a9d9b44e1df17a9014cee48878faf64c1dbe044fd6985f76572dd68b7492597e6fe8967819681377d92559838199f3bf3494174b3d7559c51436a38bc997328faf30af15c7e35f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sync() sync() sync() getrusage(0x1, &(0x7f00000003c0)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x70) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000240)) 9.198693765s ago: executing program 6 (id=1728): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffe, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 8.908294251s ago: executing program 6 (id=1730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005880)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) memfd_create(0x0, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000017c0)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0xd7, 0x40640) ioctl$SG_IO(r6, 0x2285, &(0x7f0000001900)={0x0, 0xffffffffffffffff, 0x5, 0x3, @scatter={0x7, 0x0, &(0x7f0000001880)=[{&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001800)=""/97, 0x61}, {&(0x7f0000000040)=""/28, 0x1c}]}, &(0x7f00000000c0)="dd2065d52b", &(0x7f00000002c0)=""/2, 0x0, 0x20, 0x2, &(0x7f0000000340)}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) 8.880928607s ago: executing program 5 (id=1731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000043000000", 0xfe60) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x1, 0xfef, 0x10, @dev={0xfe, 0x80, '\x00', 0x16}, @local, 0x8, 0x8, 0xfffff801, 0xf}}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@cgroup, 0xffffffffffffffff, 0x3, 0x2008}, 0x20) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.912077394s ago: executing program 5 (id=1732): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x15, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() fstat(r0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) 7.867603515s ago: executing program 6 (id=1734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 5.461138283s ago: executing program 5 (id=1737): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000600fe880000000000000002000000000001080002000700000008000c0002000000140005"], 0x4c}}, 0x20000000) r3 = dup(r0) write$UHID_INPUT(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$sndpcmc(0x0, 0x0, 0x16d400) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000001880)={0x5, 0x28, '\x00', 0x1, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004801}, 0x80) r8 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000001640)={0x1, "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"}) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r8) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) io_setup(0xfffffffb, &(0x7f0000000000)=0x0) r11 = eventfd(0x4) io_submit(r10, 0x8, &(0x7f0000002600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x3, r9, &(0x7f00000015c0)="a5f47343046179871f4eda21f6aa637be4c5ee5b684f3c696d61f49c1452c52ff99ef20b851770482169680a6fe7df835a02a778d65229bb19aa1f97df0703edb11b03f5a728fae8b74a32e9d3ba449d022f78a4955dd85b7c0b13adb7e9e1b278041db047147cc436af3ea46af8b9142a1057a03020", 0x76, 0x5, 0x0, 0x1, r11}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x6, r9, &(0x7f0000000140)="200f104d8f39611ad7273b4099b4cb459abdfdbfe460552230de06cad96f80b2805d2093f0696283008404f69f3787e732e9fe2f8cf332839e65e298cf5288cb4f96ee61088a6cabd648c27ea397c81d24ff7a66310fab1a1c690e173fbc23b880c20de7e0de8a9593863adcd1bfd89cc19aaa31f361ce43937bd4862e4f1095952cd0b01118f2aee2f916df45c6b64308e1e4b35976cd", 0x97, 0x2, 0x0, 0x3, r9}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7ff, r9, &(0x7f0000000240)="66ba06c249b10e8c74dc1ef823a9458b3254384ed52de2d6734979736cf681a3687357bcf8ea1b4889585c3fa68ed28d62b0fb1234fff3de0f98796f", 0x3c, 0x9, 0x0, 0x1, r9}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000300)="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", 0x1000, 0x49, 0x0, 0x1}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x8, 0x14, r9, &(0x7f0000001340)="059549184844ba9a36d04a0749fffc12911fdf229ef4afd3d650e11c22461058fe05153bebb1e5dd3f3c1f1df5b7850cde9cad92ab975a3b153be52182b5e0199e01c22055878dca29f4f1d99fd61f426b309a0179c867de4997578ba28717a9b918ccb16cefb4c29734ba4cf0e8ddd6277d6d824a06ed0d4fb9d698fb5e3b46baf8fad7915131bf70eb78a73f36c6e39fa28f8e217ac5c8848f67e4f5d20e3241e3df2c730a039b8679", 0xaa, 0x8fde, 0x0, 0x1, r9}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x6, r9, &(0x7f0000001440)="01550caed580c1f7c4f1e0a927fb5e16685646d16f39903d2995a7cb7cb5f1b7df81c8db8f6594267324e771454b39832c000ab6cf79cf5582878758cd33426785c2e3593c93ad44568dfe05a382548dcc951dda8fb5e1c60c0182ad1cedac0bf711ee79d4da9328ff6b4d1b7d83573a094079418c618da818d3e374eacbde3527131e1fd1ab1ff941d2018d83af07e999fa52cfece8f9e196c02d", 0x9b, 0x3, 0x0, 0x2, r9}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000001540)="30c8f654a9d8a5a0636f1909df82777caf827d0300", 0x15, 0x982, 0x0, 0x1}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x2, 0x5, r9, &(0x7f0000002640)="b7fd13650827502b6a82c1b4939ac5084415b3682e736838e17db616cf54bade5248db5aacf5421de7b864c05f9c3e0d3b133d675b9fe6437088b815314c1872a85d25128deb17f7dc840c2d8f6cbbc8582ad675367a7ade7c408e2338a03342ede18cbbed351c4c5d36d899c70da2172facdc5d142a81c8ef1d3a847ce2bbe5605ff3a330a4759e1999a4ee3ff0844e4348ae3cdc4aae68128c62f7cca4bd4f221c257b64948f69fcb438e02ca8683819f0da9378a34b95cdaf04fb2b1931f28bdca9b56d100e20b1ce3a585e91f28c360a3af82663c98092b459b5f2b8c2c3738dafe4eee08584f1cee9f921783ed0d8043f06348389484d34c805309615532e46451640497955f7f7552ac21bd9cfa3a7b1d5fd3ce29d1c525f97dc110748534a03c1b7e84a00343fb8fcd0c84e916fa3799bca976ee95c1d7f4860012ccd2fb5d806ebeb07cb394397ea56152c45e6b361c09807c3190e9b16ec727068ff171834bbb4b752ac41483a5d621e2423fe64714e2694fdedbef8382ea576e322d92771cd3dbd517c27058591cb4d52f5759e88884afc202b8fd17825b71a80eae36abcd2234e90f9a195b962018274371e789eac03bd61c3ac633afbc386e5fce55e4767917d47cee95a7c991805a9e6d451e9aa371a2dfcccbdc64b46d865cd205e09a54541e04cd7ccbd992e344424501ca683c762cb506327f6fc17414aeaf0d1461107c207395036cec357ff83fd4c10dd054344d9027ff758e20814653224bd8ed88060dadf71c5667aad0cdafe9cfc23a9611a57630914c13079804acc42abaf08343a45cc931fe2e4c2b2b7aaab67ad8b28b5407709ba4b9af7754ce342fa1869e8e9332d9bd050aa863879ac15cb80622f1cf03329f75e09b21cfd766cdabf1d4469b1e5a523b997cae4831e36178ecd6c2401c205df1bb7dee4c0fa539bb0167361f3fcaf9cff089172e3d814badff34d9d2c0c3930b9f20335c46118aa338be21f0abef984fd0208669e15a8c2bb5c92134536ec24dff87bd4ea0a46c7f51a4eadb8479670ab063ccb27a916ce9ae5f0f3aaf2d93ac4893eec83674075970b1757ccc8059b0722a5807964dbca64beb55357d4e85432f9dd89f20edaf6c54a1652648bd1ba50b673fba19b3c5fb5b43c49e16c93ca7a59326fcf4d8c4ce0118ae79f4832f30de3a9b75123d081b2e38bbd8292005c25127ad805e5f0f07eeed4a20a376e5fe50eb6d145ef8af4d015a6cb864f7ffb682cbb8e80ccf6198d384a7a1d2573e2f42fd101ae6d1ae5768ab5b2530e03256b1999f7b2b3d30f1d79b874ef3a059cc972cc0a29a7adb45c481e367b0198c5897279f971faf0487593aa9f4a6d54738e1b112759c3c68af85a1fdf0cc8b731b2a378eb89773c1a90f91ae4906c3c71b5aa46ceca60a8cf4f3f166ed848190e956220bcb50a13d3a1bd3481ed4c88939dc60cb224a1dfde229bc8791a782b4096cba98b7c5fc22232f63bfc22412f65ed4afe876fc65fc3a0fd64434e30489705968ed9c8c1fa4505fbf61c96b9395063a98d7794206932d0a8735538027028ef2524f3a242f41693baa692f7d3c9ce1f7c12fdd652f6cdf6c132aea58a2fc641ed221b0369ad18cc507680aaf715e6761539958c1dc81ac2ee53a2dd263a35126daf1ccdf119c9eeaac4fa7ee62de5092ecc50a15d1a819a462ef9ebf9f45137c1e719ee6ca1c61e4431526317d2e8700faaf2a687c671aba5af9bd37365b27d40380f9ec59d86a83dc3d0c4b2ec70c97d88fc09bf8ecae8fd1d1ba7964b5829938e07c91dfc59e5c3a1096b87e5181727d40495cac4f2c6ee5b608d277c4186a0fcd1133c4c126a04bad23814fd29429f3247a025217e7fc50a80320e660f5e691fe991b58e54ddefaa1d8be4a1f49d4262b682df8f942bf5efa00f70f3fedaa29610ded496013de7003f1e3d9d774b95a59d587d0d59d5480efe66e027fbc7fd05040cb048bb180c14973976447f7db4e8c3b740c963cd089a58ec3dc19040a98509e31869a92b4cd6f2eb10194818bb25013f9e73cbad7968478d7f4352f88406d136924d98706ee939305a58da60ee922c08786071dcc40fb8a2e3123a142b9e2abf9da053a9f61fccc146565ae24e41e67cb9ab13105def17dec7d7578a63743aafddceac43a0710d55ad3315caf69eb8ae77d258a104f91c0b034d6e8a902146fe85133a85718ea5cee29a0a5d97c85594dac7456d8ae3c79bef46afccbb8abcbfdd3fb17799aa9bed6e801bb9a438e9493a85de94f45e8266a4f33657beff17c095b231525f76dcec980491c4e654bab2beb3b89c06601bb8497e3343f52022fd1aa040501044304096451546c68475cb6b74e9b97c5062c7820e4a160c8eb184b186ce5ec3253111268e2539ce2119294d4b39529fa20ef55b39096e3dafc84333b50686540b5f1a574d62cf0a82dd242d60445aa21d8ec360219ac782099596b6912dc15244bab0b7ca89504dc12a4788b76342fd98fdf3fb7c68c8926a0fd7968399bed5586dfd0cade18557b41697ca5f68f3729a5c074aff6ad6b20f8c25503df09cd3575d33deecbd7e3483c7cec5f6bfe0350d62193495184b95a7671a32606f82315ba87a87600f2d54b7947b4da728ae94b4523139c6aaaf48ac010745936aa136feca0a4bbc0b5e2cc294e285877920aec0040369da8a31c1b868f7fed11dbc57d89930b572c0d2753cc0471e981f055a91763fa6a5a37f65af162b5ac052d8639adb476976ab8c78c210901446b1c34d6335a1052569c7d0deffeebf4e892153dfc04c92d2849f14db0746508d8a4f9452713f42521560d50f8e8d6ce878516e3a560507df9e4faf46c1d65f195e365baa31f871470a32d556a543b132e3af18f0840e0d449424ee93a9ad4a623012261de6ec415fa5668c29eaa9e563cfd7dcabcab65f245f5869df180585c11ab4ac8cf941461800e91c5f43656f18a0b50001cea96f8e77668d7b2320c64671cc7148396f52dfeb72a18f67724afaebc91fa20aff644e91a04d015a78d99e356f9b520ace57ba479c7f73c11af5bf0deaae548ee69e743722f9164c42be443ea8a01e748876653f7c5d31fc9e86d010b9b0f67ee5bfc15f48b74ff950b038554636e600803b9fcd6a8c9083a5434699113a2a50cda696ea4f1c8a91bea177ea8f826f970acac61679bf36d822e791de9a93c49207855898dbe44bdbfa0256a1f5a1d102d81351f5abdd60cb735c2e77215b8cbc58869781d853ef7ff28feb85825226e5df4717b2d1d3b6d7dd6351e8841d85383d3aa42fb0e9694d180929be72f46b6e2ad7faebe262fe76ce96b3836df9673cb00cd0684eab47a7cb1cd25a9e4efdf5ca25d85709d19c53baa35f044725df46461d33654226b82632d1b3ed5e637ca954ffcf2544b0d926aab5ca3a08c6f986e8ba14387c1f47418611b4a042f7116dc37cb6bfccc960317ea32dc66f034998fbe985929334f2ad4946af7fa46d0227b7ab6970a7f4b8563fe31bd98b4400f04c3c46fdfa2c2072082dbc6647d13e2dbaa730c8ab088481908fbf3441681b9f4c7c8b998cb6807df7bb0796392b0a0338ad28d7fe8bfa7635bb542e058f7d196b4ebfde6e6eedf0dfb90ef1c585902ec17def5f51b753dd3f41180cd861137378b2cbb6c6acdafd286beda07cd78fc57b8f4f0404c077f7ba00827a2dac4b70760a76499b2824d5d6e7f5e9df182a5faef816023ea4508a58feff82738ed20b020ebafc459d7b4a9e1cd4722a640bcc87a6c29af16b11610c95a18bca092d3209795e288e23c9deac6cd07fe795bf3acd01bafe54db63acb19fb26aa044c6bbdd51f31d4c48ed81f7c414fa37b83db8eadad4f834229b65f74332789f4778028b063c0abda94f3030dd198b74de4ece470684e27d6dee3b68c83aa7159b6025cc2ede52c2c154c740d4cd67d560dca415b1bc07f7bdb21e04c7cbc0472faaefc3fa0c718e4d844b276d109b65eb8ffe540a1c296bfef1933425521f2cf0d65ed458673f7bdc49117fb72ba88f48f81d3d3ec84575fd85fde4b9498834416a974ad3282be84f9b72fa10a2771cfeae2384c8002126fbf39731045f17446cd482e6457aef562d24431a438381d59a73b25219c18cd0fc7458adef045990b09d48072bd572835bb8296a365313803578580a0365418b8d9a98755fef3d784ed170469d6909a99b822ec983fa50b99d3990e0b6a9fceee99ba72457c95b1f17fe83d51e3f171fec49cd37ab3190db1bf1cc025a2c80bb97cff9e6fb1822516e6537895c3e0002c4af754c1c687c9f260923a182eeab1b22f3d36b6d9a3d6b1ef8d88d9b444f3bea6bfc64b346702e4a56629b2d6bb46547a4c32f42479ce066dcdb3b9b0816568c71fac0f08c99f16b1d900505201247005ed9a03eec6d10aae7459ac9d854fcf57a7cb8eb5082b43f44a34473aa26b6e3c6d12d4e3fa8069a18197243a66e9014ecd3513ff6259dd59a9600d6a4cca7aa0b648432505ce3e80deb641ecf8839abf99cc49b9080301f7518d8562fd932fb52732aedb180c0cba6ee63804d0069af6271806a48ce55a2ae7f695da0a8aefa26db2dc8066dde8ca93c9f9bb3ee99693439c3f9caf3c02be4852998b93182304d5563d836fb99094efa466182bba485757c65b67affb711a83238445b93db65706014fe8708c165e1e77594a03bf308a4eb988068d2f5a8d7e3b362947872d74f6340962be6b7a64de268d738285db478d5a048cdbc7a2f3524e1bf7d858444c7d9c2fb98a1355190eabfe457e2d49cc89ead6ea6c1cded4ffdf756d1d012af147e4383ac97b25e2f089d50e439743b2eed3f3deaa49495986c248f6c116d81a721f9a35e221573336fee671520a8f1bb8a1bb0dbdfa4dc054b2a2d644585bea8de560d23c4c29bb7c0eb01821829ce6d4c83cd64ce7f6fef2bb663a273fc5d469475df818d3a292594c5e34df7d5d23d411eb14adb07523efc55602783eb0ec2e229c7525aa45d74ebb1ff0b3c8c3b5ab88cb6ecb731116259feaca20d483f1deadb55f3f24e8882efd0a24d042f5e9439e40e4f40a6faf6c29d1e918e258eb0c94261dc88eaf42bad02f379b364bba4860e71260701a8734f3c9558f3c02dae5ed0b86a1f2adf66be8120bf804a33b914f52b7837c73f75326cae8f7305c770330c48ac11e0c6c5dd983ba60cba7dac78328af3dae208c0ca3508054a8019fe5d3086daca0b7071d3082da6c29dde7c6711853d4f8d330439740f7a5d2007ca5cc9071deb898b21a0140381613bff3a61caa690d704063efc33952839fbf09f9a9bc3756a689788626e5dd23288e93098d36c051f62d5bf256a6aaff5a1e136c2736e0d2ec4153ea21b25e8602ee5ab867db948837a1a764d42e0d93e38dfaf84a53d37ac83d8ffc5da4bad0bbdabb09e5424244995fd08eb4d704afbff5639c102eb7c2ecc5036955d510d2bf859c873c20c559cb3ce7a5546bc24fce3b211075f456dc01050a3b9b0bf50fd7935a914154ab82131d3119e02dcb49be5ba93ce127c34399ca926eac60de9827ca9b308b3751ba1b9b8aa783f2cb318e40ae0ec0f5e70ab802fea29a26d3162fef8ee9fa5fd4354f94094539286b32a0765b73e63a92673a11e1dc41dccf24ffae9a578cb70c9ead9d98919f6e5d394114f7e7ee4763e4236330fdb4d17ce9c7429ddded8856709000104adf1da6f3fb42f0a2a3b328f1b929645ae8d808a58e65d6b52724f4eb20aca6069d0806a6e1ed7c30194a1", 0x1000, 0xfffffffffffffffe, 0x0, 0x5}]) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xc}}, 0x20) 5.326084559s ago: executing program 8 (id=1738): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000500)={r5, 0x21f}) io_uring_enter(r0, 0x68be, 0x5002, 0x4, 0x0, 0x0) 4.56204342s ago: executing program 8 (id=1739): r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x0, 0x12d}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x20040000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x22d2, 0x20, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r6, &(0x7f00000000c0)=""/138, 0x8a, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) 4.441583735s ago: executing program 5 (id=1741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$getown(r1, 0x9) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xffffffff}) 4.270122032s ago: executing program 4 (id=1742): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711066000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0xfffffffd}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1010000007c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bbadd809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'pimreg1\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xa977, 0x6, 0x1000, 0x4, 0x3, 0xad000000, 0x100, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) mknodat(r3, &(0x7f0000000100)='./file0\x00', 0x8000, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r4) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x24, r6, 0x9a57f417f74fa653, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05a108e2ffffff0000a6542f8400"], 0x48) 4.22703796s ago: executing program 8 (id=1743): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x0, 0xfa}, 0x8) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0x65ec, 0x4000, 0x3, 0x800000a9}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000580), 0x0, 0x24004004, &(0x7f0000000100)={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x8, 0x6, 0x7e, @mcast2, @empty, 0x8, 0x7, 0x404021, 0x18}}) r8 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r9 = fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_DISCARDURB(r9, 0x550b, 0x0) tkill(r1, 0x203) socket$unix(0x1, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40488060, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xfffffffffffffffe, {0x0, 0x2, 0x0, 0x4, 0x6, 0x0, {0x7, 0x2, 0x1000b, 0x100000a, 0x3, 0xfffffffffffffffe, 0xfffffffe, 0x1, 0x0, 0x8000, 0x2000002, 0x0, 0x0, 0xb, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000340), 0x50080, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=0x0, @ANYRESHEX=r3]) 4.09906669s ago: executing program 5 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000ac8000000060a03000000000000000000020000009c000480980001800a0001006d6174636800000088000280090001006c32747000000000080002400000000067000300f4f03b0200000000000010116b61979ea785b5802b7fbe77f456e7b0b2faf3b01b9f982db612405d70f33877d55e604ed56b00fe56e6c1f54632ec3c2633cf4a24af3c58ee776bb93495db96aa0cca44c600f1fe45a5a348936f2e5a1116b10000f0580008000240000000000900010073797a30000000000900020073797a3200"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000003c0)={0x1, 0x0, 0x101, 0x6, {0x9, 0x3, 0xf}}) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000d80)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a17010038c1eb44279a8e72a4cf912806", 0x3e}, {&(0x7f0000000740)="d49d34126760ba3d32ff8845c013009d49376600fbffffffdcea06454d79a2b78e26f169005d71eb7db0f6678e5ac4c64461e72cb2c59f9ce81a393282b753b0048c4304f0e6b98900cb3a3653f8d0d34992e6a5bb2d36e5f874bdd907519983c899ad2bc330d784bc27b0c50a98d6b05597f13174bc21f6a921753ee4b9e53087153b7c7aaf25", 0x87}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}}], 0x2, 0xc0) sendto$inet(r1, &(0x7f0000000180)="9a4de52b0a0b92444696179d8920b588fd6074f5ddae00a370c5f1fff5ed31e33a89da740194951ec2f92383c1ae6d08e341f79b66e2cb24ccf74ed835c1acdee08f4e9661d1d8863831b52e080000005372f66d558c8e374a845a7e026e5a1c305d", 0xfffffdbc, 0x40, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0xe02, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8008}, 0x40004) 3.847636525s ago: executing program 6 (id=1745): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x34) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x69) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000000)=""/176) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000300)="99a6e6134e6b37ed5742949114eccd5823d87068298e474196f47e112901796b34393b1ee3c67ca20d1867579c3d930c4cf9685cde6fa3fe9148f65acb936433144d3de46d29d11c4205830c7955c09ae9a1edb432d80e25c6c1bb9933f4caf82a61951ee32e9da7fe6eb9fccf450c939b3c63fe67914e3d93e6d5f5105aa4158e5ad05a78f65d4c71cb15eca8af2cf32dfa0312292b17eb298a3b82ce0dabb1cfe8", &(0x7f0000000280)}}, &(0x7f0000000240)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='rxrpc_rx_ack\x00', r5, 0x0, 0x4}, 0x18) mkdir(0x0, 0x81) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) setsockopt(r0, 0x84, 0x83, 0x0, 0x0) 3.781595187s ago: executing program 4 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004a80), 0x0, 0x400c0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x7d0) 3.756311295s ago: executing program 5 (id=1747): r0 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x40, 0xf, 0xa7, {0xa7, 0xa, "ea72a54b4ae1057aa2e9f2a0155b2a149219baafdf01dafa2a67cc459e9a480b1447d4fb2d80f4756dcebb356304bd9d536f3d0def265db168184009fa0fc47854437d0e3b563f2fca31404e775e7498cadc0dc0e4d69ae8161353717a573ac130543432fe7a2693659f884c63179b95d366fee203cf41d65a940794906b8df521267193ccaf671ee02da3e398a0c6cce3e37a16cae867f2f0c3ccc68662f122ed1e67ded0"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f00000018c0)=ANY=[@ANYBLOB="000f0c0012020eb4ef7f00000000000000002880d0a04524b5fec0ec418abbd28d5e93f1406c941630b5c22408d37c3c0ba2dc1e1845b86b30dce180c32fd9cc3c4dfa69dd6d32088d7c71e6768aef48e261855a01924fdcc5b7dc624f8b92ec0d04837f8d293fe21d4abfcbd040e272eef584408b8923fdd848d408ac343a5814275aa11f"], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x1, 0x0, 0x6, "a90dd495", "565b170d"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0x8, 0x1, 0x40, 0xf8, 0xc}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x16, 0xa0, "1155ab3a32bd2d5266894c7338bd8d1cacf8cc362549c563a7aa3db852cf5810fad139cd4cc0920e86fbc854044c6d571487e53a1313d80ab59862ecf46d580c51565aeff171c4ae862b172c39fc1fdf158d43706b416cbc9c11f67953401fa1786c8f5ceb319bc5aca4628ab4450dcb124567678200f1d853ed24b450e3fdf9eb434051f1c15341457f384e957333f70246b45dc70e2fb1a5846096cb7a13c3"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xae}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x14a1, 