last executing test programs: 22m56.837339245s ago: executing program 4 (id=209): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0xc8002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) 22m53.331615252s ago: executing program 4 (id=215): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000002680)={'#! ', './file0', [{0x20, 'cgr\x01\x00 @q\xc84\x04\x04'}]}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000100)=0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000540)="aa2e07a43ecaa4f030dff111e923219d3a5a00904a9bce005907230e8f75cfc68bd31e61698c6114ffdd856898d814b616a5ac0827c8b021fbb1fa832462ea175ae6dae31e42bbb3ce3469c6323fe898175fd9331455266e5f70a167d59e2a4a3dad4a44311f4c69292d304b2dd0e09872e408c6f25a", 0x76}, {0x0}], 0x2) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 22m52.703863786s ago: executing program 4 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r3, &(0x7f00000019c0)=[{&(0x7f0000000040)=""/223, 0xdf}], 0x1, 0x1fdc0000, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}, 0x8}, r5}}, 0x48) 22m51.348981785s ago: executing program 4 (id=221): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f393b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1b9047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 22m50.861776048s ago: executing program 4 (id=224): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040aaaaaaafb129249b8dc83"], 0xd) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0xffffffffffffffd8}, @void}}, {0xc, 0x20, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) accept(0xffffffffffffffff, &(0x7f0000000100)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000400)={'P\x00', 0x0, 0x5, 0x3, 0x7ff, 0x1, "ff9b15e5a8c80625c8c35500", '\x00\x00\a\x00', "020400", "0001ffff", ["50d5c2a708000000e40000b6", "006167000000000000ffff00", "a1330700"]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80) 22m47.445329445s ago: executing program 4 (id=227): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0xdd7, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) sendfile(r2, r2, &(0x7f0000000040)=0x8, 0xd) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x0, 0x80000001, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0xfe, 0x29, 0x0, @multicast1, @multicast2}}}}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af83, 0x0) 22m45.046496756s ago: executing program 32 (id=227): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0xdd7, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) sendfile(r2, r2, &(0x7f0000000040)=0x8, 0xd) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x0, 0x80000001, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0xfe, 0x29, 0x0, @multicast1, @multicast2}}}}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af83, 0x0) 17m8.093560379s ago: executing program 5 (id=746): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="280200001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c065b1aad7e69b75e173e75df432aa833928a0776ff8f5e9ed3103bc77d35b296674f1fe35663"], 0x228}, 0x1, 0x0, 0x0, 0x24024004}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000007c0)) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) r13 = syz_clone(0x5204000, &(0x7f00000005c0)="811c7c0ac2cdcc7f", 0x8, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="bda1e7ffa0ddecf96c991966d1a98222eac5fbd2f78eee4904f51093919a7fd5d6bd8c35cc1c5c9bb5a837069f5555e952f6421343453b53271a89593d56f5b9301d7b531a14643e006b7ffe4dedd93e3aa17d2cc7e632ef5e8aa054229173ac0fce6204b653d941a5a29ca0a5dac9011b85ada2c87031a0af53c04e2c5fcec6177cf39b8a907d2af2f6da6f42f13c5842c39be3cc9c384642") capset(&(0x7f0000000740)={0x20071026, r13}, &(0x7f0000000780)={0x30000000, 0x2, 0x80000001, 0x10, 0x5, 0xffff455c}) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r12, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r14}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r15 = dup(r10) syz_ublk_setup_queues(r15, r9, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x8000, 0x10000000, 0x146, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r8, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15) r16 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r16, 0xffffffffffffffff, 0x0, 0x20000023896) 17m4.322881201s ago: executing program 5 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x12) 17m2.273348431s ago: executing program 5 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x4, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x209, 0x0, 0x3dc], [0x0, 0x4, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r6, &(0x7f0000001080)="8b4ff4a014af008200", 0x9, 0x10000, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) 17m0.349113916s ago: executing program 5 (id=755): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_tcp(0x2, 0x1, 0x0) syz_usbip_server_init(0x3) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r0], 0x30}, 0x4004000) (fail_nth: 3) 16m53.934742899s ago: executing program 1 (id=763): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000019080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000190c0)={{0x1, 0x1, 0x18, r1}, './sys\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r3, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000403, r5, &(0x7f0000004580)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000045c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_DREG={0x0, 0x1, 0x1, 0x0, 0x14}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xfffffffffffffdc2}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) read$FUSE(r7, &(0x7f0000000500)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4014) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000340)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff003e851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB="2e00000010"], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000400000102006ecfcbad000000000011020000000500000000000000000000040000000000006100"], 0x0, 0x38}, 0x28) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r9, &(0x7f0000000200)='1\n', 0x2) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') 16m51.203622345s ago: executing program 5 (id=766): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) fcntl$getflags(r0, 0x40a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000073, 0x0, 0x7}]}) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000100)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbf}]}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) 16m48.928366064s ago: executing program 5 (id=768): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0x10, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac40, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x4002710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0xfd8) r2 = epoll_create1(0x80000) fcntl$setlease(r2, 0x400, 0x2) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x81, 0xb, 0x4, 0x7, 0x4, 0x7, 0x8, 0x4}, 0x20) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000019200)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000001540)=0x2) ppoll(&(0x7f0000000180)=[{r1, 0xa210}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x1000, 0xc4) 16m48.688574588s ago: executing program 1 (id=769): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000040)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "955f598869b806"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001040)={{r0, 0x2, 0x8000000, 0x2741, 0x1, 0x2, 0x565c, 0x5, 0xe, 0x81, 0x3, 0x7, 0xffffffffffffff0b, 0x4, 0x3}}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="7c0000001800051105000000000000000a430000fe0400010000000014000b0020010db800d000000000000000e0ff001c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050ec700010000000500070002000000", 0x7c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x10, 0x1) userfaultfd(0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 16m47.243332589s ago: executing program 1 (id=770): socket$inet6(0xa, 0x80002, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x2}, 0x2a45}], 0x1, 0x40000041, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m45.913193683s ago: executing program 1 (id=775): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) r3 = open(&(0x7f0000000040)='./file0\x00', 0x280343, 0xb1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000000c0)={0x81, "d5c02ac535779c7033ee29fb6f4fb74e112eb3eca51253426505870c2a10b4a74272a251c14bb0d071bee6e8bb1b06a2decb29f4bb58140d362d97aebe61cc4b"}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x3a0000, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x18, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 16m44.313357999s ago: executing program 1 (id=777): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x3, &(0x7f0000000040)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) io_submit(r5, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb01f, 0x5601}]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="e000000011000151e7117364abcba43a1c68dcb3b7b386d6f8ca075773020c1c53edee1cf4b5711a4a8b19e3e3768d4628dfa7a6ff07b092dd712361ef01156d4343aa361e39a4ef02f63ecb072335bb"], 0xe0}, 0x1, 0x0, 0x0, 0x4042090}, 0x850) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) 16m42.375164058s ago: executing program 1 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000200)="04000000000000000000000038010000380100"/41) ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e2030") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000002900000036000000320000000000000018000000000000002900000034"], 0x30}, 0x34004894) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x2, 0x0, 0x8, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) write(r0, &(0x7f0000000600)='1', 0x1) 16m33.464149806s ago: executing program 33 (id=768): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0x10, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac40, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x4002710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0xfd8) r2 = epoll_create1(0x80000) fcntl$setlease(r2, 0x400, 0x2) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x81, 0xb, 0x4, 0x7, 0x4, 0x7, 0x8, 0x4}, 0x20) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000019200)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000001540)=0x2) ppoll(&(0x7f0000000180)=[{r1, 0xa210}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x1000, 0xc4) 16m26.873404196s ago: executing program 34 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000200)="04000000000000000000000038010000380100"/41) ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e2030") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000002900000036000000320000000000000018000000000000002900000034"], 0x30}, 0x34004894) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x2, 0x0, 0x8, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) write(r0, &(0x7f0000000600)='1', 0x1) 14m12.121190096s ago: executing program 3 (id=965): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r3, 0x0, 0x0, 0x6, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000140), 0x0) getsockopt$sock_int(r5, 0x1, 0xc, 0x0, &(0x7f0000000180)) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r7 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f00000001c0)={0x5, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x1f, 0x0, 0x0, 0x1}, {0x2, 0x1e, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1003, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4200, 0x0, 0x0, 0x1}]}) getpgrp(0x0) pidfd_send_signal(0xffffffffffffffff, 0x19, &(0x7f0000001fc0)={0x5, 0x546d0581, 0xc}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0) 14m10.924043144s ago: executing program 3 (id=967): ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2, 0xc7e0ce011dced78c, 0xc}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x2, r2}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r7, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffd}) syz_clone3(&(0x7f0000000400)={0x1048c4280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14m9.150367039s ago: executing program 3 (id=968): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x7ffbffff, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}, "00000000c00000d2"}}}}}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) connect$bt_sco(r1, &(0x7f0000000100), 0x8) 14m6.858127569s ago: executing program 3 (id=971): socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20140, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b80)={0x2c, &(0x7f0000000940)={0x40, 0x2, 0xc7, {0xc7, 0x22, "790628705bb4640ee04f59e61934ac0e6228cbcc9acbe2e2b4e62d93d56486e88e16eee456c7d04e4583624f3a3bd3eb0dfb6291346cb3c082eba28b5b1929a69846b9fd255c8ed90bea168f10cdd51ff9f24cd4764f213f035eceb6bb6b04d585420218359eef8b432e37abf409de8b56268da23110ba6a5a5fe3ca87dac4dde67c178d09a7d0adfe19981f2040963171fa02bec298240802d65bf946d6915b59551755e0a52e8078f9e2f441e649c684b93fb68d5fb1f9627637fa03c82a541a98d32378"}}, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x8, 0xfa, 0xb, 0xe, 0x1, 0x4}}}, &(0x7f0000001040)={0x84, &(0x7f0000000bc0)={0x40, 0x8, 0x76, "031e3094c989c3bd24979b5e6f86d3d15e71bd567b849e8940a96088eaa76a3c14e1c32a35bdda85f52d82bd166371f02f2d052f781988850fd622c03c3041772ab0731e500bc760ad11dd05f6f2b19ebf4469bbf7d54c24c84da678b1d4cebc3e0137291d4425f7168ab2b7ccb28aacdb80da93d992"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x92}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x2a}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x1000, 0x20, [0xf0]}}, 0x0, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "2893"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xa91}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @local}, 0x0, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x7}, 0x0, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x1}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000240)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x8c2, 0x2, 0xce1, 0xa, 0x9, 0x3, 0x0, 0x375d, 0xf6b8, 0xd10, 0x5, 0xe1bf}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x3, 0xb1, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x499, 0x103c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x8, 0x0, 0xfc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x5, 0x2a, 0x80}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x4, [0x1]}, @multiply_unit={0x7, 0x24, 0xc, 0x81, 0x2, 0xcc, 0x80}, @source_unit={0x8, 0x24, 0xa, 0x7f, 0x2, 0x6, 0x5, 0x3}, @extension_unit={0x9, 0x24, 0x9, 0x1, 0xb6e, 0x4, "7f71"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x2, 0x8}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x1, 0x2, "d57d05"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ef, 0x0, 0x7, 0xd2, {0x8, 0x25, 0x1, 0x80, 0x3f, 0x0, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x1a, {0x8, 0x25, 0x1, 0x1, 0xf, 0x7, 0x3}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x8, 0x7, 0x8, 0x10, 0x1}, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xf7, &(0x7f0000000240)=@string={0xf7, 0x3, "a8f88acd07274d43367ee09cbe2566bd5f4091ef0540072f19e9992aa15f6506f3fca7f9a1e1db84064ff95bee2ba4036d470766e7a6dbf6e9480ce729f4b53df662dab3c6e26d60486e8f7f94394678918accf27f2022638641e67701b1d5d458544626814ea8840c16c83ba2e4f00b8ad5203b75853682395e8994ead3c33e558e4f77f77d2fa7dfcf64740961faa9deabdab736aaea9787a46f9a1a9a0bbc282b127dfa18a5a2afa5d8652922ea17d6f5b5fab2da7f5b699d1468b1a35ce259d043ec55f4a719e90168ae212812ec5ccc98d407c544bedd40858d55f808984c38f6ac9fc9fa944bc855c850ef61d114df5bcd2d"}}, {0x91, &(0x7f0000000340)=@string={0x91, 0x3, "4cb4bfb558a42f886038dcdfbde524b0cd8370476c355889702c3b6620c520cb0c97183312dee99fff255c70a6e9cbf394bb94fbf54db082305bd169a8711500693fff94b45e0732f3158946ba2a24a16a49852e39ea2a19266c87204f69ad7930bff00a710db4945d0e330bba0274d0c032cf66c0c3dbf100a9809422569febcad18158219204842fe834d6ebd6ed"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x0, 0x0}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_ep_write(0xffffffffffffffff, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) landlock_restrict_self(r2, 0x0) 14m2.749560184s ago: executing program 3 (id=975): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x3, &(0x7f0000000040)=0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$setstatus(r6, 0x4, 0x2c00) io_submit(r5, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r6, 0x0, 0xb01f, 0x5601}]) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, 0x0, 0x850) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) 14m0.831808744s ago: executing program 3 (id=977): openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) syz_open_procfs(0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000340)={0x4, {"1b1b0f8ff5d2ab6993de03e5086dc4ac", "8b538a29ac7c640a211e00ffffdcf2d1", "acf4ab06fce0d088f9d45d1ef300"}, 0x51a}) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={[0xaa52]}, 0xffffff2f) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e24, 0x1, 'lblc\x00', 0x32, 0x20000, 0xfffffffc}, 0x2c) r1 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, &(0x7f00000004c0)=""/90) listen(0xffffffffffffffff, 0x0) epoll_create1(0x0) 13m44.909743986s ago: executing program 35 (id=977): openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) syz_open_procfs(0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000340)={0x4, {"1b1b0f8ff5d2ab6993de03e5086dc4ac", "8b538a29ac7c640a211e00ffffdcf2d1", "acf4ab06fce0d088f9d45d1ef300"}, 0x51a}) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={[0xaa52]}, 0xffffff2f) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e24, 0x1, 'lblc\x00', 0x32, 0x20000, 0xfffffffc}, 0x2c) r1 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, &(0x7f00000004c0)=""/90) listen(0xffffffffffffffff, 0x0) epoll_create1(0x0) 9m47.946151126s ago: executing program 2 (id=1249): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000300)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0xff}, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/52, 0x34}, {&(0x7f0000001380)=""/144, 0x90}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/222, 0xde}, {&(0x7f0000002540)=""/69, 0x45}, {&(0x7f00000025c0)=""/215, 0xd7}, {&(0x7f00000026c0)=""/176, 0xb0}], 0x8, &(0x7f0000002800)=""/23, 0x17}, 0x9}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000028c0)=""/195, 0xc3}, {&(0x7f00000029c0)=""/217, 0xd9}], 0x2, &(0x7f0000002dc0)=""/177, 0xb1}, 0x7}], 0x2, 0x40000002, &(0x7f0000005880)={0x77359400}) 9m43.921111933s ago: executing program 2 (id=1252): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x802}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x3000000) 9m41.777208474s ago: executing program 2 (id=1255): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000e4ffffff0018000000202070002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70a000000000000b7030000000000008500000070000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x3, 0x11, 0x1c, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x5000, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x2f, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000c2a50000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000002655090100000000009500000000000000276940001000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018440000ffffffff0000000000000000950000000000000018340000010000000000000000000000186700000000000000000000000014001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018480000fdffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0xd3df, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0xb, 0xfffffffd, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940), 0x10, 0x80000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRESOCT=r4], &(0x7f0000000280)='GPL\x00', 0xfffffbff, 0x26, 0x0, 0x100, 0x71, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35b", 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128) sendfile(r6, 0xffffffffffffffff, 0x0, 0x1) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) r8 = syz_open_dev$vcsa(&(0x7f0000000700), 0xd, 0x200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x301000, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000000000000000000000000000000000000000000000001c000081094814db3c0e6363054a4e620bd410cd11280da8dc4a9f1e0a1aa3b77b9b4fa7bfbd28f5f49ead62c5f8510654f4db664faed512bef523d92b27cfaa2ce6ea56373b900cc37522f7f1a3470fe64896fbc0496313fa1ea9f25bc6720061f93a1bb2ec20ffa632e642e6abc45eba72ed9c7bc4190864a13dd4d15eb42741552a11483427c14a6ac62b30c6e28e", @ANYRES16], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r9, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r9, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0xa0481, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000040)=0x15) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 9m41.438802972s ago: executing program 2 (id=1256): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xc0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket(0x28, 0x801, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getsa={0x30, 0x12, 0x997d5afd40b647db, 0x70bd26, 0x25dfdbfd, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x2, 0x6c}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x24, 0x0) 9m39.906029123s ago: executing program 2 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 9m37.193506725s ago: executing program 2 (id=1258): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0), 0x18) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000280)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009bee46488345b55655323050f8c0aacc2ced60be01b01b9632b90418887bf23666bd4f44c47b954270652c2af631ba96f1efb483f1e8601727855ada79a18812b12afb92d6737b82366f4f564eb019"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x4}, 0x80) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="d033592a35dcc04fedda949b7210180000000000", @ANYRES32, @ANYBLOB="000000d2072259b73100b7080000000000a688be36aa28b27a051bbf007b8af81901000000bfa200000000000007020000f401800000d1000000000000c304000000ef26e0adb08bcb19467c", @ANYRES16=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000280)=ANY=[], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1823500000000000ea6f85730ab283e424e9f433c345000000a18928fd54f9c4a0752c142f79ea783642c5a224e6d54ff10018138e03fbfa014febf214fe0fc9ec7db3c72295ee63eab9fd055e2f39636888fad809b37df8147810"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r11, r12, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40085503, 0x0) 9m22.033960511s ago: executing program 36 (id=1258): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0), 0x18) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000280)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009bee46488345b55655323050f8c0aacc2ced60be01b01b9632b90418887bf23666bd4f44c47b954270652c2af631ba96f1efb483f1e8601727855ada79a18812b12afb92d6737b82366f4f564eb019"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x4}, 0x80) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="d033592a35dcc04fedda949b7210180000000000", @ANYRES32, @ANYBLOB="000000d2072259b73100b7080000000000a688be36aa28b27a051bbf007b8af81901000000bfa200000000000007020000f401800000d1000000000000c304000000ef26e0adb08bcb19467c", @ANYRES16=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000280)=ANY=[], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1823500000000000ea6f85730ab283e424e9f433c345000000a18928fd54f9c4a0752c142f79ea783642c5a224e6d54ff10018138e03fbfa014febf214fe0fc9ec7db3c72295ee63eab9fd055e2f39636888fad809b37df8147810"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r11, r12, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40085503, 0x0) 9.085281854s ago: executing program 8 (id=1795): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a802000018014000300000000000000000000000d000100000004000200040001"], 0x40}}, 0x0) 6.589472676s ago: executing program 0 (id=1797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0x0, @val=@netfilter={0x7, 0x0, 0xf9db, 0x1}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x1ff, @remote, 0x6}}, 0x0, 0x0, 0x2, 0x0, "c141e7deeeeab2b393f64c58f862242212304e4b14594e51c3c6320a02b7beaf50b694517ea863b0fe4ac28f885c3c45ef50c1e864619da19d4b0215bf38573e07402eeaff7fbd53ed1135bb69787254"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 6.312052972s ago: executing program 0 (id=1798): io_uring_setup(0x3fa5, &(0x7f0000000000)={0x0, 0x6cae, 0x100, 0x1, 0x5a}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32], 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000140)="c2", 0x1, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) ppoll(&(0x7f0000000980)=[{r4, 0x5001}], 0x1, 0x0, 0x0, 0xffffffffffffff00) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r5 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x4}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8991, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000008c0), 0x840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x1d, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffbff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x0, 0x3, 0x8, 0x800, 0x400}]}, &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x71, '\x00', r2, @fallback=0x36, r5, 0x8, &(0x7f0000000540)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xf, 0x6e4, 0x5}, 0x10, r9, r10, 0x4, &(0x7f0000000900)=[r6], &(0x7f0000000940)=[{0x5, 0x5, 0x2, 0x8}, {0x3, 0x1, 0x0, 0x5}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x4, 0x6, 0x5}], 0x10, 0x4}, 0x94) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000340)=0xc) r11 = socket$inet6(0xa, 0x3, 0x40) bind(r11, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) 4.675430926s ago: executing program 0 (id=1799): set_mempolicy(0x8006, &(0x7f00000001c0)=0x1, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0xffffffff, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) (fail_nth: 3) 4.67125943s ago: executing program 8 (id=1800): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) (fail_nth: 3) 4.469339666s ago: executing program 0 (id=1801): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x109880, 0x100) unshare(0x20000400) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000240)) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@t={0x85, 0x3, 0xb7, 0x8, @generic=0x80000001}) sched_setattr(r1, 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, 0x0, 0xa50003d1) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(r2, 0xc, 0x0, &(0x7f00000000c0)) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980), 0x0, 0xfffffffffffffffe) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x400002, 0x3}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 4.372709797s ago: executing program 8 (id=1802): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) (fail_nth: 3) 3.26739258s ago: executing program 8 (id=1803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0xfffffffd, 0xa, 0x1, 0xfe, 0x5c}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "6fc3070b4f8f7330202b93875f2d67a6a77871"}}]}, 0x150}}, 0x804) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x70, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffffffffffe77, 0x1, {0x6, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa25, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xffff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x70}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07bc0}, 0x45000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="3800000011008188040f80ec59acbc041390f8480b0000005e140602000100000e0003001000000002800000121fb3cdc93fcc7a184a7f8a28968d849d78d2eafdfcbc6e0ceaf52a818de9ea7f513a996ea45ec7dc123745865d1beff3d930163938e1754e1a4d4281f75e4a06b3f35047704a7d509a18e5be60409083d292", 0x7f}], 0x1}, 0x20000000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") 1.287187932s ago: executing program 0 (id=1804): r0 = syz_io_uring_setup(0x12a2, &(0x7f0000000180)={0x0, 0xca14, 0x130c8, 0x2, 0x2c0}, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op], 0x1) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000020201030000000000000000070000053800038006000340000000002c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000bb300003802c00018014000300200100000000000000000000000000001400040000000000000000000000000000000000740003802c000180140003002001000000000000000000000000000114000400fe8000000000000000000000000000aa1400018008000280050001002f0000000c00028005000100840000000c00028005000100840000000100010000001c0800000000000004f3483d4fcffe22c05ed2ceee9fb2df09f1f84fa823667d5eb673027c8d5def1cbb952ccaab602e5a463316bc81fa8446b7290fb3a8206fe14eff90b70cba6ef46d3bf146931eb7df7215d4534a8080c94b3ef130d738e99aebf560e5c4eb5c87432eb9dc9aff010000264043a5f6436d11472cdac36f9b004cc7d4b913e9cb72d33ab132109310783ff75951e55e7d32d58769a338bf5846a43839d32760b8ba810f0bb1de34c00c0506cdcbb22600000000000000000000000000000000f4e54c27ded6dacee267a67a475abe9373005fcaaec885743e110dbe15d5d71ef30d37cd14722a7195bab144a1014df3fe4129d3fd64f50f4eca37f7f311c4a7bb6e6c77b0721d75832fef4c22c7d5a62884c46dbf3305675d13637150cfac74fac6dcb6b7d77398dcda6ae8c749e9be22c3948ad9cded8804d67d9de2b83d81f1a5b0b8af4a720921afb21c1fe6bd75d73b98a3cbc4e31eea7f9ffe5ab31219f4e6db43b25615d1d1e95104816e2f9c88d15bed9a3175b6c03b9dff8400fed5a720cde620c635e871cda97530ecd726e3b54ce0ed302bea567adc8ca27684ad0d77f94a1ae7af554e1560bbf1748e1fcc3a818b78e9f6fc1eb1cb78f895a717e9ebb46f"], 0xf8}, 0x1, 0x0, 0x0, 0x5}, 0x40808) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) sendmsg$nl_route_sched(r1, 0x0, 0x40) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0xbf78, 0x2, 0x0, 0x16) 933.200516ms ago: executing program 8 (id=1805): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) sigaltstack(&(0x7f0000000480)={0x0, 0x80000001}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x1000000}) 790.61709ms ago: executing program 8 (id=1806): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000bc0)={0x2c, r2, 0x301, 0x70bd29, 0x25dfdbfb, {0x21}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x100000000000000}, 0x20004814) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000290001"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_clone(0x80080, &(0x7f0000000700)="d32347c934a2df592789aaa1b29ccf7f032bfdf1292c27d5cd952aea670db32553000ef570dabbf5511bd5e8723730897dc83e87d4c6859e92b2bce8e4b8144b0292e2b4df00eeb767cb662da60f6480bcbb43b3e93447521ccf9261083da061093bce3a86f53c75d8a05e12270bc9630163c597f9eeb3368cb573738fd8b9d9bb6ffdd65cffa3834a078047c0f6cc92fd30d19d704f438483c5692c8ade", 0x9e, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="3c3d8ff1b181ebed807a2fff573623de6f18e19deefb6c5520aeb2694361520f9141ec55e14a2c792127aa4bd8c19b1dfc70f8820109357c5241eb861a499f8ad4645822f034603e167b540cfd47534df8bfa470960d5634ab0671c3f2ad8b9db2e5549b5ca8b7e64a552ef8eb69206415e75935ad78eef027f88c7540a49c6f4d162f11864e3246195c9e18d4a7eba498bfcb2fc208aeb7d529b715ce2abd340e3375decf3afab22895e8011ae1dea683dda0d84c5eddfaea0e766fdf71275e8dbf707cba5bd6601c5c9adb0662affd0ea963dbb060580e7ce202bcde07909a72d4a8") ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8, 0x40, 0xfffffffe, 0x3, {{0x1a, 0x4, 0x1, 0x3e, 0x68, 0x68, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x8, 0xed, 0x0, 0x0, [0x2]}, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x0, [{@broadcast, 0x40156749}, {@loopback, 0xd861}, {@private=0x1, 0x1000}]}, @ssrr={0x89, 0x1f, 0xdf, [@loopback, @remote, @broadcast, @multicast2, @broadcast, @remote, @rand_addr=0x64010101]}, @rr={0x7, 0xf, 0xfa, [@loopback, @broadcast, @empty]}]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x5f, 0x5f, 0x30, 0x61]}}, &(0x7f00000003c0)=""/150, 0x2e, 0x96, 0x0, 0x200, 0x10000, @value=r3}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="0600"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0300000001000000030000000000000000000000000000846c2b6a00"], 0x50) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x62}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x4, 0xfffffffbfffffffd, 0x30000000, 0xfffffffe}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000005c0)={0x10, 0x2, "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"}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x0) 0s ago: executing program 0 (id=1807): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x5, '\x00', @st={0x4, [{0x2, @svalue=0x80}, {0x3, @svalue=0x8001}, {0x3, @svalue}, {0x2, @uvalue=0x1}]}, 0x9}]}) kernel console output (not intermixed with test programs): rt 1(veth5) entered disabled state [ 1427.289601][T14916] veth5: entered allmulticast mode [ 1427.291397][T14916] veth5: entered promiscuous mode [ 1427.304026][T14917] bridge2: port 2(veth0_to_bond) entered blocking state [ 1427.304164][T14917] bridge2: port 2(veth0_to_bond) entered disabled state [ 1427.304463][T14917] veth0_to_bond: entered allmulticast mode [ 1427.331629][T14917] veth0_to_bond: entered promiscuous mode [ 1428.760328][T14539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.193145][ T37] audit: type=1326 audit(1789966317.873:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14929 comm="syz.0.1623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x0 [ 1429.286211][T14945] MPI: mpi too large (113288 bits) [ 1430.083187][T14727] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1430.167358][T14727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1430.175721][T14727] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1430.267090][T14727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1430.353809][T14727] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1430.393400][T14727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1430.396691][T14727] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1430.527537][T14727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1431.282903][T14539] veth0_vlan: entered promiscuous mode [ 1431.592187][T14539] veth1_vlan: entered promiscuous mode [ 1433.751618][T14539] veth0_macvtap: entered promiscuous mode [ 1433.816512][T14727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.818730][T14539] veth1_macvtap: entered promiscuous mode [ 1434.220420][T14727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.237958][T14539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.240607][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.240751][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.363778][ T979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.363926][ T979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.383798][T14539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.708971][ T2987] bridge_slave_1: left allmulticast mode [ 1435.709008][ T2987] bridge_slave_1: left promiscuous mode [ 1435.709330][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.038589][ T2987] bridge_slave_0: left allmulticast mode [ 1436.038630][ T2987] bridge_slave_0: left promiscuous mode [ 1436.038893][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.361763][T14993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1630'. [ 1437.150892][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.229227][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.290424][ T2987] bond0 (unregistering): Released all slaves [ 1437.602411][ T5816] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.603920][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.603942][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.714543][ T1110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.717385][ T1110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.721798][ T1110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.419326][ T2987] hsr_slave_0: left promiscuous mode [ 1438.458397][ T2987] hsr_slave_1: left promiscuous mode [ 1438.459202][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.509315][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.775808][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 1440.839297][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 1441.901112][T14708] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1442.040278][T14708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1442.060843][T14708] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1442.286076][T13227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1442.326301][T13227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1442.349160][T13227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1442.355539][T13227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1442.367391][T13227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1442.600703][T14708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.633144][T14708] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1442.803320][T14708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.833158][T14708] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1442.962103][T14708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1443.373129][T15030] jffs2: notice: (15030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1443.655235][T14727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.903294][ T5817] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1444.069174][ T5817] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 1444.070664][ T5817] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1444.070691][ T5817] usb 1-1: config 1 has no interface number 0 [ 1444.074750][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.074778][ T5817] usb 1-1: Product: syz [ 