last executing test programs: 31m21.589030361s ago: executing program 32 (id=318): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000003c0)=""/9, &(0x7f0000000400)=0x9) syz_clone(0x22000, &(0x7f0000000480)="a2700d063a7d5615abdb4217b43b4f3894ab3dbcfb0faabd61c48ae2a16d9fc9dfe2e83a3e24fe1eb458f77f3f89391bed1d483d3b1769328c53a0f6a06dbc29ea30cf2e6d9b27a02ad0aedfebbfcdf633e4ea72123d934486eec3d14c266bccc740c5524b94d9b50e5cbc596d4ba231e8bbf5e491816bb4db5fa34949347cf66fab5100d16d8ce8dd879e4fb581efe1df1e90afb74cf31af4759a94d9d5588a141c5dfa348e610004f33825adc32e119cb6c193d1eca4261f720bd029c0d6f38c", 0xc1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200003c08004500003c000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac10400090780004131202722e3486ebd900"], 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000640)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r2, &(0x7f0000000680), 0x400000000000166, 0x1a000, 0x0) connect$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in=@empty, @in=@private=0xa010102, 0x4f24, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f24, 0x10, 0x6b654eecffb3ff31, 0x0, 0xee01}, {0xfffffffe, 0x2, 0xeda, 0x1, 0xfffffffffffffffb, 0x100000000000003, 0x9, 0x7}, {0x4800000, 0xfffffffffffffffe, 0x0, 0x9}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x210000, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r1, &(0x7f0000000800), 0x2e9, 0xffe0) socket$l2tp6(0xa, 0x2, 0x73) syz_usb_connect(0x3, 0x32, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) 30m50.81608821s ago: executing program 33 (id=335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fstatfs(r0, &(0x7f00000014c0)=""/150) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x90) prlimit64(0x0, 0xe, &(0x7f00000016c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001740)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000001780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x810, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000002080), 0x651, 0x0) recvmmsg(r2, &(0x7f00000020c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000002100)=ANY=[], 0x5000) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1e000000050000000100000000010000000000001083e4b4ccdc557e80ff2e715471b9532765efe49a3374ae260b9ea7ea38c39c736e3d88442a28e402fcbfe986733aff8b412d5cae87252b20bb06af2c5658c637c9187074b01dcc3aff1d3d7f0b5c905375c3aa411721388c01a5f80c04198b", @ANYBLOB], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f00000021c0)={0x10000000, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 30m28.769914822s ago: executing program 34 (id=361): socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x4000087, 0x2, 0x0) unshare(0x2040400) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x66d, 0xffffffff]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c0a4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000008c0)={{0x10b, 0x1, 0x4, 0x293, 0x214, 0xe00, 0x101, 0x3}, "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", ['\x00', '\x00']}, 0x11e0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0), &(0x7f0000000700)=@v3={0x3000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x18, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000840)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000880)='./file0/file1\x00', 0xe2) 19m54.122702073s ago: executing program 35 (id=1677): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffc, 0x1}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x61, 0x1e]}}, &(0x7f0000000900)=""/4096, 0x2d, 0x1000, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYRESHEX, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) unshare(0x62040200) read(0xffffffffffffffff, &(0x7f00000001c0)=""/245, 0xf5) 14m14.466970967s ago: executing program 36 (id=2713): setns(0xc9, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1451c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4096, 0x20001b80}, {&(0x7f0000001980)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001ac0), 0x0, 0x0) read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x880, 0x0) fcntl$getown(r0, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r5 = open(&(0x7f00000003c0)='./file1\x00', 0x4827e, 0x20) mkdirat(r1, &(0x7f0000000000)='./file0/file2\x00', 0x22) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c00001f000601020000000000000000000000080c000a8008000140000000010900060073797a31000000"], 0x2c}}, 0x0) 11m55.227528663s ago: executing program 37 (id=3413): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x1, 0x1, 0xffffffffffffffff, 0x5}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000300)) write(r0, &(0x7f00000004c0)='8', 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x6a040000) unshare(0x6a040000) mknodat$null(r0, 0x0, 0x1, 0x103) unshare(0x6a040000) write(r0, &(0x7f0000000540)='1', 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x688602, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 11m40.014343632s ago: executing program 38 (id=3514): dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 9m28.528183434s ago: executing program 0 (id=4148): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}, @TCA_POLICE_AVRATE={0x8}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x20}}}}]}]}, 0x8c}}, 0x0) 9m28.01711176s ago: executing program 0 (id=4151): r0 = add_key$keyring(&(0x7f000001a100), &(0x7f000001a140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f000001a180)='asymmetric\x00', 0x0, &(0x7f000001a1c0), 0x0, r0) 9m27.91747006s ago: executing program 0 (id=4152): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) 9m27.386931852s ago: executing program 0 (id=4158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m27.077633832s ago: executing program 0 (id=4161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[], 0x50}}, 0x0) 9m26.895221041s ago: executing program 0 (id=4165): syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 9m11.840582925s ago: executing program 39 (id=4165): syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 6m1.223715467s ago: executing program 6 (id=5202): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000800)=ANY=[]) 6m1.19641811s ago: executing program 6 (id=5203): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) sendto(r0, &(0x7f00000015c0)="240000000100", 0x6, 0x0, 0x0, 0x0) 6m1.04643607s ago: executing program 6 (id=5205): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101b43, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0x3) 5m58.512086081s ago: executing program 4 (id=5215): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x62, 0x0, 0x10, 0xb49, 0x9, 0xfffffffffffffff4, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x5581, &(0x7f0000000240)={0x0, 0x1d85, 0x22, 0x6, 0xfb}, &(0x7f00000002c0), &(0x7f00000013c0), &(0x7f0000001400)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001440)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001480), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f00000014c0)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000001500)={0x0, 0x0, 0xfd8b, 0x5}) timer_create(0x4, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000001580)={0x3}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007bb000/0x4000)=nil, 0x4000, 0x14000, 0x0, &(0x7f00003c0000/0x14000)=nil) munlockall() madvise(&(0x7f000041e000/0x2000)=nil, 0x2000, 0xa) fsopen(&(0x7f00000015c0)='ceph\x00', 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/mnt\x00') open_by_handle_at(r3, &(0x7f0000001640)=ANY=[@ANYBLOB="20000000f100f3ff030000000300001addba8a612000ee16d90e6089a000000000000000000001b34c1742690aa396fc402f2bf7c499812658828dd702610615160ac56e9e9cf6be4af29a2da84e52479f515d38633b14adb7df36b0b9841072fd0c018594991920ec7bc7c5890600f141177569833d01f905c7901b4b6b387caa993866f2ff997b558e9592431917fa26037df29b150cfe4ee30dd00000008333e5eae3f3ffce1805233628c01fe631d46412614ebb745046659e994744e61bb556ca1f42c5ab"], 0x27e082) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r4, 0xc138fd0e, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x28000, 0x0, 0x0, @by_dev={r5}, {0x1890, @core='@stats_list'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000001900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 5m57.986022778s ago: executing program 4 (id=5219): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0) 5m55.793277854s ago: executing program 4 (id=5226): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 5m55.137172937s ago: executing program 6 (id=5232): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000080)='7', 0x1) write$char_usb(r1, &(0x7f00000000c0)="cc", 0x1) syz_usb_disconnect(r0) 5m53.293673027s ago: executing program 6 (id=5234): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "afe1658d587e93ab4b5fca380cdddd71e95c81000bac90d9689507b96ace5d2f9f55fddb8b36c7cac9209681a5fa01cd3874b06f2fcadd0d6c3b2543560ad96ffb3b3bb528250d54c3849e85a72f9805820433eaf86b855cc6bb316351ebf38753b22f619e6525c21a5050c57297595293366a0ed2ad9b308f845f1d9af97cf6384f5ec26ca2afea4eb950f209116b1d8b58fe396fcfb8ae0b8898f212b216cbb7d1bbd57a726d194a29a4e15e035b8162b139c67404e6a503db799c06078f56258de59c08f1812611aff6d4485a01f3413b9b4a11412629c2a4810db413d940af170b313dcf9a1e08e0156a7784c413ffa69bfb6b135b6093ad19c7f8bc70e5f9a0bcf07eb164c44642489845d93c25064c768ff253b3faf52378653b61ed2f3460a2221e6d9b2c04e99cd9fe74c005a330a08f558771a77771a1d1eb8b110912dbc327e07869f73b857cb841b5a47296a81d956c030dee87fda743cf9e56d08856a82ee26a390ac2569a31ca9beccda0251f28b124ee1e8ea6babc1b1e2d81fc795de9620301d65ded5865c5a9f6ce7422536d40694c2aa987542364f7f0bb75bdb0182d10b18a64045c7dadc0c82a47eab7e735fe240f27bb5da305cd08c86314a4a5fef8487c96bc1ea97409d73e1cc6ceba35f74eea39f2bf881833298b1e1a201eb9ea9c0754d41ef9a91b4deefcaeff08ee35a1f31b2d780b3934d5913626ef4a0f31c8e057e43ff14fc6fbf5e4a86b906b1ba320f3c52b629974a1324d97067935df1e4340b071130ee953bababf9dc0229e4a2f29cf1ae2713ffe85a5a9bd374c928ed416e1bd2516657bd4d3a9ac114ed279fcd89645245df7c55454fc367513ffae594d5236b320ad103f2d0956b3da7344a29fc910040027ca8b239d00ab5e79eeb83e25275fb61ceb65f6ace88cb43f106e128330ae709e19f209afd87b934dbd0faf470dfb52fdfd73bfa9a7a983b36d78469568ae69a0481cdc764c554d5ac03e607781cf3a5e209bffce2276529929d800f6d9b8a2f100108d7b883b5ce5e19da38ae5c99a8351b4e41c538fee7299a890edc630abbfe604c0b8847a7b5b4eec1dc00ed60e95b5374270ec634ff6d6ccbcd08145f9df1c2082c9447482ed42b4d0ea9a73bc9a68e36ee9e118bb5c08e1e7c2bd2627e82902d2c6f0da90bdbc52103f3992663653fd2b41a4294aa8f222812fa8b5e1864b75748f992bc2b396c03e202e8bfe9a1ccca1cb8b28c9c6faa47cc6b871140ddc45a0d02c752175a0498c3ba30e79c12d6ebbc32d5533d0216529e0f713eac725fe41bad4c9051d364bf38e3b72641510b09b2645447ea13b440d568adc9aa9ce85c967d78a14bdbd2fcfe0c7324a556ee841fc9ffd7a3c784fe41a349ced68e01c145db8847a547086c5595b9f6299bf7432e0e9c9a4a9108a24f7ad49c18a3ec771953480a0a0fdfeaded6b74f174ea2def77a0b9799f6b75a77a6314a4165e194be616eb5c98726d88da79f54fd01d39e751837a6bd0d77ca79073b3a7e62686fd8e089b0258645db505bb674174d626b1d1cfdf0f32b0d880884b73c63bc78a231a8cb45a12884907c021f87cdd7b2f1de020044666d38a866983c8ffa0cc6963a745c108e80a3b54eedac65b68c897043d914f146ba4ca18a61e144e7746d31879fa7ae7c2a43747e6060d79669bf9a8edcc229b7f1a0fe239b398692a6a65acd19c58442dfa8997430aab89aae8fb8f201bb1fd58605cf9dfe5c85a15e0928542a8fd7768f4b7750c7aeab8d9ced7c9fdea6cc38bc38209f608cc3d7c8bc9240b5b7d1661b8bfd231f30047befefd70183fb8330d184394159cd4153990c6a43ccded133adecced28499e73c4b25ee86e5d68848670736362931be74fe0aab5708ce05f4d6d7a068c590d36f99a0ba3501df60d9c01f54a7c366727287996de354c4a3a5e1ece988e5f59087c730afa107edbab31de441a88061ad799fefef86254a2f2891aa47420dd3f6267833a5345bf001d10c9f1fd121401ae846a9a5df517210cd0beb50a5139854aa1747115bca24522dae42667ef9ce893c4db108941198ed5323f582f11c4b13385f60b3038fa661f3ed276504fb51fb966ef88cbbb953c269ea2ed989ced5e8988839c55b398dbce98ce1e976c2065b2ded80f929dc6ef8afad6b61145686ce14e2d26f0694fda1e52a6c5155c0d8ea91544c76548a25376f13de7245b48e7298421d2c2433a472a8c89c3e621c5370654e1c7bba0f3d8bdf40c36cdbf02f6b5a7c4138b9e3931896fd89272b4d61a9875c00ba0d8d1bd960b9aaee3b6f127db1155680d7eefc5eaa6d4c648fca303706796bef110fbdb731d9e671f937e55ebf5d2e64f7cdcc073c905c134e8d3852689ed81c95be0c259816e7ff7b979557684aa1b6c2dd42754bda93e3e55c5ffc1122c988ca171fd57ab24ebe789e819c60ff3f9f1a9465ff4a9bdc5c2b2d9c351ffef5ab375f9024e297a26642b15108781fdf3c55d0aa9a8cb68ba93b7b13cd6d05b9b16502d7f9d72d015059e7999cc4ed880fd5ebf626ea409b9f0c4ded2974bb3daf88cc1930818dc3e09200897389211d3e780faa0acd64e37c60924a3fd0a16a7146a41b1b01e43fecf610c7d11d42baac5a60db7638077162cd58b3f734070e81ee71c5092422eaac366b41dd996723124df9005cbae4e2ec47f8a06616bd7faa5da6c0200c872c2ef929a16c823c57f2d4f798061e49102cab3af65a5cc9f8856dc5d3c0de1440c4d8df50a7ec09491d2e651ee5f5a76b8fc