0x20, [0xf0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000480)={0x40, 0xb, 0x2, 'Sg'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="f74ceacfe77e"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x19, 0x2, '7q'}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x7a}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xa0, 0xf, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa, 0x4, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0x8, 0x4a}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0xe, 0x4, 0xc0, 0x20, 0xc}, 0x9d, &(0x7f0000000800)=ANY=[@ANYBLOB="0504b32201461003db7669063094a886a39b857dc28671f168949b35fd0ba61f720f5a78bd6f6523c1b021b3ab7ca421124e9f2eed16cfc06b27fa197767a5c80bac78ebad167c49b67f910b1001024000810906000f20100a04a5c5feff0ff00400303f00000f000000c00000000f3f0000003f00001c100a3f040000000f00470b00807f0000c0000000000000f0000000"], 0x8, [{0xa0, &(0x7f00000008c0)=@string={0xa0, 0x3, "039d378192c30612f41f000d2187b7f07bffbc076dda3ea2c2e1e4b839959dd84a3795ec5cde8e42319e76179e4c9ba64527d90dcbbc2e0f71defa6607fe664f019c9246794c3e74847a4920525ac57cf13e952675457e0a5ab87c71cc332aaccf31054627fe7b24e80d0e221f4f99d114552ecf0a801dc5093bcf53c34075652830a57fd04db7cfcad5c1b0c49b73146a5d8117991b130b3d2e21979ca7"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1404}}, {0x80, &(0x7f00000009c0)=@string={0x80, 0x3, "78fae290537bbe7b2ed8b4c01c73643438a8ba06d084d1e385e88027572b597e4d280c16956b9053cf84f9389e8145ebf852d30c1a15d11ff31ddb4373f465803cdcf9518516a97f9bd7fbe1fff8917fdbd66f17062838460b6a959fdbac686c8d6d95e6174ff6a085fc84458b6ccab7cd6558692a21a4979056ec65d4ac"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x409}}, {0x3e, &(0x7f0000000a80)=@string={0x3e, 0x3, "77126b1207d3f2fa95cbc754b1b7203e72862ed567460c4337d3c0a58b0365d886f0c3038458a85e4da7172d80dfde0a0841baf576529a0ce9426ade"}}, {0xc5, &(0x7f0000000b80)=@string={0xc5, 0x3, "81588a17e04e860275e52a19a1b6a8c3da1f4fd6dca0c0721cb9fb06477672354fcfdde5a00aa391fdd883765265d2d6e91342587350d805430d24b496c760a753853a83344df3c015b3c0d814f599f96b7bec42ffb3739935596a33674ff9ff292dac0ee675677cc9a8d767333a7ee651cb0901743374d5c3b43c9108b2e36db9feb65a75279b9f33954545bd9da42c25f9be4884a7ce2b01f322caecc85d14180ede7ea6ad7a36b5f82a573e09c23d0e1895fd7e596fb3eddb2f7e6a57b7bfdced78"}}, {0xe1, &(0x7f0000000c80)=ANY=[@ANYBLOB="e103b7e8af8c5b4837a4a5ce3c84f7c71a514b8a0e5c8ebc443178740ca5ae67ed676983bfa9237fbc6df975898dfb84161cae7041c6173ba26696fa834177fde32cd8afac234f9671b828afcc8f20033c2c1444a783a1313f034469204728e4a75cee818d97f56c4e74d884716c702c1a57e2068153cd97a4bf9753db51d87ee995570f9ec6a12562fa8a5322b63fca5c4c6fe5fdc0cffa334533ca7fd11b110a34915f3e953a862a8f6f64515e528eb6c21e4c947e9818f7d6f2fbbc288a190e4f87e100e25e28a559efbc8f1d87047ebcbc182d77d699385b1f5bfead7f65f8"]}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x445}}]}) syz_usb_control_io$sierra_net(r0, &(0x7f00000012c0)={0x14, &(0x7f00000011c0)={0x0, 0xe, 0xa5, {0xa5, 0x5, "f148fa5e466ba873f3f159bd9f531bd7e210a49fd7a4e704cb7e53b41bc84e577371c7dcd63392961769321af9fcceead263343e34141a5637e10a8ecb50510f5fe6ec83b1d0cf1eb45ad3422f7555fb49307db1514a5141a32509655e1568234fb02e9bf5034fd024b5d070f2aa505ea9fb9f8193754a0d9429cacae8b8ffbf807f7846bd1033f9bbc2d078f948b7e734f74a7f3cad13022709f1330b7b45ae640b0a"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000001880)={0x1c, &(0x7f0000001300)={0x40, 0x18, 0xbc, "9b2d859c7a3792589d6df11f491823855b2e6d1e41ac7ceee39caf596c89149df57f09c2c42d0ce2ba34e7932ea3b631ba169e1b1e2333b8b54cc6cdb95da0e743164cccf6cf75fe536c6ef0f049fc1363cabea67b9fa7e32cbd18696e83abf3e09f8644c650fc70c3f4dc6edcd7d19f402e4478b12c465d241d3488e85d4c9aa2d9a68de46f6ac89e2a300ae09fcf20f531ebbde21a642e5f3be217d3686f94a63872f33d6a46dadf8f06afab023d576851306034ce510bdab14fba"}, &(0x7f0000001400)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001840)={0x21, 0x0, 0x2, "9c19"}}) syz_usb_control_io$printer(r1, &(0x7f0000000f00)={0x14, &(0x7f0000000e00)=ANY=[@ANYBLOB="2030e0000000e0050d9311cd9b009f5aac40af3b987f29d7b3fac8bbfb6377d5f4c5a8dee05fe02441a53866f7bfacd126617e7394e47c7884dea1448a1355d4f6f055903aceb30e7e36e8fa83f1e1d37cd59a2f425c47fe26506fa74ba94ef1c5410839816bcd2f3a1ade96f3f637c1e00bfb3459527e75ca97f5ae6ef0eb93c2423323f9d226fbc94854f0c8d479a4891eafd4ac76aec8d90dd1c72a18f67f9a7a7dfec4af397ce2de3a978d505ec15410176286a3f620531956aebbd17c504a5b45dcb0f95fdf3f4137ff5d3148c0f7d06251b7676af181f10ad0fdeacdc0053e159cf1"], &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000001180)={0x34, &(0x7f0000000f40)={0x40, 0x10, 0xc9, "4740ad32d991425ccedd15779570c36e460f767b3c4fcfa15b46387c6b90ece1169586010fd6620ee9d2b8ed7bece3d569543ee29603aa6a3a0b667b848c061dffeebc0ec5ebadc4482c6b3cf1f89587625c48f2044a0bcd21479499fd0cc226136f8d2cf5a4cfafab540487f91b23eb9ed8dfb8a06136a0529d517026109b6bbf12a6b14441c2d03c9ab7788bcbf28270465c9cd6596e536b65b3e067cb9c855643d807e583eae55036ea76120ca84b1b84ceab57f1a52bbdc9146f7dd8e84872fe3dd4ba64a269d7"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001080)={0x0, 0x8, 0x1}, &(0x7f00000010c0)={0x20, 0x0, 0x1f, {0x1d, "50b22a24d2e430abb16319b4134f424b9da274bd82219c561693866f49"}}, &(0x7f0000001100)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000001140)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.78740136s ago: executing program 6 (id=1748): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001801800108014000d"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES64=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009041800010300000009210000000122f80409058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000480)=[{0x40, 0x0, 0x0, 0x9}, {0x50, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x8000}]}, 0x10) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.565975979s ago: executing program 4 (id=1749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x500) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, 0x0) 2.565603621s ago: executing program 8 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001280)={0x1d, r4}, 0x10) (async) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c0050014260360ab1208000f0000000401a80016001100014003000300036010faccfdeb1d40696d936980b925b35381df6486338260de280e900094007134cf6ee08000a0e408e858ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x40000040) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.330958213s ago: executing program 8 (id=1751): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='iso9660\x00', 0x801128, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080), 0x1014000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_auto}, {@xino_off}, {@verity_off}]}) (async, rerun: 32) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000940)='./file1\x00', 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1\x00'}) (async) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000280)=[0x0], &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x1, 0x6}) (rerun: 64) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000880)={0x9, r1, r2}) (async, rerun: 32) r3 = syz_io_uring_setup(0x4220, &(0x7f0000000000)={0x0, 0xd01e, 0x400, 0x2, 0x353}, &(0x7f0000000080), &(0x7f00000000c0)) (rerun: 32) r4 = epoll_create1(0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102600000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async, rerun: 32) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = open(0x0, 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000500)={0x0, 0x1}, 0x8) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000001c0)=[r4, r3], 0x2) 2.215567306s ago: executing program 8 (id=1752): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014"], 0xa0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x5172c31c332ca448, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r2, &(0x7f0000000480)="b3777e", &(0x7f0000000d00), 0x2}, 0x20) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.412657699s ago: executing program 4 (id=1753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xffffffff}) 1.16048285s ago: executing program 4 (id=1754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000040)={[0xc5c8]}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r4 = socket(0x1d, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000040)={{0x6, @bcast, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) listen(r5, 0x1ad72f7) accept4(r5, 0x0, 0x0, 0x80000) r7 = accept4$netrom(r5, 0x0, 0x0, 0x80000) writev(r7, &(0x7f0000001b40)=[{&(0x7f0000000600)="16", 0x1}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 24.765192ms ago: executing program 6 (id=1755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0xffffff7f) 0s ago: executing program 4 (id=1756): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802541, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000440)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003ec0), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYRES16=r7, @ANYBLOB="040029bd7000fbdbdf25750000000c0099000700000035000000ac00f0800a000200aee0069498a10000050001000200000090000e808b000000ccc944eb6bf68c8b128d3a67c9b75747e6f0875b7bbf110cc38576ae0234b17c15b64d8ddf6ba585a112f2a1a997a9eae15baf8b00a66d514f90e2fbdb308f46bdf16300ad317003bdbd3449e48fee7141114a005338291ca2054a321f1deb2d99146becabf3880d82630c5ff5fbe42aec5fa6bdde96f7c8a2d3c086bd7d5d9309f905bd0c65cc0004000500d009f0800c030c80700004800a00060008021100000000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a00060008021100000100000a000600080211000000000005000300040000000301020082c30d9ce36a017a91495f24f4e4f4e3c31bdc47383c5a6ad56cd3ce9010edeb1b53f753b1b16b49f3ea16ff788f66e3f842898370b5427218f77e81b24d7650eb9e006a1802b314d771763e144d9e4eb9f8ee0ca0ab8af5208b82d5ad17457d9f5682a52fff5fe8fec5cda3ff12f8b82466c1b59e4b1264f3b2785b70e5b68f75c30c76a591e561753d86adb4ec0ee7d270ed276600dc7f93d50f558cf10fedd0e69b3f15296a2ec0dc240a4abe3eb0d5b17715911b5d03fffdde3e0b4c92ff024d5dfe2fd84afb7bd07c9e3a18e81fb3230fe3fb829c4696430a8971e8cd313635a06b3dc906f53924f0f901d7b9e3b9a38707dd619a461e635915a40e370003010200bd6354047323aa60d15ffc2d5bb7f355c373fd426827ab6d80c1a405d3bb9b231f33e4a18f16f0b7a367c59c9e327e67cf821c0f1eba92d7f5f1f545badd9d5caa9f76d0ec2791cca18126844629121aab00710f011dfdbb45310df91a90128a2a2cf7ed288e0505dc7ebf0505c332d0618e4c2774adaa94ab993e3fd812297b6cdd64528b14126f6d8358b9af776d321cf7eeafa54f640b34f5d759cb69e6780d9f050983118a3e6e25a31e737aabbaae0c40b37ecda2f4a8200b843d78bcfe6dac94e1f8b96f9a934ff0654e0a30a0dc07b9af19612d288a2930fe23621c259f3e4be17629a75c166645a1214b5fc5d689584583e6f5e502a6426061669e00050003000a00000005000300060000000500030080000000700004800a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a000600ffffffffffff000040000d800b000000de43c9cafc4253002d0000009314943c49d134f601f19e084ce94053cc6df40098cbbbb89ef3f1f7d2b659b6749e1a55786227ed3d000000050006000200000034030d80c400000058215923c87a2047f46864eeba9d035aededc6656c15716d2d2b87de3129d0bc0d7c26c3a37a0ba3add20d577ddf9aaccc87cd39dbc4ce63605f0c3d689f25290813fddbf39b150151443f5dcd4d3c0f5c991e258963f8a432135b36031bb74ae74ce1e13775caf497657c50cea43496d758b975f281fbd9293af81df5632401a38ef180baaa130feb05b3c160bff31a4c84b8d5f15653a80346f926b309e90029c95824aca5a541d5a0fc168085826674acf91c872749b0de41d9315a0a69e68000000071db52040c5167732bcda15050a0eb147f5688927fb1f8df6381b3430d20a5db76eba1d8a127e1ab6f425ab79370e8d81e44213664971dbac432026de996a560a5720c6555c109660a030ae6dd688236e32520b9046a82eb75e23567e7085678f6409e651b5316e437054f7b1381e9f674db9aefd546bb01118b34ea5a00000030acc7b3ea204fd80da882c2c3754926b80def01ea8fc2d98231e7b565880c027098a93c976dc14189ddee05c05b8df124d6344ae349f2c34d55a15c953232f1eea86d0a33b28d8ff774f208ddfbb05a871ac89b1e1400004f0000004ba81bf116f592f4e4bc22ce0f1f4f45cbeba484717b2f991b24e20c668828a8d40d5fba5c5186cabc2aefc45dabaa7b737fbeea90e110882733f7726dc32f4b414673a276ec59772fc1d2006f000000fc7cfc44271367adf51fd5a92f2a4acbcc3d369742de21a1521a934f06385a292a1d5ec24e567aeaa81e8c06a85e264e1bfe92164b77626a8a386083dc14eb8251285c23e6eb403730d60cb5d729fc21316d385d958e301351fc33f911892f10b2cea8a7d044b581aa882800ce000000dce68bef696ead7554efa42cc5336f1fad1bd19d7e6f9ec4311ac89692fd975914c963d69894d2a842a161298d6f1adc6e9670f601554f077a489b52b3b80087efe4d197c65bd95f08f8ec622b98a6b56a71317eeabb27a64f1bc03e855a079c27ad22194e651294156cf28640fc5f81624a00e0b6357bc1c3da1f53e95f4e396cf33a69fd9fcc153ce894b6658810b4041738c9f61fefa0705674dbfdae81e0c32128a1ea68e907a90ca05b2b969ef7c4e9c45ee1f2bd627a84759db8ed284f154b9ad09ea05a873b10000005000f0000000000e8000c807c0004800a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a000600080211000001000005000300040000000500030006000000580004800a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000400050008000a00c202000048020c8005000300f2000000050003000900000005000300fb0000000500030001000000030102007cf1cf5ea385f47667af4a5d51561668a494f01868673450d71d0081d35b5c1f084fbf8813d35d932484fb4df44ccc68a59a1d1902042b8b1806e3543e720423a321b068bd7a8d6a48d24863699ccfd3352ab1ae2982bb3382ff7a0395efbe62a98afdc64b39a4ee97c61b1cfb53749f3a2be67634b90134bcb1a742fdadcdc9b18736c35817af3dbebe2f863d2137051a7da393c65229ceba9690ac309a42c47468e678f4b1e9415ab72efa7dec7f84277ab31e53068f25fdd7289703aa18135b5566e246d5a422f6b5fde4d20df5e3f5c90cdc2ec78b191d6f0dc52617a8d6549765fd499fcaeec480f9547c2d77ec90fba38c47977e05536efe5fbc5dd60004000100100004800a00060008021100000000000500030003000000030102006af0ca78705f20b202b6a6373dcc8e9df30ae72e63ee1dd1aadf02ea1bf9ef82f3ff2fad18701e12580243d6a1bc050459562b298154adbe3131979cd58f093d33c97dc4656a4fe9e7878bb89907f62ca0a9ed67bb8f19c995749dfcbf749d402594cf7dddc6a190e7474539c2969227937af326d39b24db77ab58d6526cd1d5b81efe1b0263bb858ee03e241fa155d6e13cf05a10340006604685f320e2835736017700b21811a2f409092895c45e6afd0c2b77f0445b1a22c9f4fe796524310ea6b6e8717b794ca3518d085876c6456a218dae2976a508d47b94aba4310bb46e1879465fdf7e05ee50770a975a96990a062cb8bbdaa14b3ead8014ad5a4c00b400f080aa000b0068df503d3ba5c2081ae6975f360252304ac28c76704a6b20cb1f990d280f479e3403c0179a8c2577cfd4e6ee9fffec3638f7d4b8fab11df7bc5d098e83eeb23e349e2e4b32e5f8b6426dea695ae614b80f45eb28bdc0c54fb49ec5e369e9c82719375d3e96d4a969dea7733c86b83ee539b3d7fc376db43de4f724da15f4a6"], 0xb50}, 0x1, 0x0, 0x0, 0x80}, 0x44000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000003f00)={0x3, 0x0, 0x9, 0xfdfdffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa3, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x33424752}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xd0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x8000}) kernel console output (not intermixed with test programs): 000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 589.864832][T10303] R13: 00007f92918f6128 R14: 00007f92918f6090 R15: 00007fff0a514098 [ 589.864866][T10303] [ 590.026450][ T5890] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 590.177863][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 590.191838][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.191861][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.191895][ T5890] usb 4-1: config 1 interface 0 has no altsetting 0 [ 590.194242][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.194267][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.194286][ T5890] usb 4-1: Product: syz [ 590.194300][ T5890] usb 4-1: Manufacturer: syz [ 590.194313][ T5890] usb 4-1: SerialNumber: syz [ 591.723932][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 592.092099][T10309] kthread_run failed with err -4 [ 592.288607][T10326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1197'. [ 592.430766][T10329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1199'. [ 592.522676][ T6026] libceph: connect (1)[c::]:6789 error -101 [ 592.523026][ T6026] libceph: mon0 (1)[c::]:6789 connect error [ 592.554802][ T6026] libceph: connect (1)[c::]:6789 error -101 [ 592.571696][ T6026] libceph: mon0 (1)[c::]:6789 connect error [ 592.743849][ T5890] usb 4-1: USB disconnect, device number 30 [ 592.826750][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 592.826901][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 593.830583][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 593.830737][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 593.837319][T10330] ceph: No mds server is up or the cluster is laggy [ 594.905333][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 595.291188][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.438323][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 595.438533][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 595.846467][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.279889][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.333208][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.567817][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.222004][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.282264][T10392] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20003 [ 597.635125][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.614961][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.653780][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 598.891532][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.307906][T10404] FAULT_INJECTION: forcing a failure. [ 599.307906][T10404] name failslab, interval 1, probability 0, space 0, times 0 [ 599.307940][T10404] CPU: 1 UID: 0 PID: 10404 Comm: syz.3.1220 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 599.307962][T10404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 599.307974][T10404] Call Trace: [ 599.307981][T10404] [ 599.307989][T10404] dump_stack_lvl+0x189/0x250 [ 599.308023][T10404] ? __pfx____ratelimit+0x10/0x10 [ 599.308052][T10404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.308079][T10404] ? __pfx__printk+0x10/0x10 [ 599.308105][T10404] ? __pfx___might_resched+0x10/0x10 [ 599.308124][T10404] ? fs_reclaim_acquire+0x7d/0x100 [ 599.308147][T10404] should_fail_ex+0x46c/0x600 [ 599.308179][T10404] should_failslab+0xa8/0x100 [ 599.308208][T10404] __kvmalloc_node_noprof+0x15a/0x550 [ 599.308234][T10404] ? iommufd_test+0x3ca9/0x5190 [ 599.308257][T10404] ? __fget_files+0x2a/0x420 [ 599.308288][T10404] iommufd_test+0x3ca9/0x5190 [ 599.308324][T10404] ? __pfx_iommufd_test+0x10/0x10 [ 599.308350][T10404] ? __lock_acquire+0xab9/0xd20 [ 599.308386][T10404] ? __might_fault+0xb0/0x130 [ 599.308443][T10404] iommufd_fops_ioctl+0x461/0x580 [ 599.308467][T10404] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 599.308499][T10404] ? __fget_files+0x2a/0x420 [ 599.308530][T10404] ? bpf_lsm_file_ioctl+0x9/0x20 [ 599.308553][T10404] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 599.308572][T10404] __se_sys_ioctl+0xff/0x170 [ 599.308597][T10404] do_syscall_64+0xfa/0x3b0 [ 599.308614][T10404] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.308643][T10404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.308663][T10404] ? clear_bhb_loop+0x60/0xb0 [ 599.308685][T10404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.308704][T10404] RIP: 0033:0x7f0efd36eec9 [ 599.308721][T10404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.308738][T10404] RSP: 002b:00007f0efb5d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.308760][T10404] RAX: ffffffffffffffda RBX: 00007f0efd5c5fa0 RCX: 00007f0efd36eec9 [ 599.308773][T10404] RDX: 00002000000005c0 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 599.308785][T10404] RBP: 00007f0efb5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 599.308796][T10404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.308807][T10404] R13: 00007f0efd5c6038 R14: 00007f0efd5c5fa0 R15: 00007ffe306c3088 [ 599.308837][T10404] [ 599.575114][T10406] FAULT_INJECTION: forcing a failure. [ 599.575114][T10406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.575146][T10406] CPU: 1 UID: 0 PID: 10406 Comm: syz.0.1219 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 599.575181][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 