1444.074794][ T5817] usb 1-1: Manufacturer: syz [ 1444.074810][ T5817] usb 1-1: SerialNumber: syz [ 1444.425509][T14778] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1444.455296][ T5817] usb 1-1: selecting invalid altsetting 1 [ 1444.455355][ T5817] speedtch 1-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1444.455435][ T5817] speedtch 1-1:1.1: usbatm_usb_probe: bind failed: -22! [ 1444.455572][ T5817] speedtch 1-1:1.1: probe with driver speedtch failed with error -22 [ 1444.464937][ T5817] usb 1-1: USB disconnect, device number 101 [ 1444.517108][T14778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1444.579824][ T9030] Bluetooth: hci4: command tx timeout [ 1444.580771][T14778] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1444.616237][T14778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1444.692911][T14778] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1444.766447][T14778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1444.789379][T14778] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1444.914977][T14778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1445.655696][ T2987] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.803689][T14727] veth0_vlan: entered promiscuous mode [ 1445.822201][T14708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.117577][ T2987] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.195071][T14727] veth1_vlan: entered promiscuous mode [ 1446.266002][T14708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.317635][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.317864][ T6114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.427291][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.427404][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.658352][ T9030] Bluetooth: hci4: command tx timeout [ 1446.714542][ T2987] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.882678][T14778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.884277][T14727] veth0_macvtap: entered promiscuous mode [ 1446.890132][T15024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.890747][T15024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.890953][T15024] bridge_slave_0: entered allmulticast mode [ 1446.893658][T15024] bridge_slave_0: entered promiscuous mode [ 1446.914294][T15024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.914420][T15024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.914612][T15024] bridge_slave_1: entered allmulticast mode [ 1446.941705][T15024] bridge_slave_1: entered promiscuous mode [ 1446.999910][T14727] veth1_macvtap: entered promiscuous mode [ 1447.067695][ T37] audit: type=1800 audit(1789966335.753:6127): pid=15077 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1640" name=08 dev="sda1" ino=2077 res=0 errno=0 [ 1447.365997][ T2987] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.462158][T15024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.527882][T15024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.724987][T14778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.734237][T15024] team0: Port device team_slave_0 added [ 1447.813432][T15024] team0: Port device team_slave_1 added [ 1448.036503][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.036655][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.611170][ T9030] Bluetooth: hci4: command tx timeout [ 1449.666385][T15024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.666409][T15024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.666442][T15024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.739574][T14727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.768771][T15024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.768793][T15024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.768823][T15024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.801075][T15084] FAULT_INJECTION: forcing a failure. [ 1449.801075][T15084] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.801117][T15084] CPU: 0 UID: 0 PID: 15084 Comm: syz.0.1642 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1449.801175][T15084] Tainted: [L]=SOFTLOCKUP [ 1449.801184][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1449.801196][T15084] Call Trace: [ 1449.801205][T15084] [ 1449.801216][T15084] dump_stack_lvl+0xe8/0x150 [ 1449.801254][T15084] should_fail_ex+0x46b/0x600 [ 1449.801285][T15084] ? __pfx_dev_uevent_name+0x10/0x10 [ 1449.801314][T15084] should_failslab+0xa8/0x100 [ 1449.801348][T15084] __kmalloc_cache_noprof+0xa1/0x680 [ 1449.801378][T15084] ? kobject_uevent_env+0x28c/0x9e0 [ 1449.801404][T15084] ? kobject_uevent_env+0x28c/0x9e0 [ 1449.801435][T15084] ? __pfx_dev_uevent_name+0x10/0x10 [ 1449.801460][T15084] kobject_uevent_env+0x28c/0x9e0 [ 1449.801495][T15084] gadget_bind_driver+0x599/0x9e0 [ 1449.801538][T15084] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1449.801563][T15084] really_probe+0x254/0xae0 [ 1449.801589][T15084] __driver_probe_device+0x1e8/0x360 [ 1449.801624][T15084] driver_probe_device+0x4f/0x240 [ 1449.801649][T15084] __driver_attach+0x339/0x600 [ 1449.801672][T15084] bus_for_each_dev+0x23e/0x2c0 [ 1449.801699][T15084] ? __pfx___driver_attach+0x10/0x10 [ 1449.801719][T15084] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1449.801743][T15084] ? rt_spin_unlock+0x159/0x200 [ 1449.801773][T15084] ? rt_spin_unlock+0x165/0x200 [ 1449.801802][T15084] bus_add_driver+0x348/0x670 [ 1449.801837][T15084] driver_register+0x23a/0x320 [ 1449.801863][T15084] usb_gadget_register_driver_owner+0xf9/0x270 [ 1449.801895][T15084] raw_ioctl+0x1503/0x40d0 [ 1449.801923][T15084] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1449.801954][T15084] ? do_vfs_ioctl+0x1184/0x1550 [ 1449.801984][T15084] ? __pfx_raw_ioctl+0x10/0x10 [ 1449.802019][T15084] ? hook_file_ioctl+0x1f5/0x610 [ 1449.802044][T15084] ? __asan_memset+0x22/0x50 [ 1449.802070][T15084] ? smack_file_ioctl+0x265/0x370 [ 1449.802097][T15084] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1449.802139][T15084] ? __fget_files+0x2a/0x420 [ 1449.802161][T15084] ? __fget_files+0x3a8/0x420 [ 1449.802181][T15084] ? __fget_files+0x2a/0x420 [ 1449.802207][T15084] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1449.802231][T15084] ? __pfx_raw_ioctl+0x10/0x10 [ 1449.802251][T15084] __se_sys_ioctl+0xff/0x170 [ 1449.802282][T15084] do_syscall_64+0x166/0x520 [ 1449.802313][T15084] ? trace_irq_disable+0x3b/0x140 [ 1449.802340][T15084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.802362][T15084] ? clear_bhb_loop+0x70/0xc0 [ 1449.802388][T15084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.802409][T15084] RIP: 0033:0x7fa5c4e4ddeb [ 1449.802430][T15084] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1449.802448][T15084] RSP: 002b:00007fa5c30a3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.802473][T15084] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa5c4e4ddeb [ 1449.802489][T15084] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1449.802502][T15084] RBP: 00007fa5c30a4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1449.802517][T15084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.802530][T15084] R13: 0000200000000000 R14: 0000000000000002 R15: 0000000000000000 [ 1449.802563][T15084] [ 1449.857682][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.857900][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.049040][ T9] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1450.136231][T14727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1450.213522][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1450.216960][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.216985][ T9] usb 1-1: config 0 has no interfaces? [ 1450.249235][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.249267][ T9] usb 1-1: Product: syz [ 1450.249282][ T9] usb 1-1: Manufacturer: syz [ 1450.249298][ T9] usb 1-1: SerialNumber: syz [ 1450.275627][ T9] usb 1-1: config 0 descriptor?? [ 1450.455904][T15024] hsr_slave_0: entered promiscuous mode [ 1450.456795][T15024] hsr_slave_1: entered promiscuous mode [ 1450.457385][T15024] debugfs: 'hsr0' already exists in 'hsr' [ 1450.457408][T15024] Cannot create hsr debugfs directory [ 1450.532125][ T6220] usb 1-1: USB disconnect, device number 102 [ 1451.628365][ T9030] Bluetooth: hci4: command tx timeout [ 1451.830247][ T2987] bridge_slave_1: left allmulticast mode [ 1451.830290][ T2987] bridge_slave_1: left promiscuous mode [ 1451.830580][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.998285][ T5699] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1452.017976][ T2987] bridge_slave_0: left allmulticast mode [ 1452.018017][ T2987] bridge_slave_0: left promiscuous mode [ 1452.031326][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.149320][ T5699] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1452.154110][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.154143][ T5699] usb 1-1: Product: syz [ 1452.154157][ T5699] usb 1-1: Manufacturer: syz [ 1452.154179][ T5699] usb 1-1: SerialNumber: syz [ 1452.491723][ T5699] rtl8150 1-1:1.0: couldn't reset the device [ 1452.491964][ T5699] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1452.515863][ T5699] usb 1-1: USB disconnect, device number 103 [ 1453.037830][T15112] FAULT_INJECTION: forcing a failure. [ 1453.037830][T15112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.037857][T15112] CPU: 1 UID: 0 PID: 15112 Comm: syz.0.1644 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1453.037877][T15112] Tainted: [L]=SOFTLOCKUP [ 1453.037882][T15112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1453.037890][T15112] Call Trace: [ 1453.037896][T15112] [ 1453.037902][T15112] dump_stack_lvl+0xe8/0x150 [ 1453.037928][T15112] should_fail_ex+0x46b/0x600 [ 1453.037950][T15112] _copy_to_user+0x31/0xb0 [ 1453.037970][T15112] simple_read_from_buffer+0xe1/0x170 [ 1453.037989][T15112] proc_fail_nth_read+0x1be/0x230 [ 1453.038008][T15112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1453.038038][T15112] ? rw_verify_area+0x250/0x4d0 [ 1453.038055][T15112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1453.038070][T15112] vfs_read+0x219/0xa90 [ 1453.038090][T15112] ? __pfx_vfs_read+0x10/0x10 [ 1453.038115][T15112] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1453.038153][T15112] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1453.038184][T15112] ? mutex_lock_nested+0x152/0x1d0 [ 1453.038209][T15112] ? fdget_pos+0x252/0x320 [ 1453.038243][T15112] ksys_read+0x156/0x270 [ 1453.038262][T15112] ? __pfx_ksys_read+0x10/0x10 [ 1453.038285][T15112] do_syscall_64+0x166/0x520 [ 1453.038304][T15112] ? trace_irq_disable+0x3b/0x140 [ 1453.038321][T15112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.038334][T15112] ? clear_bhb_loop+0x70/0xc0 [ 1453.038351][T15112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.038364][T15112] RIP: 0033:0x7fa5c4e0e98e [ 1453.038384][T15112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1453.038396][T15112] RSP: 002b:00007fa5c30a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1453.038413][T15112] RAX: ffffffffffffffda RBX: 00007fa5c30a66c0 RCX: 00007fa5c4e0e98e [ 1453.038423][T15112] RDX: 000000000000000f RSI: 00007fa5c30a60a0 RDI: 0000000000000005 [ 1453.038432][T15112] RBP: 00007fa5c30a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.038440][T15112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.038449][T15112] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1453.038469][T15112] [ 1453.274289][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.369180][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.564657][ T2987] bond0 (unregistering): Released all slaves [ 1453.889875][ T5246] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1455.134213][ T979] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.147492][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.147516][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.438425][T11082] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1455.589674][T14708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.592418][T11082] usb 1-1: New USB device found, idVendor=0000, idProduct=7ed6, bcdDevice=82.cc [ 1455.592487][T11082] usb 1-1: too many configurations: 108, using maximum allowed: 8 [ 1455.607210][T11082] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1455.607249][T11082] usb 1-1: can't read configurations, error -61 [ 1455.803160][T11082] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1455.969671][T11082] usb 1-1: New USB device found, idVendor=0000, idProduct=7ed6, bcdDevice=82.cc [ 1455.969734][T11082] usb 1-1: too many configurations: 108, using maximum allowed: 8 [ 1455.973666][T11082] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1455.973711][T11082] usb 1-1: can't read configurations, error -61 [ 1455.985000][T11082] usb usb1-port1: attempt power cycle [ 1456.328401][T11082] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1456.350167][T11082] usb 1-1: New USB device found, idVendor=0000, idProduct=7ed6, bcdDevice=82.cc [ 1456.350235][T11082] usb 1-1: too many configurations: 108, using maximum allowed: 8 [ 1456.352486][T11082] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1456.352533][T11082] usb 1-1: can't read configurations, error -61 [ 1456.380498][ T5246] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1456.397964][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.397989][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.478447][T11082] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1456.500874][T11082] usb 1-1: New USB device found, idVendor=0000, idProduct=7ed6, bcdDevice=82.cc [ 1456.500929][T11082] usb 1-1: too many configurations: 108, using maximum allowed: 8 [ 1456.502557][T11082] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1456.502596][T11082] usb 1-1: can't read configurations, error -61 [ 1456.502944][T11082] usb usb1-port1: unable to enumerate USB device [ 1456.940830][T12026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.365504][T13227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1457.408027][T13227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1457.442635][T13227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1457.457335][T13227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1457.568649][T13227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1459.846186][ T2987] hsr_slave_0: left promiscuous mode [ 1459.859145][ T9030] Bluetooth: hci5: command tx timeout [ 1459.876056][ T2987] hsr_slave_1: left promiscuous mode [ 1459.877624][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1459.877655][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.929722][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1459.929754][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.189348][ T2987] veth1_macvtap: left promiscuous mode [ 1460.189478][ T2987] veth0_macvtap: left promiscuous mode [ 1460.189807][ T2987] veth1_vlan: left promiscuous mode [ 1460.193937][ T2987] veth0_vlan: left promiscuous mode [ 1461.205517][T13227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1461.257931][T13227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1461.271281][T13227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1461.323084][T13227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1461.324068][T13227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1461.342857][T11082] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1461.938313][ T9030] Bluetooth: hci5: command tx timeout [ 1462.070051][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 1462.889440][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 1463.395001][T15177] comedi comedi1: pc212e: a I/O base address must be specified [ 1463.445567][ T9030] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 1463.708716][ T9030] Bluetooth: hci0: command tx timeout [ 1464.032417][ T9030] Bluetooth: hci5: command tx timeout [ 1464.164220][T15177] overlayfs: overlapping lowerdir path [ 1465.571080][T15182] libceph: resolve 'S' (ret=-3): failed [ 1465.864347][T13227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1465.907890][T13227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1465.940555][ T60] Bluetooth: hci0: command tx timeout [ 1465.958423][T13227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1465.991671][T13227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1465.999259][T13227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1466.107529][T13227] Bluetooth: hci5: command tx timeout [ 1468.078970][ T9030] Bluetooth: hci0: command tx timeout [ 1468.344844][ T9030] Bluetooth: hci2: command tx timeout [ 1470.098833][ T9030] Bluetooth: hci0: command tx timeout [ 1470.418229][ T9030] Bluetooth: hci2: command tx timeout [ 1470.996995][T15024] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1471.033402][T15024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1473.105390][ T9030] Bluetooth: hci2: command tx timeout [ 1473.328562][T15024] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1473.427174][T15024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1473.491808][T15024] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1473.614113][T15024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1473.675628][T15024] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1473.713509][T15024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1474.695489][T15152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.695732][T15152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.695946][T15152] bridge_slave_0: entered allmulticast mode [ 1474.697746][T15152] bridge_slave_0: entered promiscuous mode [ 1474.761709][T15152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.761873][T15152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.762068][T15152] bridge_slave_1: entered allmulticast mode [ 1474.771844][T15152] bridge_slave_1: entered promiscuous mode [ 1474.937427][T15152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.219476][ T9030] Bluetooth: hci2: command tx timeout [ 1475.243556][T15152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.384265][T15298] FAULT_INJECTION: forcing a failure. [ 1475.384265][T15298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1475.384295][T15298] CPU: 1 UID: 0 PID: 15298 Comm: syz.0.1661 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1475.384314][T15298] Tainted: [L]=SOFTLOCKUP [ 1475.384319][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1475.384328][T15298] Call Trace: [ 1475.384334][T15298] [ 1475.384341][T15298] dump_stack_lvl+0xe8/0x150 [ 1475.384369][T15298] should_fail_ex+0x46b/0x600 [ 1475.384393][T15298] _copy_to_user+0x31/0xb0 [ 