2d20a07def1a8951b9770f85728b42cd9dafce7c341c26a90b7d1c2e36f03f74eda3bfb2c40eec5c454c38e90f4d31e6a0f23b2ad53a429f73761713181b7839792cc494f21c5be9dd7f167a6681720ccd3cfcdd4b427058b995505a82993805a1860d5ea75e61c216ec9594adfd39cab47511578d57e312f2f3e0d2da8f2d8dbe3fc1fd281bdd8e7dbd203e4ec3e7d3b468ad2b81a76c5bac460f497e3cdb6bf0c6be5ceae4bd488b9597b13a37885b95426d8ea06760516ec13aa339084407d1f45e331e5dd77ac73306f70996728a0d67b48a833e9a3ddf22968e898b59e4b4c9a16aa9ea8120202737746e1a5ec2cca9640d69df2b27900de7abe573b7c023a88d7f3fcc3469a3a4e7f9f9095a6fed55fbb1d3582807407e62b55a38d33e70a0203513f30d37a4e6f03acd9d0fd2f3438eb485aa5e693806c002efd0811ab92518c41856039d7f36cf9981981231b3cea3493f0e8988bd05d3d424a5bfc8d1cdfd0e09e3ce12cab6edfb7f6d80c1edbb4d1d51a1500b0876e13e5173bfeba378c71046e70b590cf542094d01f458a3cec642fb1ce13a992765eca608579e85f03e7d871dbdbd882ce4821a944179e48a920d346ae21b08ee043cbbf3284c3a67d9b9417a5fed1202ca537f7711650f692df044f145587467dfdd45405d7caeb064bfa12b52057e90d2b5d2885bbaf032db769654af272dd78bb8ec8446344d0c1ca57d51fe1243e0a02ada90371e75418223f171f014f9a970964828cdd9faf3b66789cefd0374437f2a271c2765d9876943fb93205cb12448d4cccf68c28259e85a540e013ac77414a147fb1e0f0fc4a4d859a928eaef6e952a103a944052534c9264c85f4200cc8b465f66725c779f49312a308dda8fe7e423ebbee16e64ad6e112b3efd95584160f08c83595fdddfa39c4b89867fcf23085a24c53a6d846863b95f5605beb9b0a1cc6d191524da81ce89c0f7767652d887661b5299e300f2e83a6c962cf9089d82b139f4bedcc14bbf6611258d52e1f3d5a5e3ac05cfa4d066550b2180c31695a52da12c1412e55cdbe6660d86fe4c8eda51f2adf34b81af8ec55b549c3bbcc588c5f074e0dc76bb9bbd0cdea26dd47d84d9321f970912d374a081c9ebb74700a0792dbbb2da41ae7e3aa5230bdd260bd208b68100dc2f7bf2132d7cb34084e999b6ee2b91356ce766523a80359147af20fa15febc42b89d43e4a48d13cb8ed6678f346aa981954e0520ea8cd0a0c16281e57f33a5e3fd97d55d24386832c17f22b1c1fb91d5b1f362f3bc8aa8369c18444fc10e9d1285f6a3bcf24e2606b69fbd89f337f7ee3c27b1a2c7e8dec2c38c84c6712de1e7f1d790d86d8e0a402c40d406d39c13879f4d103adcbca13570eadcd424f8e06155885b054e1d7f994723fd22a6d704a89e6b126271ec5c19ea7b814c36f9ca9a0223da630324ca0f2a3010f4e53426d8d514bcc3303e6fa429c00244b918c01a444f74dd376bccb5709ed103514484a67240c4b992c722601e27dee6ba8b37608ba66e2065f8298a6df8c0a491113bf10e0bf18867dda3e1170fa1853b355fdf41898de4a339927872e8d9fb8a4d1c31833ac1355695a20c75ff6dafb70244a3754cb58feee89045e3408da902a7987e6a66dad0f044951a560954ee812abe142e9a4db701bdc46fabb0b98b4be01dadd629cffc661a3816744bcacdc38777494289ba156b272ade8f4ed3e32ce48958863b09bb09fb6999281164c0c5b50a77350d5f3c78d951fa76d1db68587e58bd40f824a68fd59c4ebd4f7e22e8e1458911012472b876ab15ca8c48ef664b1da41bd1ad9a5b799a1de8b2962c477f1726cbbe4f285a5c387842ac723b3877f5826503b68602c4bdaea94544b4b056142876d995d0db128a38f5c4547f12cf9d1cbc678cd42eebf67519484ab251855dbda09dd04ddc031860a69fd592fa1c12d59adc4699c246a666f6f6c20c1a21562f05f8db43ff424cea0d16789a6a69dc8552f4865bb3fac5b650b549432a0383c8f95c79084ca4841903f0c04319135f2bfc94ec8837374f0c1eccaacf8a0722d54b1a0e748a79e6c7ecdcdbfe376d080d9747a9a5a13cc7eb4111345216d1c787f05c992df3712d2a194ac325bb568abc6a97011bc62110ee12ba209d76f690ddb4e4b417f5b5db52ee7ad97159dfcf82b1c2a4eb5a97396fa24e52ba1c47330f7caca91b2965bac75dbcb86ac85a07b774dbf82be5fc92a8621e80973418d94a0bc10905a3815e04d1a668ea8cb5ffb293893b06bd372c75b477118b78dd69a04097ca8ff8f8fb21a5293d2fe6785e33d15d61008c4ca84121a8e48fabba3656250fba7e058ffc1705c7fa13509fc7c96fc9b16d0b21a26b11ebfc3325a2ca682bc014ec54dc8433af105ada5566f491d3ebe5e1e5f0859b28a576fb7978f2a1b4897890c1c9b0c1f4f8c7351ca738a6100c4f64092d865bc65a8b92007b117e5a4dd7988d3281aa2ccebb36f9af5032eeca2c8a72888c84346d3945507a6bb956b84f03d88a90bb9ecc466c7d94a3670783e11b312ecb4f9eb8489df8d129110b6bd710138476c8be75327e9ea6a0b94b8567b31692fee2d9c17d7e20d3d23cc4d317710537f608793e87d9158cd61a43306898da40d01b544fc951ccd13f11b4b8fbf47d694df601fd6677d796818571ee3125089316e3d33c5684affe9f29f12186bb5dc4c5eaee94e41d07a03c9c59db95bc42c23da55c497caa6a64c73ea3059a8c80955a9730666a0e02c3bf87cfb79542d84a529d7bf9c3ac60b323952fa439c2e5fd512c3bfe3770178b4e8d7efa223bd76830a6b8b604e15773d63d9fec504ea6561793723ff4f6fbdd016372e1a98a9252e8d1607512e5397c78498f68d3792ef7a28f74f4b15358afa5674d4340863a2897af87499bd073a06aef8215f76c9418f5b82b79b77f0a01dfc059b510794cda70b7daf2c74950652e"}) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001200)='source\x00', &(0x7f0000001240)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001280)='addr\x00', &(0x7f00000012c0)='127.0.0.1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./proc\x00', &(0x7f0000001380)='proc\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002980), 0x181341, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5414, &(0x7f00000029c0)) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r5) preadv(r5, &(0x7f0000002940)=[{&(0x7f0000001580)=""/240, 0xf0}, {&(0x7f0000001680)=""/199, 0xc7}, {&(0x7f0000001780)=""/45, 0x2d}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)=""/111, 0x6f}], 0x6, 0x0, 0x7fffffff) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000180)={0x3, 0x0, [{0x303, 0x0, 0xffffffffffffffff}, {0x127c91937a50e468, 0x0, 0x100000003}, {0xa11, 0x0, 0x66}]}) 5m52.420714266s ago: executing program 6 (id=5235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000340)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000003c0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000400)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m52.058689102s ago: executing program 4 (id=5236): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) add_key(&(0x7f0000000400)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x200, 0x2, 0x40, 0xffff4a28}]}) 5m51.8913159s ago: executing program 4 (id=5237): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2200, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x10) 5m50.565404447s ago: executing program 2 (id=5238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x800c014) 5m50.520958996s ago: executing program 4 (id=5239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x200000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffb, 0x0, 0x0, 0x0, 0x40}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x7, 0x0, &(0x7f0000000280)="6f11ba816056a1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x4c) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150) 5m50.520742985s ago: executing program 2 (id=5240): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 5m50.338212438s ago: executing program 2 (id=5242): setns(0xc9, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000280)={0x0, 0x4, 0x2, 0x0, 0x5b}) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="040e04557a0c087967bc1fbc223735f4e099165363e3e9599f12d0bc48e2e2417d795d4608cc8bb7ef0d99d533af8f93a39be105ac208bcb462f1987ac5686b05ab6ff043b10cbc8d2917439f9ce8af03a01acdfd03ee8dc439ab185712771085cf26b4a79e18fbc7b5368649bbe40fefb20980db83f57a0ab134fa56709d11ef68cfdffd2dc93586580bbbb38dd2acbe3ca8d1202e27f111d7c04f5d5ff7d06bb16412c2366d92524fd4c1c40951792a29a36d80324884cf38ea5"], 0x7) fanotify_init(0xef0, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) 5m50.244822727s ago: executing program 5 (id=5243): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing/events/sched/filter\x00', 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000640), 0x0, 0x820c1) pselect6(0x40, &(0x7f0000000680)={0xe, 0xffffffffffffffff, 0x8, 0x2, 0x0, 0xfffffffffffff30c, 0x5}, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0xbd, 0x6, 0x0, 0xfffffffffffffffe, 0xb}, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/dri/0/name\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000200), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x20, r5, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x9, &(0x7f0000000540)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1, 0x0, 0x8}, @exit], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x19b, 0x3}}, 0x20) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8) writev(r6, &(0x7f00000002c0)=[{&(0x7f00000003c0)='X\x00', 0x2}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) 5m49.905344428s ago: executing program 5 (id=5244): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0) 5m49.520168696s ago: executing program 5 (id=5245): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "afe1658d587e93ab4b5fca380cdddd71e95c81000bac90d9689507b96ace5d2f9f55fddb8b36c7cac9209681a5fa01cd3874b06f2fcadd0d6c3b2543560ad96ffb3b3bb528250d54c3849e85a72f9805820433eaf86b855cc6bb316351ebf38753b22f619e6525c21a5050c57297595293366a0ed2ad9b308f845f1d9af97cf6384f5ec26ca2afea4eb950f209116b1d8b58fe396fcfb8ae0b8898f212b216cbb7d1bbd57a726d194a29a4e15e035b8162b139c67404e6a503db799c06078f56258de59c08f1812611aff6d4485a01f3413b9b4a11412629c2a4810db413d940af170b313dcf9a1e08e0156a7784c413ffa69bfb6b135b6093ad19c7f8bc70e5f9a0bcf07eb164c44642489845d93c25064c768ff253b3faf52378653b61ed2f3460a2221e6d9b2c04e99cd9fe74c005a330a08f558771a77771a1d1eb8b110912dbc327e07869f73b857cb841b5a47296a81d956c030dee87fda743cf9e56d08856a82ee26a390ac2569a31ca9beccda0251f28b124ee1e8ea6babc1b1e2d81fc795de9620301d65ded5865c5a9f6ce7422536d40694c2aa987542364f7f0bb75bdb0182d10b18a64045c7dadc0c82a47eab7e735fe240f27bb5da305cd08c86314a4a5fef8487c96bc1ea97409d73e1cc6ceba35f74eea39f2bf881833298b1e1a201eb9ea9c0754d41ef9a91b4deefcaeff08ee35a1f31b2d780b3934d5913626ef4a0f31c8e057e43ff14fc6fbf5e4a86b906b1ba320f3c52b629974a1324d97067935df1e4340b071130ee953bababf9dc0229e4a2f29cf1ae2713ffe85a5a9bd374c928ed416e1bd2516657bd4d3a9ac114ed279fcd89645245df7c55454fc367513ffae594d5236b320ad103f2d0956b3da7344a29fc910040027ca8b239d00ab5e79eeb83e25275fb61ceb65f6ace88cb43f106e128330ae709e19f209afd87b934dbd0faf470dfb52fdfd73bfa9a7a983b36d78469568ae69a0481cdc764c554d5ac03e607781cf3a5e209bffce2276529929d800f6d9b8a2f100108d7b883b5ce5e19da38ae5c99a8351b4e41c538fee7299a890edc630abbfe604c0b8847a7b5b4eec1dc00ed60e95b5374270ec634ff6d6ccbcd08145f9df1c2082c9447482ed42b4d0ea9a73bc9a68e36ee9e118bb5c08e1e7c2bd2627e82902d2c6f0da90bdbc52103f3992663653fd2b41a4294aa8f222812fa8b5e1864b75748f992bc2b396c03e202e8bfe9a1ccca1cb8b28c9c6faa47cc6b871140ddc45a0d02c752175a0498c3ba30e79c12d6ebbc32d5533d0216529e0f713eac725fe41bad4c9051d364bf38e3b72641510b09b2645447ea13b440d568adc9aa9ce85c967d78a14bdbd2fcfe0c7324a556ee841fc9ffd7a3c784fe41a349ced68e01c145db8847a547086c5595b9f6299bf7432e0e9c9a4a9108a24f7ad49c18a3ec771953480a0a0fdfeaded6b74f174ea2def77a0b9799f6b75a77a6314a4165e194be616eb5c98726d88da79f54fd01d39e751837a6bd0d77ca79073b3a7e62686fd8e089b0258645db505bb674174d626b1d1cfdf0f32b0d880884b73c63bc78a231a8cb45a12884907c021f87cdd7b2f1de020044666d38a866983c8ffa0cc6963a745c108e80a3b54eedac65b68c897043d914f146ba4ca18a61e144e7746d31879fa7ae7c2a43747e6060d79669bf9a8edcc229b7f1a0fe239b398692a6a65acd19c58442dfa8997430aab89aae8fb8f201bb1fd58605cf9dfe5c85a15e0928542a8fd7768f4b7750c7aeab8d9ced7c9fdea6cc38bc38209f608cc3d7c8bc9240b5b7d1661b8bfd231f30047befefd70183fb8330d184394159cd4153990c6a43ccded133adecced28499e73c4b25ee86e5d68848670736362931be74fe0aab5708ce05f4d6d7a068c590d36f99a0ba3501df60d9c01f54a7c366727287996de354c4a3a5e1ece988e5f59087c730afa107edbab31de441a88061ad799fefef86254a2f2891aa47420dd3f6267833a5345bf001d10c9f1fd121401ae846a9a5df517210cd0beb50a5139854aa1747115bca24522dae42667ef9ce893c4db108941198ed5323f582f11c4b13385f60b3038fa661f3ed276504fb51fb966ef88cbbb953c269ea2ed989ced5e8988839c55b398dbce98ce1e976c2065b2ded80f929dc6ef8afad6b61145686ce14e2d26f0694fda1e52a6c5155c0d8ea91544c76548a25376f13de7245b48e7298421d2c2433a472a8c89c3e621c5370654e1c7bba0f3d8bdf40c36cdbf02f6b5a7c4138b9e3931896fd89272b4d61a9875c00ba0d8d1bd960b9aaee3b6f127db1155680d7eefc5eaa6d4c648fca303706796bef110fbdb731d9e671f937e55ebf5d2e64f7cdcc073c905c134e8d3852689ed81c95be0c259816e7ff7b979557684aa1b6c2dd42754bda93e3e55c5ffc1122c988ca171fd57ab24ebe789e819c60ff3f9f1a9465ff4a9bdc5c2b2d9c351ffef5ab375f9024e297a26642b15108781fdf3c55d0aa9a8cb68ba93b7b13cd6d05b9b16502d7f9d72d015059e7999cc4ed880fd5ebf626ea409b9f0c4ded2974bb3daf88cc1930818dc3e09200897389211d3e780faa0acd64e37c60924a3fd0a16a7146a41b1b01e43fecf610c7d11d42baac5a60db7638077162cd58b3f734070e81ee71c5092422eaac366b41dd996723124df9005cbae4e2ec47f8a06616bd7faa5da6c0200c872c2ef929a16c823c57f2d4f798061e49102cab3af65a5cc9f8856dc5d3c0de1440c4d8df50a7ec09491d2e651ee5f5a76b8fc2d20a07def1a8951b9770f85728b42cd9dafce7c341c26a90b7d1c2e36f03f74eda3bfb2c40eec5c454c38e90f4d31e6a0f23b2ad53a429f73761713181b7839792cc494f21c5be9dd7f167a6681720ccd3cfcdd4b427058b995505a82993805a1860d5ea75e61c216ec9594adfd39cab47511578d57e312f2f3e0d2da8f2d8dbe3fc1fd281bdd8e7dbd203e4ec3e7d3b468ad2b81a76c5bac460f497e3cdb6bf0c6be5ceae4bd488b9597b13a37885b95426d8ea06760516ec13aa339084407d1f45e331e5dd77ac73306f70996728a0d67b48a833e9a3ddf22968e898b59e4b4c9a16aa9ea8120202737746e1a5ec2cca9640