599.575193][T10406] Call Trace: [ 599.575203][T10406] [ 599.575212][T10406] dump_stack_lvl+0x189/0x250 [ 599.575244][T10406] ? __pfx____ratelimit+0x10/0x10 [ 599.575273][T10406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.575300][T10406] ? __pfx__printk+0x10/0x10 [ 599.575321][T10406] ? __might_fault+0xb0/0x130 [ 599.575361][T10406] should_fail_ex+0x46c/0x600 [ 599.575392][T10406] _copy_from_iter+0x1de/0x1790 [ 599.575417][T10406] ? kmalloc_reserve+0xbd/0x290 [ 599.575446][T10406] ? kmalloc_reserve+0xbd/0x290 [ 599.575470][T10406] ? rcu_is_watching+0x15/0xb0 [ 599.575500][T10406] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 599.575522][T10406] ? kmem_cache_alloc_node_noprof+0x19c/0x330 [ 599.575549][T10406] ? __pfx__copy_from_iter+0x10/0x10 [ 599.575571][T10406] ? __build_skb_around+0x257/0x3e0 [ 599.575602][T10406] ? netlink_sendmsg+0x642/0xb30 [ 599.575627][T10406] ? skb_put+0x11b/0x210 [ 599.575658][T10406] netlink_sendmsg+0x6b2/0xb30 [ 599.575693][T10406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.575724][T10406] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.575743][T10406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.575771][T10406] __sock_sendmsg+0x21c/0x270 [ 599.575796][T10406] __sys_sendto+0x3c7/0x520 [ 599.575826][T10406] ? __pfx___sys_sendto+0x10/0x10 [ 599.575877][T10406] ? exc_page_fault+0x76/0xf0 [ 599.575908][T10406] ? do_user_addr_fault+0xc8a/0x1390 [ 599.575935][T10406] __x64_sys_sendto+0xde/0x100 [ 599.575964][T10406] do_syscall_64+0xfa/0x3b0 [ 599.575981][T10406] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.576007][T10406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.576025][T10406] ? clear_bhb_loop+0x60/0xb0 [ 599.576047][T10406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.576065][T10406] RIP: 0033:0x7fef75be0d5c [ 599.576081][T10406] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 599.576095][T10406] RSP: 002b:00007fef73e44ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 599.576114][T10406] RAX: ffffffffffffffda RBX: 00007fef73e44fc0 RCX: 00007fef75be0d5c [ 599.576127][T10406] RDX: 0000000000000020 RSI: 00007fef73e45010 RDI: 0000000000000003 [ 599.576138][T10406] RBP: 0000000000000000 R08: 00007fef73e44f14 R09: 000000000000000c [ 599.576149][T10406] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 599.576168][T10406] R13: 00007fef73e44f68 R14: 00007fef73e45010 R15: 0000000000000000 [ 599.576196][T10406] [ 600.105959][T10412] binder: 10410:10412 unknown command 0 [ 600.105979][T10412] binder: 10410:10412 ioctl c0306201 200000000480 returned -22 [ 600.107695][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.226044][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 601.042635][T10421] tmpfs: Unknown parameter 'ÿ' [ 601.414062][ T1516] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.710881][ T9] libceph: connect (1)[c::]:6789 error -101 [ 601.711080][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 601.749537][ T9] libceph: connect (1)[c::]:6789 error -101 [ 601.749741][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 601.935202][T10423] ceph: No mds server is up or the cluster is laggy [ 602.006938][ T9] libceph: connect (1)[c::]:6789 error -101 [ 602.007186][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 602.359154][T10433] netlink: 'syz.5.1229': attribute type 21 has an invalid length. [ 603.856944][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 604.234870][ T1516] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.326809][T10433] netlink: 'syz.5.1229': attribute type 1 has an invalid length. [ 604.326833][T10433] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1229'. [ 605.861961][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 606.701060][ T1516] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.822683][T10471] netlink: 'syz.3.1238': attribute type 3 has an invalid length. [ 606.822707][T10471] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 606.822719][T10471] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1238'. [ 606.822748][T10471] NCSI netlink: No device for ifindex 33022 [ 607.354013][ T1516] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.706421][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 608.866362][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 608.922881][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.922909][ T31] usb 1-1: config 0 has no interface number 0 [ 608.958702][ T31] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 608.958731][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.958749][ T31] usb 1-1: Product: syz [ 608.958763][ T31] usb 1-1: Manufacturer: syz [ 608.958777][ T31] usb 1-1: SerialNumber: syz [ 609.001405][ T31] usb 1-1: config 0 descriptor?? [ 609.023745][ T31] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 609.023773][ T31] usb 1-1: selecting invalid altsetting 1 [ 609.023790][ T31] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 609.064909][ T31] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 609.065275][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 609.065321][ T31] usb 1-1: media controller created [ 609.130951][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 610.227499][ T1516] bridge_slave_1: left allmulticast mode [ 610.227774][ T1516] bridge_slave_1: left promiscuous mode [ 610.230854][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.264972][ T31] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 610.265026][ T31] zl10353_read_register: readreg error (reg=127, ret==-110) [ 610.927338][T10093] Bluetooth: hci5: command 0x0405 tx timeout [ 611.542839][ T1516] bridge_slave_0: left allmulticast mode [ 611.542872][ T1516] bridge_slave_0: left promiscuous mode [ 611.543139][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.653828][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 611.653846][ T37] audit: type=1326 audit(1758744543.417:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10519 comm="syz.5.1251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43f2dfeec9 code=0x0 [ 611.785936][ T6462] usb 1-1: USB disconnect, device number 24 [ 612.065785][T10530] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1253'. [ 612.065807][T10530] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1253'. [ 612.065819][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1253'. [ 612.126992][T10531] 9pnet_fd: Insufficient options for proto=fd [ 612.178280][ T7434] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 612.336493][ T7434] usb 6-1: Using ep0 maxpacket: 8 [ 612.449683][ T7434] usb 6-1: config 2 has an invalid interface number: 241 but max is 0 [ 612.449711][ T7434] usb 6-1: config 2 has no interface number 0 [ 612.449760][ T7434] usb 6-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 612.449780][ T7434] usb 6-1: config 2 interface 241 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 612.449803][ T7434] usb 6-1: config 2 interface 241 has no altsetting 0 [ 612.466879][ T7434] usb 6-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 612.466911][ T7434] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.466934][ T7434] usb 6-1: Product: syz [ 612.466951][ T7434] usb 6-1: Manufacturer: syz [ 612.466969][ T7434] usb 6-1: SerialNumber: syz [ 612.500003][ T7434] ti_usb_3410_5052 6-1:2.241: TI USB 3410 1 port adapter converter detected [ 612.546599][ T7434] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 613.029472][ T5890] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 613.806346][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 613.999412][ T5890] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 613.999455][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.999472][ T5890] usb 1-1: config 0 has no interface number 0 [ 613.999509][ T5890] usb 1-1: config 0 interface 87 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 614.004488][ T5890] usb 1-1: New USB device found, idVendor=093a, idProduct=2624, bcdDevice=f8.af [ 614.004516][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.004536][ T5890] usb 1-1: Product: syz [ 614.004550][ T5890] usb 1-1: Manufacturer: syz [ 614.004563][ T5890] usb 1-1: SerialNumber: syz [ 614.091203][T10546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.143809][ T5890] usb 1-1: config 0 descriptor?? [ 614.190831][ T5890] gspca_main: gspca_pac7302-2.14.0 probing 093a:2624 [ 614.571564][ T5926] usb 6-1: USB disconnect, device number 4 [ 614.623689][ T5926] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 614.625528][ T5926] ti_usb_3410_5052 6-1:2.241: device disconnected [ 614.696920][ T5890] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 614.697027][ T5890] gspca_pac7302 1-1:0.87: probe with driver gspca_pac7302 failed with error -110 [ 615.582918][ T7434] usb 1-1: USB disconnect, device number 25 [ 616.109973][ T37] audit: type=1326 audit(1758744547.677:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10557 comm="syz.4.1261" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb1c4deec9 code=0x0 [ 616.652606][T10556] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 620.279684][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 623.132882][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.207527][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.241675][ T1516] bond0 (unregistering): Released all slaves [ 623.626843][ T37] audit: type=1326 audit(1758744555.367:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef75bdeec9 code=0x7ffc0000 [ 623.626986][ T37] audit: type=1326 audit(1758744555.367:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef75bd5d67 code=0x7ffc0000 [ 623.627037][ T37] audit: type=1326 audit(1758744555.377:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef75b7af79 code=0x7ffc0000 [ 623.627086][ T37] audit: type=1326 audit(1758744555.377:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef75bd5d67 code=0x7ffc0000 [ 623.627145][ T37] audit: type=1326 audit(1758744555.377:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef75b7af79 code=0x7ffc0000 [ 623.627194][ T37] audit: type=1326 audit(1758744555.377:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fef75bdeec9 code=0x7ffc0000 [ 623.627243][ T37] audit: type=1326 audit(1758744555.377:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef75bd5d67 code=0x7ffc0000 [ 623.627290][ T37] audit: type=1326 audit(1758744555.377:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef75b7af79 code=0x7ffc0000 [ 623.627339][ T37] audit: type=1326 audit(1758744555.377:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef75bd5d67 code=0x7ffc0000 [ 623.627388][ T37] audit: type=1326 audit(1758744555.377:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef75b7af79 code=0x7ffc0000 [ 624.055278][ T1516] tipc: Left network mode [ 626.039042][T10613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.407096][ T5840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 626.566595][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 626.571027][ T5840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.571052][ T5840] usb 6-1: config 0 has no interfaces? [ 626.574117][ T5840] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=f0.bb [ 626.574145][ T5840] usb 6-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 626.574166][ T5840] usb 6-1: Product: syz [ 626.574180][ T5840] usb 6-1: Manufacturer: syz [ 626.574195][ T5840] usb 6-1: SerialNumber: syz [ 626.671591][ T5840] usb 6-1: config 0 descriptor?? [ 626.841224][ T9407] libceph: connect (1)[c::]:6789 error -101 [ 626.841420][ T9407] libceph: mon0 (1)[c::]:6789 connect error [ 626.881126][T10093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 626.907395][T10093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 626.915399][T10093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 626.934655][ T9407] libceph: connect (1)[c::]:6789 error -101 [ 626.934833][ T9407] libceph: mon0 (1)[c::]:6789 connect error [ 626.941741][T10093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 626.951136][T10093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.972372][T10618] ceph: No mds server is up or the cluster is laggy [ 627.686473][ T1516] hsr_slave_0: left promiscuous mode [ 627.709718][ T1516] hsr_slave_1: left promiscuous mode [ 627.711082][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.711185][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.991562][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.991595][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.006686][ T5839] Bluetooth: hci1: command tx timeout [ 629.104958][ T9407] usb 6-1: USB disconnect, device number 5 [ 629.338017][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.338090][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.556533][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1286'. [ 630.319672][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 630.319876][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 630.343960][T10643] ceph: No mds server is up or the cluster is laggy [ 630.375910][ T1516] veth1_macvtap: left promiscuous mode [ 630.384688][ T1516] veth0_macvtap: left promiscuous mode [ 630.385094][ T1516] veth1_vlan: left promiscuous mode [ 630.385455][ T1516] veth0_vlan: left promiscuous mode [ 631.329346][ T5839] Bluetooth: hci1: command tx timeout [ 631.346633][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 631.346874][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 633.429560][ T5839] Bluetooth: hci1: command tx timeout [ 634.406521][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 634.570459][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.570517][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.570561][ T10] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 634.570583][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.605243][ T10] usb 6-1: config 0 descriptor?? [ 634.761380][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.506470][ T5839] Bluetooth: hci1: command tx timeout [ 636.579371][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.428833][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.757110][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 638.055816][ T10] usb 6-1: USB disconnect, device number 6 [ 638.135209][T10676] FAULT_INJECTION: forcing a failure. [ 638.135209][T10676] name failslab, interval 1, probability 0, space 0, times 0 [ 638.135245][T10676] CPU: 1 UID: 0 PID: 10676 Comm: syz.5.1294 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 638.135268][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 638.135281][T10676] Call Trace: [ 638.135289][T10676] [ 638.135298][T10676] dump_stack_lvl+0x189/0x250 [ 638.135333][T10676] ? __pfx____ratelimit+0x10/0x10 [ 638.135365][T10676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.135394][T10676] ? __pfx__printk+0x10/0x10 [ 638.135418][T10676] ? __lock_acquire+0xab9/0xd20 [ 638.135455][T10676] should_fail_ex+0x46c/0x600 [ 638.135488][T10676] ? skb_clone+0x212/0x3a0 [ 638.135507][T10676] should_failslab+0xa8/0x100 [ 638.135537][T10676] ? skb_clone+0x212/0x3a0 [ 638.135555][T10676] kmem_cache_alloc_noprof+0x6e/0x310 [ 638.135589][T10676] skb_clone+0x212/0x3a0 [ 638.135614][T10676] __netlink_deliver_tap+0x404/0x850 [ 638.135656][T10676] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.135685][T10676] netlink_deliver_tap+0x19c/0x1b0 [ 638.135714][T10676] netlink_unicast+0x811/0xa10 [ 638.135748][T10676] ? __pfx_netlink_unicast+0x10/0x10 [ 638.135775][T10676] ? netlink_sendmsg+0x642/0xb30 [ 638.135801][T10676] ? skb_put+0x11b/0x210 [ 638.135834][T10676] netlink_sendmsg+0x805/0xb30 [ 638.135872][T10676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.135909][T10676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.135966][T10676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.135996][T10676] __sock_sendmsg+0x21c/0x270 [ 638.136042][T10676] ____sys_sendmsg+0x508/0x820 [ 638.136070][T10676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.136102][T10676] ? import_iovec+0x74/0xa0 [ 638.136134][T10676] ___sys_sendmsg+0x21f/0x2a0 [ 638.136157][T10676] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.136218][T10676] ? __fget_files+0x2a/0x420 [ 638.136247][T10676] ? __fget_files+0x3a6/0x420 [ 638.136287][T10676] __x64_sys_sendmsg+0x1a1/0x260 [ 638.136311][T10676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.136343][T10676] ? __pfx_ksys_write+0x10/0x10 [ 638.136366][T10676] ? rcu_is_watching+0x15/0xb0 [ 638.136403][T10676] ? do_syscall_64+0xbe/0x3b0 [ 638.136428][T10676] do_syscall_64+0xfa/0x3b0 [ 638.136447][T10676] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.136477][T10676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.136497][T10676] ? clear_bhb_loop+0x60/0xb0 [ 638.136522][T10676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.136542][T10676] RIP: 0033:0x7f43f2dfeec9 [ 638.136561][T10676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.136579][T10676] RSP: 002b:00007f43f1066038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.136620][T10676] RAX: ffffffffffffffda RBX: 00007f43f3055fa0 RCX: 00007f43f2dfeec9 [ 638.136637][T10676] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 638.136651][T10676] RBP: 00007f43f1066090 R08: 0000000000000000 R09: 0000000000000000 [ 638.136665][T10676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.136678][T10676] R13: 00007f43f3056038 R14: 00007f43f3055fa0 R15: 00007ffef2ad20f8 [ 638.136713][T10676] [ 638.519795][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 641.858949][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 643.346408][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 643.417939][T10647] libceph: connect (1)[c::]:6789 error -101 [ 643.418117][T10647] libceph: mon0 (1)[c::]:6789 connect error [ 643.453455][T10647] libceph: connect (1)[c::]:6789 error -101 [ 643.453659][T10647] libceph: mon0 (1)[c::]:6789 connect error [ 643.529207][ T31] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 643.529262][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 643.529286][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 643.529308][ T31] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.529346][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 643.529367][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.553501][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.554583][ T31] usb 1-1: invalid MIDI out EP 0 [ 643.687244][T10695] ceph: No mds server is up or the cluster is laggy [ 643.708268][T10647] libceph: connect (1)[c::]:6789 error -101 [ 643.708410][T10647] libceph: mon0 (1)[c::]:6789 connect error [ 643.815101][T10619] chnl_net:caif_netlink_parms(): no params data found [ 644.339407][ T31] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 644.456461][ T31] usb 1-1: USB disconnect, device number 26 [ 644.926409][T10619] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.926550][T10619] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.926801][T10619] bridge_slave_0: entered allmulticast mode [ 644.928869][T10619] bridge_slave_0: entered promiscuous mode [ 644.971194][T10619] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.016630][T10619] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.016855][T10619] bridge_slave_1: entered allmulticast mode [ 645.024811][T10619] bridge_slave_1: entered promiscuous mode [ 645.481471][ T1516] IPVS: stop unused estimator thread 0... [ 645.678580][T10619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.683196][T10619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.627448][T10619] team0: Port device team_slave_0 added [ 646.720121][T10731] netlink: 'syz.5.1307': attribute type 1 has an invalid length. [ 646.904030][T10647] libceph: connect (1)[c::]:6789 error -101 [ 646.904758][T10647] libceph: mon0 (1)[c::]:6789 connect error [ 646.905450][T10647] libceph: connect (1)[c::]:6789 error -101 [ 646.905646][T10647] libceph: mon0 (1)[c::]:6789 connect error [ 647.157620][T10647] libceph: connect (1)[c::]:6789 error -101 [ 647.157840][T10647] libceph: mon0 (1)[c::]:6789 connect error [ 647.213531][ T1516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.213575][ T1516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.299693][T10619] team0: Port device team_slave_1 added [ 647.540939][T10731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.573213][T10736] ceph: No mds server is up or the cluster is laggy [ 647.792015][T10647] libceph: connect (1)[c::]:6789 error -101 [ 647.792229][T10647] libceph: mon0 (1)[c::]:6789 connect error [ 651.043376][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'. [ 651.241243][ T1516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.241279][ T1516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.253079][T10619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.253097][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.253125][T10619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.691672][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1324'. [ 655.104253][ T1516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.104289][ T1516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.840738][T10801] tipc: Enabling of bearer rejected, failed to enable media [ 655.851337][T10619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.851353][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.851380][T10619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.600807][ T10] libceph: connect (1)[c::]:6789 error -101 [ 657.601062][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 657.821362][T10815] ceph: No mds server is up or the cluster is laggy [ 657.856954][ T10] libceph: connect (1)[c::]:6789 error -101 [ 657.857189][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 657.884191][ T1516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.884217][ T1516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.039236][T10840] FAULT_INJECTION: forcing a failure. [ 658.039236][T10840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.039294][T10840] CPU: 0 UID: 0 PID: 10840 Comm: syz.0.1334 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 658.039318][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 658.039331][T10840] Call Trace: [ 658.039339][T10840] [ 658.039347][T10840] dump_stack_lvl+0x189/0x250 [ 658.039382][T10840] ? __pfx____ratelimit+0x10/0x10 [ 658.039413][T10840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.039442][T10840] ? __pfx__printk+0x10/0x10 [ 658.039464][T10840] ? __might_fault+0xb0/0x130 [ 658.039506][T10840] should_fail_ex+0x46c/0x600 [ 658.039540][T10840] _copy_from_iter+0x1de/0x1790 [ 658.039563][T10840] ? kmalloc_reserve+0xbd/0x290 [ 658.039595][T10840] ? kmalloc_reserve+0xbd/0x290 [ 658.039621][T10840] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 658.039646][T10840] ? kmem_cache_alloc_node_noprof+0x19c/0x330 [ 658.039681][T10840] ? __pfx__copy_from_iter+0x10/0x10 [ 658.039701][T10840] ? skb_page_frag_refill+0x1be/0x320 [ 658.039722][T10840] tcp_sendmsg_locked+0x1ea3/0x5620 [ 658.039741][T10840] ? __lock_acquire+0xab9/0xd20 [ 658.039795][T10840] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 658.039817][T10840] ? rt_spin_unlock+0x65/0x80 [ 658.039837][T10840] ? lock_sock_nested+0x5f/0x130 [ 658.039854][T10840] ? lock_sock_nested+0xdd/0x130 [ 658.039874][T10840] tcp_sendmsg+0x2f/0x50 [ 658.039891][T10840] __sock_sendmsg+0x19c/0x270 [ 658.039911][T10840] __sys_sendto+0x3c7/0x520 [ 658.039963][T10840] ? __pfx___sys_sendto+0x10/0x10 [ 658.040010][T10840] ? ksys_write+0x230/0x260 [ 658.040033][T10840] ? __pfx_ksys_write+0x10/0x10 [ 658.040058][T10840] ? rcu_is_watching+0x15/0xb0 [ 658.040097][T10840] __x64_sys_sendto+0xde/0x100 [ 658.040133][T10840] do_syscall_64+0xfa/0x3b0 [ 658.040153][T10840] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.040183][T10840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.040198][T10840] ? clear_bhb_loop+0x60/0xb0 [ 658.040217][T10840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.040231][T10840] RIP: 0033:0x7fef75bdeec9 [ 658.040245][T10840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.040264][T10840] RSP: 002b:00007fef73e46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 658.040280][T10840] RAX: ffffffffffffffda RBX: 00007fef75e35fa0 RCX: 00007fef75bdeec9 [ 658.040291][T10840] RDX: 0000000000000501 RSI: 0000200000000580 RDI: 0000000000000003 [ 658.040301][T10840] RBP: 00007fef73e46090 R08: 0000000000000000 R09: 0000000000000000 [ 658.040310][T10840] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 658.040320][T10840] R13: 00007fef75e36038 R14: 00007fef75e35fa0 R15: 00007ffd17f5cc68 [ 658.040343][T10840] [ 658.984792][T10619] hsr_slave_0: entered promiscuous mode [ 659.001960][T10619] hsr_slave_1: entered promiscuous mode [ 659.002749][T10619] debugfs: 'hsr0' already exists in 'hsr' [ 659.002771][T10619] Cannot create hsr debugfs directory [ 659.688478][T10853] FAULT_INJECTION: forcing a failure. [ 659.688478][T10853] name failslab, interval 1, probability 0, space 0, times 0 [ 659.688514][T10853] CPU: 0 UID: 0 PID: 10853 Comm: syz.3.1338 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 659.688537][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 659.688550][T10853] Call Trace: [ 659.688558][T10853] [ 659.688566][T10853] dump_stack_lvl+0x189/0x250 [ 659.688601][T10853] ? __pfx____ratelimit+0x10/0x10 [ 659.688633][T10853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 659.688663][T10853] ? __pfx__printk+0x10/0x10 [ 659.688687][T10853] ? __lock_acquire+0xab9/0xd20 [ 659.688724][T10853] should_fail_ex+0x46c/0x600 [ 659.688758][T10853] ? skb_clone+0x212/0x3a0 [ 659.688778][T10853] should_failslab+0xa8/0x100 [ 659.688807][T10853] ? skb_clone+0x212/0x3a0 [ 659.688825][T10853] kmem_cache_alloc_noprof+0x6e/0x310 [ 659.688859][T10853] skb_clone+0x212/0x3a0 [ 659.688884][T10853] __netlink_deliver_tap+0x404/0x850 [ 659.688927][T10853] ? netlink_deliver_tap+0x2e/0x1b0 [ 659.688956][T10853] netlink_deliver_tap+0x19c/0x1b0 [ 659.688986][T10853] netlink_unicast+0x811/0xa10 [ 659.689022][T10853] ? __pfx_netlink_unicast+0x10/0x10 [ 659.689049][T10853] ? netlink_sendmsg+0x642/0xb30 [ 659.689080][T10853] ? skb_put+0x11b/0x210 [ 659.689120][T10853] netlink_sendmsg+0x805/0xb30 [ 659.689158][T10853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.689195][T10853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 659.689215][T10853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.689245][T10853] __sock_sendmsg+0x21c/0x270 [ 659.689274][T10853] ____sys_sendmsg+0x508/0x820 [ 659.689301][T10853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.689331][T10853] ? import_iovec+0x74/0xa0 [ 659.689361][T10853] ___sys_sendmsg+0x21f/0x2a0 [ 659.689384][T10853] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.689443][T10853] ? __fget_files+0x2a/0x420 [ 659.689470][T10853] ? __fget_files+0x3a6/0x420 [ 659.689510][T10853] __x64_sys_sendmsg+0x1a1/0x260 [ 659.689534][T10853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 659.689565][T10853] ? __pfx_ksys_write+0x10/0x10 [ 659.689588][T10853] ? rcu_is_watching+0x15/0xb0 [ 659.689624][T10853] ? do_syscall_64+0xbe/0x3b0 [ 659.689648][T10853] do_syscall_64+0xfa/0x3b0 [ 659.689666][T10853] ? lockdep_hardirqs_on+0x9c/0x150 [ 659.689695][T10853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.689716][T10853] ? clear_bhb_loop+0x60/0xb0 [ 659.689740][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.689759][T10853] RIP: 0033:0x7f0efd36eec9 [ 659.689777][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.689795][T10853] RSP: 002b:00007f0efb5d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.689826][T10853] RAX: ffffffffffffffda RBX: 00007f0efd5c5fa0 RCX: 00007f0efd36eec9 [ 659.689841][T10853] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 659.689854][T10853] RBP: 00007f0efb5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 659.689866][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.689877][T10853] R13: 00007f0efd5c6038 R14: 00007f0efd5c5fa0 R15: 00007ffe306c3088 [ 659.689908][T10853] [ 660.415665][T10864] FAULT_INJECTION: forcing a failure. [ 660.415665][T10864] name failslab, interval 1, probability 0, space 0, times 0 [ 660.415699][T10864] CPU: 0 UID: 0 PID: 10864 Comm: syz.0.1343 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 660.415721][T10864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 660.415733][T10864] Call Trace: [ 660.415740][T10864] [ 660.415747][T10864] dump_stack_lvl+0x189/0x250 [ 660.415780][T10864] ? __pfx____ratelimit+0x10/0x10 [ 660.415810][T10864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.415837][T10864] ? __pfx__printk+0x10/0x10 [ 660.415859][T10864] ? __lock_acquire+0xab9/0xd20 [ 660.415892][T10864] should_fail_ex+0x46c/0x600 [ 660.415923][T10864] ? skb_clone+0x212/0x3a0 [ 660.415942][T10864] should_failslab+0xa8/0x100 [ 660.415969][T10864] ? skb_clone+0x212/0x3a0 [ 660.415986][T10864] kmem_cache_alloc_noprof+0x6e/0x310 [ 660.416017][T10864] skb_clone+0x212/0x3a0 [ 660.416048][T10864] __netlink_deliver_tap+0x404/0x850 [ 660.416088][T10864] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.416116][T10864] netlink_deliver_tap+0x19c/0x1b0 [ 660.416144][T10864] netlink_unicast+0x811/0xa10 [ 660.416178][T10864] ? __pfx_netlink_unicast+0x10/0x10 [ 660.416202][T10864] ? netlink_sendmsg+0x642/0xb30 [ 660.416225][T10864] ? skb_put+0x11b/0x210 [ 660.416255][T10864] netlink_sendmsg+0x805/0xb30 [ 660.416290][T10864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.416323][T10864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.416341][T10864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.416368][T10864] __sock_sendmsg+0x21c/0x270 [ 660.416395][T10864] ____sys_sendmsg+0x508/0x820 [ 660.416417][T10864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.416443][T10864] ? import_iovec+0x74/0xa0 [ 660.416463][T10864] ___sys_sendmsg+0x21f/0x2a0 [ 660.416477][T10864] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.416514][T10864] ? __fget_files+0x2a/0x420 [ 660.416532][T10864] ? __fget_files+0x3a6/0x420 [ 660.416575][T10864] __x64_sys_sendmsg+0x1a1/0x260 [ 660.416593][T10864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.416616][T10864] ? __pfx_ksys_write+0x10/0x10 [ 660.416635][T10864] ? rcu_is_watching+0x15/0xb0 [ 660.416663][T10864] ? do_syscall_64+0xbe/0x3b0 [ 660.416681][T10864] do_syscall_64+0xfa/0x3b0 [ 660.416694][T10864] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.416717][T10864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.416733][T10864] ? clear_bhb_loop+0x60/0xb0 [ 660.416751][T10864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.416766][T10864] RIP: 0033:0x7fef75bdeec9 [ 660.416781][T10864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.416795][T10864] RSP: 002b:00007fef73e46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.416812][T10864] RAX: ffffffffffffffda RBX: 00007fef75e35fa0 RCX: 00007fef75bdeec9 [ 660.416824][T10864] RDX: 0000000020000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 660.416834][T10864] RBP: 00007fef73e46090 R08: 0000000000000000 R09: 0000000000000000 [ 660.416844][T10864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.416853][T10864] R13: 00007fef75e36038 R14: 00007fef75e35fa0 R15: 00007ffd17f5cc68 [ 660.416877][T10864] [ 661.138442][T10873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'. [ 661.385356][ T1516] bridge_slave_1: left allmulticast mode [ 661.385390][ T1516] bridge_slave_1: left promiscuous mode [ 661.389072][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.538738][ T1516] bridge_slave_0: left allmulticast mode [ 661.538763][ T1516] bridge_slave_0: left promiscuous mode [ 661.542326][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.923003][T10894] FAULT_INJECTION: forcing a failure. [ 662.923003][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 662.923037][T10894] CPU: 0 UID: 0 PID: 10894 Comm: syz.5.1350 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 662.923060][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 662.923072][T10894] Call Trace: [ 662.923079][T10894] [ 662.923095][T10894] dump_stack_lvl+0x189/0x250 [ 662.923128][T10894] ? __pfx____ratelimit+0x10/0x10 [ 662.923177][T10894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.923218][T10894] ? __pfx__printk+0x10/0x10 [ 662.923245][T10894] ? __pfx___might_resched+0x10/0x10 [ 662.923267][T10894] ? fs_reclaim_acquire+0x7d/0x100 [ 662.923289][T10894] should_fail_ex+0x46c/0x600 [ 662.923319][T10894] ? fuse_get_req+0x7b9/0x10c0 [ 662.923336][T10894] should_failslab+0xa8/0x100 [ 662.923364][T10894] ? fuse_get_req+0x7b9/0x10c0 [ 662.923378][T10894] kmem_cache_alloc_noprof+0x6e/0x310 [ 662.923404][T10894] ? __lock_acquire+0xab9/0xd20 [ 662.923433][T10894] fuse_get_req+0x7b9/0x10c0 [ 662.923463][T10894] ? __pfx_fuse_get_req+0x10/0x10 [ 662.923479][T10894] ? is_bpf_text_address+0x26/0x2b0 [ 662.923521][T10894] __fuse_simple_request+0x2aa/0x18e0 [ 662.923555][T10894] ? __lock_acquire+0xab9/0xd20 [ 662.923582][T10894] ? __pfx___fuse_simple_request+0x10/0x10 [ 662.923631][T10894] ? try_to_take_rt_mutex+0x840/0xb00 [ 662.923667][T10894] fuse_do_getattr+0x33e/0x620 [ 662.923697][T10894] ? __pfx_fuse_do_getattr+0x10/0x10 [ 662.923768][T10894] fuse_permission+0x4ee/0xdc0 [ 662.923801][T10894] ? __pfx_fuse_permission+0x10/0x10 [ 662.923826][T10894] ? __pfx_mntput_no_expire+0x10/0x10 [ 662.923849][T10894] ? dput+0x37/0x2b0 [ 662.923875][T10894] ? step_into+0x43e/0xfc0 [ 662.923904][T10894] ? __asan_memcpy+0x40/0x70 [ 662.923925][T10894] ? step_into+0x43e/0xfc0 [ 662.923957][T10894] ? __d_lookup+0x66/0x780 [ 662.923984][T10894] inode_permission+0x285/0x470 [ 662.924012][T10894] ? __pfx_fuse_permission+0x10/0x10 [ 662.924040][T10894] may_open+0x325/0x4c0 [ 662.924065][T10894] path_openat+0x2d9d/0x3840 [ 662.924095][T10894] ? __lock_acquire+0xab9/0xd20 [ 662.924146][T10894] ? __pfx_path_openat+0x10/0x10 [ 662.924166][T10894] ? is_bpf_text_address+0x26/0x2b0 [ 662.924195][T10894] ? kernel_text_address+0xa5/0xe0 [ 662.924216][T10894] ? __kernel_text_address+0xd/0x40 [ 662.924235][T10894] ? unwind_get_return_address+0x4d/0x90 [ 662.924262][T10894] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 662.924283][T10894] ? arch_stack_walk+0xfc/0x150 [ 662.924326][T10894] do_filp_open+0x1fa/0x410 [ 662.924350][T10894] ? __pfx_do_filp_open+0x10/0x10 [ 662.924399][T10894] ? __lock_acquire+0xab9/0xd20 [ 662.924423][T10894] ? do_open_execat+0x93/0x560 [ 662.924449][T10894] do_open_execat+0x135/0x560 [ 662.924471][T10894] ? __pfx_do_open_execat+0x10/0x10 [ 662.924505][T10894] alloc_bprm+0x28/0x5c0 [ 662.924531][T10894] do_execveat_common+0x1b3/0x6a0 [ 662.924566][T10894] __x64_sys_execveat+0xc4/0xe0 [ 662.924593][T10894] do_syscall_64+0xfa/0x3b0 [ 662.924610][T10894] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.924638][T10894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.924657][T10894] ? clear_bhb_loop+0x60/0xb0 [ 662.924679][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.924698][T10894] RIP: 0033:0x7f43f2dfeec9 [ 662.924715][T10894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.924731][T10894] RSP: 002b:00007f43f1045038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 662.924751][T10894] RAX: ffffffffffffffda RBX: 00007f43f3056090 RCX: 00007f43f2dfeec9 [ 662.924764][T10894] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 662.924777][T10894] RBP: 00007f43f1045090 R08: 0000000000000000 R09: 0000000000000000 [ 662.924788][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.924799][T10894] R13: 00007f43f3056128 R14: 00007f43f3056090 R15: 00007ffef2ad20f8 [ 662.924827][T10894] [ 664.070916][T10907] futex_wake_op: syz.5.1353 tries to shift op by 144; fix this program [ 664.100909][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 664.100946][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1353'. [ 665.847963][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.921749][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.940931][ T1516] bond0 (unregistering): Released all slaves [ 665.959431][ T1516] bond1 (unregistering): Released all slaves [ 666.411800][T10915] binder: 10913:10915 ioctl 40046205 0 returned -22 [ 666.922850][T10907] geneve2: entered promiscuous mode [ 666.922878][T10907] geneve2: entered allmulticast mode [ 667.101417][T10914] fuse: Bad value for 'fd' [ 667.126163][ T1516] : left promiscuous mode [ 669.785147][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.785669][T10093] Bluetooth: hci1: command 0x0405 tx timeout [ 669.964043][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.018567][ T1516] IPVS: stopping backup sync thread 6622 ... [ 670.224310][T10619] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 670.249265][T10942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1365'. [ 670.346366][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.444891][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1366'. [ 670.753816][T10619] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 670.970306][T10619] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 671.168630][T10619] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 671.537931][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.321559][T10963] binder: 10958:10963 ioctl 40046205 0 returned -22 [ 672.343056][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.887097][T10959] fuse: Bad value for 'fd' [ 673.228539][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.681502][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.966929][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 674.155053][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.484912][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.435547][T10992] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1376'. [ 675.599163][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1378'. [ 676.026428][T10619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.372535][T10619] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.680194][T11014] binder: 11007:11014 ioctl 40046205 0 returned -22 [ 677.536154][T11010] fuse: Bad value for 'fd' [ 677.557074][ T1516] hsr_slave_0: left promiscuous mode [ 677.576462][ T1516] hsr_slave_1: left promiscuous mode [ 677.577298][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.577320][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.637446][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.637472][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.685148][T11023] openvswitch: netlink: IPv6 tunnel dst address is zero [ 678.761805][ T1516] veth1_macvtap: left promiscuous mode [ 678.761921][ T1516] veth0_macvtap: left promiscuous mode [ 678.762180][ T1516] veth1_vlan: left promiscuous mode [ 678.762388][ T1516] veth0_vlan: left promiscuous mode [ 680.326547][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 682.667218][T11054] binder: 11051:11054 ioctl 40046205 0 returned -22 [ 682.889381][T11052] fuse: Bad value for 'fd' [ 683.290894][T11060] fuse: Unknown parameter 'ÀÄ»™m¯ûœ›ˆä8Ä]ÕkßOŸIe$å ¶ëÉEî¶½¨‰¹Cük§¼' [ 683.493475][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 683.803716][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 686.839911][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.866049][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.875063][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.918863][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.924716][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.153775][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 687.227475][ T5839] Bluetooth: hci0: unexpected