1475.384413][T15298] simple_read_from_buffer+0xe1/0x170 [ 1475.384432][T15298] proc_fail_nth_read+0x1be/0x230 [ 1475.384452][T15298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1475.384470][T15298] ? rw_verify_area+0x250/0x4d0 [ 1475.384487][T15298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1475.384502][T15298] vfs_read+0x219/0xa90 [ 1475.384522][T15298] ? __pfx_vfs_read+0x10/0x10 [ 1475.384538][T15298] ? do_sys_openat2+0x14e/0x200 [ 1475.384556][T15298] ? kmem_cache_free+0x187/0x6d0 [ 1475.384576][T15298] ? do_sys_openat2+0x14e/0x200 [ 1475.384602][T15298] ksys_read+0x156/0x270 [ 1475.384619][T15298] ? __pfx_ksys_read+0x10/0x10 [ 1475.384640][T15298] do_syscall_64+0x166/0x520 [ 1475.384663][T15298] ? trace_irq_disable+0x3b/0x140 [ 1475.384682][T15298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.384697][T15298] ? clear_bhb_loop+0x70/0xc0 [ 1475.384712][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.384725][T15298] RIP: 0033:0x7fa5c4e0e98e [ 1475.384739][T15298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1475.384752][T15298] RSP: 002b:00007fa5c30a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1475.384768][T15298] RAX: ffffffffffffffda RBX: 00007fa5c30a66c0 RCX: 00007fa5c4e0e98e [ 1475.384778][T15298] RDX: 000000000000000f RSI: 00007fa5c30a60a0 RDI: 0000000000000004 [ 1475.384795][T15298] RBP: 00007fa5c30a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.384804][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.384812][T15298] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1475.384832][T15298] [ 1475.687786][T15152] team0: Port device team_slave_0 added [ 1475.718960][T15152] team0: Port device team_slave_1 added [ 1475.738302][ T5817] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1475.888391][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 1475.894165][ T5817] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1475.896601][ T5817] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1475.896640][ T5817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1475.896669][ T5817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1475.896715][ T5817] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1475.896763][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.094164][T15152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1476.094184][T15152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.094210][T15152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1476.183261][ T5817] usb 1-1: GET_CAPABILITIES returned 0 [ 1476.183330][ T5817] usbtmc 1-1:16.0: can't read capabilities [ 1476.209779][T15152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1476.209886][T15152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.209917][T15152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.429267][ T5817] usb 1-1: USB disconnect, device number 109 [ 1476.580047][T15186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.580320][T15186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.580563][T15186] bridge_slave_0: entered allmulticast mode [ 1476.583984][T15186] bridge_slave_0: entered promiscuous mode [ 1476.645958][T15186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.646104][T15186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.646294][T15186] bridge_slave_1: entered allmulticast mode [ 1476.672410][T15186] bridge_slave_1: entered promiscuous mode [ 1476.762359][T15152] hsr_slave_0: entered promiscuous mode [ 1476.763260][T15152] hsr_slave_1: entered promiscuous mode [ 1476.763852][T15152] debugfs: 'hsr0' already exists in 'hsr' [ 1476.763874][T15152] Cannot create hsr debugfs directory [ 1476.822320][T15171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.822835][T15171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.822966][T15171] bridge_slave_0: entered allmulticast mode [ 1476.824687][T15171] bridge_slave_0: entered promiscuous mode [ 1476.904965][T15186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.922878][T15171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.922991][T15171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.923116][T15171] bridge_slave_1: entered allmulticast mode [ 1476.924819][T15171] bridge_slave_1: entered promiscuous mode [ 1476.961061][T15186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.066132][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 1477.089231][T15313] binder: BINDER_SET_CONTEXT_MGR already set [ 1477.089251][T15313] binder: 15312:15313 ioctl 4018620d 200000004a80 returned -16 [ 1477.090021][T15313] binder: 15312:15313 ioctl c018620c 200000000180 returned -1 [ 1477.311990][T15171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.340675][T15186] team0: Port device team_slave_0 added [ 1477.371849][T15171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.379913][T15186] team0: Port device team_slave_1 added [ 1477.523694][T15171] team0: Port device team_slave_0 added [ 1477.524680][T15186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.524698][T15186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.524728][T15186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.856447][T15171] team0: Port device team_slave_1 added [ 1477.857170][T15186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.857183][T15186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.857201][T15186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.155279][T15171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.155301][T15171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.155328][T15171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.214411][T15171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.214426][T15171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.214444][T15171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.424923][ T2987] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.524105][T15024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.642246][T15186] hsr_slave_0: entered promiscuous mode [ 1478.643171][T15186] hsr_slave_1: entered promiscuous mode [ 1478.643804][T15186] debugfs: 'hsr0' already exists in 'hsr' [ 1478.643828][T15186] Cannot create hsr debugfs directory [ 1479.141943][ T9030] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1479.493331][T15171] hsr_slave_0: entered promiscuous mode [ 1479.494375][T15171] hsr_slave_1: entered promiscuous mode [ 1479.495077][T15171] debugfs: 'hsr0' already exists in 'hsr' [ 1479.495097][T15171] Cannot create hsr debugfs directory [ 1479.894464][ T2987] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.986578][T15024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.011704][ T6220] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1480.199801][ T6220] usb 1-1: not running at top speed; connect to a high speed hub [ 1480.199850][ T6220] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1480.200980][ T6220] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.201008][ T6220] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1480.201057][ T6220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.293991][ T6220] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 1480.569497][T15317] sctp: [Deprecated]: syz.0.1665 (pid 15317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1480.569497][T15317] Use struct sctp_sack_info instead [ 1480.777390][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.777545][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1480.876158][ T6220] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1480.876743][ T6220] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 1480.899633][ T6220] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1480.899735][ T6220] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 1480.969192][ T6220] usb 1-1: USB disconnect, device number 110 [ 1481.456696][ T5246] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1481.488892][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.489135][ T6114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.140271][T10977] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1483.029969][ T2987] bridge_slave_1: left allmulticast mode [ 1483.030012][ T2987] bridge_slave_1: left promiscuous mode [ 1483.033351][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.671704][ T2987] bridge_slave_0: left allmulticast mode [ 1484.671734][ T2987] bridge_slave_0: left promiscuous mode [ 1484.671931][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.820615][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.820698][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.858706][T10977] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1484.909761][ T2987] bridge_slave_1: left allmulticast mode [ 1484.909797][ T2987] bridge_slave_1: left promiscuous mode [ 1484.910049][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.009562][T10977] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1485.013003][T10977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.013025][T10977] usb 1-1: Product: syz [ 1485.013039][T10977] usb 1-1: Manufacturer: syz [ 1485.013048][T10977] usb 1-1: SerialNumber: syz [ 1485.053148][ T2987] bridge_slave_0: left allmulticast mode [ 1485.053189][ T2987] bridge_slave_0: left promiscuous mode [ 1485.053463][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.278500][ T2987] bridge_slave_1: left allmulticast mode [ 1485.278537][ T2987] bridge_slave_1: left promiscuous mode [ 1485.278794][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.419794][ T2987] bridge_slave_0: left allmulticast mode [ 1485.419835][ T2987] bridge_slave_0: left promiscuous mode [ 1485.420069][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.425269][T10977] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1486.488967][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.559761][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.581188][ T2987] bond0 (unregistering): Released all slaves [ 1487.019995][T10977] usb 1-1: USB disconnect, device number 112 [ 1487.051696][T10977] usblp0: removed [ 1487.419372][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1487.500899][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.541732][ T2987] bond0 (unregistering): Released all slaves [ 1487.818432][T11079] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1487.968309][T11079] usb 1-1: Using ep0 maxpacket: 8 [ 1487.969439][T11079] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1487.971070][T11079] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1487.971105][T11079] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1487.971132][T11079] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1487.971158][T11079] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1487.971206][T11079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.207366][T11079] usb 1-1: usb_control_msg returned -71 [ 1488.207425][T11079] usbtmc 1-1:16.0: can't read capabilities [ 1488.290177][T11079] usb 1-1: USB disconnect, device number 113 [ 1488.308636][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1488.369150][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.391873][ T2987] bond0 (unregistering): Released all slaves [ 1490.053969][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'. [ 1490.055610][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1672'. [ 1490.968339][ T6220] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1491.073247][ T5246] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1491.199189][ T6220] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1491.204121][ T6220] usb 1-1: config 10 has an invalid interface number: 43 but max is 0 [ 1491.204191][ T6220] usb 1-1: config 10 has no interface number 0 [ 1491.204277][ T6220] usb 1-1: config 10 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1491.204321][ T6220] usb 1-1: config 10 interface 43 altsetting 13 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1491.204365][ T6220] usb 1-1: config 10 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 0 [ 1491.204399][ T6220] usb 1-1: config 10 interface 43 has no altsetting 0 [ 1491.216356][ T6220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.216397][ T6220] usb 1-1: Product: syz [ 1491.216412][ T6220] usb 1-1: Manufacturer: syz [ 1491.216428][ T6220] usb 1-1: SerialNumber: syz [ 1491.313165][T15381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1491.647535][T15024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.008806][ T6220] ums-usbat 1-1:10.43: USB Mass Storage device detected [ 1492.042902][ T6220] ums-usbat 1-1:10.43: Quirks match for vid 0781 pid 0005: 1 [ 1492.152643][ T6220] ums-usbat 1-1:10.43: probe with driver ums-usbat failed with error -5 [ 1492.171120][ T6220] usb 1-1: USB disconnect, device number 114 [ 1492.598385][ T2987] hsr_slave_0: left promiscuous mode [ 1492.638577][ T2987] hsr_slave_1: left promiscuous mode [ 1492.639478][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.679294][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.838493][ T2987] hsr_slave_0: left promiscuous mode [ 1492.868333][T10977] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1492.880450][ T2987] hsr_slave_1: left promiscuous mode [ 1492.881826][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1492.881878][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.899924][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1492.899953][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.018483][T10977] usb 1-1: Using ep0 maxpacket: 8 [ 1493.020285][T10977] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1493.021522][T10977] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1493.021552][T10977] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1493.021569][T10977] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1493.021584][T10977] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1493.021613][T10977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.098572][ T2987] hsr_slave_0: left promiscuous mode [ 1493.139065][ T2987] hsr_slave_1: left promiscuous mode [ 1493.140470][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.189163][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.296787][T10977] usb 1-1: usb_control_msg returned -71 [ 1493.296849][T10977] usbtmc 1-1:16.0: can't read capabilities [ 1493.430735][T10977] usb 1-1: USB disconnect, device number 115 [ 1493.608588][ T2987] veth1_macvtap: left promiscuous mode [ 1493.608687][ T2987] veth0_macvtap: left promiscuous mode [ 1493.608853][ T2987] veth1_vlan: left promiscuous mode [ 1493.608969][ T2987] veth0_vlan: left promiscuous mode [ 1494.422169][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 1494.478932][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 1495.128941][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 1495.189337][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 1495.649617][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 1495.688849][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 1496.122526][T15024] veth0_vlan: entered promiscuous mode [ 1496.307023][T15024] veth1_vlan: entered promiscuous mode [ 1496.352476][ T37] audit: type=1326 audit(1789966385.043:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.352535][ T37] audit: type=1326 audit(1789966385.043:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.353514][ T37] audit: type=1326 audit(1789966385.043:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.353592][ T37] audit: type=1326 audit(1789966385.043:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.354514][T15403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1678'. [ 1496.354992][ T37] audit: type=1326 audit(1789966385.043:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.358408][ T37] audit: type=1326 audit(1789966385.043:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.358460][ T37] audit: type=1326 audit(1789966385.043:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.358509][ T37] audit: type=1326 audit(1789966385.043:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.358559][ T37] audit: type=1326 audit(1789966385.043:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.358607][ T37] audit: type=1326 audit(1789966385.043:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15402 comm="syz.0.1678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1496.702786][T15024] veth0_macvtap: entered promiscuous mode [ 1497.592075][T15024] veth1_macvtap: entered promiscuous mode [ 1497.666564][T15024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1497.704455][T15024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.997298][ T5246] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1498.884357][ T1240] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1499.120406][ T1240] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1499.124346][ T1240] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1499.124385][ T1240] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1499.124412][ T1240] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1499.124441][ T1240] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1499.124955][ T1240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.323591][T15427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1499.323721][T15427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1499.336414][ T1240] pl2303 1-1:1.0: pl2303 converter detected [ 1499.352583][ T1240] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 1499.796861][T15425] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 1499.859963][T15425] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1499.860500][T15425] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1499.861323][T15425] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1499.861389][T15425] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 1499.865011][T10977] usb 1-1: USB disconnect, device number 116 [ 1499.961869][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.961895][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.965603][T10977] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1499.966977][T10977] pl2303 1-1:1.0: device disconnected [ 1500.242307][ T1134] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.249142][ T1134] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.250645][ T1110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.250686][ T1110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.934096][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.934123][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.781472][T15434] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1502.282952][T11082] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1502.458342][T11082] usb 