d69df2b27900de7abe573b7c023a88d7f3fcc3469a3a4e7f9f9095a6fed55fbb1d3582807407e62b55a38d33e70a0203513f30d37a4e6f03acd9d0fd2f3438eb485aa5e693806c002efd0811ab92518c41856039d7f36cf9981981231b3cea3493f0e8988bd05d3d424a5bfc8d1cdfd0e09e3ce12cab6edfb7f6d80c1edbb4d1d51a1500b0876e13e5173bfeba378c71046e70b590cf542094d01f458a3cec642fb1ce13a992765eca608579e85f03e7d871dbdbd882ce4821a944179e48a920d346ae21b08ee043cbbf3284c3a67d9b9417a5fed1202ca537f7711650f692df044f145587467dfdd45405d7caeb064bfa12b52057e90d2b5d2885bbaf032db769654af272dd78bb8ec8446344d0c1ca57d51fe1243e0a02ada90371e75418223f171f014f9a970964828cdd9faf3b66789cefd0374437f2a271c2765d9876943fb93205cb12448d4cccf68c28259e85a540e013ac77414a147fb1e0f0fc4a4d859a928eaef6e952a103a944052534c9264c85f4200cc8b465f66725c779f49312a308dda8fe7e423ebbee16e64ad6e112b3efd95584160f08c83595fdddfa39c4b89867fcf23085a24c53a6d846863b95f5605beb9b0a1cc6d191524da81ce89c0f7767652d887661b5299e300f2e83a6c962cf9089d82b139f4bedcc14bbf6611258d52e1f3d5a5e3ac05cfa4d066550b2180c31695a52da12c1412e55cdbe6660d86fe4c8eda51f2adf34b81af8ec55b549c3bbcc588c5f074e0dc76bb9bbd0cdea26dd47d84d9321f970912d374a081c9ebb74700a0792dbbb2da41ae7e3aa5230bdd260bd208b68100dc2f7bf2132d7cb34084e999b6ee2b91356ce766523a80359147af20fa15febc42b89d43e4a48d13cb8ed6678f346aa981954e0520ea8cd0a0c16281e57f33a5e3fd97d55d24386832c17f22b1c1fb91d5b1f362f3bc8aa8369c18444fc10e9d1285f6a3bcf24e2606b69fbd89f337f7ee3c27b1a2c7e8dec2c38c84c6712de1e7f1d790d86d8e0a402c40d406d39c13879f4d103adcbca13570eadcd424f8e06155885b054e1d7f994723fd22a6d704a89e6b126271ec5c19ea7b814c36f9ca9a0223da630324ca0f2a3010f4e53426d8d514bcc3303e6fa429c00244b918c01a444f74dd376bccb5709ed103514484a67240c4b992c722601e27dee6ba8b37608ba66e2065f8298a6df8c0a491113bf10e0bf18867dda3e1170fa1853b355fdf41898de4a339927872e8d9fb8a4d1c31833ac1355695a20c75ff6dafb70244a3754cb58feee89045e3408da902a7987e6a66dad0f044951a560954ee812abe142e9a4db701bdc46fabb0b98b4be01dadd629cffc661a3816744bcacdc38777494289ba156b272ade8f4ed3e32ce48958863b09bb09fb6999281164c0c5b50a77350d5f3c78d951fa76d1db68587e58bd40f824a68fd59c4ebd4f7e22e8e1458911012472b876ab15ca8c48ef664b1da41bd1ad9a5b799a1de8b2962c477f1726cbbe4f285a5c387842ac723b3877f5826503b68602c4bdaea94544b4b056142876d995d0db128a38f5c4547f12cf9d1cbc678cd42eebf67519484ab251855dbda09dd04ddc031860a69fd592fa1c12d59adc4699c246a666f6f6c20c1a21562f05f8db43ff424cea0d16789a6a69dc8552f4865bb3fac5b650b549432a0383c8f95c79084ca4841903f0c04319135f2bfc94ec8837374f0c1eccaacf8a0722d54b1a0e748a79e6c7ecdcdbfe376d080d9747a9a5a13cc7eb4111345216d1c787f05c992df3712d2a194ac325bb568abc6a97011bc62110ee12ba209d76f690ddb4e4b417f5b5db52ee7ad97159dfcf82b1c2a4eb5a97396fa24e52ba1c47330f7caca91b2965bac75dbcb86ac85a07b774dbf82be5fc92a8621e80973418d94a0bc10905a3815e04d1a668ea8cb5ffb293893b06bd372c75b477118b78dd69a04097ca8ff8f8fb21a5293d2fe6785e33d15d61008c4ca84121a8e48fabba3656250fba7e058ffc1705c7fa13509fc7c96fc9b16d0b21a26b11ebfc3325a2ca682bc014ec54dc8433af105ada5566f491d3ebe5e1e5f0859b28a576fb7978f2a1b4897890c1c9b0c1f4f8c7351ca738a6100c4f64092d865bc65a8b92007b117e5a4dd7988d3281aa2ccebb36f9af5032eeca2c8a72888c84346d3945507a6bb956b84f03d88a90bb9ecc466c7d94a3670783e11b312ecb4f9eb8489df8d129110b6bd710138476c8be75327e9ea6a0b94b8567b31692fee2d9c17d7e20d3d23cc4d317710537f608793e87d9158cd61a43306898da40d01b544fc951ccd13f11b4b8fbf47d694df601fd6677d796818571ee3125089316e3d33c5684affe9f29f12186bb5dc4c5eaee94e41d07a03c9c59db95bc42c23da55c497caa6a64c73ea3059a8c80955a9730666a0e02c3bf87cfb79542d84a529d7bf9c3ac60b323952fa439c2e5fd512c3bfe3770178b4e8d7efa223bd76830a6b8b604e15773d63d9fec504ea6561793723ff4f6fbdd016372e1a98a9252e8d1607512e5397c78498f68d3792ef7a28f74f4b15358afa5674d4340863a2897af87499bd073a06aef8215f76c9418f5b82b79b77f0a01dfc059b510794cda70b7daf2c74950652e"}) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001200)='source\x00', &(0x7f0000001240)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001280)='addr\x00', &(0x7f00000012c0)='127.0.0.1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./proc\x00', &(0x7f0000001380)='proc\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002980), 0x181341, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5414, &(0x7f00000029c0)) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r5) preadv(r5, &(0x7f0000002940)=[{&(0x7f0000001580)=""/240, 0xf0}, {&(0x7f0000001680)=""/199, 0xc7}, {&(0x7f0000001780)=""/45, 0x2d}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)=""/111, 0x6f}], 0x6, 0x0, 0x7fffffff) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000180)={0x3, 0x0, [{0x303, 0x0, 0xffffffffffffffff}, {0x127c91937a50e468, 0x0, 0x100000003}, {0xa11, 0x0, 0x66}]}) 5m48.344578586s ago: executing program 5 (id=5246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a566b9700b00000f3266b80e5ca48f0f20e06635040000000f22e0bafc0cec0f0131660f38805dcc0f01c2", 0x81}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) mount(0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='(-[.^}%\x00') 5m47.990650103s ago: executing program 2 (id=5248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) 5m47.845169663s ago: executing program 2 (id=5249): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2200, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x10) 5m47.763617384s ago: executing program 5 (id=5250): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000c80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001100)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1400, 0x0, 0x78, 'integrity\x00', {{@ram={'/dev/ram', 0x1}, 0x20, '1'}, 0x20, '16', 0x20, 'R', ' 1 journal_crypt:ctr(aes):0123456789abcdef0123456789abcdef'}}]}) 5m47.341986922s ago: executing program 5 (id=5251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000540)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000580)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x6}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x4008010) 5m46.420296971s ago: executing program 2 (id=5253): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), 0x0, &(0x7f0000018000)}) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 5m36.887601277s ago: executing program 40 (id=5235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000340)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000003c0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000400)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m34.887444282s ago: executing program 41 (id=5239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x200000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffb, 0x0, 0x0, 0x0, 0x40}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x7, 0x0, &(0x7f0000000280)="6f11ba816056a1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x4c) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150) 5m31.914397725s ago: executing program 42 (id=5251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000540)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000580)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x6}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x4008010) 5m31.121669177s ago: executing program 43 (id=5253): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), 0x0, &(0x7f0000018000)}) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 3m6.814075392s ago: executing program 8 (id=5453): openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000018000100200000000000000002009400ff00fe09008c0000060015000300000010001680"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44080}, 0x20000000) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000bd7000eaffffff00e4", @ANYRES32=r2, @ANYBLOB="8300040000a8000020001280080001007369740014000280080014000600000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) clock_getres(0x6, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0xfffffffb) mknodat$null(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r4) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20ec27bd7000fddbdf250200000008000700", @ANYRES32=r4, @ANYBLOB="14000c0000000000000000000000000000000000080009000000000014000b00fc01000000000000000000000000000014000c0000000000000000000000ffff0a01010205000d001d0000000c000300020000000000000008000400ac1e0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) ioctl$NBD_DO_IT(r3, 0xab03) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f0000000940)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r7, 0x5, 0x14, 0x0, &(0x7f0000000a00)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m4.338032562s ago: executing program 8 (id=5460): mkdir(&(0x7f0000000000)='./myproc\x00', 0x1ef) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x101, 0x11, 0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./myproc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./myproc/scsi/device_info\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000001400)={0x2, 0x4e20, @empty}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="d6", 0x1}], 0x1) 3m4.288635247s ago: executing program 8 (id=5461): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000000000005000500"], 0x2c}}, 0x24000806) 3m4.118584932s ago: executing program 8 (id=5462): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m1.725453591s ago: executing program 8 (id=5469): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001680)={&(0x7f00000004c0)="66c70daf3fb57161cb740a5e987b9aed1c2d71ffa09c2d952041dd919957815e738a1dd3d399ec8cae26b2ac6e954ae36bc053d38b553767f030d86d2f5184bc40b1a3d2aae8d427dfbc99c88823ee0de397f2e14ca23cd90d4ee189e99045a3d99ffc81a73d42e4b2b056dbefc78234abee09cddd2b99dac45c55883f8d662c4177c8b92766c73aa77ebf82729e6c60bde73905584827d99b619046e18669b551f1c2c2b5e86424ef34728c4f938eef0c16f1986343a7786e5ca8ef99620fb723db53dd82673924aa7a5e7a", &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)="a85528d8f94e12a551dc415f96bd2b1eb0ceb2ea05", &(0x7f0000001600)="400c5b7ad545a8e34f7b00a62e9078a5c891e60a4f824b6ed217fd03ce59a059d46195d96d6d9e0275e172f9f8a9ad7a9f0f2b20", 0x0, r1}, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0xffffffff, 0x3147504d, 0x1, @discrete={0xffffff9f, 0x2}}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mlockall(0x4) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r4, 0x400452c8, &(0x7f00000018c0)="000000000000000000000000000000000000000001") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x181403, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000001940)={0x1, 0x0, [{0x40000000, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000019c0)='./dev\x00', &(0x7f0000001a00)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./dev/rfcomm0\x00', 0x802, 0x0) write(r8, &(0x7f0000001a80)="c7401b1e0741d6201c31a1d182ded8d555d2", 0x12) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001ac0)={'wlan1\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000001b00)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000001b40)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) 3m0.9142075s ago: executing program 8 (id=5472): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 2m44.625059201s ago: executing program 44 (id=5472): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 2m35.779638614s ago: executing program 1 (id=5545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4000000) 2m35.52997879s ago: executing program 1 (id=5548): close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000480), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e73657273696f6e3d3970323030302e752c63616368653d6d6d61702c009d1d8ba378da0fa0a0ebb2c09f490d6cd39e9496772888a04d46a729224a5e107e250fefa7d709"]) timer_create(0x1, &(0x7f0000000600)={0x0, 0x21}, &(0x7f0000000640)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000680)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000007c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000800)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000900)={{&(0x7f00001f8000/0x4000)=nil, 0x4000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 2m34.52737308s ago: executing program 1 (id=5551): syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) 2m32.216844083s ago: executing program 1 (id=5561): r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000500)=""/219, 0xdb) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000640)={0x2f67, 0xcd, 0x1, 'queue0\x00', 0x2}) tkill(r0, 0x7) 2m30.837894214s ago: executing program 1 (id=5562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2m30.653700693s ago: executing program 1 (id=5564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x800) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_open_dev$evdev(0x0, 0x2, 0x2002) readv(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0x6d4}, &(0x7f00000003c0)=0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000400)={0x77359400}, 