event for opcode 0x202f [ 687.353114][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 687.353132][ T37] audit: type=1326 audit(1758744619.117:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11084 comm="syz.4.1401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb1c4deec9 code=0x0 [ 687.459340][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.459674][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.505166][T11085] erspan0: entered promiscuous mode [ 687.545530][T11085] erspan0: left promiscuous mode [ 687.661900][T11093] tmpfs: Bad value for 'mpol' [ 687.987975][ T31] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 689.027966][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 689.035975][ T31] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 689.036006][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.036025][ T31] usb 4-1: Product: syz [ 689.036037][ T31] usb 4-1: Manufacturer: syz [ 689.036051][ T31] usb 4-1: SerialNumber: syz [ 689.101483][ T5839] Bluetooth: hci2: command tx timeout [ 689.555204][ T5904] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 689.584031][T11100] binder: 11099:11100 ioctl 40046205 0 returned -22 [ 689.596118][ T31] usb 4-1: config 0 descriptor?? [ 689.689692][T11101] fuse: Bad value for 'fd' [ 689.718313][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 689.736430][ T5904] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.736450][ T5904] usb 6-1: config 0 has no interface number 0 [ 689.749628][ T5904] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 689.749648][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.749661][ T5904] usb 6-1: Product: syz [ 689.749670][ T5904] usb 6-1: Manufacturer: syz [ 689.749679][ T5904] usb 6-1: SerialNumber: syz [ 689.797870][ T5904] usb 6-1: config 0 descriptor?? [ 689.804630][ T5904] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 689.804650][ T5904] usb 6-1: selecting invalid altsetting 1 [ 689.804660][ T5904] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 689.853044][ T5904] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 689.853276][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 689.853308][ T5904] usb 6-1: media controller created [ 689.911676][ T31] usb 4-1: USB disconnect, device number 31 [ 689.924057][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 690.597016][ T5904] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 690.597098][ T5904] zl10353_read_register: readreg error (reg=127, ret==-32) [ 690.776077][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.776279][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.166344][ T5839] Bluetooth: hci2: command tx timeout [ 691.289229][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 691.337086][T11117] ceph: No mds server is up or the cluster is laggy [ 691.677578][T11097] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 691.696452][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 691.696902][ T5904] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 691.951396][ T5904] usb 6-1: USB disconnect, device number 7 [ 692.828367][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 693.031942][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 693.037455][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 693.037488][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 693.037514][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 693.037548][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.037596][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 693.037621][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.251102][ T5839] Bluetooth: hci2: command tx timeout [ 693.277318][ T31] usb 1-1: usb_control_msg returned -71 [ 693.277375][ T31] usbtmc 1-1:16.0: can't read capabilities [ 693.321633][T11137] ucma_write: process 319 (syz.5.1414) changed security contexts after opening file descriptor, this is not allowed. [ 693.510490][T11082] chnl_net:caif_netlink_parms(): no params data found [ 693.612662][ T31] usb 1-1: USB disconnect, device number 27 [ 693.898781][T11125] Process accounting resumed [ 694.266895][T11147] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1415'. [ 694.321961][T11148] fuse: Bad value for 'fd' [ 695.327451][T10093] Bluetooth: hci2: command tx timeout [ 695.593778][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.593991][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.594199][T11082] bridge_slave_0: entered allmulticast mode [ 695.631403][T11082] bridge_slave_0: entered promiscuous mode [ 695.635008][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.635367][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.635587][T11082] bridge_slave_1: entered allmulticast mode [ 695.667766][T11082] bridge_slave_1: entered promiscuous mode [ 695.765910][T11159] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1418'. [ 695.765939][T11159] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1418'. [ 695.765955][T11159] netlink: 'syz.0.1418': attribute type 6 has an invalid length. [ 695.765968][T11159] netlink: 'syz.0.1418': attribute type 5 has an invalid length. [ 695.765980][T11159] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1418'. [ 696.006145][T11082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.062203][T11082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.372543][T11183] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1426'. [ 696.489584][ T1516] IPVS: stop unused estimator thread 0... [ 696.576928][T11082] team0: Port device team_slave_0 added [ 696.584908][T11082] team0: Port device team_slave_1 added [ 696.732053][ T37] audit: type=1400 audit(1758744628.497:560): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=11191 comm="syz.4.1430" src=1 dest=20000 netif=wpan0 [ 697.245090][T11197] fuse: Bad value for 'fd' [ 697.409146][T10093] Bluetooth: hci2: command 0x0405 tx timeout [ 697.777568][T11189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.909212][T11082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.909229][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.909255][T11082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.911711][T11082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.911726][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.911751][T11082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.333236][T11226] FAULT_INJECTION: forcing a failure. [ 700.333236][T11226] name failslab, interval 1, probability 0, space 0, times 0 [ 700.333272][T11226] CPU: 0 UID: 0 PID: 11226 Comm: syz.5.1438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 700.333296][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 700.333308][T11226] Call Trace: [ 700.333316][T11226] [ 700.333324][T11226] dump_stack_lvl+0x189/0x250 [ 700.333360][T11226] ? __pfx____ratelimit+0x10/0x10 [ 700.333392][T11226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.333421][T11226] ? __pfx__printk+0x10/0x10 [ 700.333445][T11226] ? __lock_acquire+0xab9/0xd20 [ 700.333487][T11226] should_fail_ex+0x46c/0x600 [ 700.333522][T11226] ? skb_clone+0x212/0x3a0 [ 700.333542][T11226] should_failslab+0xa8/0x100 [ 700.333571][T11226] ? skb_clone+0x212/0x3a0 [ 700.333589][T11226] kmem_cache_alloc_noprof+0x6e/0x310 [ 700.333623][T11226] skb_clone+0x212/0x3a0 [ 700.333648][T11226] __netlink_deliver_tap+0x404/0x850 [ 700.333697][T11226] ? netlink_deliver_tap+0x2e/0x1b0 [ 700.333728][T11226] netlink_deliver_tap+0x19c/0x1b0 [ 700.333757][T11226] netlink_unicast+0x811/0xa10 [ 700.333790][T11226] ? __pfx_netlink_unicast+0x10/0x10 [ 700.333817][T11226] ? netlink_sendmsg+0x642/0xb30 [ 700.333843][T11226] ? skb_put+0x11b/0x210 [ 700.333876][T11226] netlink_sendmsg+0x805/0xb30 [ 700.333914][T11226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.333951][T11226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.333972][T11226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.334002][T11226] __sock_sendmsg+0x21c/0x270 [ 700.334032][T11226] ____sys_sendmsg+0x508/0x820 [ 700.334058][T11226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.334107][T11226] ? import_iovec+0x74/0xa0 [ 700.334138][T11226] ___sys_sendmsg+0x21f/0x2a0 [ 700.334163][T11226] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.334224][T11226] ? __fget_files+0x2a/0x420 [ 700.334255][T11226] ? __fget_files+0x3a6/0x420 [ 700.334298][T11226] __x64_sys_sendmsg+0x1a1/0x260 [ 700.334323][T11226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.334357][T11226] ? __pfx_ksys_write+0x10/0x10 [ 700.334381][T11226] ? rcu_is_watching+0x15/0xb0 [ 700.334420][T11226] ? do_syscall_64+0xbe/0x3b0 [ 700.334445][T11226] do_syscall_64+0xfa/0x3b0 [ 700.334464][T11226] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.334507][T11226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.334527][T11226] ? clear_bhb_loop+0x60/0xb0 [ 700.334552][T11226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.334572][T11226] RIP: 0033:0x7f43f2dfeec9 [ 700.334589][T11226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.334606][T11226] RSP: 002b:00007f43f1066038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.334627][T11226] RAX: ffffffffffffffda RBX: 00007f43f3055fa0 RCX: 00007f43f2dfeec9 [ 700.334641][T11226] RDX: 0000000020004002 RSI: 0000200000000140 RDI: 0000000000000003 [ 700.334653][T11226] RBP: 00007f43f1066090 R08: 0000000000000000 R09: 0000000000000000 [ 700.334685][T11226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.334719][T11226] R13: 00007f43f3056038 R14: 00007f43f3055fa0 R15: 00007ffef2ad20f8 [ 700.334753][T11226] [ 700.707610][T11189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.741367][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1437'. [ 700.775098][T11082] hsr_slave_0: entered promiscuous mode [ 700.779121][T11082] hsr_slave_1: entered promiscuous mode [ 700.783295][T11082] debugfs: 'hsr0' already exists in 'hsr' [ 700.783321][T11082] Cannot create hsr debugfs directory [ 701.220519][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 701.434277][T11234] binder: 11232:11234 ioctl 40046205 0 returned -22 [ 701.589145][T11238] fuse: Bad value for 'fd' [ 701.896139][T11250] FAULT_INJECTION: forcing a failure. [ 701.896139][T11250] name failslab, interval 1, probability 0, space 0, times 0 [ 701.896558][T11250] CPU: 1 UID: 0 PID: 11250 Comm: syz.0.1446 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 701.896587][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 701.896600][T11250] Call Trace: [ 701.896608][T11250] [ 701.896616][T11250] dump_stack_lvl+0x189/0x250 [ 701.896652][T11250] ? __pfx____ratelimit+0x10/0x10 [ 701.896687][T11250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.896717][T11250] ? __pfx__printk+0x10/0x10 [ 701.896749][T11250] ? __pfx___might_resched+0x10/0x10 [ 701.896771][T11250] ? fs_reclaim_acquire+0x7d/0x100 [ 701.896798][T11250] should_fail_ex+0x46c/0x600 [ 701.896835][T11250] should_failslab+0xa8/0x100 [ 701.896873][T11250] __kmalloc_cache_noprof+0x6e/0x320 [ 701.896898][T11250] ? rolling_buffer_init+0x59/0x240 [ 701.896922][T11250] rolling_buffer_init+0x59/0x240 [ 701.896947][T11250] netfs_create_write_req+0x292/0x6c0 [ 701.896975][T11250] netfs_unbuffered_write_iter_locked+0x128/0x6f0 [ 701.897018][T11250] netfs_unbuffered_write_iter+0x4c7/0x660 [ 701.897065][T11250] vfs_write+0x5d5/0xb40 [ 701.897097][T11250] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 701.897125][T11250] ? __pfx_vfs_write+0x10/0x10 [ 701.897149][T11250] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 701.897189][T11250] ? mutex_lock_nested+0x154/0x1d0 [ 701.897213][T11250] ? fdget_pos+0x253/0x320 [ 701.897258][T11250] ksys_write+0x14b/0x260 [ 701.897290][T11250] ? __pfx_ksys_write+0x10/0x10 [ 701.897315][T11250] ? rcu_is_watching+0x15/0xb0 [ 701.897357][T11250] ? do_syscall_64+0xbe/0x3b0 [ 701.897382][T11250] do_syscall_64+0xfa/0x3b0 [ 701.897401][T11250] ? lockdep_hardirqs_on+0x9c/0x150 [ 701.897434][T11250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.897456][T11250] ? clear_bhb_loop+0x60/0xb0 [ 701.897484][T11250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.897506][T11250] RIP: 0033:0x7fef75bdeec9 [ 701.897526][T11250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.897544][T11250] RSP: 002b:00007fef73e46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 701.897567][T11250] RAX: ffffffffffffffda RBX: 00007fef75e35fa0 RCX: 00007fef75bdeec9 [ 701.897583][T11250] RDX: 000000000000f000 RSI: 0000200000000400 RDI: 0000000000000006 [ 701.897597][T11250] RBP: 00007fef73e46090 R08: 0000000000000000 R09: 0000000000000000 [ 701.897611][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.897624][T11250] R13: 00007fef75e36038 R14: 00007fef75e35fa0 R15: 00007ffd17f5cc68 [ 701.897661][T11250] [ 702.353174][T11189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.650754][T11255] gre1: entered promiscuous mode [ 703.650784][T11255] gre1: entered allmulticast mode [ 704.018833][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.198365][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.257814][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.314612][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.435724][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.735378][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.130926][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.760717][T11189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.312515][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.664239][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.712387][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.791885][T11287] binder: 11281:11287 ioctl 40046205 0 returned -22 [ 707.852169][T11282] fuse: Bad value for 'fd' [ 708.145696][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.391478][T11291] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 708.603911][ T1516] bridge_slave_1: left allmulticast mode [ 708.603941][ T1516] bridge_slave_1: left promiscuous mode [ 708.605562][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.928104][ T1516] bridge_slave_0: left allmulticast mode [ 708.928135][ T1516] bridge_slave_0: left promiscuous mode [ 708.928375][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.831731][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.090450][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.489253][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.942977][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.005528][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.212587][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.274063][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.376843][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.572436][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.817250][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.922145][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.997675][ T1516] bond0 (unregistering): Released all slaves [ 712.129770][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.646460][ T1516] hsr_slave_0: left promiscuous mode [ 712.721387][ T1516] hsr_slave_1: left promiscuous mode [ 712.722059][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.770856][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.168975][T10093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 713.194653][T10093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 713.204756][T10093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 713.209281][T10093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 713.219235][T10093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 713.679297][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.739230][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.860362][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.099951][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 714.287507][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 714.342170][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.471922][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.328779][ T5839] Bluetooth: hci1: command tx timeout [ 716.026550][ T5904] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 716.206681][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 716.224614][ T5904] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 716.224649][ T5904] usb 6-1: config 0 has no interface number 0 [ 716.244482][ T5904] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 716.244513][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.244535][ T5904] usb 6-1: Product: syz [ 716.244549][ T5904] usb 6-1: Manufacturer: syz [ 716.244565][ T5904] usb 6-1: SerialNumber: syz [ 716.283038][ T5904] usb 6-1: config 0 descriptor?? [ 716.295163][ T5904] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 716.295201][ T5904] usb 6-1: selecting invalid altsetting 1 [ 716.295219][ T5904] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 716.323455][ T5904] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 716.323875][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 716.323922][ T5904] usb 6-1: media controller created [ 716.370219][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 716.675773][ T5904] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 716.675848][ T5904] zl10353_read_register: readreg error (reg=127, ret==-32) [ 716.695337][ T37] audit: type=1326 audit(1758744648.457:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11330 comm="syz.4.1472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb1c4deec9 code=0x0 [ 717.411011][ T5839] Bluetooth: hci1: command tx timeout [ 717.728914][T11329] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 717.745799][ T5904] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 717.819259][ T5904] usb 6-1: USB disconnect, device number 8 [ 718.765347][T10093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 718.796345][T10093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 718.799879][T10093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 718.801153][T10093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 718.802479][T10093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 718.975982][T11082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 719.043832][T11320] chnl_net:caif_netlink_parms(): no params data found [ 719.099373][T11082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 719.288627][T11082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 719.416443][T11082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 719.486371][T10093] Bluetooth: hci1: command tx timeout [ 720.311544][T11375] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 720.616518][ T5904] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 720.776294][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 720.778682][ T5904] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 720.778708][ T5904] usb 6-1: config 0 has no interface number 0 [ 720.781550][ T5904] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 720.781577][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.781596][ T5904] usb 6-1: Product: syz [ 720.781610][ T5904] usb 6-1: Manufacturer: syz [ 720.781623][ T5904] usb 6-1: SerialNumber: syz [ 720.846443][ T5839] Bluetooth: hci4: command tx timeout [ 720.847985][ T5904] usb 6-1: config 0 descriptor?? [ 720.869558][ T5904] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 720.869584][ T5904] usb 6-1: selecting invalid altsetting 1 [ 720.869617][ T5904] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 720.898954][ T5904] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 720.899414][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 720.899460][ T5904] usb 6-1: media controller created [ 720.948963][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.252046][ T5904] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 721.252408][ T5904] zl10353_read_register: readreg error (reg=127, ret==-32) [ 721.576398][T10093] Bluetooth: hci1: command tx timeout [ 722.366599][T11382] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 722.383604][ T5904] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 722.465474][ T5904] usb 6-1: USB disconnect, device number 9 [ 722.926316][T10093] Bluetooth: hci4: command tx timeout [ 723.507191][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.567329][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.591863][ T1516] bond0 (unregistering): Released all slaves [ 723.662445][T11320] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.662664][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.662913][T11320] bridge_slave_0: entered allmulticast mode [ 723.666097][T11320] bridge_slave_0: entered promiscuous mode [ 723.737500][T11320] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.737672][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.737961][T11320] bridge_slave_1: entered allmulticast mode [ 723.740640][T11320] bridge_slave_1: entered promiscuous mode [ 724.062056][T11393] netlink: 'syz.4.1490': attribute type 10 has an invalid length. [ 724.147214][T11393] syz_tun: entered promiscuous mode [ 724.153938][T11393] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 724.303425][T11320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.313203][T11320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.871492][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.872298][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.007814][T10093] Bluetooth: hci4: command tx timeout [ 725.805133][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.821594][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.086517][T10093] Bluetooth: hci4: command tx timeout [ 727.733669][ T992] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.784206][T11320] team0: Port device team_slave_0 added [ 727.810363][ T992] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.818529][T11320] team0: Port device team_slave_1 added [ 727.838076][ T992] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.535439][ T992] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.734526][T11440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1500'. [ 728.748415][T11320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.748428][T11320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.748448][T11320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.803907][T11320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.803921][T11320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.803946][T11320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.504694][T11403] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 729.656625][T11403] usb 6-1: Using ep0 maxpacket: 32 [ 729.679159][T11403] usb 6-1: unable to get BOS descriptor or descriptor too short [ 729.709508][T11403] usb 6-1: config 14 has an invalid interface number: 115 but max is 0 [ 729.709574][T11403] usb 6-1: config 14 has no interface number 0 [ 729.709673][T11403] usb 6-1: config 14 interface 115 has no altsetting 0 [ 729.756122][T11403] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 729.756850][ T1516] hsr_slave_0: left promiscuous mode [ 729.758232][T11403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.758297][T11403] usb 6-1: Product: syz [ 729.758345][T11403] usb 6-1: Manufacturer: syz [ 729.758360][T11403] usb 6-1: SerialNumber: syz [ 730.507921][ T1516] hsr_slave_1: left promiscuous mode [ 730.569119][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.570795][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.376502][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.377299][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.355167][T11403] xr_serial 6-1:14.115: More than one union descriptor, skipping ... [ 732.369619][ T1516] veth1_macvtap: left promiscuous mode [ 732.369733][ T1516] veth0_macvtap: left promiscuous mode [ 732.370022][ T1516] veth1_vlan: left promiscuous mode [ 732.370226][ T1516] veth0_vlan: left promiscuous mode [ 732.385201][T11403] usb 6-1: USB disconnect, device number 10 [ 732.786980][ T1516] pimreg (unregistering): left allmulticast mode [ 734.537311][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 734.747195][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 737.544502][T11320] hsr_slave_0: entered promiscuous mode [ 737.545680][T11320] hsr_slave_1: entered promiscuous mode [ 737.601056][T11355] chnl_net:caif_netlink_parms(): no params data found [ 738.212165][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1509'. [ 741.661142][T11355] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.661363][T11355] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.676405][T11355] bridge_slave_0: entered allmulticast mode [ 741.686770][T11355] bridge_slave_0: entered promiscuous mode [ 741.803969][T11355] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.804098][T11355] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.804269][T11355] bridge_slave_1: entered allmulticast mode [ 741.830091][T11355] bridge_slave_1: entered promiscuous mode [ 741.886078][T11496] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1516'. [ 742.043238][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1518'. [ 742.448722][T11355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.478033][T11355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.762125][T11355] team0: Port device team_slave_0 added [ 742.775581][T11082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.779321][T11407] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 742.794907][T11355] team0: Port device team_slave_1 added [ 742.898677][T11517] openvswitch: netlink: IPv6 tunnel dst address is zero [ 742.959159][T11407] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 742.959193][T11407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.964764][T11407] usb 6-1: config 0 descriptor?? [ 743.157009][T11355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.157028][T11355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.157060][T11355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.290261][T11355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.290279][T11355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.290304][T11355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.406797][T11082] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.630181][T11407] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 743.630445][T11407] asix 6-1:0.0: probe with driver asix failed with error -61 [ 744.504694][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.504955][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.505984][T11320] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 744.711856][T11320] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 744.862439][T11355] hsr_slave_0: entered promiscuous mode [ 744.895816][T11355] hsr_slave_1: entered promiscuous mode [ 744.897329][T11355] debugfs: 'hsr0' already exists in 'hsr' [ 744.897359][T11355] Cannot create hsr debugfs directory [ 744.898403][T11320] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 744.985378][T11320] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 745.028529][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.028670][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.559354][ T9] usb 6-1: USB disconnect, device number 11 [ 747.248040][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1528'. [ 747.267283][T11355] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 747.334386][T11355] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 747.396399][T11355] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 747.461840][T11355] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 747.522765][T10093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 747.541193][T10093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 747.547434][T10093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 747.549180][T10093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 747.549981][T10093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 747.697313][T11320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.840824][T11320] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.000474][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.000711][T11098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.059880][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.060181][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.084893][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1537'. [ 749.315705][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1539'. [ 749.830270][ T5839] Bluetooth: hci6: command tx timeout [ 752.206841][T10093] Bluetooth: hci6: command tx timeout [ 752.226925][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.226997][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.684095][T11355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.701675][T11554] chnl_net:caif_netlink_parms(): no params data found [ 753.961482][T10093] Bluetooth: hci5: unexpected event for opcode 0x2007 [ 754.017014][T10093] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 754.249467][T11355] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.286300][T10093] Bluetooth: hci6: command tx timeout [ 755.471423][ T1516] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.471572][ T1516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.475882][T11554] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.476014][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.506925][T11554] bridge_slave_0: entered allmulticast mode [ 755.513866][T11554] bridge_slave_0: entered promiscuous mode [ 755.565305][T11554] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.565456][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.565646][T11554] bridge_slave_1: entered allmulticast mode [ 755.600434][T11554] bridge_slave_1: entered promiscuous mode [ 756.366344][T10093] Bluetooth: hci6: command tx timeout [ 756.561185][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.561329][T11098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.585242][T11554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.619126][T11554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.779281][T11402] libceph: connect (1)[c::]:6789 error -101 [ 756.779552][T11402] libceph: mon0 (1)[c::]:6789 connect error [ 756.782387][T11402] libceph: connect (1)[c::]:6789 error -101 [ 756.782571][T11402] libceph: mon0 (1)[c::]:6789 connect error [ 756.925139][T11554] team0: Port device team_slave_0 added [ 756.960276][T11320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.963974][T11554] team0: Port device team_slave_1 added [ 756.964781][ T13] bridge_slave_1: left allmulticast mode [ 756.964810][ T13] bridge_slave_1: left promiscuous mode [ 756.965057][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.036887][T11407] libceph: connect (1)[c::]:6789 error -101 [ 757.037116][T11407] libceph: mon0 (1)[c::]:6789 connect error [ 757.070442][ T13] bridge_slave_0: left allmulticast mode [ 757.070473][ T13] bridge_slave_0: left promiscuous mode [ 757.070733][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.506384][T11666] ceph: No mds server is up or the cluster is laggy [ 757.549583][ T9] libceph: connect (1)[c::]:6789 error -101 [ 757.549812][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 757.729858][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 757.730102][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 757.730725][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 757.730943][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 757.986779][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 757.987023][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 758.478050][T11672] ceph: No mds server is up or the cluster is laggy [ 758.498989][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 758.499205][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 758.581608][T11676] openvswitch: netlink: IPv6 tunnel dst address is zero [ 759.014030][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.087599][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.121038][ T13] bond0 (unregistering): Released all slaves [ 760.721500][T11554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.721517][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.721541][T11554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.436028][T11554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.436045][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.436072][T11554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.816451][ T13] hsr_slave_0: left promiscuous mode [ 762.986429][ T13] hsr_slave_1: left promiscuous mode [ 762.987384][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.027220][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.797172][ T13] team0 (unregistering): Port device team_slave_1 removed [ 763.996774][ T13] team0 (unregistering): Port device team_slave_0 removed [ 766.000125][T11554] hsr_slave_0: entered promiscuous mode [ 766.006030][T11554] hsr_slave_1: entered promiscuous mode [ 766.025680][T11554] debugfs: 'hsr0' already exists in 'hsr' [ 766.025699][T11554] Cannot create hsr debugfs directory [ 766.049982][T11407] libceph: connect (1)[c::]:6789 error -101 [ 766.050217][T11407] libceph: mon0 (1)[c::]:6789 connect error [ 766.054221][T11407] libceph: connect (1)[c::]:6789 error -101 [ 766.054426][T11407] libceph: mon0 (1)[c::]:6789 connect error [ 766.317887][T11407] libceph: connect (1)[c::]:6789 error -101 [ 766.318079][T11407] libceph: mon0 (1)[c::]:6789 connect error [ 766.660225][T11705] ceph: No mds server is up or the cluster is laggy [ 767.408744][T11320] veth0_vlan: entered promiscuous mode [ 767.634687][T11320] veth1_vlan: entered promiscuous mode [ 767.768145][T11355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.242154][T11320] veth0_macvtap: entered promiscuous mode [ 768.282554][T11320] veth1_macvtap: entered promiscuous mode [ 768.537886][T11320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.545373][T11320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.575104][ T5976] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.575479][ T5976] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.575641][ T5976] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.575756][ T5976] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.270125][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.270158][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.358860][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'. [ 769.892459][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.892479][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.031717][T11554] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 770.126291][T11554] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 771.134068][T11554] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 771.257676][T11554] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 773.558238][T11355] veth0_vlan: entered promiscuous mode [ 773.595416][T11355] veth1_vlan: entered promiscuous mode [ 774.625487][T11355] veth0_macvtap: entered promiscuous mode [ 774.643628][T11355] veth1_macvtap: entered promiscuous mode [ 774.776033][T11355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.845698][T11355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.910989][ T67] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.914129][ T67] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.923595][ T67] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.940180][ T67] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.971298][T11554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.084903][T10093] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 776.000059][T11554] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.065156][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.065546][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.182360][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.186046][T11098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.253274][T11098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.253292][T11098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.495470][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.495491][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.006786][ T37] audit: type=1326 audit(1758744709.767:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.7.1589" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a6348eec9 code=0x0 [ 778.183670][T11796] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 778.183697][T11796] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 779.044080][ C1] vkms_vblank_simulate: vblank timer overrun [ 779.852825][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.173714][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.260905][T11554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.601512][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.908110][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.004992][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.579333][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.068312][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1598'. [ 782.365434][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.632252][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.875120][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.474437][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.909457][T11554] veth0_vlan: entered promiscuous mode [ 784.941518][T11554] veth1_vlan: entered promiscuous mode [ 784.947623][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.146843][T11554] veth0_macvtap: entered promiscuous mode [ 785.172701][T11554] veth1_macvtap: entered promiscuous mode [ 785.297911][T11554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.362786][T11554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.392935][T11098] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.395164][T11098] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.399119][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.446778][T11098] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.161667][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.188348][T11098] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.018119][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.077632][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.057697][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.236960][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.236983][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.266989][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 789.171519][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.327537][ T9] usb 9-1: device descriptor read/64, error -71 [ 789.395130][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.395152][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.566281][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 789.611582][T11405] libceph: connect (1)[c::]:6789 error -101 [ 789.611783][T11405] libceph: mon0 (1)[c::]:6789 connect error [ 790.023119][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'. [ 790.023159][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'. [ 790.412301][T11405] libceph: connect (1)[c::]:6789 error -101 [ 790.412538][T11405] libceph: mon0 (1)[c::]:6789 connect error [ 790.414678][ T9] usb 9-1: device descriptor read/64, error -71 [ 790.538333][ T9] usb usb9-port1: attempt power cycle [ 790.598614][T11905] ceph: No mds server