1-1: Using ep0 maxpacket: 8 [ 1502.459339][T11082] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1502.460937][T11082] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1502.460973][T11082] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1502.461001][T11082] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1502.461029][T11082] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1502.461077][T11082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.913250][T11082] usb 1-1: usb_control_msg returned -71 [ 1502.914367][T11082] usbtmc 1-1:16.0: can't read capabilities [ 1502.966544][T11082] usb 1-1: USB disconnect, device number 117 [ 1503.892090][T13227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1503.942195][T13227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1503.965712][T13227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1504.069909][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1504.072555][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1504.119697][T15152] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1504.613646][T15152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1504.615416][T15152] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1504.698216][ T9] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1504.798818][T15152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1504.851340][T15152] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1505.085060][T15152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1505.630246][T15486] FAULT_INJECTION: forcing a failure. [ 1505.630246][T15486] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.630308][T15486] CPU: 1 UID: 0 PID: 15486 Comm: syz.0.1685 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1505.630341][T15486] Tainted: [L]=SOFTLOCKUP [ 1505.630350][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1505.630364][T15486] Call Trace: [ 1505.630374][T15486] [ 1505.630385][T15486] dump_stack_lvl+0xe8/0x150 [ 1505.630426][T15486] should_fail_ex+0x46b/0x600 [ 1505.630465][T15486] should_failslab+0xa8/0x100 [ 1505.630503][T15486] __kmalloc_cache_noprof+0xa1/0x680 [ 1505.630544][T15486] ? binder_get_thread+0x1c6/0x6d0 [ 1505.630668][T15486] ? binder_get_thread+0x1c6/0x6d0 [ 1505.630706][T15486] binder_get_thread+0x1c6/0x6d0 [ 1505.630743][T15486] ? __pfx_binder_poll+0x10/0x10 [ 1505.630797][T15486] binder_poll+0x48/0x370 [ 1505.630826][T15486] ? do_select+0x1038/0x1610 [ 1505.630859][T15486] ? __pfx_binder_poll+0x10/0x10 [ 1505.630891][T15486] do_select+0x104c/0x1610 [ 1505.630938][T15486] ? do_select+0x821/0x1610 [ 1505.630992][T15486] ? __pfx_do_select+0x10/0x10 [ 1505.631026][T15486] ? lock_acquire+0x115/0x350 [ 1505.631060][T15486] ? __pfx___pollwait+0x10/0x10 [ 1505.631099][T15486] ? __pfx_pollwake+0x10/0x10 [ 1505.631125][T15486] ? __pfx_pollwake+0x10/0x10 [ 1505.631150][T15486] ? __pfx_pollwake+0x10/0x10 [ 1505.631176][T15486] ? __pfx_pollwake+0x10/0x10 [ 1505.631258][T15486] core_sys_select+0x86f/0xb40 [ 1505.631291][T15486] ? get_pid_task+0x20/0x1f0 [ 1505.631331][T15486] ? __pfx_core_sys_select+0x10/0x10 [ 1505.631393][T15486] ? __pfx_set_user_sigmask+0x10/0x10 [ 1505.631428][T15486] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1505.631467][T15486] __se_sys_pselect6+0x267/0x320 [ 1505.631515][T15486] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1505.631557][T15486] ? __pfx_ksys_write+0x10/0x10 [ 1505.631591][T15486] ? __x64_sys_pselect6+0x21/0xf0 [ 1505.631630][T15486] do_syscall_64+0x166/0x520 [ 1505.631664][T15486] ? trace_irq_disable+0x3b/0x140 [ 1505.631694][T15486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.631718][T15486] ? clear_bhb_loop+0x70/0xc0 [ 1505.631748][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.631771][T15486] RIP: 0033:0x7fa5c4e4e159 [ 1505.631793][T15486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.631812][T15486] RSP: 002b:00007fa5c30a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1505.631838][T15486] RAX: ffffffffffffffda RBX: 00007fa5c50d5fa0 RCX: 00007fa5c4e4e159 [ 1505.631855][T15486] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 1505.631871][T15486] RBP: 00007fa5c30a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.631885][T15486] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1505.631901][T15486] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1505.631938][T15486] [ 1506.000942][T15152] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1506.081749][T15152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1506.436178][ T60] Bluetooth: hci3: command tx timeout [ 1507.573629][ T2987] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.638615][T15186] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1507.673871][T15186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1507.745587][T15186] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1507.781406][T15186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1507.796315][T15186] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1507.823527][T15186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1508.145855][ T2987] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.191886][T15186] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1508.255525][T15186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1508.303980][T15520] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1688'. [ 1509.422822][ T60] Bluetooth: hci3: command tx timeout [ 1509.913144][ T2987] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.364827][ T2987] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.527145][T15171] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1510.605323][T15171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1510.626512][T15152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.626797][T15171] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1510.709820][T15171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1510.727406][T15171] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1510.772647][T15171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1510.830282][T15171] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1510.874458][T15171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1511.109516][T15152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.194956][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.195225][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.405152][T15558] FAULT_INJECTION: forcing a failure. [ 1511.405152][T15558] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.405200][T15558] CPU: 0 UID: 0 PID: 15558 Comm: syz.0.1694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1511.405234][T15558] Tainted: [L]=SOFTLOCKUP [ 1511.405243][T15558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1511.405257][T15558] Call Trace: [ 1511.405266][T15558] [ 1511.405275][T15558] dump_stack_lvl+0xe8/0x150 [ 1511.405317][T15558] should_fail_ex+0x46b/0x600 [ 1511.405347][T15558] should_failslab+0xa8/0x100 [ 1511.405376][T15558] __kmalloc_noprof+0xfb/0x790 [ 1511.405401][T15558] ? tomoyo_realpath_from_path+0xef/0x640 [ 1511.405427][T15558] ? tomoyo_realpath_from_path+0xef/0x640 [ 1511.405460][T15558] tomoyo_realpath_from_path+0xef/0x640 [ 1511.405499][T15558] tomoyo_path_perm+0x283/0x560 [ 1511.405521][T15558] ? tomoyo_path_perm+0x251/0x560 [ 1511.405543][T15558] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1511.405572][T15558] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1511.405621][T15558] ? __pfx_current_check_access_path+0x10/0x10 [ 1511.405642][T15558] ? __d_lookup+0x66/0x790 [ 1511.405669][T15558] ? __d_lookup+0x6f3/0x790 [ 1511.405693][T15558] tomoyo_path_rmdir+0xaa/0xf0 [ 1511.405712][T15558] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 1511.405735][T15558] ? d_lookup+0xa0/0xc0 [ 1511.405760][T15558] security_path_rmdir+0x15f/0x330 [ 1511.405781][T15558] filename_rmdir+0x20d/0x520 [ 1511.405812][T15558] ? __pfx_filename_rmdir+0x10/0x10 [ 1511.405844][T15558] ? do_getname+0x151/0x250 [ 1511.405873][T15558] __se_sys_rmdir+0x2e/0x140 [ 1511.405900][T15558] do_syscall_64+0x166/0x520 [ 1511.405926][T15558] ? trace_irq_disable+0x3b/0x140 [ 1511.405949][T15558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.405975][T15558] ? clear_bhb_loop+0x70/0xc0 [ 1511.406002][T15558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.406020][T15558] RIP: 0033:0x7fa5c4e4e159 [ 1511.406038][T15558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.406055][T15558] RSP: 002b:00007fa5c3085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1511.406076][T15558] RAX: ffffffffffffffda RBX: 00007fa5c50d6090 RCX: 00007fa5c4e4e159 [ 1511.406090][T15558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001640 [ 1511.406102][T15558] RBP: 00007fa5c3085090 R08: 0000000000000000 R09: 0000000000000000 [ 1511.406114][T15558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.406126][T15558] R13: 00007fa5c50d6128 R14: 00007fa5c50d6090 R15: 00007ffe9bbf5b28 [ 1511.406156][T15558] [ 1511.468333][ T60] Bluetooth: hci3: command tx timeout [ 1511.573913][T15558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1512.023023][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.023168][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.655780][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 1512.748891][ T2987] bridge_slave_1: left allmulticast mode [ 1512.748930][ T2987] bridge_slave_1: left promiscuous mode [ 1512.749219][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.885016][T15572] FAULT_INJECTION: forcing a failure. [ 1512.885016][T15572] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.885045][T15572] CPU: 1 UID: 0 PID: 15572 Comm: syz.0.1697 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1512.885065][T15572] Tainted: [L]=SOFTLOCKUP [ 1512.885071][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1512.885080][T15572] Call Trace: [ 1512.885086][T15572] [ 1512.885093][T15572] dump_stack_lvl+0xe8/0x150 [ 1512.885117][T15572] should_fail_ex+0x46b/0x600 [ 1512.885140][T15572] should_failslab+0xa8/0x100 [ 1512.885162][T15572] __kmalloc_cache_noprof+0xa1/0x680 [ 1512.885181][T15572] ? jffs2_sum_init+0x72/0x220 [ 1512.885230][T15572] ? jffs2_sum_init+0x72/0x220 [ 1512.885252][T15572] jffs2_sum_init+0x72/0x220 [ 1512.885272][T15572] jffs2_do_mount_fs+0x72b/0x22c0 [ 1512.885303][T15572] jffs2_do_fill_super+0x555/0xc50 [ 1512.885326][T15572] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1512.885342][T15572] mtd_get_sb+0x18a/0x410 [ 1512.885409][T15572] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1512.885422][T15572] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1512.885436][T15572] get_tree_mtd+0x597/0x7d0 [ 1512.885459][T15572] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1512.885473][T15572] ? __pfx_get_tree_mtd+0x10/0x10 [ 1512.885491][T15572] ? safesetid_security_capable+0xa9/0x1a0 [ 1512.885513][T15572] vfs_get_tree+0x92/0x2a0 [ 1512.885532][T15572] do_new_mount+0x319/0xdc0 [ 1512.885545][T15572] ? cap_capable+0x123/0x460 [ 1512.885564][T15572] ? __pfx_do_new_mount+0x10/0x10 [ 1512.885579][T15572] ? ns_capable+0x89/0xe0 [ 1512.885599][T15572] ? path_mount+0x647/0x1050 [ 1512.885614][T15572] ? user_path_at+0xd4/0x160 [ 1512.885631][T15572] __se_sys_mount+0x31d/0x420 [ 1512.885649][T15572] ? __pfx___se_sys_mount+0x10/0x10 [ 1512.885667][T15572] ? __x64_sys_mount+0x20/0xc0 [ 1512.885683][T15572] do_syscall_64+0x166/0x520 [ 1512.885702][T15572] ? trace_irq_disable+0x3b/0x140 [ 1512.885719][T15572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.885733][T15572] ? clear_bhb_loop+0x70/0xc0 [ 1512.885749][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.885763][T15572] RIP: 0033:0x7fa5c4e4e159 [ 1512.885777][T15572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.885789][T15572] RSP: 002b:00007fa5c30a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1512.885805][T15572] RAX: ffffffffffffffda RBX: 00007fa5c50d5fa0 RCX: 00007fa5c4e4e159 [ 1512.885815][T15572] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 1512.885824][T15572] RBP: 00007fa5c4ee506b R08: 0000000000000000 R09: 0000000000000000 [ 1512.885833][T15572] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 1512.885842][T15572] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1512.885862][T15572] [ 1512.885950][T15572] jffs2: warning: (15572) jffs2_sum_init: Can't allocate memory for summary information! [ 1513.292909][ T2987] bridge_slave_0: left allmulticast mode [ 1513.292953][ T2987] bridge_slave_0: left promiscuous mode [ 1513.294579][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.538358][ T60] Bluetooth: hci3: command tx timeout [ 1513.808358][T15575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1698'. [ 1514.705038][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.785280][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.827394][ T2987] bond0 (unregistering): Released all slaves [ 1514.939597][T15468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.939725][T15468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.939917][T15468] bridge_slave_0: entered allmulticast mode [ 1514.946589][T15468] bridge_slave_0: entered promiscuous mode [ 1515.005308][T15468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.005442][T15468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.005742][T15468] bridge_slave_1: entered allmulticast mode [ 1515.011003][T15468] bridge_slave_1: entered promiscuous mode [ 1515.153420][T15186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1515.171071][T15468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.255321][T15468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.447057][T15468] team0: Port device team_slave_0 added [ 1515.762732][T15468] team0: Port device team_slave_1 added [ 1516.566273][T15468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.566296][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.566327][T15468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.614597][T15186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.636233][T15468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.636255][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.636286][T15468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.690666][ T9] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1516.858518][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1516.863210][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1516.883742][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1516.883777][ T9] usb 1-1: config 0 has no interface number 0 [ 1516.883830][ T9] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1516.930899][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.930933][ T9] usb 1-1: Product: syz [ 1516.930950][ T9] usb 1-1: Manufacturer: syz [ 1516.930966][ T9] usb 1-1: SerialNumber: syz [ 1516.965430][ T9] usb 1-1: config 0 descriptor?? [ 1517.086563][T15599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1517.323199][T15599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1517.456846][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.457550][ T6114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.525916][T15599] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 1517.525946][T15599] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1703'. [ 1518.886862][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.916739][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.193836][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1519.194050][ T9] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1519.204899][ T9] usb 1-1: USB disconnect, device number 119 [ 1519.241587][ T2987] hsr_slave_0: left promiscuous mode [ 1519.286345][ T2987] hsr_slave_1: left promiscuous mode [ 1519.287214][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1519.287233][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.344853][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1519.344895][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.481533][ T2987] veth1_macvtap: left promiscuous mode [ 1519.481659][ T2987] veth0_macvtap: left promiscuous mode [ 1519.481965][ T2987] veth1_vlan: left promiscuous mode [ 1519.485521][ T2987] veth0_vlan: left promiscuous mode [ 1519.685332][ T9030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1519.739661][ T9030] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1519.741324][ T9030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1519.742847][ T9030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1519.743618][ T9030] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1520.749584][T15628] sctp: [Deprecated]: syz.0.1706 (pid 15628) Use of int in max_burst socket option. [ 1520.749584][T15628] Use struct sctp_assoc_value instead [ 1521.003799][T15635] nfs: Unknown parameter 'retà' [ 1521.169600][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 1521.228994][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 1521.452012][ T5246] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1521.787775][ T60] Bluetooth: hci4: command tx timeout [ 1521.947144][T15468] hsr_slave_0: entered promiscuous mode [ 1521.954851][T15468] hsr_slave_1: entered promiscuous mode [ 1521.957442][T15468] debugfs: 'hsr0' already exists in 'hsr' [ 1521.957473][T15468] Cannot create hsr debugfs directory [ 1522.555449][ T37] kauditd_printk_skb: 27 callbacks suppressed [ 1522.555479][ T37] audit: type=1326 audit(1789966411.243:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15646 comm="syz.0.1711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1522.606678][ T37] audit: type=1326 audit(1789966411.243:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15646 comm="syz.0.1711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1522.607689][ T37] audit: type=1326 audit(1789966411.293:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15646 comm="syz.0.1711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1522.608026][ T37] audit: type=1326 audit(1789966411.293:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15646 comm="syz.0.1711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1522.733691][ T37] audit: type=1326 audit(1789966411.413:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15646 comm="syz.0.1711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c4e4e159 code=0x7ffc0000 [ 1522.976473][ T9030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1523.077040][ T9030] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1523.083773][ T9030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1523.100061][ T9030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1523.192862][ T9030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1523.426860][T15654] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.1713'. [ 1523.468998][T15654] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1523.858925][ T60] Bluetooth: hci4: command tx timeout [ 1525.380593][ T60] Bluetooth: hci0: command tx timeout [ 1525.709857][ T5246] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1525.938290][ T60] Bluetooth: hci4: command tx timeout [ 1527.249267][ T9030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1527.311312][ T9030] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1527.317810][ T9030] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1527.343555][ T9030] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1527.344851][ T9030] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1527.502278][T13227] Bluetooth: hci0: command tx timeout [ 1528.023160][ T60] Bluetooth: hci4: command tx timeout [ 1528.283737][T15716] FAULT_INJECTION: forcing a failure. [ 1528.283737][T15716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1528.283766][T15716] CPU: 1 UID: 0 PID: 15716 Comm: syz.0.1722 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1528.283786][T15716] Tainted: [L]=SOFTLOCKUP [ 1528.283791][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1528.283799][T15716] Call Trace: [ 1528.283805][T15716] [ 1528.283812][T15716] dump_stack_lvl+0xe8/0x150 [ 1528.283837][T15716] should_fail_ex+0x46b/0x600 [ 1528.283859][T15716] _copy_to_user+0x31/0xb0 [ 1528.283880][T15716] simple_read_from_buffer+0xe1/0x170 [ 1528.283898][T15716] proc_fail_nth_read+0x1be/0x230 [ 1528.283917][T15716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1528.283935][T15716] ? rw_verify_area+0x250/0x4d0 [ 1528.283962][T15716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1528.283977][T15716] vfs_read+0x219/0xa90 [ 1528.283998][T15716] ? __pfx_vfs_read+0x10/0x10 [ 1528.284014][T15716] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1528.284037][T15716] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1528.284056][T15716] ? mutex_lock_nested+0x152/0x1d0 [ 1528.284072][T15716] ? fdget_pos+0x252/0x320 [ 1528.284091][T15716] ksys_read+0x156/0x270 [ 1528.284108][T15716] ? __pfx_ksys_read+0x10/0x10 [ 1528.284122][T15716] ? fput+0xa0/0xd0 [ 1528.284146][T15716] do_syscall_64+0x166/0x520 [ 1528.284166][T15716] ? trace_irq_disable+0x3b/0x140 [ 1528.284183][T15716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.284196][T15716] ? clear_bhb_loop+0x70/0xc0 [ 1528.284212][T15716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.284226][T15716] RIP: 0033:0x7fa5c4e0e98e [ 1528.284239][T15716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1528.284250][T15716] RSP: 002b:00007fa5c30a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1528.284266][T15716] RAX: ffffffffffffffda RBX: 00007fa5c30a66c0 RCX: 00007fa5c4e0e98e [ 1528.284276][T15716] RDX: 000000000000000f RSI: 00007fa5c30a60a0 RDI: 0000000000000005 [ 1528.284284][T15716] RBP: 00007fa5c30a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.284293][T15716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.284301][T15716] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1528.284321][T15716] [ 1528.720787][T15722] FAULT_INJECTION: forcing a failure. [ 1528.720787][T15722] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.720816][T15722] CPU: 0 UID: 0 PID: 15722 Comm: syz.0.1725 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1528.720836][T15722] Tainted: [L]=SOFTLOCKUP [ 1528.720841][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1528.720854][T15722] Call Trace: [ 1528.720860][T15722] [ 1528.720866][T15722] dump_stack_lvl+0xe8/0x150 [ 1528.720891][T15722] should_fail_ex+0x46b/0x600 [ 1528.720912][T15722] should_failslab+0xa8/0x100 [ 1528.720934][T15722] __kmalloc_cache_noprof+0xa1/0x680 [ 1528.720953][T15722] ? nd_alloc_stack+0x7d/0xf0 [ 1528.720967][T15722] ? nd_alloc_stack+0x7d/0xf0 [ 1528.720981][T15722] ? lookup_mnt+0x55e/0x590 [ 1528.720999][T15722] nd_alloc_stack+0x7d/0xf0 [ 1528.721014][T15722] pick_link+0xdb2/0xfe0 [ 1528.721034][T15722] step_into_slowpath+0x58a/0x820 [ 1528.721051][T15722] ? __pfx_step_into_slowpath+0x10/0x10 [ 1528.721071][T15722] link_path_walk+0xd5e/0x1910 [ 1528.721096][T15722] path_lookupat+0xe4/0x8c0 [ 1528.721118][T15722] filename_lookup+0x265/0x5d0 [ 1528.721135][T15722] ? __pfx_filename_lookup+0x10/0x10 [ 1528.721155][T15722] ? __pfx_shmem_put_link+0x10/0x10 [ 1528.721187][T15722] ? __pfx_shmem_put_link+0x10/0x10 [ 1528.721211][T15722] ? strncpy_from_user+0x150/0x2c0 [ 1528.721233][T15722] path_listxattrat+0x13b/0x3f0 [ 1528.721253][T15722] ? __pfx_path_listxattrat+0x10/0x10 [ 1528.721277][T15722] do_syscall_64+0x166/0x520 [ 1528.721297][T15722] ? trace_irq_disable+0x3b/0x140 [ 1528.721314][T15722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.721328][T15722] ? clear_bhb_loop+0x70/0xc0 [ 1528.721350][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.721363][T15722] RIP: 0033:0x7fa5c4e4e159 [ 1528.721377][T15722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.721389][T15722] RSP: 002b:00007fa5c30a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 1528.721405][T15722] RAX: ffffffffffffffda RBX: 00007fa5c50d5fa0 RCX: 00007fa5c4e4e159 [ 1528.721416][T15722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1528.721424][T15722] RBP: 00007fa5c30a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.721433][T15722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.721441][T15722] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1528.721461][T15722] [ 1529.005003][T15618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.005127][T15618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.005286][T15618] bridge_slave_0: entered allmulticast mode [ 1529.006864][T15618] bridge_slave_0: entered promiscuous mode [ 1529.036307][T15618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.036437][T15618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.036642][T15618] bridge_slave_1: entered allmulticast mode [ 1529.040365][T15618] bridge_slave_1: entered promiscuous mode [ 1529.382039][T15733] FAULT_INJECTION: forcing a failure. [ 1529.382039][T15733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1529.382077][T15733] CPU: 1 UID: 0 PID: 15733 Comm: syz.0.1728 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1529.382104][T15733] Tainted: [L]=SOFTLOCKUP [ 1529.382112][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1529.382124][T15733] Call Trace: [ 1529.382131][T15733] [ 1529.382140][T15733] dump_stack_lvl+0xe8/0x150 [ 1529.382173][T15733] should_fail_ex+0x46b/0x600 [ 1529.382205][T15733] _copy_from_user+0x2d/0xb0 [ 1529.382235][T15733] get_user_ifreq+0x6b/0x180 [ 1529.382261][T15733] sock_ioctl+0x6fb/0x7f0 [ 1529.382286][T15733] ? __pfx_sock_ioctl+0x10/0x10 [ 1529.382310][T15733] ? __fget_files+0x3a8/0x420 [ 1529.382329][T15733] ? __fget_files+0x2a/0x420 [ 1529.382351][T15733] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1529.382372][T15733] ? __pfx_sock_ioctl+0x10/0x10 [ 1529.382394][T15733] __se_sys_ioctl+0xff/0x170 [ 1529.382422][T15733] do_syscall_64+0x166/0x520 [ 1529.382449][T15733] ? trace_irq_disable+0x3b/0x140 [ 1529.382472][T15733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.382491][T15733] ? clear_bhb_loop+0x70/0xc0 [ 1529.382514][T15733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.382532][T15733] RIP: 0033:0x7fa5c4e4e159 [ 1529.382551][T15733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.382567][T15733] RSP: 002b:00007fa5c30a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1529.382589][T15733] RAX: ffffffffffffffda RBX: 00007fa5c50d5fa0 RCX: 00007fa5c4e4e159 [ 1529.382604][T15733] RDX: 0000200000000280 RSI: 00000000000089f3 RDI: 0000000000000003 [ 1529.382617][T15733] RBP: 00007fa5c30a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.382630][T15733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.382642][T15733] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1529.382680][T15733] [ 1529.538204][ T60] Bluetooth: hci0: command tx timeout [ 1529.618316][ T9030] Bluetooth: hci2: command tx timeout [ 1529.740330][T15618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1529.803489][T15618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.993714][T15618] team0: Port device team_slave_0 added [ 1530.004795][T15618] team0: Port device team_slave_1 added [ 1530.172074][T15618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1530.172097][T15618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1530.172128][T15618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1530.214526][T15618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1530.214544][T15618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1530.214571][T15618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.275814][T15428] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1530.477642][T15428] usb 1-1: Using ep0 maxpacket: 32 [ 1530.484625][T15428] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1530.499784][T15428] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1530.499826][T15428] usb 1-1: config 0 has no interface number 0 [ 1530.499881][T15428] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1530.534826][T15428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.534858][T15428] usb 1-1: Product: syz [ 1530.534875][T15428] usb 1-1: Manufacturer: syz [ 1530.534893][T15428] usb 1-1: SerialNumber: syz [ 1530.637307][T15428] usb 1-1: config 0 descriptor?? [ 1530.644238][T15743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1530.853377][T15743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1530.992052][T15618] hsr_slave_0: entered promiscuous mode [ 1530.993413][T15618] hsr_slave_1: entered promiscuous mode [ 1530.994406][T15618] debugfs: 'hsr0' already exists in 'hsr' [ 1530.994432][T15618] Cannot create hsr debugfs directory [ 1531.055936][T15743] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 1531.055965][T15743] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1731'. [ 1531.618207][ T9030] Bluetooth: hci0: command tx timeout [ 1531.698247][ T9030] Bluetooth: hci2: command tx timeout [ 1531.918566][T15428] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1531.918908][T15428] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1531.962726][T15428] usb 1-1: USB disconnect, device number 120 [ 1532.245170][T15648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.245404][T15648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.245608][T15648] bridge_slave_0: entered allmulticast mode [ 1532.254059][T15648] bridge_slave_0: entered promiscuous mode [ 1532.322286][T15648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.322468][T15648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.322947][T15648] bridge_slave_1: entered allmulticast mode [ 1532.326947][T15648] bridge_slave_1: entered promiscuous mode [ 1533.561055][T15648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.692138][T15648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.778388][ T9030] Bluetooth: hci2: command tx timeout [ 1534.321277][T15468] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1534.352093][T15468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1534.358247][ T5699] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1534.408435][T15648] team0: Port device team_slave_0 added [ 1534.408926][T15468] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1534.451486][T15468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1534.477758][T15648] team0: Port device team_slave_1 added [ 1534.517173][ T5699] usb 1-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 1534.520442][ T5699] usb 1-1: config 162 has an invalid interface number: 79 but max is 1 [ 1534.520471][ T5699] usb 1-1: config 162 has an invalid interface number: 183 but max is 1 [ 1534.520493][ T5699] usb 1-1: config 162 has no interface number 0 [ 1534.520510][ T5699] usb 1-1: config 162 has no interface number 1 [ 1534.520569][ T5699] usb 1-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1534.520609][ T5699] usb 1-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1534.520632][ T5699] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1534.520660][ T5699] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1534.520686][ T5699] usb 1-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1534.520711][ T5699] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 1534.520738][ T5699] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1534.520763][ T5699] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1534.520784][ T5699] usb 1-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1534.520810][ T5699] usb 1-1: config 162 interface 79 has no altsetting 0 [ 1534.520828][ T5699] usb 1-1: config 162 interface 183 has no altsetting 0 [ 1534.703978][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.704012][ T5699] usb 1-1: Product: syz [ 1534.704028][ T5699] usb 1-1: Manufacturer: syz [ 1534.704045][ T5699] usb 1-1: SerialNumber: syz [ 1534.980214][ T5699] pl2303 1-1:162.79: required endpoints missing [ 1535.083831][ T5699] pl2303 1-1:162.183: pl2303 converter detected [ 1535.084692][ T5699] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 1535.085161][ T5699] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 1535.085578][ T5699] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 1535.085995][ T5699] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 1535.086504][ T5699] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 1535.086921][ T5699] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 1535.087347][ T5699] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 1535.087764][ T5699] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 1535.093559][ T5699] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 1535.094129][ T5699] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 1535.094565][ T5699] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 1535.115068][ T5699] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 1535.136459][ T5699] usb 1-1: USB disconnect, device number 121 [ 1535.230961][ T5699] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1535.235172][ T5699] pl2303 1-1:162.183: device disconnected [ 1535.290592][T15468] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1535.331511][T15468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1535.439007][T15468] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1535.475816][T15468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1535.595963][T15648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.595985][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.596017][T15648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.639148][T15648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.639168][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.639195][T15648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.858274][ T9030] Bluetooth: hci2: command tx timeout [ 1536.042740][T15775] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 1536.272301][T15775] bond4: entered promiscuous mode [ 1536.272762][T15775] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1536.344741][T15777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1536.345118][T15777] bond4: (slave ipip1): The slave device specified does not support setting the MAC address [ 1536.345134][T15777] bond4: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 1536.351330][T15777] bond4: (slave ipip1): making interface the new active one [ 1536.351357][T15777] ipip1: entered promiscuous mode [ 1536.353919][T15777] bond4: (slave ipip1): Enslaving as an active interface with an up link [ 1536.503342][T15648] hsr_slave_0: entered promiscuous mode [ 1536.508669][T15648] hsr_slave_1: entered promiscuous mode [ 1536.512257][T15648] debugfs: 'hsr0' already exists in 'hsr' [ 1536.512286][T15648] Cannot create hsr debugfs directory [ 1536.817785][T15428] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1536.988232][T15428] usb 1-1: Using ep0 maxpacket: 32 [ 1536.992124][T15428] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1536.993699][T15428] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1536.993728][T15428] usb 1-1: config 0 has no interface number 0 [ 1536.993782][T15428] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1536.996988][T15428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.997016][T15428] usb 1-1: Product: syz [ 1536.997034][T15428] usb 1-1: Manufacturer: syz [ 1536.997051][T15428] usb 1-1: SerialNumber: syz [ 1537.057873][T15696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.058034][T15696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.063285][T15696] bridge_slave_0: entered allmulticast mode [ 1537.087159][T15696] bridge_slave_0: entered promiscuous mode [ 1537.103124][T15428] usb 1-1: config 0 descriptor?? [ 1537.105004][T15784] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1537.124770][T15696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.124912][T15696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.125106][T15696] bridge_slave_1: entered allmulticast mode [ 1537.130272][T15696] bridge_slave_1: entered promiscuous mode [ 1537.317392][T15784] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1537.359969][T15696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.394571][T15696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.530476][T15784] netlink: 'syz.0.1738': attribute type 1 has an invalid length. [ 1537.530505][T15784] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1738'. [ 1537.884329][ T5246] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1537.900083][T15696] team0: Port device team_slave_0 added [ 1538.000296][T15696] team0: Port device team_slave_1 added [ 1538.252084][T15428] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1538.252271][T15428] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1538.283653][T15428] usb 1-1: USB disconnect, device number 122 [ 1538.529158][T15696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.529182][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.529214][T15696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.621156][T15696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.621178][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.621207][T15696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.102164][T15696] hsr_slave_0: entered promiscuous mode [ 1539.103723][T15696] hsr_slave_1: entered promiscuous mode [ 1539.104821][T15696] debugfs: 'hsr0' already exists in 'hsr' [ 1539.104850][T15696] Cannot create hsr debugfs directory [ 