0x8) write(r3, &(0x7f0000000240)='b', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) 2m14.278621756s ago: executing program 45 (id=5564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x800) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_open_dev$evdev(0x0, 0x2, 0x2002) readv(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0x6d4}, &(0x7f00000003c0)=0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000400)={0x77359400}, 0x8) write(r3, &(0x7f0000000240)='b', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) 3.608547301s ago: executing program 3 (id=6240): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402e0c20070001000000010902190001010080320904000001ff00000007058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0xa6624f69aa97cb91) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0xfffffffb) acct(&(0x7f0000000140)='./dev/ttyUSB0\x00') 2.763535422s ago: executing program 7 (id=6241): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001"], 0xec}}, 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2002, 0xc0) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) write(r3, &(0x7f0000000440)='7', 0x1) keyctl$get_persistent(0x16, 0x0, r4) 2.55190037s ago: executing program 9 (id=6242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xec, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000308000b4000003ce013ad000068000480340001800b000100657874686472000024000280080001400000000b080003400000004d0500020007000000080004400000002f3000018008000100636d7000240002801000038009000100910d000000000000080001400000000208000240000000000900010073797a3000000000"], 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f00001800038004000100080002000500000008"], 0x38}}, 0x0) 2.47988452s ago: executing program 9 (id=6243): socket$kcm(0x21, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) pselect6(0x40, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) 2.361404608s ago: executing program 3 (id=6244): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.289781338s ago: executing program 9 (id=6245): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @rdmsr={0x66, 0x18, {0xbca}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x130}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.027774594s ago: executing program 7 (id=6246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygrou-/myevent ./dummy:0', 0x1b) 1.95176199s ago: executing program 7 (id=6247): ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f000000ac00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@crypt={0x0, 0x1440, 0x0, 0x98, 'crypt\x00', {'twofish-cbc-essiv:sha256', 0x20, @keyring=':64:encrypted:syz', 0x20, '8', 0x20, {@ram_num={'1:', 0x0}, 0x20, '8191'}, ' 2 no_read_workqueue no_write_workqueue'}}]}) 1.824964345s ago: executing program 7 (id=6248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) 1.7769862s ago: executing program 7 (id=6249): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x74) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000440)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x3}) 1.695638138s ago: executing program 7 (id=6250): socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl(r2, 0xc4c85513, &(0x7f0000000200)) 1.274019134s ago: executing program 9 (id=6251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xec, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000308000b4000003ce013ad000068000480340001800b000100657874686472000024000280080001400000000b080003400000004d0500020007000000080004400000002f3000018008000100636d7000240002801000038009000100910d000000000000080001400000000208000240000000000900010073797a3000000000"], 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f00001800038004000100080002000500000008"], 0x38}}, 0x0) 1.267624831s ago: executing program 9 (id=6252): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.063362885s ago: executing program 3 (id=6253): socket$kcm(0x21, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) pselect6(0x40, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) 889.596933ms ago: executing program 3 (id=6254): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001"], 0xec}}, 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2002, 0xc0) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) write(r3, &(0x7f0000000440)='7', 0x1) keyctl$get_persistent(0x16, 0x0, r4) 204.213604ms ago: executing program 3 (id=6255): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) 170.337495ms ago: executing program 9 (id=6256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="780000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000a40)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000ac0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa0100fd, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d08"}}}}, 0x3f) 0s ago: executing program 3 (id=6257): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x6a0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x674, 0x2, [@TCA_BPF_ACT={0x670, 0x1, [@m_mirred={0x624, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x595, 0x6, "54aa6579cf06a9e3ba2d57a0b3b58a5530eee176cab36463f36b167af47eaffcc5614168a068fcc4247c79c80796c574b4c2af8fdde088a7c88150f55d6194c6e715d3ba099779d80777b6c2ab8ffc343de4bf6ac9bf3141c933c502312f1d4289e195942ddc770951e9bcfdcea336c0bf0474b100872803fa14af615af6da6b063b01c50e9b21ca269b37702a2bce63fba39790cd2e6ae9de2e0206a3a406a8de8f9d43417fc1e6c6771acd645f2349e72126b899f4b2cdc57f230af5679ffd82fc07c607550881f253b3710c5898f406071830211caaa7b71a20bb9fe0385bf1c91e505e3f4a21227bc62630ee99db144595ad6fc3291ae966d1e2128f1e6b2f2726d3f3dfa41850be2b91ac77c5662e1e06ba8b0e121b1008a343e92b708444c195f8d7f46cc4cf73f6d164cabc61bc7ac9ddb5530feacc09aa773720b9e4a533ed55c556b0b76add10945963618aa76433793e7a39ef3f931eb6fc30d04e6737841828e1771c547a6acf68bcf85652f4aac8aa4e7abe5eaddd2ae75756d2f18c4ad6fef07be7489eda7c55a53bd694c68bb54e282e065ca5d9cea36dcd0e0c9dca08fbbaf0d62123f74ae45ef71e47b74e8070fd637cb968ae9804da49bb42f657abc1f73e5a77acde27e0f5320610c098f9f82b5ae6a0812efbd91f2dd0ab6035645aa8da106c7d6b7e81d74eb6b6a1d5840d7811d7759c1badfdf04e55178153ee55ce3f91f94a826e35b114aab35c4eeeb4041893f4d55fe8168bb3d40350fb1ad952b2f6249eb1d26801bcaa623bbb04f5e1cbbd0cbb9ac12a8ad4cd7cf08125b67c9c1a72efab3c73fe9270687b7f10f3a594a4b789e03dd7ffb3b6350dde0280e85df41d9634d26c8686013d49ae4fcb8c456b876af55f4d18b9bdb8935c4b30a7129e3bd776e4c1accc0a95a11b27b786984368989438deea6b22eb6881944dc700357d1367845d9fa20bf2cc0893c72c080bca4dfbb90ae725297a01a08000dd4c7b5ce707b46675657c3c3a9b08bfb7a85732e9fb386f270d381dbb6039421286a79419f58181d8f15927a782297342f00393c492b83f6f830e2388802c4653e41703ce5ed84e8f6a800d213a36763d39ede3079b04101c5577d6d5ae97a7bb225543bc860be7a7476c41ae7fbadc1b811c3783fa6a11445950b2a05cae74808c19433f02ee39d3e1cbafc366e813129df0e8e097858144d1bdcc926ac2978e4e72f097bee562e21b8db59c66e1d43cc7691193036efcc0da1dfedc0bcac2d2418643385114de7e3c592a0a7976388271129f4092dfa7e54fae057a91713e82f6e17d673e0221782ded9c3f7413871ee1bf0e87b73fc99cca64b52eed094277e430743f484f3475b68ee57258f375aba6f6cad6a6656243a04dd4920d8c94098ea748aed043d64aa363dd5891f4ffcdc8d4cfc21f52265ba695c6f4b58ec63e4aecbd849bb4db37b9686c1aa7c8e495d35514674b1740fc276e5a56dd7c2ccee9fbe5216213b0ee43356d08dcbf5740b41a819da2278d16a3218b6e7e2a1a1180dbc5129466e77cc3db280157124f4a0599915516788a5580dfbcfe187d696601f2bf287190d003b2076ee13d1d1ee67c0277082bb2bac2cb311868716932cf57a0bcc489280cae92421fbb866e067ed636670ef65ecf793f66e4fed7f666baa7288f3b5a04cf5222c3ac98ebf9ecbd92e987110cf58c02b604ec4ff6aa20652162a86b7bd4d6fe6f36ea3b2f2a52f1c6b0bdb9aad0ba2ad403a79f301186d1f7d69ddd75e13dd92861faa09da22db031452ee1f239dc6b82814d487b7c5c8061159cd0f89d668ee0043468ffa85bcfd11218b93ea59b0160346a0d9ba7a53011303c1c1cb28da67964a8f55e9c34d5261ce4e059d13bbe2760f1cd411ed2dde74834771f24007f6fcbc80e97f26c0b15149f57cad4d56b8ae663a82d9e6634610968f02d6507f4d58e00f6348fbba354e4fa5b2c81ac257b88dc1d78e4d9413bc0bffe14135a022f0cdf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x48, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x1d, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8b7910df1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x6a0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): batadv_slave_1 [ 2014.444409][T28654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2014.444435][T28654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2014.718860][ T36] audit: type=1800 audit(1793137289.873:5220): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=646917 res=0 errno=-22 [ 2014.891158][ T36] audit: type=1800 audit(1793137290.053:5221): pid=28718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=646571 res=0 errno=-22 [ 2014.950879][T28809] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2014.954226][T28809] block device autoloading is deprecated and will be removed. [ 2015.279086][T28654] hsr_slave_0: entered promiscuous mode [ 2015.286330][T28654] hsr_slave_1: entered promiscuous mode [ 2015.289402][T28654] debugfs: 'hsr0' already exists in 'hsr' [ 2015.289423][T28654] Cannot create hsr debugfs directory [ 2015.600090][ C1] net_ratelimit: 90 callbacks suppressed [ 2016.270226][ T5612] Bluetooth: hci2: command 0x0419 tx timeout [ 2016.957348][T28846] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2016.957530][T28846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2016.957699][T28846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2016.957886][T28846] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2016.958052][T28846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2016.958217][T28846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2017.198941][T28856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5647'. [ 2017.200159][T28856] bridge_slave_1: left allmulticast mode [ 2017.200187][T28856] bridge_slave_1: left promiscuous mode [ 2017.230975][T28856] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.356268][ T36] audit: type=1800 audit(1793137292.513:5222): pid=28854 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5647" name="stp_state" dev="sysfs" ino=612173 res=0 errno=-22 [ 2017.489763][T28856] bridge_slave_0: left allmulticast mode [ 2017.489782][T28856] bridge_slave_0: left promiscuous mode [ 2017.496395][T28856] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.336299][ T36] audit: type=1800 audit(1793137293.493:5223): pid=28654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24360 res=0 errno=-13 [ 2018.397937][T28885] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5659'. [ 2018.851961][T28903] block nbd9: shutting down sockets [ 2018.877664][ T36] audit: type=1800 audit(1793137294.033:5224): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=19845 res=0 errno=-22 [ 2019.040248][T19789] Bluetooth: hci5: command 0x0c1a tx timeout [ 2019.040296][T19789] Bluetooth: hci2: command 0x0419 tx timeout [ 2019.040335][T19789] Bluetooth: hci0: command 0x0c1a tx timeout [ 2019.040373][T19789] Bluetooth: hci6: command 0x0405 tx timeout [ 2019.040410][T19789] Bluetooth: hci4: command 0x0c1a tx timeout [ 2019.040447][T19789] Bluetooth: hci1: command 0x2016 tx timeout [ 2019.324615][ T36] audit: type=1800 audit(1793137294.483:5225): pid=28928 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.5672" name="wakeup_count" dev="sysfs" ino=1412 res=0 errno=-22 [ 2019.326249][T28926] FAULT_INJECTION: forcing a failure. [ 2019.326249][T28926] name failslab, interval 1, probability 5, space 0, times 9929 [ 2019.326290][T28926] CPU: 0 UID: 0 PID: 28926 Comm: syz.7.5671 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2019.326321][T28926] Tainted: [L]=SOFTLOCKUP [ 2019.326330][T28926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2019.326343][T28926] Call Trace: [ 2019.326352][T28926] [ 2019.326362][T28926] dump_stack_lvl+0xe8/0x150 [ 2019.326403][T28926] should_fail_ex+0x46b/0x600 [ 2019.326442][T28926] should_failslab+0xa8/0x100 [ 2019.326466][T28926] __kvmalloc_node_noprof+0x171/0x880 [ 2019.326502][T28926] ? bpf_compute_loops+0x137/0x3e80 [ 2019.326529][T28926] ? bpf_compute_loops+0x137/0x3e80 [ 2019.326564][T28926] bpf_compute_loops+0x137/0x3e80 [ 2019.326589][T28926] ? bpf_compute_idoms+0x18b5/0x1940 [ 2019.326637][T28926] bpf_check+0x2d2c/0x3540 [ 2019.326676][T28926] ? ktime_get_with_offset+0x93/0x2d0 [ 2019.326701][T28926] ? ktime_get_with_offset+0x93/0x2d0 [ 2019.326723][T28926] ? __pfx_bpf_check+0x10/0x10 [ 2019.326753][T28926] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2019.326789][T28926] bpf_prog_load+0x158f/0x1d60 [ 2019.326825][T28926] ? __pfx_bpf_prog_load+0x10/0x10 [ 2019.326876][T28926] __sys_bpf+0xd86/0xe00 [ 