is up or the cluster is laggy [ 791.339821][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 791.940887][ T9] usb 9-1: device descriptor read/8, error -71 [ 794.729858][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.302284][T11955] syz.5.1625: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 795.302465][T11955] CPU: 0 UID: 0 PID: 11955 Comm: syz.5.1625 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 795.302481][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 795.302491][T11955] Call Trace: [ 795.302496][T11955] [ 795.302501][T11955] dump_stack_lvl+0x189/0x250 [ 795.302528][T11955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.302549][T11955] ? __pfx__printk+0x10/0x10 [ 795.302564][T11955] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 795.302579][T11955] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 795.302595][T11955] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 795.302611][T11955] warn_alloc+0x22e/0x3b0 [ 795.302624][T11955] ? stack_trace_save+0x9c/0xe0 [ 795.302643][T11955] ? __pfx_warn_alloc+0x10/0x10 [ 795.302659][T11955] ? __kasan_kmalloc+0x93/0xb0 [ 795.302676][T11955] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 795.302699][T11955] ? xskq_create+0x56/0x170 [ 795.302718][T11955] ? xsk_init_queue+0xb0/0x110 [ 795.302735][T11955] ? xsk_setsockopt+0x4dc/0x8d0 [ 795.302752][T11955] ? do_sock_setsockopt+0x179/0x1b0 [ 795.302772][T11955] ? __x64_sys_setsockopt+0x145/0x1b0 [ 795.302784][T11955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.302802][T11955] __vmalloc_node_range_noprof+0x125/0x12f0 [ 795.302842][T11955] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 795.302867][T11955] ? __kasan_kmalloc+0x93/0xb0 [ 795.302886][T11955] vmalloc_user_noprof+0xad/0xf0 [ 795.302905][T11955] ? xskq_create+0xbf/0x170 [ 795.302925][T11955] xskq_create+0xbf/0x170 [ 795.302952][T11955] xsk_init_queue+0xb0/0x110 [ 795.302973][T11955] xsk_setsockopt+0x4dc/0x8d0 [ 795.302993][T11955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 795.303020][T11955] ? __fget_files+0x2a/0x420 [ 795.303039][T11955] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 795.303052][T11955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 795.303072][T11955] do_sock_setsockopt+0x179/0x1b0 [ 795.303096][T11955] __x64_sys_setsockopt+0x145/0x1b0 [ 795.303112][T11955] do_syscall_64+0xfa/0x3b0 [ 795.303124][T11955] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.303144][T11955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.303157][T11955] ? clear_bhb_loop+0x60/0xb0 [ 795.303173][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.303186][T11955] RIP: 0033:0x7f43f2dfeec9 [ 795.303198][T11955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.303209][T11955] RSP: 002b:00007f43f1066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 795.303222][T11955] RAX: ffffffffffffffda RBX: 00007f43f3055fa0 RCX: 00007f43f2dfeec9 [ 795.303232][T11955] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 795.303258][T11955] RBP: 00007f43f2e81f91 R08: 0000000000000004 R09: 0000000000000000 [ 795.303266][T11955] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.303275][T11955] R13: 00007f43f3056038 R14: 00007f43f3055fa0 R15: 00007ffef2ad20f8 [ 795.303298][T11955] [ 795.303308][T11955] Mem-Info: [ 795.303317][T11955] active_anon:1328 inactive_anon:6916 isolated_anon:0 [ 795.303317][T11955] active_file:23072 inactive_file:38293 isolated_file:0 [ 795.303317][T11955] unevictable:16188 dirty:151 writeback:0 [ 795.303317][T11955] slab_reclaimable:12811 slab_unreclaimable:112344 [ 795.303317][T11955] mapped:37776 shmem:5282 pagetables:967 [ 795.303317][T11955] sec_pagetables:0 bounce:0 [ 795.303317][T11955] kernel_misc_reclaimable:0 [ 795.303317][T11955] free:1275066 free_pcp:1365 free_cma:0 [ 795.303355][T11955] Node 0 active_anon:5312kB inactive_anon:27664kB active_file:92084kB inactive_file:153172kB unevictable:63216kB isolated(anon):0kB isolated(file):0kB mapped:151104kB dirty:604kB writeback:0kB shmem:19592kB kernel_stack:13244kB pagetables:3724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 795.303388][T11955] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 795.303418][T11955] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.303461][T11955] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 795.303485][T11955] Node 0 DMA32 free:1179988kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5308kB inactive_anon:27624kB active_file:91056kB inactive_file:153112kB unevictable:63216kB writepending:604kB present:3129332kB managed:2572288kB mlocked:0kB bounce:0kB free_pcp:5460kB local_pcp:2172kB free_cma:0kB [ 795.303528][T11955] lowmem_reserve[]: 0 0 1 1 1 [ 795.303549][T11955] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1028kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.303588][T11955] lowmem_reserve[]: 0 0 0 0 0 [ 795.303610][T11955] Node 1 Normal free:3904916kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.303650][T11955] lowmem_reserve[]: 0 0 0 0 0 [ 795.303672][T11955] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 795.304202][T11955] Node 0 DMA32: 150*4kB (UME) 196*8kB (UM) 739*16kB (UME) 1639*32kB (UME) 581*64kB (UME) 219*128kB (UME) 89*256kB (UME) 31*512kB (UME) 12*1024kB (UME) 7*2048kB (ME) 240*4096kB (M) = 1179976kB [ 795.304303][T11955] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 795.304366][T11955] Node 1 Normal: 187*4kB (UE) 47*8kB (UME) 31*16kB (UME) 194*32kB (UME) 78*64kB (UME) 33*128kB (UME) 13*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3904916kB [ 795.304465][T11955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.304476][T11955] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 795.304487][T11955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.304497][T11955] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 795.304508][T11955] 82065 total pagecache pages [ 795.304517][T11955] 1 pages in swap cache [ 795.304522][T11955] Free swap = 124992kB [ 795.304527][T11955] Total swap = 124996kB [ 795.304532][T11955] 2097051 pages RAM [ 795.304536][T11955] 0 pages HighMem/MovableOnly [ 795.304541][T11955] 422081 pages reserved [ 795.304546][T11955] 0 pages cma reserved [ 796.756314][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.867519][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.015171][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.162683][T11955] tty tty4: ldisc open failed (-12), clearing slot 3 [ 797.422903][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.590748][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.625703][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.730431][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.830234][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.956926][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.027590][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.426188][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.019332][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.039150][T11405] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 799.190747][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.496346][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.526302][T11405] usb 9-1: Using ep0 maxpacket: 16 [ 799.530246][T11405] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 799.530271][T11405] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 799.530291][T11405] usb 9-1: SerialNumber: syz [ 799.535261][T11405] usb 9-1: config 0 descriptor?? [ 799.612939][T11405] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 799.614617][T11405] usb 9-1: Detected FT232A [ 800.584945][T11405] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 801.302816][T11405] usb 9-1: USB disconnect, device number 6 [ 801.325294][T11405] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 801.339464][T11405] ftdi_sio 9-1:0.0: device disconnected [ 801.586331][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 801.774961][ T9] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 801.774989][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.775009][ T9] usb 6-1: Product: syz [ 801.775020][ T9] usb 6-1: Manufacturer: syz [ 801.775030][ T9] usb 6-1: SerialNumber: syz [ 801.810406][ T9] usb 6-1: config 0 descriptor?? [ 801.830492][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 801.853854][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 801.855961][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 801.856013][ T9] usb 6-1: media controller created [ 801.921092][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 801.997772][ T9] DVB: Unable to find symbol mt352_attach() [ 802.246904][ T9] DVB: Unable to find symbol nxt6000_attach() [ 802.246959][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 802.397082][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 802.727884][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 802.727906][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 802.733932][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 802.734804][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 803.136272][T11405] usb 6-1: USB disconnect, device number 12 [ 803.336325][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1641'. [ 803.337464][ T37] audit: type=1800 audit(1758744735.067:563): pid=12018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1644" name="nullb0" dev="tmpfs" ino=2484 res=0 errno=0 [ 803.397049][T11405] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 806.483281][T12042] binder: 12040:12042 ioctl 40046205 0 returned -22 [ 807.549025][T12052] fuse: Bad value for 'fd' [ 807.929949][ T6462] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 807.969830][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1658'. [ 808.081065][ T6462] usb 6-1: Using ep0 maxpacket: 32 [ 808.083396][ T6462] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.087534][ T6462] usb 6-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice= 8.68 [ 808.087570][ T6462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.087596][ T6462] usb 6-1: Product: syz [ 808.087613][ T6462] usb 6-1: Manufacturer: syz [ 808.087631][ T6462] usb 6-1: SerialNumber: syz [ 808.101646][ T6462] usb 6-1: config 0 descriptor?? [ 808.114108][ T6462] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 808.403355][ T6462] gspca_sn9c2028: read1 error -71 [ 808.405160][ T6462] gspca_sn9c2028: read1 error -71 [ 808.406313][ T6462] gspca_sn9c2028: read1 error -71 [ 808.406398][ T6462] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 808.410121][ T6462] usb 6-1: USB disconnect, device number 13 [ 809.686463][ T5839] Bluetooth: hci6: command 0x0405 tx timeout [ 810.813260][T12093] overlayfs: failed to clone upperpath [ 812.070567][T12106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1670'. [ 812.299307][T12108] IPVS: set_ctl: invalid protocol: 22 172.30.1.5:20002 [ 813.464501][T12117] openvswitch: netlink: IPv6 tunnel dst address is zero [ 813.654709][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.654781][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.992408][T12119] overlayfs: missing 'lowerdir' [ 815.946552][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1681'. [ 817.173705][T12152] fuse: Unknown parameter ' d' [ 820.513912][T10093] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 820.866829][T12192] batadv0: entered promiscuous mode [ 821.137055][T12192] bond0: entered promiscuous mode [ 821.137081][T12192] bond_slave_0: entered promiscuous mode [ 821.137622][T12192] bond_slave_1: entered promiscuous mode [ 821.140600][T12192] hsr1: entered allmulticast mode [ 821.140618][T12192] batadv0: entered allmulticast mode [ 821.140639][T12192] bond0: entered allmulticast mode [ 821.140652][T12192] bond_slave_0: entered allmulticast mode [ 821.140672][T12192] bond_slave_1: entered allmulticast mode [ 821.140692][T12192] syz_tun: entered allmulticast mode [ 821.142839][T12192] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 822.818424][T12203] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1694'. [ 823.166317][ T6462] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 823.441248][ T6462] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 823.441275][ T6462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.441288][ T6462] usb 6-1: Product: syz [ 823.441297][ T6462] usb 6-1: Manufacturer: syz [ 823.441319][ T6462] usb 6-1: SerialNumber: syz [ 823.444805][ T6462] usb 6-1: config 0 descriptor?? [ 823.458062][ T6462] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 823.462575][ T6462] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.463633][ T6462] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 823.463696][ T6462] usb 6-1: media controller created [ 824.477949][ T6462] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.750380][ T6462] DVB: Unable to find symbol mt352_attach() [ 824.815810][ T6462] DVB: Unable to find symbol nxt6000_attach() [ 824.815827][ T6462] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 824.848019][ T6462] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 824.879207][ T6462] dvb-usb: schedule remote query interval to 1000 msecs. [ 824.879228][ T6462] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 824.879244][ T6462] dvb-usb: bulk message failed: -22 (7/0) [ 824.879259][ T6462] dvb-usb: bulk message failed: -22 (7/0) [ 824.921489][ T6462] usb 6-1: USB disconnect, device number 14 [ 825.033798][T12228] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1702'. [ 825.962004][ T6462] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 826.686896][T12244] netlink: 'syz.4.1705': attribute type 8 has an invalid length. [ 827.510706][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 827.538868][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 827.542039][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 827.556430][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 827.565360][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 827.750813][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1706'. [ 829.745510][T10093] Bluetooth: hci2: command tx timeout [ 829.754657][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1714'. [ 830.488918][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.914711][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.686628][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.692737][T10093] Bluetooth: hci2: command tx timeout [ 834.188940][ T6462] IPVS: starting estimator thread 0... [ 834.273516][T12255] chnl_net:caif_netlink_parms(): no params data found [ 834.441028][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.442806][T12295] IPVS: using max 8 ests per chain, 19200 per kthread [ 834.867065][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.898287][T10093] Bluetooth: hci2: command tx timeout [ 836.206265][T10093] Bluetooth: hci1: command 0x0406 tx timeout [ 837.066553][T11404] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 837.219232][T11404] usb 6-1: Using ep0 maxpacket: 32 [ 837.495375][T11404] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 837.495402][T11404] usb 6-1: config 0 has no interface number 0 [ 837.848531][T11404] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 837.848561][T11404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.849021][T11404] usb 6-1: Product: syz [ 837.849038][T11404] usb 6-1: Manufacturer: syz [ 837.849052][T11404] usb 6-1: SerialNumber: syz [ 837.977589][T10093] Bluetooth: hci2: command tx timeout [ 838.352285][T11404] usb 6-1: config 0 descriptor?? [ 838.533074][T11404] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 838.533341][T11404] usb 6-1: selecting invalid altsetting 1 [ 838.533548][T11404] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 838.781777][T11404] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 838.814621][T11404] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 838.815998][T11404] usb 6-1: media controller created [ 839.002883][T12326] FAULT_INJECTION: forcing a failure. [ 839.002883][T12326] name failslab, interval 1, probability 0, space 0, times 0 [ 839.002914][T12326] CPU: 0 UID: 0 PID: 12326 Comm: syz.8.1725 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 839.002936][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 839.002948][T12326] Call Trace: [ 839.002956][T12326] [ 839.002965][T12326] dump_stack_lvl+0x189/0x250 [ 839.003014][T12326] ? __pfx____ratelimit+0x10/0x10 [ 839.003049][T12326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.003077][T12326] ? __pfx__printk+0x10/0x10 [ 839.003104][T12326] ? __pfx___might_resched+0x10/0x10 [ 839.003127][T12326] ? fs_reclaim_acquire+0x7d/0x100 [ 839.003150][T12326] should_fail_ex+0x46c/0x600 [ 839.003184][T12326] should_failslab+0xa8/0x100 [ 839.003213][T12326] __kmalloc_cache_node_noprof+0x78/0x340 [ 839.003239][T12326] ? __alloc_workqueue+0x8ec/0x1b70 [ 839.003262][T12326] __alloc_workqueue+0x8ec/0x1b70 [ 839.003301][T12326] alloc_workqueue_noprof+0xd4/0x210 [ 839.003333][T12326] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 839.003366][T12326] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 839.003394][T12326] ? __fget_files+0x2a/0x420 [ 839.003425][T12326] ? __asan_memcpy+0x40/0x70 [ 839.003446][T12326] ? loop_set_status_from_info+0x185/0x250 [ 839.003475][T12326] loop_configure+0x71b/0xe60 [ 839.003511][T12326] ? __pfx_loop_configure+0x10/0x10 [ 839.003566][T12326] lo_ioctl+0x816/0x1c30 [ 839.003592][T12326] ? do_raw_spin_lock+0x121/0x290 [ 839.003618][T12326] ? __pfx_lo_ioctl+0x10/0x10 [ 839.003644][T12326] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 839.003674][T12326] ? lockdep_hardirqs_on+0x9c/0x150 [ 839.003705][T12326] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 839.003735][T12326] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 839.003763][T12326] ? do_raw_spin_lock+0x121/0x290 [ 839.003795][T12326] ? rt_mutex_slowunlock+0x493/0x8a0 [ 839.003823][T12326] ? __lock_acquire+0xab9/0xd20 [ 839.003856][T12326] ? __lock_acquire+0xab9/0xd20 [ 839.003894][T12326] ? __lock_acquire+0xab9/0xd20 [ 839.003932][T12326] ? __lock_acquire+0xab9/0xd20 [ 839.003976][T12326] ? is_bpf_text_address+0x26/0x2b0 [ 839.004008][T12326] ? is_bpf_text_address+0x292/0x2b0 [ 839.004034][T12326] ? is_bpf_text_address+0x26/0x2b0 [ 839.004063][T12326] ? kernel_text_address+0xa5/0xe0 [ 839.004084][T12326] ? __kernel_text_address+0xd/0x40 [ 839.004103][T12326] ? unwind_get_return_address+0x4d/0x90 [ 839.004130][T12326] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 839.004152][T12326] ? arch_stack_walk+0xfc/0x150 [ 839.004192][T12326] ? stack_trace_save+0x9c/0xe0 [ 839.004212][T12326] ? __pfx_stack_trace_save+0x10/0x10 [ 839.004235][T12326] ? stack_depot_save_flags+0x40/0x860 [ 839.004275][T12326] ? kasan_save_track+0x4f/0x80 [ 839.004296][T12326] ? kasan_save_track+0x3e/0x80 [ 839.004317][T12326] ? kasan_save_free_info+0x46/0x50 [ 839.004333][T12326] ? __kasan_slab_free+0x5b/0x80 [ 839.004355][T12326] ? kfree+0x195/0x550 [ 839.004377][T12326] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 839.004399][T12326] ? security_file_ioctl+0xcb/0x2d0 [ 839.004422][T12326] ? __se_sys_ioctl+0x47/0x170 [ 839.004442][T12326] ? do_syscall_64+0xfa/0x3b0 [ 839.004459][T12326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.004502][T12326] ? __asan_memset+0x22/0x50 [ 839.004523][T12326] ? blk_get_meta_cap+0x140/0x710 [ 839.004549][T12326] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 839.004571][T12326] ? kasan_quarantine_put+0xdd/0x220 [ 839.004601][T12326] ? blkdev_common_ioctl+0xff7/0x2560 [ 839.004625][T12326] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 839.004651][T12326] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 839.004676][T12326] ? do_vfs_ioctl+0xbeb/0x1440 [ 