1539.259853][T15428] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1539.285137][ T2987] bridge_slave_1: left allmulticast mode [ 1539.285181][ T2987] bridge_slave_1: left promiscuous mode [ 1539.285483][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.428483][T15428] usb 1-1: Using ep0 maxpacket: 32 [ 1539.431594][T15428] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1539.431656][T15428] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=7d.2a [ 1539.433242][T15428] usb 1-1: config 4 has an invalid interface number: 17 but max is 0 [ 1539.433272][T15428] usb 1-1: config 4 has no interface number 0 [ 1539.433308][T15428] usb 1-1: config 4 interface 17 has no altsetting 0 [ 1539.436775][T15428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.436804][T15428] usb 1-1: Product: syz [ 1539.436821][T15428] usb 1-1: Manufacturer: syz [ 1539.436838][T15428] usb 1-1: SerialNumber: syz [ 1539.515278][ T2987] bridge_slave_0: left allmulticast mode [ 1539.515321][ T2987] bridge_slave_0: left promiscuous mode [ 1539.542216][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.805695][T15812] ieee802154 phy0 wpan0: encryption failed: -22 [ 1539.873688][T15428] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1539.875166][T15428] gspca_sn9c2028: read1 error -71 [ 1539.875624][T15428] gspca_sn9c2028: read1 error -71 [ 1539.876068][T15428] gspca_sn9c2028: read1 error -71 [ 1539.876166][T15428] sn9c2028 1-1:4.17: probe with driver sn9c2028 failed with error -71 [ 1539.915203][ T2987] bridge_slave_1: left allmulticast mode [ 1539.915243][ T2987] bridge_slave_1: left promiscuous mode [ 1539.915525][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.916900][T15428] usb 1-1: USB disconnect, device number 123 [ 1540.090686][ T2987] bridge_slave_0: left allmulticast mode [ 1540.090715][ T2987] bridge_slave_0: left promiscuous mode [ 1540.090887][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.519701][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.618962][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.682395][ T2987] bond0 (unregistering): Released all slaves [ 1542.259239][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.319469][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.340476][ T2987] bond0 (unregistering): Released all slaves [ 1543.182110][T15468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.417413][T15468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.569811][ T2987] hsr_slave_0: left promiscuous mode [ 1543.608604][ T2987] hsr_slave_1: left promiscuous mode [ 1543.610077][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.659262][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.818658][T10977] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1543.838632][ T2987] hsr_slave_0: left promiscuous mode [ 1543.878551][ T2987] hsr_slave_1: left promiscuous mode [ 1543.879452][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.909540][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.968524][T10977] usb 1-1: Using ep0 maxpacket: 32 [ 1543.969566][T10977] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1543.970764][T10977] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1543.970792][T10977] usb 1-1: config 0 has no interface number 0 [ 1543.970843][T10977] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1543.973153][T10977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.973180][T10977] usb 1-1: Product: syz [ 1543.973196][T10977] usb 1-1: Manufacturer: syz [ 1543.973213][T10977] usb 1-1: SerialNumber: syz [ 1543.983164][T10977] usb 1-1: config 0 descriptor?? [ 1544.025873][T15869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1544.261282][T15869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1544.465141][T15869] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 1544.465169][T15869] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1745'. [ 1545.310615][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 1545.369481][T10977] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1545.369676][T10977] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1545.390651][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 1545.425829][T10977] usb 1-1: USB disconnect, device number 124 [ 1545.938969][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 1546.150463][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1746'. [ 1546.261684][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.261768][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.264343][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 1546.419417][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 1546.805080][ T979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.805274][ T979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.833558][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.835141][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.848477][ T9] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1547.059097][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1547.067448][ T9] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1547.067481][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.067503][ T9] usb 1-1: config 0 has no interface number 0 [ 1547.067536][ T9] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1547.067553][ T9] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 1547.067570][ T9] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1547.067586][ T9] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1547.204949][ T9] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1547.204984][ T9] usb 1-1: Product: syz [ 1547.205002][ T9] usb 1-1: Manufacturer: syz [ 1547.205017][ T9] usb 1-1: SerialNumber: syz [ 1547.245638][ T9] usb 1-1: config 0 descriptor?? [ 1547.647524][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input13 [ 1548.359601][ T9] usb 1-1: USB disconnect, device number 125 [ 1548.359693][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1548.945203][T15893] FAULT_INJECTION: forcing a failure. [ 1548.945203][T15893] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.945247][T15893] CPU: 1 UID: 0 PID: 15893 Comm: syz.0.1749 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1548.945280][T15893] Tainted: [L]=SOFTLOCKUP [ 1548.945290][T15893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1548.945304][T15893] Call Trace: [ 1548.945323][T15893] [ 1548.945333][T15893] dump_stack_lvl+0xe8/0x150 [ 1548.945375][T15893] should_fail_ex+0x46b/0x600 [ 1548.945413][T15893] should_failslab+0xa8/0x100 [ 1548.945449][T15893] __kmalloc_cache_noprof+0xa1/0x680 [ 1548.945481][T15893] ? getname_long+0x50/0x130 [ 1548.945503][T15893] ? getname_long+0x50/0x130 [ 1548.945537][T15893] getname_long+0x50/0x130 [ 1548.945563][T15893] do_getname+0x181/0x250 [ 1548.945598][T15893] __se_sys_mknod+0x24/0x150 [ 1548.945630][T15893] do_syscall_64+0x166/0x520 [ 1548.945664][T15893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.945686][T15893] ? clear_bhb_loop+0x70/0xc0 [ 1548.945715][T15893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.945739][T15893] RIP: 0033:0x7fa5c4e4e159 [ 1548.945760][T15893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.945780][T15893] RSP: 002b:00007fa5c30a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1548.945807][T15893] RAX: ffffffffffffffda RBX: 00007fa5c50d5fa0 RCX: 00007fa5c4e4e159 [ 1548.945824][T15893] RDX: 0000000000000701 RSI: 0000000000000000 RDI: 0000200000001b80 [ 1548.945840][T15893] RBP: 00007fa5c30a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.945855][T15893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.945868][T15893] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1548.945904][T15893] [ 1549.802693][T15428] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1549.869760][ T5246] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1549.958224][T15428] usb 1-1: Using ep0 maxpacket: 32 [ 1549.959208][T15428] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1549.961267][T15428] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1549.961300][T15428] usb 1-1: config 0 has no interface number 0 [ 1549.961354][T15428] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1549.965582][T15428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.965612][T15428] usb 1-1: Product: syz [ 1549.965629][T15428] usb 1-1: Manufacturer: syz [ 1549.965645][T15428] usb 1-1: SerialNumber: syz [ 1550.035545][T15428] usb 1-1: config 0 descriptor?? [ 1550.037015][T15907] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1550.241901][T15907] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1550.445090][T15907] netlink: 'syz.0.1752': attribute type 1 has an invalid length. [ 1550.445144][T15907] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1752'. [ 1551.540091][T15468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.326180][T15428] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1552.326512][T15428] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1552.367896][T15428] usb 1-1: USB disconnect, device number 126 [ 1553.274156][T15939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1753'. [ 1555.493047][T15468] veth0_vlan: entered promiscuous mode [ 1555.520405][T15468] veth1_vlan: entered promiscuous mode [ 1555.601643][T15468] veth0_macvtap: entered promiscuous mode [ 1555.614456][T15468] veth1_macvtap: entered promiscuous mode [ 1555.706165][T15468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1556.096228][T15468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1556.158381][ T979] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.158451][ T979] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.158493][ T979] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.158534][ T979] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.035548][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.035575][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.185100][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.185130][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.711364][ T5720] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1558.912781][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 1558.917990][ T5720] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1558.942182][ T5720] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1558.942217][ T5720] usb 1-1: config 0 has no interface number 0 [ 1558.942289][ T5720] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1558.950538][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.950571][ T5720] usb 1-1: Product: syz [ 1558.950588][ T5720] usb 1-1: Manufacturer: syz [ 1558.950604][ T5720] usb 1-1: SerialNumber: syz [ 1559.010520][ T5720] usb 1-1: config 0 descriptor?? [ 1559.013310][T15983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1559.312688][T15983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1559.414934][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1761'. [ 1559.416417][T15988] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1761'. [ 1559.626873][T15983] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 1559.626922][T15983] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1759'. [ 1560.582339][ T2987] bridge_slave_1: left allmulticast mode [ 1560.582384][ T2987] bridge_slave_1: left promiscuous mode [ 1560.582655][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.914085][ T2987] bridge_slave_0: left allmulticast mode [ 1560.914129][ T2987] bridge_slave_0: left promiscuous mode [ 1561.027721][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.607496][ T5720] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1561.607841][ T5720] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1561.665731][ T5720] usb 1-1: USB disconnect, device number 127 [ 1562.056699][T16014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1765'. [ 1564.060998][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1564.138887][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.160479][ T2987] bond0 (unregistering): Released all slaves [ 1564.222473][ T5246] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1564.765018][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1769'. [ 1564.766585][T16026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1769'. [ 1565.380991][ T2987] hsr_slave_0: left promiscuous mode [ 1565.419659][ T2987] hsr_slave_1: left promiscuous mode [ 1565.420651][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.428361][ T5699] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1565.481399][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.606207][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 1565.607122][ T5699] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1565.643775][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.643819][ T5699] usb 1-1: Product: syz [ 1565.643835][ T5699] usb 1-1: Manufacturer: syz [ 1565.643852][ T5699] usb 1-1: SerialNumber: syz [ 1565.653696][ T5699] usb 1-1: config 0 descriptor?? [ 1565.666562][ T5699] cdc_ether 1-1:0.0: bad CDC descriptors [ 1565.670304][ T5699] usb 1-1: unsupported MDLM descriptors [ 1565.848320][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1565.978704][ T9] usb 9-1: device descriptor read/64, error -71 [ 1566.228359][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1566.231037][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 1566.301136][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 1566.378208][ T9] usb 9-1: device descriptor read/64, error -71 [ 1566.488767][ T9] usb usb9-port1: attempt power cycle [ 1566.557369][T10977] usb 1-1: USB disconnect, device number 2 [ 1566.908212][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1566.939016][ T9] usb 9-1: device descriptor read/8, error -71 [ 1567.218341][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1567.238943][ T9] usb 9-1: device descriptor read/8, error -71 [ 1567.348571][ T9] usb usb9-port1: unable to enumerate USB device [ 1567.847419][T10977] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1568.019134][T10977] usb 1-1: Using ep0 maxpacket: 32 [ 1568.020049][T10977] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1568.021594][T10977] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1568.021623][T10977] usb 1-1: config 0 has no interface number 0 [ 1568.021674][T10977] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1568.024743][T10977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.024772][T10977] usb 1-1: Product: syz [ 1568.024788][T10977] usb 1-1: Manufacturer: syz [ 1568.024805][T10977] usb 1-1: SerialNumber: syz [ 1568.090357][T10977] usb 1-1: config 0 descriptor?? [ 1568.091095][T16049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1568.306850][T16049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1568.525415][T16049] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 1568.525445][T16049] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1772'. [ 1569.450842][ T1240] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1569.591377][ T1240] usb 9-1: device descriptor read/64, error -71 [ 1569.842894][ T1240] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1569.988297][ T1240] usb 9-1: device descriptor read/64, error -71 [ 1570.108830][ T1240] usb usb9-port1: attempt power cycle [ 1570.395784][T10977] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1570.396120][T10977] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1570.475056][T10977] usb 1-1: USB disconnect, device number 3 [ 1570.500048][ T1240] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1570.536126][ T1240] usb 9-1: device descriptor read/8, error -71 [ 1570.617849][T15618] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1570.663673][T15618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1570.692745][T15618] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1570.801265][ T1240] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1570.819064][ T1240] usb 9-1: device descriptor read/8, error -71 [ 1570.822317][T15618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1570.843856][T15618] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1570.884015][T15618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1570.885467][T15618] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1570.924462][T15618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1570.951827][ T1240] usb usb9-port1: unable to enumerate USB device [ 1571.245858][T16083] jffs2: notice: (16083) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1571.905774][T15648] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1571.994685][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1572.015066][T15648] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1572.059359][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1572.083115][T15648] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1572.287884][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1572.304169][T15648] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1572.420624][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1572.713074][T15618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.125993][T15618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.381070][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1777'. [ 1573.382672][T16124] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1777'. [ 1573.567041][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.567682][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1573.579315][T16127] FAULT_INJECTION: forcing a failure. [ 1573.579315][T16127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.579353][T16127] CPU: 0 UID: 0 PID: 16127 Comm: syz.8.1778 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1573.579382][T16127] Tainted: [L]=SOFTLOCKUP [ 1573.579390][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1573.579403][T16127] Call Trace: [ 1573.579412][T16127] [ 1573.579421][T16127] dump_stack_lvl+0xe8/0x150 [ 1573.579458][T16127] should_fail_ex+0x46b/0x600 [ 1573.579491][T16127] _copy_to_user+0x31/0xb0 [ 1573.579522][T16127] simple_read_from_buffer+0xe1/0x170 [ 1573.579551][T16127] proc_fail_nth_read+0x1be/0x230 [ 1573.579580][T16127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1573.579608][T16127] ? rw_verify_area+0x250/0x4d0 [ 1573.579634][T16127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1573.579658][T16127] vfs_read+0x219/0xa90 [ 1573.579694][T16127] ? __pfx_vfs_read+0x10/0x10 [ 1573.579720][T16127] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1573.579755][T16127] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1573.579784][T16127] ? mutex_lock_nested+0x152/0x1d0 [ 1573.579807][T16127] ? fdget_pos+0x252/0x320 [ 1573.579838][T16127] ksys_read+0x156/0x270 [ 1573.579864][T16127] ? __pfx_ksys_read+0x10/0x10 [ 1573.579900][T16127] do_syscall_64+0x166/0x520 [ 1573.579929][T16127] ? trace_irq_disable+0x3b/0x140 [ 1573.579954][T16127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.579975][T16127] ? clear_bhb_loop+0x70/0xc0 [ 1573.580001][T16127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.580021][T16127] RIP: 0033:0x7f595eade98e [ 1573.580041][T16127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1573.580058][T16127] RSP: 002b:00007f595cd75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1573.580082][T16127] RAX: ffffffffffffffda RBX: 00007f595cd766c0 RCX: 00007f595eade98e [ 1573.580107][T16127] RDX: 000000000000000f RSI: 00007f595cd760a0 RDI: 0000000000000004 [ 1573.580121][T16127] RBP: 00007f595cd76090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.580134][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.580147][T16127] R13: 00007f595eda6038 R14: 00007f595eda5fa0 R15: 00007ffc58ebb698 [ 1573.580181][T16127] [ 1573.864182][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.864334][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.886072][T15696] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1573.928002][T15696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1573.963609][T15696] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1574.096740][T15696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1574.136256][T15696] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1574.187587][T15696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1574.203633][T15696] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1574.253258][T15696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1574.419240][ T5699] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1574.581484][T15648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.608377][ T5699] usb 1-1: Using ep0 maxpacket: 32 [ 1574.610707][ T5699] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1574.613423][ T5699] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1574.613454][ T5699] usb 1-1: config 0 has no interface number 0 [ 1574.613509][ T5699] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1574.660936][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.660971][ T5699] usb 1-1: Product: syz [ 1574.660989][ T5699] usb 1-1: Manufacturer: syz [ 1574.661006][ T5699] usb 1-1: SerialNumber: syz [ 1574.700590][ T5699] usb 1-1: config 0 descriptor?? [ 1574.701941][T16133] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1574.775049][T15648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.907649][T16133] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1575.126517][T16133] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 1575.126546][T16133] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1781'. [ 1575.600085][ T5699] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1575.600420][ T5699] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1575.612638][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.612877][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.813817][ T5699] usb 1-1: USB disconnect, device number 4 [ 1576.908402][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.908508][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.428913][T15696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.577987][T15696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.791624][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.791780][ T6114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.963524][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.963673][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.607180][T15618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.253714][T15648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.537418][T15696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.747716][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1582.803345][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1582.815233][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1582.827680][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1582.828912][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1585.191452][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1585.207229][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1585.267611][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1585.318716][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1585.321194][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1586.180510][ T60] Bluetooth: hci4: command tx timeout [ 1587.551001][ T60] Bluetooth: hci5: command tx timeout [ 1588.258453][ T60] Bluetooth: hci4: command tx timeout [ 1588.784720][T16265] FAULT_INJECTION: forcing a failure. [ 1588.784720][T16265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.784758][T16265] CPU: 1 UID: 0 PID: 16265 Comm: syz.8.1800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1588.784784][T16265] Tainted: [L]=SOFTLOCKUP [ 1588.784791][T16265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1588.784802][T16265] Call Trace: [ 1588.784810][T16265] [ 1588.784818][T16265] dump_stack_lvl+0xe8/0x150 [ 1588.784854][T16265] should_fail_ex+0x46b/0x600 [ 1588.784896][T16265] _copy_from_user+0x2d/0xb0 [ 1588.784929][T16265] __se_sys_add_key+0x2af/0x420 [ 1588.784954][T16265] ? __pfx___se_sys_add_key+0x10/0x10 [ 1588.784984][T16265] ? __x64_sys_add_key+0x20/0xc0 [ 1588.785008][T16265] do_syscall_64+0x166/0x520 [ 1588.785041][T16265] ? trace_irq_disable+0x3b/0x140 [ 1588.785065][T16265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.785085][T16265] ? clear_bhb_loop+0x70/0xc0 [ 1588.785108][T16265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.785125][T16265] RIP: 0033:0x7f595eb1e159 [ 1588.785143][T16265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.785159][T16265] RSP: 002b:00007f595cd76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1588.785181][T16265] RAX: ffffffffffffffda RBX: 00007f595eda5fa0 RCX: 00007f595eb1e159 [ 1588.785195][T16265] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1588.785208][T16265] RBP: 00007f595cd76090 R08: fffffffffffffffd R09: 0000000000000000 [ 1588.785220][T16265] R10: 0000000000000110 R11: 0000000000000246 R12: 0000000000000001 [ 1588.785231][T16265] R13: 00007f595eda6038 R14: 00007f595eda5fa0 R15: 00007ffc58ebb698 [ 1588.785262][T16265] [ 1589.227655][T16273] FAULT_INJECTION: forcing a failure. [ 1589.227655][T16273] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.227698][T16273] CPU: 1 UID: 0 PID: 16273 Comm: syz.8.1802 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1589.227730][T16273] Tainted: [L]=SOFTLOCKUP [ 1589.227738][T16273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1589.227753][T16273] Call Trace: [ 1589.227763][T16273] [ 1589.227774][T16273] dump_stack_lvl+0xe8/0x150 [ 1589.227815][T16273] should_fail_ex+0x46b/0x600 [ 1589.227853][T16273] should_failslab+0xa8/0x100 [ 1589.227891][T16273] ? skb_clone+0x212/0x3a0 [ 1589.227917][T16273] kmem_cache_alloc_noprof+0x9e/0x690 [ 1589.227949][T16273] ? skb_clone+0x212/0x3a0 [ 1589.227983][T16273] skb_clone+0x212/0x3a0 [ 1589.228014][T16273] __netlink_deliver_tap+0x413/0x860 [ 1589.228061][T16273] ? netlink_deliver_tap+0x2e/0x1b0 [ 1589.228089][T16273] netlink_deliver_tap+0x19c/0x1b0 [ 1589.228117][T16273] netlink_unicast+0x7b8/0x990 [ 1589.228153][T16273] netlink_sendmsg+0x813/0xb40 [ 1589.228194][T16273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.228225][T16273] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1589.228270][T16273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.228297][T16273] sock_sendmsg_nosec+0x13a/0x180 [ 1589.228329][T16273] sock_sendmsg+0x1ca/0x2d0 [ 1589.228429][T16273] ? __pfx_sock_sendmsg+0x10/0x10 [ 1589.228474][T16273] ? __asan_memset+0x22/0x50 [ 1589.228503][T16273] ? iov_iter_bvec+0xb8/0x180 [ 1589.228536][T16273] splice_to_socket+0xb61/0x12a0 [ 1589.228590][T16273] ? __pfx_splice_to_socket+0x10/0x10 [ 1589.228663][T16273] ? bpf_lsm_file_permission+0x9/0x20 [ 1589.228689][T16273] ? security_file_permission+0x75/0x260 [ 1589.228718][T16273] ? rw_verify_area+0x209/0x4d0 [ 1589.228745][T16273] ? __pfx_splice_to_socket+0x10/0x10 [ 1589.228774][T16273] do_splice+0xf29/0x1990 [ 1589.228807][T16273] ? lock_acquire+0x115/0x350 [ 1589.228858][T16273] ? __pfx_do_splice+0x10/0x10 [ 1589.228895][T16273] __se_sys_splice+0x353/0x490 [ 1589.228927][T16273] ? __pfx___se_sys_splice+0x10/0x10 [ 1589.228960][T16273] ? __x64_sys_splice+0x21/0xf0 [ 1589.228987][T16273] do_syscall_64+0x166/0x520 [ 1589.229016][T16273] ? trace_irq_disable+0x3b/0x140 [ 1589.229043][T16273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.229069][T16273] ? clear_bhb_loop+0x70/0xc0 [ 1589.229095][T16273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.229118][T16273] RIP: 0033:0x7f595eb1e159 [ 1589.229141][T16273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.229160][T16273] RSP: 002b:00007f595cd55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1589.229186][T16273] RAX: ffffffffffffffda RBX: 00007f595eda6090 RCX: 00007f595eb1e159 [ 1589.229203][T16273] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1589.229217][T16273] RBP: 00007f595cd55090 R08: 000000000004ffe6 R09: 8864000000000000 [ 1589.229234][T16273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.229249][T16273] R13: 00007f595eda6128 R14: 00007f595eda6090 R15: 00007ffc58ebb698 [ 1589.229287][T16273] [ 1589.464456][ T9030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1589.580634][ T9030] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1589.583853][ T9030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1589.587305][ T9030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1589.605090][ T9030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1589.622143][ T9030] Bluetooth: hci5: command tx timeout [ 1590.275837][T16282] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1803'. [ 1590.341788][ T60] Bluetooth: hci4: command tx timeout [ 1590.353170][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1803'. [ 1591.700297][ T60] Bluetooth: hci5: command tx timeout [ 1591.948244][ T60] Bluetooth: hci0: command tx timeout [ 1592.418295][ T60] Bluetooth: hci4: command tx timeout [ 1593.316298][T16218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.316465][T16218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.316696][T16218] bridge_slave_0: entered allmulticast mode [ 1593.354681][T16218] bridge_slave_0: entered promiscuous mode [ 1593.418884][T16218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.419121][T16218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.419342][T16218] bridge_slave_1: entered allmulticast mode [ 1593.425797][T16218] bridge_slave_1: entered promiscuous mode [ 1593.474422][T16316] ------------[ cut here ]------------ [ 1593.474441][T16316] refcount_t: saturated; leaking memory. [ 1593.474451][T16316] WARNING: lib/refcount.c:22 at refcount_warn_saturate+0x8c/0x110, CPU#1: syz.0.1807/16316 [ 1593.498495][T16316] Modules linked in: [ 1593.502463][T16316] CPU: 1 UID: 0 PID: 16316 Comm: syz.0.1807 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1593.514046][T16316] Tainted: [L]=SOFTLOCKUP [ 1593.518486][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1593.528646][T16316] RIP: 0010:refcount_warn_saturate+0x8c/0x110 [ 1593.534825][T16316] Code: 75 68 e8 77 ed f8 fc 48 8d 3d c0 f2 ee 0a 67 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 5b ed f8 fc 48 8d 3d b4 f2 ee 0a <67> 48 0f b9 3a eb 4a e8 48 ed f8 fc 48 8d 3d b1 f2 ee 0a 67 48 0f [ 1593.554558][T16316] RSP: 0018:ffffc9000481f8d8 EFLAGS: 00010287 [ 1593.560729][T16316] RAX: ffffffff84cdae05 RBX: 0000000000000001 RCX: 0000000000080000 [ 1593.568900][T16316] RDX: ffffc9000e5f2000 RSI: 0000000000000bf2 RDI: ffffffff8fbca0c0 [ 1593.576909][T16316] RBP: 00000000ffffffff R08: ffff88805f691f40 R09: 0000000000000005 [ 1593.584978][T16316] R10: 0000000000000100 R11: 0000000000000004 R12: ffff88802bc86818 [ 1593.593049][T16316] R13: ffffffff99aeba20 R14: ffff88802bc86810 R15: ffff88802bc86800 [ 1593.601100][T16316] FS: 00007fa5c30a66c0(0000) GS:ffff888125cc8000(0000) knlGS:0000000000000000 [ 1593.610082][T16316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1593.616870][T16316] CR2: 00007fa5c4e372c0 CR3: 000000005ac44000 CR4: 00000000003526f0 [ 1593.624937][T16316] Call Trace: [ 1593.628280][T16316] [ 1593.631253][T16316] dvb_device_open+0x30a/0x350 [ 1593.636091][T16316] ? rt_spin_unlock+0x165/0x200 [ 1593.640990][T16316] chrdev_open+0x4dc/0x600 [ 1593.645423][T16316] ? __pfx_chrdev_open+0x10/0x10 [ 1593.650437][T16316] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1593.656822][T16316] ? __pfx_chrdev_open+0x10/0x10 [ 1593.661804][T16316] do_dentry_open+0x849/0x1420 [ 1593.666603][T16316] vfs_open+0x3b/0x350 [ 1593.670716][T16316] ? path_openat+0x142d/0x1d60 [ 1593.675490][T16316] path_openat+0x1448/0x1d60 [ 1593.680134][T16316] do_file_open+0x23e/0x4a0 [ 1593.684656][T16316] ? __pfx_do_file_open+0x10/0x10 [ 1593.689787][T16316] ? alloc_fd+0x654/0x6d0 [ 1593.694248][T16316] do_sys_openat2+0x115/0x200 [ 1593.699024][T16316] ? __pfx_do_sys_openat2+0x10/0x10 [ 1593.704269][T16316] ? exc_page_fault+0x6a/0xc0 [ 1593.709044][T16316] ? do_user_addr_fault+0xc4c/0x1340 [ 1593.714554][T16316] __x64_sys_openat+0x138/0x170 [ 1593.719449][T16316] do_syscall_64+0x166/0x520 [ 1593.724063][T16316] ? trace_irq_disable+0x3b/0x140 [ 1593.729208][T16316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.735274][T16316] ? clear_bhb_loop+0x70/0xc0 [ 1593.740024][T16316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.745966][T16316] RIP: 0033:0x7fa5c4e0e98e [ 1593.750434][T16316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1593.770080][T16316] RSP: 002b:00007fa5c30a5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1593.778548][T16316] RAX: ffffffffffffffda RBX: 00007fa5c30a66c0 RCX: 00007fa5c4e0e98e [ 1593.786552][T16316] RDX: 0000000000000002 RSI: 00007fa5c30a5c00 RDI: ffffffffffffff9c [ 1593.788299][ T60] Bluetooth: hci5: command tx timeout [ 1593.800019][T16316] RBP: 00007fa5c30a5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1593.808022][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1593.816164][T16316] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1593.824188][T16316] [ 1593.827210][T16316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1593.834497][T16316] CPU: 1 UID: 0 PID: 16316 Comm: syz.0.1807 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1593.846059][T16316] Tainted: [L]=SOFTLOCKUP [ 1593.850396][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1593.860467][T16316] Call Trace: [ 1593.863927][T16316] [ 1593.866866][T16316] vpanic+0x56d/0xa60 [ 1593.870892][T16316] ? __pfx__printk+0x10/0x10 [ 1593.875502][T16316] ? __pfx_vpanic+0x10/0x10 [ 1593.880019][T16316] ? is_bpf_text_address+0x292/0x2b0 [ 1593.885350][T16316] ? is_bpf_text_address+0x26/0x2b0 [ 1593.890575][T16316] panic+0xc5/0xd0 [ 1593.894309][T16316] ? __pfx_panic+0x10/0x10 [ 1593.898748][T16316] __warn+0x315/0x4c0 [ 1593.902740][T16316] ? refcount_warn_saturate+0x8c/0x110 [ 1593.908227][T16316] ? refcount_warn_saturate+0x8c/0x110 [ 1593.913723][T16316] __report_bug+0x276/0x570 [ 1593.918334][T16316] ? refcount_warn_saturate+0x8c/0x110 [ 1593.923816][T16316] ? __pfx___report_bug+0x10/0x10 [ 1593.928890][T16316] ? lock_acquire+0x115/0x350 [ 1593.933741][T16316] report_bug_entry+0x19b/0x290 [ 1593.938651][T16316] ? refcount_warn_saturate+0x8c/0x110 [ 1593.944148][T16316] ? refcount_warn_saturate+0x91/0x110 [ 1593.949634][T16316] handle_bug+0xce/0x200 [ 1593.953898][T16316] exc_invalid_op+0x1a/0x50 [ 1593.958425][T16316] asm_exc_invalid_op+0x1a/0x20 [ 1593.963294][T16316] RIP: 0010:refcount_warn_saturate+0x8c/0x110 [ 1593.969387][T16316] Code: 75 68 e8 77 ed f8 fc 48 8d 3d c0 f2 ee 0a 67 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 5b ed f8 fc 48 8d 3d b4 f2 ee 0a <67> 48 0f b9 3a eb 4a e8 48 ed f8 fc 48 8d 3d b1 f2 ee 0a 67 48 0f [ 1593.989015][T16316] RSP: 0018:ffffc9000481f8d8 EFLAGS: 00010287 [ 1593.995103][T16316] RAX: ffffffff84cdae05 RBX: 0000000000000001 RCX: 0000000000080000 [ 1594.003100][T16316] RDX: ffffc9000e5f2000 RSI: 0000000000000bf2 RDI: ffffffff8fbca0c0 [ 1594.011107][T16316] RBP: 00000000ffffffff R08: ffff88805f691f40 R09: 0000000000000005 [ 1594.019087][T16316] R10: 0000000000000100 R11: 0000000000000004 R12: ffff88802bc86818 [ 1594.027086][T16316] R13: ffffffff99aeba20 R14: ffff88802bc86810 R15: ffff88802bc86800 [ 1594.035351][T16316] ? refcount_warn_saturate+0x85/0x110 [ 1594.040866][T16316] ? refcount_warn_saturate+0x85/0x110 [ 1594.046394][T16316] dvb_device_open+0x30a/0x350 [ 1594.051205][T16316] ? rt_spin_unlock+0x165/0x200 [ 1594.056613][T16316] chrdev_open+0x4dc/0x600 [ 1594.061063][T16316] ? __pfx_chrdev_open+0x10/0x10 [ 1594.066030][T16316] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1594.072378][T16316] ? __pfx_chrdev_open+0x10/0x10 [ 1594.077330][T16316] do_dentry_open+0x849/0x1420 [ 1594.082216][T16316] vfs_open+0x3b/0x350 [ 1594.086335][T16316] ? path_openat+0x142d/0x1d60 [ 1594.091144][T16316] path_openat+0x1448/0x1d60 [ 1594.095766][T16316] do_file_open+0x23e/0x4a0 [ 1594.100287][T16316] ? __pfx_do_file_open+0x10/0x10 [ 1594.105349][T16316] ? alloc_fd+0x654/0x6d0 [ 1594.109700][T16316] do_sys_openat2+0x115/0x200 [ 1594.114400][T16316] ? __pfx_do_sys_openat2+0x10/0x10 [ 1594.119624][T16316] ? exc_page_fault+0x6a/0xc0 [ 1594.124348][T16316] ? do_user_addr_fault+0xc4c/0x1340 [ 1594.129659][T16316] __x64_sys_openat+0x138/0x170 [ 1594.134626][T16316] do_syscall_64+0x166/0x520 [ 1594.139232][T16316] ? trace_irq_disable+0x3b/0x140 [ 1594.144285][T16316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.150357][T16316] ? clear_bhb_loop+0x70/0xc0 [ 1594.155134][T16316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.161051][T16316] RIP: 0033:0x7fa5c4e0e98e [ 1594.165566][T16316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1594.185210][T16316] RSP: 002b:00007fa5c30a5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1594.193640][T16316] RAX: ffffffffffffffda RBX: 00007fa5c30a66c0 RCX: 00007fa5c4e0e98e [ 1594.201620][T16316] RDX: 0000000000000002 RSI: 00007fa5c30a5c00 RDI: ffffffffffffff9c [ 1594.209600][T16316] RBP: 00007fa5c30a5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1594.217577][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1594.225601][T16316] R13: 00007fa5c50d6038 R14: 00007fa5c50d5fa0 R15: 00007ffe9bbf5b28 [ 1594.233615][T16316] [ 1594.238018][T16316] Kernel Offset: disabled [ 1594.242387][T16316] Rebooting in 86400 seconds..