2019.326908][T28926] ? __pfx___sys_bpf+0x10/0x10 [ 2019.326936][T28926] ? do_futex+0x458/0x4e0 [ 2019.326991][T28926] ? rcu_is_watching+0x16/0xb0 [ 2019.327021][T28926] __x64_sys_bpf+0xba/0xd0 [ 2019.327047][T28926] do_syscall_64+0x166/0x520 [ 2019.327071][T28926] ? trace_irq_disable+0x3b/0x140 [ 2019.327092][T28926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.327114][T28926] ? clear_bhb_loop+0x70/0xc0 [ 2019.327148][T28926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.327171][T28926] RIP: 0033:0x7f642949f559 [ 2019.327192][T28926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2019.327211][T28926] RSP: 002b:00007f64276f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2019.327236][T28926] RAX: ffffffffffffffda RBX: 00007f6429725fa0 RCX: 00007f642949f559 [ 2019.327253][T28926] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 2019.327268][T28926] RBP: 00007f6429536b20 R08: 0000000000000000 R09: 0000000000000000 [ 2019.327283][T28926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2019.327297][T28926] R13: 00007f6429726038 R14: 00007f6429725fa0 R15: 00007fff06a18778 [ 2019.327332][T28926] [ 2020.091881][ T36] audit: type=1800 audit(1793137295.223:5226): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=19059 res=0 errno=-22 [ 2020.148105][T28951] block nbd3: shutting down sockets [ 2020.453950][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2021.282184][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2021.335268][ T36] audit: type=1800 audit(1793137296.493:5227): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=3325 res=0 errno=-22 [ 2021.337868][ T36] audit: type=1800 audit(1793137296.493:5228): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=21954 res=0 errno=-22 [ 2021.360024][ C1] net_ratelimit: 110 callbacks suppressed [ 2021.388310][ T36] audit: type=1800 audit(1793137296.543:5229): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22203 res=0 errno=-22 [ 2021.418559][ T36] audit: type=1800 audit(1793137296.573:5230): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22277 res=0 errno=-22 [ 2021.448391][ T36] audit: type=1800 audit(1793137296.603:5231): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22360 res=0 errno=-22 [ 2021.465409][ T36] audit: type=1800 audit(1793137296.623:5232): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22443 res=0 errno=-22 [ 2021.488458][ T36] audit: type=1800 audit(1793137296.643:5233): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=23360 res=0 errno=-22 [ 2021.513859][ T36] audit: type=1800 audit(1793137296.673:5234): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=23486 res=0 errno=-22 [ 2021.539825][ T36] audit: type=1800 audit(1793137296.693:5235): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=23563 res=0 errno=-22 [ 2023.582850][T29036] netlink: 240 bytes leftover after parsing attributes in process `syz.9.5693'. [ 2023.750180][T28689] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2023.890215][T28689] usb 4-1: device descriptor read/64, error -71 [ 2024.144056][T28689] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2024.272549][T28689] usb 4-1: device descriptor read/64, error -71 [ 2024.390862][T28689] usb usb4-port1: attempt power cycle [ 2024.730171][T28689] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2024.750907][T28689] usb 4-1: device descriptor read/8, error -71 [ 2025.001641][T28689] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2025.020939][T28689] usb 4-1: device descriptor read/8, error -71 [ 2025.153946][T28689] usb usb4-port1: unable to enumerate USB device [ 2025.212894][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 2025.212908][ T36] audit: type=1800 audit(1793137300.373:5239): pid=29087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.5701" name="idVendor" dev="configfs" ino=214982 res=0 errno=-22 [ 2025.433280][T29095] netlink: 240 bytes leftover after parsing attributes in process `syz.9.5702'. [ 2025.667000][T29099] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2025.741587][T29099] bond1: (slave lo): Enslaving as an active interface with an up link [ 2025.942752][ T36] audit: type=1800 audit(1793137301.103:5240): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649282 res=0 errno=-22 [ 2025.968616][T29109] FAULT_INJECTION: forcing a failure. [ 2025.968616][T29109] name failslab, interval 1, probability 5, space 0, times 9928 [ 2025.968656][T29109] CPU: 0 UID: 0 PID: 29109 Comm: syz.9.5704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2025.968686][T29109] Tainted: [L]=SOFTLOCKUP [ 2025.968694][T29109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2025.968708][T29109] Call Trace: [ 2025.968717][T29109] [ 2025.968726][T29109] dump_stack_lvl+0xe8/0x150 [ 2025.968765][T29109] should_fail_ex+0x46b/0x600 [ 2025.968803][T29109] should_failslab+0xa8/0x100 [ 2025.968825][T29109] ? __kernfs_new_node+0xe7/0xa70 [ 2025.968847][T29109] kmem_cache_alloc_noprof+0x99/0x680 [ 2025.968875][T29109] ? __kernfs_new_node+0xe7/0xa70 [ 2025.968903][T29109] __kernfs_new_node+0xe7/0xa70 [ 2025.968924][T29109] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2025.968957][T29109] ? __pfx___kernfs_new_node+0x10/0x10 [ 2025.968976][T29109] ? lock_acquire+0x115/0x350 [ 2025.969005][T29109] ? kernfs_root+0x1c/0x230 [ 2025.969039][T29109] ? kernfs_root+0x1c/0x230 [ 2025.969059][T29109] ? kernfs_root+0x1c/0x230 [ 2025.969076][T29109] ? kernfs_root+0x1c/0x230 [ 2025.969101][T29109] kernfs_new_node+0xeb/0x140 [ 2025.969127][T29109] __kernfs_create_file+0x4b/0x2e0 [ 2025.969157][T29109] sysfs_add_file_mode_ns+0x237/0x300 [ 2025.969194][T29109] internal_create_group+0x679/0x1180 [ 2025.969240][T29109] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2025.969267][T29109] ? __pfx_internal_create_group+0x10/0x10 [ 2025.969300][T29109] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2025.969326][T29109] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2025.969355][T29109] sysfs_create_groups+0x59/0x120 [ 2025.969390][T29109] device_add_attrs+0x1b1/0x600 [ 2025.969418][T29109] ? __pfx_device_add_attrs+0x10/0x10 [ 2025.969441][T29109] ? kobject_put+0x50f/0x550 [ 2025.969476][T29109] ? device_add_class_symlinks+0x222/0x240 [ 2025.969504][T29109] device_add+0x488/0xb80 [ 2025.969534][T29109] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 2025.969568][T29109] wakeup_source_register+0x17f/0x390 [ 2025.969598][T29109] ep_insert+0x112e/0x1990 [ 2025.969644][T29109] ? __pfx_ep_insert+0x10/0x10 [ 2025.969686][T29109] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2025.969710][T29109] ? mutex_lock_nested+0x14d/0x1d0 [ 2025.969738][T29109] ? do_epoll_ctl_file+0xc94/0xf00 [ 2025.969772][T29109] do_epoll_ctl_file+0x8d5/0xf00 [ 2025.969805][T29109] ? do_epoll_ctl_file+0xae6/0xf00 [ 2025.969838][T29109] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 2025.969872][T29109] ? __fget_files+0x3a8/0x420 [ 2025.969896][T29109] ? __fget_files+0x2a/0x420 [ 2025.969925][T29109] ? fdget+0x1b2/0x250 [ 2025.969948][T29109] __se_sys_epoll_ctl+0x162/0x230 [ 2025.969979][T29109] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 2025.970019][T29109] do_syscall_64+0x166/0x520 [ 2025.970050][T29109] ? trace_irq_disable+0x3b/0x140 [ 2025.970072][T29109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.970094][T29109] ? clear_bhb_loop+0x70/0xc0 [ 2025.970122][T29109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.970143][T29109] RIP: 0033:0x7f1db136f559 [ 2025.970164][T29109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2025.970182][T29109] RSP: 002b:00007f1daf5c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 2025.970207][T29109] RAX: ffffffffffffffda RBX: 00007f1db15f5fa0 RCX: 00007f1db136f559 [ 2025.970224][T29109] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 2025.970237][T29109] RBP: 00007f1db1406b20 R08: 0000000000000000 R09: 0000000000000000 [ 2025.970251][T29109] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 2025.970266][T29109] R13: 00007f1db15f6038 R14: 00007f1db15f5fa0 R15: 00007ffe5d692c58 [ 2025.970301][T29109] [ 2026.560065][ C1] net_ratelimit: 161 callbacks suppressed [ 2026.740491][ T36] audit: type=1800 audit(1793137301.893:5241): pid=29128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5710" name="idVendor" dev="configfs" ino=215032 res=0 errno=-22 [ 2026.930756][T22933] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2027.083332][T22933] usb 10-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 2027.086183][T22933] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2027.087543][T22933] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2027.099545][T22933] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.099557][T22933] usb 10-1: Product: syz [ 2027.099566][T22933] usb 10-1: Manufacturer: syz [ 2027.099574][T22933] usb 10-1: SerialNumber: syz [ 2027.162666][ T36] audit: type=1800 audit(1793137302.323:5242): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649389 res=0 errno=-22 [ 2027.194504][ T36] audit: type=1800 audit(1793137302.353:5243): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=649421 res=0 errno=-22 [ 2027.196320][T22933] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 2027.198962][ T36] audit: type=1800 audit(1793137302.353:5244): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=649396 res=0 errno=-22 [ 2027.251613][ T36] audit: type=1800 audit(1793137302.413:5245): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=649397 res=0 errno=-22 [ 2027.284250][T22933] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2027.375072][T22933] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2027.418313][ T36] audit: type=1800 audit(1793137302.553:5246): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=649418 res=0 errno=-22 [ 2027.418358][ T36] audit: type=1800 audit(1793137302.553:5247): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=649419 res=0 errno=-22 [ 2027.418389][ T36] audit: type=1800 audit(1793137302.563:5248): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=649398 res=0 errno=-22 [ 2027.473069][T28689] usb 10-1: USB disconnect, device number 5 [ 2027.485134][T29125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2027.517219][ T5612] Bluetooth: hci6: unexpected event for opcode 0x6678 [ 2027.536878][T28689] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2027.554713][T28689] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2027.559511][T28689] ti_usb_3410_5052 10-1:2.0: device disconnected [ 2028.671782][T29190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5724'. [ 2029.186129][ T5612] Bluetooth: hci6: unexpected event for opcode 0x3009 [ 2030.818991][T29264] FAULT_INJECTION: forcing a failure. [ 2030.818991][T29264] name failslab, interval 1, probability 5, space 0, times 9926 [ 2030.819028][T29264] CPU: 0 UID: 0 PID: 29264 Comm: syz.9.5737 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2030.819058][T29264] Tainted: [L]=SOFTLOCKUP [ 2030.819066][T29264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2030.819087][T29264] Call Trace: [ 2030.819096][T29264] [ 2030.819105][T29264] dump_stack_lvl+0xe8/0x150 [ 2030.819144][T29264] should_fail_ex+0x46b/0x600 [ 2030.819181][T29264] ? __d_alloc+0x37/0x830 [ 2030.819209][T29264] should_failslab+0xa8/0x100 [ 2030.819235][T29264] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 2030.819266][T29264] ? __d_alloc+0x37/0x830 [ 2030.819299][T29264] __d_alloc+0x37/0x830 [ 2030.819332][T29264] d_alloc_pseudo+0x21/0xc0 [ 2030.819362][T29264] alloc_path_pseudo+0x107/0x220 [ 2030.819390][T29264] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 2030.819411][T29264] ? reacquire_held_locks+0x117/0x1a0 [ 2030.819435][T29264] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2030.819475][T29264] alloc_file_pseudo+0xa8/0x1e0 [ 2030.819501][T29264] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2030.819533][T29264] anon_inode_getfile_fmode+0xb0/0x1c0 [ 2030.819565][T29264] __se_sys_timerfd_create+0x244/0x300 [ 2030.819594][T29264] do_syscall_64+0x166/0x520 [ 2030.819617][T29264] ? trace_irq_disable+0x3b/0x140 [ 2030.819640][T29264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.819662][T29264] ? clear_bhb_loop+0x70/0xc0 [ 2030.819688][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.819710][T29264] RIP: 0033:0x7f1db136f559 [ 2030.819730][T29264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2030.819749][T29264] RSP: 002b:00007f1daf5c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 2030.819774][T29264] RAX: ffffffffffffffda RBX: 00007f1db15f5fa0 RCX: 00007f1db136f559 [ 2030.819792][T29264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2030.819806][T29264] RBP: 00007f1db1406b20 R08: 0000000000000000 