839.004731][T12326] ? __pfx_smack_file_ioctl+0x10/0x10 [ 839.004755][T12326] ? __pfx_lo_ioctl+0x10/0x10 [ 839.004779][T12326] blkdev_ioctl+0x5a8/0x6d0 [ 839.004804][T12326] ? __pfx_blkdev_ioctl+0x10/0x10 [ 839.004824][T12326] ? __fget_files+0x2a/0x420 [ 839.004854][T12326] ? bpf_lsm_file_ioctl+0x9/0x20 [ 839.004877][T12326] ? __pfx_blkdev_ioctl+0x10/0x10 [ 839.004899][T12326] __se_sys_ioctl+0xff/0x170 [ 839.004923][T12326] do_syscall_64+0xfa/0x3b0 [ 839.004940][T12326] ? lockdep_hardirqs_on+0x9c/0x150 [ 839.004968][T12326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.004986][T12326] ? clear_bhb_loop+0x60/0xb0 [ 839.005009][T12326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.005029][T12326] RIP: 0033:0x7fd5ff1aeec9 [ 839.005046][T12326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.005062][T12326] RSP: 002b:00007fd5fd416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.005083][T12326] RAX: ffffffffffffffda RBX: 00007fd5ff405fa0 RCX: 00007fd5ff1aeec9 [ 839.005098][T12326] RDX: 0000200000000400 RSI: 0000000000004c0a RDI: 0000000000000003 [ 839.005110][T12326] RBP: 00007fd5fd416090 R08: 0000000000000000 R09: 0000000000000000 [ 839.005123][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.005134][T12326] R13: 00007fd5ff406038 R14: 00007fd5ff405fa0 R15: 00007ffd8a3f4898 [ 839.005165][T12326] [ 839.218202][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.218423][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.218683][T12255] bridge_slave_0: entered allmulticast mode [ 839.230727][T12255] bridge_slave_0: entered promiscuous mode [ 839.245894][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.246039][T12255] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.247667][T12255] bridge_slave_1: entered allmulticast mode [ 839.250410][T12255] bridge_slave_1: entered promiscuous mode [ 839.294993][T11404] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.739150][T11404] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 839.739220][T11404] zl10353_read_register: readreg error (reg=127, ret==-71) [ 839.739646][T11404] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 839.838000][T11404] usb 6-1: USB disconnect, device number 15 [ 839.875459][T12337] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 839.935779][T12341] loop4: detected capacity change from 0 to 7 [ 839.949829][T12341] Dev loop4: unable to read RDB block 7 [ 839.949873][T12341] loop4: unable to read partition table [ 839.950088][T12341] loop4: partition table beyond EOD, truncated [ 839.950105][T12341] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 841.229155][T12255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.237478][T12255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.214743][T10093] Bluetooth: hci4: command 0x0406 tx timeout [ 843.501873][T12360] 8021q: VLANs not supported on wg0 [ 843.773758][T12369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.144563][T12371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.199843][T12369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.337940][T12255] team0: Port device team_slave_0 added [ 844.341443][T12255] team0: Port device team_slave_1 added [ 844.473520][T12381] 9pnet_fd: Insufficient options for proto=fd [ 844.534691][T12382] netlink: 'syz.4.1742': attribute type 21 has an invalid length. [ 844.534714][T12382] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1742'. [ 844.687591][T12255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.687611][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.687644][T12255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.824051][T12255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.824069][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.824098][T12255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.032928][T12402] openvswitch: netlink: IPv6 tunnel dst address is zero [ 846.436291][ T5924] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 846.454732][ T6462] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 846.544520][T12255] hsr_slave_0: entered promiscuous mode [ 846.545819][T12255] hsr_slave_1: entered promiscuous mode [ 846.568527][T12255] debugfs: 'hsr0' already exists in 'hsr' [ 846.568554][T12255] Cannot create hsr debugfs directory [ 846.586281][ T5924] usb 7-1: Using ep0 maxpacket: 16 [ 846.594863][ T5924] usb 7-1: config 0 has an invalid interface number: 24 but max is 0 [ 846.594887][ T5924] usb 7-1: config 0 has no interface number 0 [ 846.594954][ T5924] usb 7-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.594979][ T5924] usb 7-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.595017][ T5924] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 846.595039][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.663571][ T5924] usb 7-1: config 0 descriptor?? [ 846.678179][ T6462] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.678230][ T6462] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 846.678253][ T6462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.683208][ T6462] usb 6-1: config 0 descriptor?? [ 846.752544][ T6462] pwc: Askey VC010 type 2 USB webcam detected. [ 847.287294][ T6462] pwc: recv_control_msg error -32 req 02 val 2b00 [ 847.303014][ T6462] pwc: recv_control_msg error -32 req 02 val 2700 [ 847.314405][T11405] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 847.328883][ T6462] pwc: recv_control_msg error -32 req 02 val 2c00 [ 847.332382][ T6462] pwc: recv_control_msg error -32 req 04 val 1000 [ 847.335261][ T6462] pwc: recv_control_msg error -32 req 04 val 1300 [ 847.357577][ T6462] pwc: recv_control_msg error -32 req 04 val 1400 [ 847.359864][ T6462] pwc: recv_control_msg error -32 req 02 val 2000 [ 847.362149][ T6462] pwc: recv_control_msg error -32 req 02 val 2100 [ 847.400780][ T5924] usbhid 7-1:0.24: can't add hid device: -71 [ 847.400957][ T5924] usbhid 7-1:0.24: probe with driver usbhid failed with error -71 [ 847.421236][ T5924] usb 7-1: USB disconnect, device number 2 [ 847.467618][T11405] usb 9-1: Using ep0 maxpacket: 32 [ 847.472861][T11405] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 847.472887][T11405] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.482812][T11405] usb 9-1: config 0 descriptor?? [ 847.512535][T11405] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 847.565379][ T6462] pwc: recv_control_msg error -32 req 02 val 2500 [ 847.589288][ T6462] pwc: recv_control_msg error -32 req 02 val 2400 [ 847.590642][ T6462] pwc: recv_control_msg error -32 req 02 val 2600 [ 847.591415][ T6462] pwc: recv_control_msg error -32 req 02 val 2900 [ 847.592790][ T6462] pwc: recv_control_msg error -32 req 02 val 2800 [ 847.595049][T12404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.595551][T12404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.618593][T11405] gspca_nw80x: reg_r err -110 [ 848.618698][T11405] nw80x 9-1:0.0: probe with driver nw80x failed with error -110 [ 848.800306][ T6462] pwc: Registered as video103. [ 848.803281][ T6462] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 848.823213][ T6462] usb 6-1: USB disconnect, device number 16 [ 848.855650][ T38] INFO: task syz-executor:5836 blocked for more than 143 seconds. [ 848.855691][ T38] Not tainted syzkaller #0 [ 848.855723][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.855755][ T38] task:syz-executor state:D stack:21832 pid:5836 tgid:5836 ppid:1 task_flags:0x400140 flags:0x00004004 [ 848.855829][ T38] Call Trace: [ 848.855859][ T38] [ 848.855915][ T38] __schedule+0x16f3/0x4c20 [ 848.858072][ T38] ? __lock_acquire+0xab9/0xd20 [ 848.858149][ T38] ? __pfx___schedule+0x10/0x10 [ 848.858323][ T38] ? schedule+0x91/0x360 [ 848.858423][ T38] schedule+0x165/0x360 [ 848.858498][ T38] v9fs_evict_inode+0x170/0x320 [ 848.858575][ T38] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 848.858626][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 848.858659][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 848.858783][ T38] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 848.858844][ T38] evict+0x501/0x9c0 [ 848.858961][ T38] ? __pfx_evict+0x10/0x10 [ 848.859052][ T38] ? iput+0x6d8/0x9d0 [ 848.859154][ T38] __dentry_kill+0x209/0x660 [ 848.859208][ T38] ? dput+0x37/0x2b0 [ 848.859279][ T38] dput+0x19f/0x2b0 [ 848.859350][ T38] shrink_dcache_for_umount+0xa0/0x170 [ 848.859397][ T38] generic_shutdown_super+0x67/0x2c0 [ 848.859453][ T38] kill_anon_super+0x3b/0x70 [ 848.859500][ T38] v9fs_kill_super+0x4c/0x90 [ 848.859574][ T38] deactivate_locked_super+0xb9/0x130 [ 848.859641][ T38] cleanup_mnt+0x425/0x4c0 [ 848.859706][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 848.859783][ T38] task_work_run+0x1d4/0x260 [ 848.859850][ T38] ? __pfx_task_work_run+0x10/0x10 [ 848.859890][ T38] ? __x64_sys_umount+0x122/0x160 [ 848.859985][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 848.860060][ T38] exit_to_user_mode_loop+0xec/0x110 [ 848.860110][ T38] do_syscall_64+0x2bd/0x3b0 [ 848.860152][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 848.860205][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.860226][ T38] ? clear_bhb_loop+0x60/0xb0 [ 848.860294][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.860337][ T38] RIP: 0033:0x7fef75be01f7 [ 848.860376][ T38] RSP: 002b:00007ffd17f5bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 848.860465][ T38] RAX: 0000000000000000 RBX: 00007fef75c61d7d RCX: 00007fef75be01f7 [ 848.860501][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd17f5bfb0 [ 848.860536][ T38] RBP: 00007ffd17f5bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 848.860571][ T38] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd17f5d040 [ 848.860607][ T38] R13: 00007fef75c61d7d R14: 00000000000ab521 R15: 00007ffd17f5d080 [ 848.860744][ T38] [ 848.861029][ T38] [ 848.861029][ T38] Showing all locks held in the system: [ 848.861042][ T38] 1 lock held by khungtaskd/38: [ 848.861088][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 848.861434][ T38] 2 locks held by getty/5596: [ 848.861468][ T38] #0: ffff88823bf540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 848.861652][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 848.861831][ T38] 1 lock held by syz-executor/5836: [ 848.861864][ T38] #0: ffff888010c7e0d0 (&type->s_umount_key#85){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 848.861940][ T38] 4 locks held by kworker/1:5/5924: [ 848.861974][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 848.862175][ T38] #1: ffffc900050a7bc0 (kernfs_notify_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 848.862353][ T38] #2: ffff88801988c348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_notify_workfn+0xed/0x5f0 [ 848.862547][ T38] #3: ffff88801988c238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_notify_workfn+0x101/0x5f0 [ 848.862716][ T38] 2 locks held by kworker/u8:14/5974: [ 848.862751][ T38] 9 locks held by kworker/1:8/6462: [ 848.862812][ T38] 1 lock held by syz.7.1664/12081: [ 848.862824][ T38] #0: ffff888010c7e0d0 (&type->s_umount_key#85){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 848.862899][ T38] 1 lock held by syz.7.1664/12082: [ 848.862932][ T38] #0: ffff888010c7e0d0 (&type->s_umount_key#85){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 848.863133][ T38] 1 lock held by syz.7.1664/12086: [ 848.863166][ T38] #0: ffff888010c7e0d0 (&type->s_umount_key#85){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 848.869361][ T38] 1 lock held by syz.7.1664/12090: [ 848.869374][ T38] #0: ffff888010c7e0d0 (&type->s_umount_key#85){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 848.869455][ T38] 1 lock held by syz.7.1664/12095: [ 848.869489][ T38] #0: ffff888010c7e0d0 (&type->s_umount_key#85){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 848.869692][ T38] 1 lock held by syz.7.1664/12096: [ 848.869725][ T38] #0: ffff888010c7e0d0 (&type->s_umount_key#85){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 848.869937][ T38] 1 lock held by syz.7.1664/12098: [ 848.869970][ T38] #0: ffff888010c7e0d0 (&type->s_umount_key#85){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 848.870149][ T38] 1 lock held by syz.7.1664/12101: [ 848.870182][ T38] #0: ffff888010c7e0d0 (&type->s_umount_key#85){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 848.870278][ T38] 3 locks held by syz-executor/12255: [ 848.870312][ T38] #0: ffffffff8e43b9e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 848.870535][ T38] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 848.870715][ T38] #2: ffff88801988c238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 848.870891][ T38] 6 locks held by syz.6.1755/12432: [ 848.870925][ T38] [ 848.870954][ T38] ============================================= [ 848.870954][ T38] [ 848.871011][ T38] NMI backtrace for cpu 1 [ 848.871026][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 848.871047][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 848.871060][ T38] Call Trace: [ 848.871067][ T38] [ 848.871076][ T38] dump_stack_lvl+0x189/0x250 [ 848.871109][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 848.871139][ T38] ? __pfx__printk+0x10/0x10 [ 848.871172][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 848.871201][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 848.871224][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 848.871263][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 848.871290][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 848.871318][ T38] watchdog+0xf93/0xfe0 [ 848.871349][ T38] ? watchdog+0x1de/0xfe0 [ 848.871379][ T38] kthread+0x70e/0x8a0 [ 848.871417][ T38] ? __pfx_watchdog+0x10/0x10 [ 848.871441][ T38] ? __pfx_kthread+0x10/0x10 [ 848.871475][ T38] ? __pfx_kthread+0x10/0x10 [ 848.871505][ T38] ret_from_fork+0x436/0x7d0 [ 848.871534][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 848.871564][ T38] ? __switch_to_asm+0x39/0x70 [ 848.871582][ T38] ? __switch_to_asm+0x33/0x70 [ 848.871600][ T38] ? __pfx_kthread+0x10/0x10 [ 848.871629][ T38] ret_from_fork_asm+0x1a/0x30 [ 848.871663][ T38] [ 848.871672][ T38] Sending NMI from CPU 1 to CPUs 0: [ 848.871695][ C0] NMI backtrace for cpu 0 [ 848.871708][ C0] CPU: 0 UID: 0 PID: 12432 Comm: syz.6.1755 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 848.871726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 848.871736][ C0] RIP: 0010:rtlock_slowlock_locked+0xb0/0x4010 [ 848.871760][ C0] Code: 3b 16 f3 f3 48 c7 c0 40 74 1d 8f 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ee 3a 00 00 83 3d d7 ef 23 04 00 74 17 49 8d 7c 24 18 ff ff ff ff e8 36 90 fd ff 85 c0 0f 84 4d 05 00 00 65 4c 8b 34 [ 848.871775][ C0] RSP: 0018:ffffc90005f9f360 EFLAGS: 00000002 [ 848.871788][ C0] RAX: 0000000000000000 RBX: 1ffff92000bf3e94 RCX: dffffc0000000000 [ 848.871800][ C0] RDX: 0000000000000001 RSI: ffffc90005f9f600 RDI: ffff888077430c58 [ 848.871812][ C0] RBP: ffffc90005f9f5b0 R08: 0000000000000003 R09: 0000000000000004 [ 848.871822][ C0] R10: dffffc0000000000 R11: fffff52000bf3e94 R12: ffff888077430c40 [ 848.871834][ C0] R13: ffffc90005f9f608 R14: 1ffff92000bf3ec1 R15: dffffc0000000000 [ 848.871847][ C0] FS: 00007f1901ea56c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 848.871861][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 848.871872][ C0] CR2: 0000200000015030 CR3: 000000006ea18000 CR4: 00000000003526f0 [ 848.871886][ C0] Call Trace: [ 848.871893][ C0] [ 848.871903][ C0] ? __lock_acquire+0xab9/0xd20 [ 848.871926][ C0] ? __lock_acquire+0xab9/0xd20 [ 848.871950][ C0] ? do_raw_spin_lock+0x121/0x290 [ 848.871970][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 848.871988][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 848.872013][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 848.872037][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 848.872060][ C0] ? do_raw_spin_lock+0x121/0x290 [ 848.872083][ C0] rt_spin_lock+0x152/0x2c0 [ 848.872102][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 848.872126][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 848.872144][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 848.872173][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 848.872197][ C0] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 848.872217][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 848.872239][ C0] __skb_try_recv_datagram+0x89/0x1b0 [ 848.872260][ C0] __unix_dgram_recvmsg+0x2d4/0xd60 [ 848.872284][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 848.872304][ C0] ? exc_page_fault+0x9f/0xf0 [ 848.872330][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 848.872350][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 848.872371][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 848.872394][ C0] ____sys_recvmsg+0x3ab/0x470 [ 848.872416][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 848.872439][ C0] ? import_iovec+0x74/0xa0 [ 848.872461][ C0] ___sys_recvmsg+0x1b5/0x510 [ 848.872480][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 848.872511][ C0] ? __might_fault+0xb0/0x130 [ 848.872538][ C0] do_recvmmsg+0x30d/0x770 [ 848.872558][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 848.872574][ C0] ? handle_mm_fault+0xdb/0x3400 [ 848.872602][ C0] ? lock_vma_under_rcu+0xdf/0x3d0 [ 848.872625][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 848.872643][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 848.872663][ C0] ? do_syscall_64+0xbe/0x3b0 [ 848.872680][ C0] do_syscall_64+0xfa/0x3b0 [ 848.872695][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 848.872718][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.872734][ C0] ? clear_bhb_loop+0x60/0xb0 [ 848.872752][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.872768][ C0] RIP: 0033:0x7f1903c5eec9 [ 848.872780][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.872794][ C0] RSP: 002b:00007f1901ea5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 848.872810][ C0] RAX: ffffffffffffffda RBX: 00007f1903eb6090 RCX: 00007f1903c5eec9 [ 848.872822][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 848.872833][ C0] RBP: 00007f1903ce1f91 R08: 0000000000000000 R09: 0000000000000000 [ 848.872843][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 848.872853][ C0] R13: 00007f1903eb6128 R14: 00007f1903eb6090 R15: 00007ffd5c228ff8 [ 848.872873][ C0] [ 848.873725][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 848.873740][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 848.873763][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 848.873775][ T38] Call Trace: [ 848.873783][ T38] [ 848.873791][ T38] dump_stack_lvl+0x99/0x250 [ 848.873822][ T38] ? __asan_memcpy+0x40/0x70 [ 848.873844][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 848.873873][ T38] ? __pfx__printk+0x10/0x10 [ 848.873906][ T38] vpanic+0x281/0x750 [ 848.873938][ T38] ? __pfx_vpanic+0x10/0x10 [ 848.873964][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 848.873985][ T38] ? preempt_schedule+0xae/0xc0 [ 848.874014][ T38] ? preempt_schedule_common+0x83/0xd0 [ 848.874049][ T38] panic+0xb9/0xc0 [ 848.874077][ T38] ? __pfx_panic+0x10/0x10 [ 848.874106][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 848.874136][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 848.874163][ T38] watchdog+0xfd2/0xfe0 [ 848.874193][ T38] ? watchdog+0x1de/0xfe0 [ 848.874223][ T38] kthread+0x70e/0x8a0 [ 848.874256][ T38] ? __pfx_watchdog+0x10/0x10 [ 848.874280][ T38] ? __pfx_kthread+0x10/0x10 [ 848.874314][ T38] ? __pfx_kthread+0x10/0x10 [ 848.874345][ T38] ret_from_fork+0x436/0x7d0 [ 848.874373][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 848.874403][ T38] ? __switch_to_asm+0x39/0x70 [ 848.874427][ T38] ? __switch_to_asm+0x33/0x70 [ 848.874445][ T38] ? __pfx_kthread+0x10/0x10 [ 848.874475][ T38] ret_from_fork_asm+0x1a/0x30 [ 848.874508][ T38] [ 848.874856][ T38] Kernel Offset: disabled