R09: 0000000000000000 [ 2030.819820][T29264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2030.819834][T29264] R13: 00007f1db15f6038 R14: 00007f1db15f5fa0 R15: 00007ffe5d692c58 [ 2030.819868][T29264] [ 2031.823711][T19789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2031.842242][ C1] net_ratelimit: 66 callbacks suppressed [ 2031.852552][T19789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2031.854931][T19789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2031.859443][T19789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2031.864957][T19789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2032.084291][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 2032.084303][ T36] audit: type=1800 audit(1793137307.243:5254): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649771 res=0 errno=-22 [ 2032.179393][ T36] audit: type=1800 audit(1793137307.333:5255): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649782 res=0 errno=-22 [ 2032.212839][ T36] audit: type=1800 audit(1793137307.363:5256): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649801 res=0 errno=-22 [ 2032.212897][ T36] audit: type=1800 audit(1793137307.363:5257): pid=28939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649812 res=0 errno=-22 [ 2032.225247][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2032.920770][T17426] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2033.070077][T17426] usb 4-1: Using ep0 maxpacket: 32 [ 2033.074033][T17426] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2033.090990][T17426] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2033.091016][T17426] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2033.091038][T17426] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2033.091058][T17426] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 2033.091117][T17426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.151093][ T36] audit: type=1800 audit(1793137308.303:5258): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649831 res=0 errno=-22 [ 2033.151321][T17426] usb 4-1: config 0 descriptor?? [ 2033.188135][ T36] audit: type=1800 audit(1793137308.313:5259): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=649860 res=0 errno=-22 [ 2033.211408][ T36] audit: type=1800 audit(1793137308.343:5260): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=649838 res=0 errno=-22 [ 2033.215539][ T36] audit: type=1800 audit(1793137308.373:5261): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=649839 res=0 errno=-22 [ 2033.219229][ T36] audit: type=1800 audit(1793137308.373:5262): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=649840 res=0 errno=-22 [ 2033.346952][T29287] rxe_eth0 speed is unknown, defaulting to 1000 [ 2033.370324][T28097] usb 4-1: USB disconnect, device number 65 [ 2033.890086][T28097] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2034.040501][T28097] usb 4-1: Using ep0 maxpacket: 32 [ 2034.041460][T28097] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2034.043817][T28097] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2034.043853][T28097] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2034.043876][T28097] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2034.043896][T28097] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 2034.043955][T28097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.118999][ T36] audit: type=1800 audit(1793137309.273:5263): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=653536 res=0 errno=-22 [ 2034.133055][T28097] usb 4-1: config 0 descriptor?? [ 2034.160441][ T5612] Bluetooth: hci3: command tx timeout [ 2035.455802][T29287] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.456031][T29287] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.456239][T29287] bridge_slave_0: entered allmulticast mode [ 2035.458743][T29287] bridge_slave_0: entered promiscuous mode [ 2035.497256][T29287] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.497378][T29287] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.497642][T29287] bridge_slave_1: entered allmulticast mode [ 2035.504948][T29287] bridge_slave_1: entered promiscuous mode [ 2035.735052][T29287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2035.756207][T29287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2036.042322][T29287] team0: Port device team_slave_0 added [ 2036.054891][T29287] team0: Port device team_slave_1 added [ 2036.099193][T29389] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5763'. [ 2036.240801][ T5612] Bluetooth: hci3: command tx timeout [ 2036.310771][ T1003] usb 4-1: USB disconnect, device number 66 [ 2036.387464][T29393] overlayfs: failed to resolve 'lower1': -2 [ 2036.395539][T29287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2036.395550][T29287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2036.395575][T29287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2036.423750][T29287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2036.423762][T29287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2036.423788][T29287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2036.512189][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2036.942662][T29287] hsr_slave_0: entered promiscuous mode [ 2036.948325][T29287] hsr_slave_1: entered promiscuous mode [ 2036.953567][T29287] debugfs: 'hsr0' already exists in 'hsr' [ 2036.953588][T29287] Cannot create hsr debugfs directory [ 2037.040076][ C1] net_ratelimit: 86 callbacks suppressed [ 2037.442451][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.311205][T29418] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2038.311430][T29418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2038.311598][T29418] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2038.311761][T29418] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2038.311929][T29418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2038.312093][T29418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2038.312260][T29418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2038.312332][T29418] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2038.391546][T29418] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2038.544786][T29418] hwrng_fill thread creation failed [ 2038.814818][T29433] overlayfs: failed to resolve 'lower1': -2 [ 2038.830212][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2038.909893][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 2038.909909][ T36] audit: type=1800 audit(1793137314.063:5268): pid=29287 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24360 res=0 errno=-13 [ 2039.010770][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 2039.017528][ T10] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2039.035591][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2039.035612][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2039.035631][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2039.035650][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 2039.035736][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.103419][ T10] usb 4-1: config 0 descriptor?? [ 2039.116309][ T36] audit: type=1800 audit(1793137314.273:5269): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=658722 res=0 errno=-22 [ 2039.139346][ T36] audit: type=1800 audit(1793137314.293:5270): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=658751 res=0 errno=-22 [ 2039.139394][ T36] audit: type=1800 audit(1793137314.293:5271): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=658729 res=0 errno=-22 [ 2039.144876][ T36] audit: type=1800 audit(1793137314.303:5272): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=658730 res=0 errno=-22 [ 2039.150017][ T36] audit: type=1800 audit(1793137314.303:5273): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=658731 res=0 errno=-22 [ 2039.314818][ T10] usb 4-1: USB disconnect, device number 67 [ 2039.780235][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2039.947923][T29457] syzkaller1: entered promiscuous mode [ 2039.947942][T29457] syzkaller1: entered allmulticast mode [ 2039.963435][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 2039.965802][ T10] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2039.967480][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2039.967502][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2039.967522][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2039.967542][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 2039.967597][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.979297][ T10] usb 4-1: config 0 descriptor?? [ 2040.009019][ T36] audit: type=1800 audit(1793137315.163:5274): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=658882 res=0 errno=-22 [ 2040.027553][ T36] audit: type=1800 audit(1793137315.183:5275): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=658911 res=0 errno=-22 [ 2040.030171][ T36] audit: type=1800 audit(1793137315.183:5276): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=658889 res=0 errno=-22 [ 2040.031962][ T36] audit: type=1800 audit(1793137315.193:5277): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=658890 res=0 errno=-22 [ 2040.320323][T19789] Bluetooth: hci5: command 0x0c1a tx timeout [ 2040.320376][T19789] Bluetooth: hci2: command 0x0419 tx timeout [ 2040.320415][T19789] Bluetooth: hci0: command 0x0c1a tx timeout [ 2040.320451][T19789] Bluetooth: hci6: command 0x0405 tx timeout [ 2040.320488][T19789] Bluetooth: hci4: command 0x0c1a tx timeout [ 2040.320525][T19789] Bluetooth: hci1: command 0x2016 tx timeout [ 2040.400190][ T5612] Bluetooth: hci3: command 0x0419 tx timeout [ 2040.577365][T29473] overlayfs: missing 'lowerdir' [ 2041.034645][T29491] block nbd9: shutting down sockets [ 2041.375139][T29507] overlayfs: failed to resolve 'lower1': -2 [ 2041.808007][T29519] syzkaller1: entered promiscuous mode [ 2041.808043][T29519] syzkaller1: entered allmulticast mode [ 2042.121708][T28689] usb 4-1: USB disconnect, device number 68 [ 2042.480142][ T5612] Bluetooth: hci3: command 0x0419 tx timeout [ 2042.563277][ C1] net_ratelimit: 162 callbacks suppressed [ 2042.678438][T29544] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5791'. [ 2042.678501][T29544] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5791'. [ 2043.780117][ T30] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2043.931061][ T30] usb 4-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 2043.933052][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.933119][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.975839][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 2043.975854][ T36] audit: type=1800 audit(1793137319.133:5281): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659035 res=0 errno=-22 [ 2044.023919][ T30] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 2044.025841][ T36] audit: type=1800 audit(1793137319.183:5282): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=659064 res=0 errno=-22 [ 2044.066029][ T36] audit: type=1800 audit(1793137319.223:5283): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=659042 res=0 errno=-22 [ 2044.070008][ T36] audit: type=1800 audit(1793137319.223:5284): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=659043 res=0 errno=-22 [ 2044.095729][ T36] audit: type=1800 audit(1793137319.253:5285): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=659044 res=0 errno=-22 [ 2044.136462][ T36] audit: type=1800 audit(1793137319.293:5286): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659084 res=0 errno=-22 [ 2044.163478][ T30] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 2044.165254][ T36] audit: type=1800 audit(1793137319.323:5287): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659100 res=0 errno=-22 [ 2044.208002][ T36] audit: type=1800 audit(1793137319.363:5288): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659114 res=0 errno=-22 [ 2044.245234][ T30] usb 4-1: USB disconnect, device number 69 [ 2044.267033][ T30] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 2044.267954][ T30] metro_usb 4-1:1.0: device disconnected [ 2044.291229][ T36] audit: type=1800 audit(1793137319.453:5289): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26503 res=0 errno=-22 [ 2044.554215][T29598] syzkaller1: entered promiscuous mode [ 2044.554235][T29598] syzkaller1: entered allmulticast mode [ 2044.570222][ T5612] Bluetooth: hci3: command 0x0419 tx timeout [ 2044.766897][T29599] block nbd9: shutting down sockets [ 2045.061429][ T36] audit: type=1800 audit(1793137320.223:5290): pid=29606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5801" name="autosuspend_delay_ms" dev="sysfs" ino=26234 res=0 errno=-22 [ 2045.098774][T29610] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5802'. [ 2045.274991][T29610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2045.332375][T29620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5804'. [ 2045.332429][T29620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5804'. [ 2045.390438][T29613] bond1: entered promiscuous mode [ 2045.390466][T29613] bond1: entered allmulticast mode [ 2045.414309][T29618] macvlan2: entered promiscuous mode [ 2045.414331][T29618] macvlan2: entered allmulticast mode [ 2045.445387][T29618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2045.743575][T29621] FAULT_INJECTION: forcing a failure. [ 2045.743575][T29621] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2045.743605][T29621] CPU: 0 UID: 0 PID: 29621 Comm: syz.3.5804 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2045.743632][T29621] Tainted: [L]=SOFTLOCKUP [ 2045.743639][T29621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2045.743651][T29621] Call Trace: [ 2045.743659][T29621] [ 2045.743668][T29621] dump_stack_lvl+0xe8/0x150 [ 2045.743703][T29621] should_fail_ex+0x46b/0x600 [ 2045.743737][T29621] get_futex_key+0x1ab/0x1410 [ 2045.743766][T29621] ? __lock_acquire+0x747/0x2de0 [ 2045.743794][T29621] ? __pfx_get_futex_key+0x10/0x10 [ 2045.743824][T29621] futex_wake+0x119/0x600 [ 2045.743857][T29621] ? __pfx_futex_wake+0x10/0x10 [ 2045.743882][T29621] ? do_raw_spin_lock+0x12b/0x2f0 [ 2045.743922][T29621] do_futex+0x458/0x4e0 [ 2045.743949][T29621] ? __pfx_do_futex+0x10/0x10 [ 2045.743978][T29621] ? __might_fault+0xaf/0x130 [ 2045.744007][T29621] mm_exit_exec_release+0x10d/0x290 [ 2045.744035][T29621] exit_mm+0x50/0x240 [ 2045.744059][T29621] do_exit+0x6a8/0x2360 [ 2045.744095][T29621] ? __pfx_do_exit+0x10/0x10 [ 2045.744114][T29621] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2045.744151][T29621] ? rt_spin_unlock+0x159/0x200 [ 2045.744181][T29621] do_group_exit+0x22d/0x2f0 [ 2045.744201][T29621] ? rt_spin_unlock+0x165/0x200 [ 2045.744230][T29621] get_signal+0x1216/0x12c0 [ 2045.744277][T29621] arch_do_signal_or_restart+0xbb/0x860 [ 2045.744302][T29621] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2045.744342][T29621] exit_to_user_mode_loop+0x10e/0x770 [ 2045.744361][T29621] ? rcu_is_watching+0x16/0xb0 [ 2045.744387][T29621] do_syscall_64+0x328/0x520 [ 2045.744408][T29621] ? trace_irq_disable+0x3b/0x140 [ 2045.744427][T29621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.744447][T29621] ? clear_bhb_loop+0x70/0xc0 [ 2045.744474][T29621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.744493][T29621] RIP: 0033:0x7f9c897ff559 [ 2045.744512][T29621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.744528][T29621] RSP: 002b:00007f9c87a0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2045.744551][T29621] RAX: fffffffffffffe00 RBX: 00007f9c89a86188 RCX: 00007f9c897ff559 [ 2045.744566][T29621] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c89a86188 [ 2045.744579][T29621] RBP: 00007f9c89a86180 R08: 0000000000000000 R09: 0000000000000000 [ 2045.744592][T29621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2045.744604][T29621] R13: 00007f9c89a86218 R14: 00007ffe9d9c1ac0 R15: 00007ffe9d9c1ba8 [ 2045.744636][T29621] [ 2046.521152][T28097] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2046.640260][ T5612] Bluetooth: hci3: command 0x0419 tx timeout [ 2046.671121][T28097] usb 10-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 2046.672795][T28097] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2046.672860][T28097] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.705692][T28097] metro_usb 10-1:1.0: Metrologic USB to Serial converter detected [ 2046.742703][T28097] usb 10-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 2047.006346][ T10] usb 10-1: USB disconnect, device number 6 [ 2047.286450][T29660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5814'. [ 2047.286512][T29660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5814'. [ 2047.583529][T28097] net_ratelimit: 95 callbacks suppressed [ 2047.768728][ T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 2047.769774][ T10] metro_usb 10-1:1.0: device disconnected [ 2047.826841][T29665] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2047.827063][T29665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2047.828935][T29665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2047.829111][T29665] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2047.829280][T29665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2047.829448][T29665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2047.829616][T29665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2047.888983][T29665] hwrng_fill thread creation failed [ 2048.292904][T29675] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5815'. [ 2048.526364][T29677] syzkaller1: entered promiscuous mode [ 2048.526382][T29677] syzkaller1: entered allmulticast mode [ 2049.530187][T29668] Bluetooth: hci5: command 0x0c1a tx timeout [ 2049.840195][T29668] Bluetooth: hci4: command 0x0c1a tx timeout [ 2049.840247][T29668] Bluetooth: hci3: command 0x0419 tx timeout [ 2049.840286][T29668] Bluetooth: hci1: command 0x2016 tx timeout [ 2049.840321][T29668] Bluetooth: hci2: command 0x0419 tx timeout [ 2049.840359][T29668] Bluetooth: hci6: command 0x0405 tx timeout [ 2049.930099][ T6610] Bluetooth: hci0: command 0x0c1a tx timeout [ 2050.227589][T29747] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5825'. [ 2050.227627][T29747] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5825'. [ 2050.748788][T29763] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5826'. [ 2051.039751][T29774] input: syz1 as /devices/virtual/input/input31 [ 2051.052623][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 2051.052637][ T36] audit: type=1800 audit(1793137326.213:5300): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659939 res=0 errno=-22 [ 2051.058551][ T36] audit: type=1800 audit(1793137326.213:5301): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=659954 res=0 errno=-22 [ 2051.092305][ T36] audit: type=1800 audit(1793137326.213:5302): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=659957 res=0 errno=-22 [ 2051.097197][ T36] audit: type=1800 audit(1793137326.253:5303): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=659956 res=0 errno=-22 [ 2051.099913][ T36] audit: type=1800 audit(1793137326.253:5304): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=659955 res=0 errno=-22 [ 2051.104279][ T36] audit: type=1800 audit(1793137326.263:5305): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=659946 res=0 errno=-22 [ 2051.108219][ T36] audit: type=1800 audit(1793137326.263:5306): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=659949 res=0 errno=-22 [ 2051.115849][ T36] audit: type=1800 audit(1793137326.263:5307): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=659942 res=0 errno=-22 [ 2051.141310][ T36] audit: type=1800 audit(1793137326.293:5308): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659970 res=0 errno=-22 [ 2051.175232][ T36] audit: type=1800 audit(1793137326.333:5309): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=659943 res=0 errno=-22 [ 2051.199586][T28689] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2051.362283][T28689] usb 10-1: Using ep0 maxpacket: 8 [ 2051.363398][T28689] usb 10-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2051.366429][T28689] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.366452][T28689] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2051.366537][T28689] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.420457][T28689] usb 10-1: config 0 descriptor?? [ 2051.656678][T28689] usb 10-1: USB disconnect, device number 7 [ 2051.893496][T29691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2052.650040][ C0] net_ratelimit: 122 callbacks suppressed [ 2052.864906][T28127] usb 8-1: no suitable firmware found! [ 2052.864920][T28127] usb 8-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 2052.867616][T17424] usb 8-1: ath9k_htc: USB layer deinitialized [ 2053.117065][T29819] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5834'. [ 2053.117123][T29819] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5834'. [ 2053.749490][T29847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5839'. [ 2053.931499][T20052] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2054.081466][T20052] usb 10-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2054.083784][T20052] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.086473][T20052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.086484][T20052] usb 10-1: Product: syz [ 2054.086499][T20052] usb 10-1: Manufacturer: syz [ 2054.086508][T20052] usb 10-1: SerialNumber: syz [ 2054.096656][T20052] usb 10-1: config 0 descriptor?? [ 2054.191118][T20052] yurex 10-1:0.0: Could not find endpoints [ 2054.385985][T20052] usb 10-1: USB disconnect, device number 8 [ 2055.033239][T29886] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5845'. [ 2055.081469][T29886] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.087815][T29886] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.343026][T29893] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5848'. [ 2055.387122][T29894] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5847'. [ 2055.387180][T29894] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5847'. [ 2056.676825][T29890] FAULT_INJECTION: forcing a failure. [ 2056.676825][T29890] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2056.676856][T29890] CPU: 1 UID: 0 PID: 29890 Comm: syz.9.5847 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2056.676884][T29890] Tainted: [L]=SOFTLOCKUP [ 2056.676891][T29890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2056.676903][T29890] Call Trace: [ 2056.676912][T29890] [ 2056.676921][T29890] dump_stack_lvl+0xe8/0x150 [ 2056.676962][T29890] should_fail_ex+0x46b/0x600 [ 2056.676994][T29890] get_futex_key+0x1ab/0x1410 [ 2056.677022][T29890] ? __lock_acquire+0x747/0x2de0 [ 2056.677051][T29890] ? __pfx_get_futex_key+0x10/0x10 [ 2056.677081][T29890] futex_wake+0x119/0x600 [ 2056.677114][T29890] ? __pfx_futex_wake+0x10/0x10 [ 2056.677138][T29890] ? do_raw_spin_lock+0x12b/0x2f0 [ 2056.677178][T29890] do_futex+0x458/0x4e0 [ 2056.677207][T29890] ? __pfx_do_futex+0x10/0x10 [ 2056.677235][T29890] ? __might_fault+0xaf/0x130 [ 2056.677264][T29890] mm_exit_exec_release+0x10d/0x290 [ 2056.677295][T29890] exit_mm+0x50/0x240 [ 2056.677318][T29890] do_exit+0x6a8/0x2360 [ 2056.677347][T29890] ? __pfx_do_exit+0x10/0x10 [ 2056.677367][T29890] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2056.677405][T29890] ? rt_spin_unlock+0x159/0x200 [ 2056.677435][T29890] do_group_exit+0x22d/0x2f0 [ 2056.677454][T29890] ? rt_spin_unlock+0x165/0x200 [ 2056.677484][T29890] get_signal+0x1216/0x12c0 [ 2056.677533][T29890] arch_do_signal_or_restart+0xbb/0x860 [ 2056.677557][T29890] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2056.677597][T29890] exit_to_user_mode_loop+0x10e/0x770 [ 2056.677617][T29890] ? rcu_is_watching+0x16/0xb0 [ 2056.677643][T29890] do_syscall_64+0x328/0x520 [ 2056.677665][T29890] ? trace_irq_disable+0x3b/0x140 [ 2056.677686][T29890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.677706][T29890] ? clear_bhb_loop+0x70/0xc0 [ 2056.677730][T29890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.677750][T29890] RIP: 0033:0x7f1db136f559 [ 2056.677769][T29890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2056.677787][T29890] RSP: 002b:00007f1daf5c60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2056.677810][T29890] RAX: fffffffffffffe00 RBX: 00007f1db15f5fa8 RCX: 00007f1db136f559 [ 2056.677825][T29890] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1db15f5fa8 [ 2056.677839][T29890] RBP: 00007f1db15f5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2056.677851][T29890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2056.677863][T29890] R13: 00007f1db15f6038 R14: 00007ffe5d692b70 R15: 00007ffe5d692c58 [ 2056.677895][T29890] [ 2057.680074][ C1] net_ratelimit: 69 callbacks suppressed [ 2057.958692][T29927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5857'. [ 2058.424243][T29941] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5861'. [ 2058.424311][T29941] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5861'. [ 2059.728905][ T6610] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 2060.399631][T29970] overlayfs: fs on 'sys_mnt' does not support file handles, falling back to index=off,nfs_export=off. [ 2060.470057][T20052] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2060.622578][T20052] usb 10-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 2060.623962][T20052] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2060.626200][T20052] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2060.636585][T20052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.636605][T20052] usb 10-1: Product: syz [ 2060.636620][T20052] usb 10-1: Manufacturer: syz [ 2060.636635][T20052] usb 10-1: SerialNumber: syz [ 2060.707803][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 2060.707817][ T36] audit: type=1800 audit(1793137335.863:5325): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=660305 res=0 errno=-22 [ 2060.719341][ T36] audit: type=1800 audit(1793137335.873:5326): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=660337 res=0 errno=-22 [ 2060.725126][ T36] audit: type=1800 audit(1793137335.883:5327): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=660312 res=0 errno=-22 [ 2060.730712][ T36] audit: type=1800 audit(1793137335.883:5328): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=660313 res=0 errno=-22 [ 2060.768410][T20052] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 2060.826991][T20052] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2060.842872][T20052] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2060.849348][ T36] audit: type=1800 audit(1793137336.003:5329): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=660334 res=0 errno=-22 [ 2060.883257][ T36] audit: type=1800 audit(1793137336.043:5330): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=660335 res=0 errno=-22 [ 2060.885428][ T36] audit: type=1800 audit(1793137336.043:5331): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=660314 res=0 errno=-22 [ 2060.887085][ T36] audit: type=1800 audit(1793137336.043:5332): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=660336 res=0 errno=-22 [ 2060.897414][ T36] audit: type=1800 audit(1793137336.053:5333): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=660357 res=0 errno=-22 [ 2060.905910][ T36] audit: type=1800 audit(1793137336.063:5334): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=660373 res=0 errno=-22 [ 2062.163334][T29668] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2062.247449][T29668] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2062.262402][T29668] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2062.266169][T29668] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2062.267711][T29668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2062.585745][ T6610] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 2062.720031][ C0] net_ratelimit: 63 callbacks suppressed [ 2062.882170][T29983] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 2063.207233][T29995] rxe_eth0 speed is unknown, defaulting to 1000 [ 2064.036640][T17202] usb 10-1: USB disconnect, device number 9 [ 2064.044516][T29965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2064.176614][T17202] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2064.194911][T17202] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2064.287594][T17202] ti_usb_3410_5052 10-1:2.0: device disconnected [ 2064.480507][ T6610] Bluetooth: hci7: command tx timeout [ 2064.647447][T29995] bridge0: port 1(bridge_slave_0) entered blocking state [ 2064.648018][T29995] bridge0: port 1(bridge_slave_0) entered disabled state [ 2064.648244][T29995] bridge_slave_0: entered allmulticast mode [ 2064.651978][T29995] bridge_slave_0: entered promiscuous mode [ 2064.655345][T29995] bridge0: port 2(bridge_slave_1) entered blocking state [ 2064.655532][T29995] bridge0: port 2(bridge_slave_1) entered disabled state [ 2064.655730][T29995] bridge_slave_1: entered allmulticast mode [ 2064.658089][T29995] bridge_slave_1: entered promiscuous mode [ 2064.753087][T29995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2064.763065][T29995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2064.867268][ T6610] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 2064.962765][T29995] team0: Port device team_slave_0 added [ 2064.983787][T29995] team0: Port device team_slave_1 added [ 2065.111578][T29995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2065.111589][T29995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2065.111613][T29995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2065.170344][T29995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2065.170351][T29995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2065.170365][T29995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2065.464179][T29995] hsr_slave_0: entered promiscuous mode [ 2065.481939][T29995] hsr_slave_1: entered promiscuous mode [ 2065.482612][T29995] debugfs: 'hsr0' already exists in 'hsr' [ 2065.482625][T29995] Cannot create hsr debugfs directory [ 2066.562317][ T6610] Bluetooth: hci7: command tx timeout [ 2066.769919][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 2066.770116][ T36] audit: type=1800 audit(1793137341.923:5349): pid=29995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24360 res=0 errno=-13 [ 2067.400449][T30105] 0x000000000000-0x000000010000 : "" [ 2067.578283][ T36] audit: type=1800 audit(1793137342.733:5350): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=669260 res=0 errno=-22 [ 2067.578329][ T36] audit: type=1800 audit(1793137342.733:5351): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=669272 res=0 errno=-22 [ 2067.692382][ T36] audit: type=1800 audit(1793137342.843:5352): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=669289 res=0 errno=-22 [ 2067.703218][T30105] ftl_cs: FTL header not found. [ 2067.710247][ T36] audit: type=1800 audit(1793137342.863:5353): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=669301 res=0 errno=-22 [ 2068.080246][ C1] net_ratelimit: 116 callbacks suppressed [ 2068.330193][ T36] audit: type=1800 audit(1793137343.493:5354): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=669424 res=0 errno=-22 [ 2068.363445][ T36] audit: type=1800 audit(1793137343.523:5355): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=669313 res=0 errno=-22 [ 2068.640076][ T6610] Bluetooth: hci7: command tx timeout [ 2068.922934][T30149] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5913'. [ 2068.934898][T30149] syzkaller1: entered promiscuous mode [ 2068.934917][T30149] syzkaller1: entered allmulticast mode [ 2069.308304][T30168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5917'. [ 2069.517572][T30175] 0x000000000000-0x000000010000 : "" [ 2069.530468][ T36] audit: type=1800 audit(1793137344.683:5356): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=669522 res=0 errno=-22 [ 2069.531585][ T36] audit: type=1800 audit(1793137344.693:5357): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=669534 res=0 errno=-22 [ 2069.595080][ T36] audit: type=1800 audit(1793137344.753:5358): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=669551 res=0 errno=-22 [ 2069.648215][T30175] ftl_cs: FTL header not found. [ 2070.853284][ T6610] Bluetooth: hci7: command tx timeout [ 2071.406524][T30193] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5926'. [ 2072.061489][T30195] block nbd7: shutting down sockets [ 2072.088678][T30197] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5928'. [ 2072.089490][T30197] syzkaller1: entered promiscuous mode [ 2072.089501][T30197] syzkaller1: entered allmulticast mode [ 2073.543938][ C1] net_ratelimit: 62 callbacks suppressed [ 2073.710700][T30224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5935'. [ 2074.098594][T30234] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5940'. [ 2074.099635][T30234] syzkaller1: entered promiscuous mode [ 2074.099656][T30234] syzkaller1: entered allmulticast mode [ 2076.487027][T30276] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5954'. [ 2076.492234][T30276] syzkaller1: entered promiscuous mode [ 2076.492257][T30276] syzkaller1: entered allmulticast mode [ 2079.040077][ C1] net_ratelimit: 56 callbacks suppressed [ 2084.160254][ C0] net_ratelimit: 89 callbacks suppressed [ 2084.514097][T30398] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2084.514444][T30398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2084.514698][T30398] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2084.514876][T30398] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2084.515043][T30398] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2084.515211][T30398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2084.515396][T30398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2084.517763][T30398] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2084.519318][T30398] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2084.679542][T30398] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2084.694688][ T6610] Bluetooth: hci4: Invalid handle: 0x70bc > 0x0eff [ 2084.774814][T30398] hwrng_fill thread creation failed [ 2085.568695][T30410] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2085.569205][T30410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2085.585892][T30410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2085.632269][T30410] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2085.632495][T30410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2085.632820][T30410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2085.633142][T30410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2085.672340][T30410] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2086.891536][ T5612] Bluetooth: hci5: command 0x0c1a tx timeout [ 2087.090118][T20052] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2087.240694][T20052] usb 10-1: Using ep0 maxpacket: 32 [ 2087.241459][T20052] usb 10-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2087.258347][T20052] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 2087.258375][T20052] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2087.258397][T20052] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2087.258465][T20052] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2087.258488][T20052] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2087.258513][T20052] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2087.258536][T20052] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2087.258597][T20052] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.346963][T20052] usb 10-1: config 0 descriptor?? [ 2087.350568][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 2087.350581][ T36] audit: type=1800 audit(1793137362.503:5362): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=670332 res=0 errno=-22 [ 2087.369308][ T36] audit: type=1800 audit(1793137362.523:5363): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=670364 res=0 errno=-22 [ 2087.385997][ T36] audit: type=1800 audit(1793137362.543:5364): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=670339 res=0 errno=-22 [ 2087.397046][ T36] audit: type=1800 audit(1793137362.563:5365): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=670340 res=0 errno=-22 [ 2087.398745][ T36] audit: type=1800 audit(1793137362.563:5366): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=670341 res=0 errno=-22 [ 2087.407207][ T36] audit: type=1800 audit(1793137362.563:5367): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=670384 res=0 errno=-22 [ 2087.557425][T17203] usb 10-1: USB disconnect, device number 10 [ 2087.580117][ T5755] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2087.600063][ T5612] Bluetooth: hci1: command 0x2016 tx timeout [ 2087.647620][ T5612] Bluetooth: hci1: Invalid handle: 0x70bc > 0x0eff [ 2087.692690][ T6610] Bluetooth: hci7: command 0x0c1a tx timeout [ 2087.692856][ T6610] Bluetooth: hci3: command 0x0419 tx timeout [ 2087.692897][ T6610] Bluetooth: hci2: command 0x0419 tx timeout [ 2087.692937][ T6610] Bluetooth: hci0: command 0x0c1a tx timeout [ 2087.692990][ T6610] Bluetooth: hci6: command 0x0405 tx timeout [ 2087.693031][ T6610] Bluetooth: hci4: command 0x0c1a tx timeout [ 2087.750833][ T5755] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 2087.752188][ T5755] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 2087.752205][ T5755] usb 4-1: config 1 has no interface number 0 [ 2087.754605][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.754617][ T5755] usb 4-1: Product: syz [ 2087.754625][ T5755] usb 4-1: Manufacturer: syz [ 2087.754633][ T5755] usb 4-1: SerialNumber: syz [ 2087.808681][ T36] audit: type=1800 audit(1793137362.963:5368): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=670457 res=0 errno=-22 [ 2087.815686][ T36] audit: type=1800 audit(1793137362.973:5369): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=670489 res=0 errno=-22 [ 2087.824597][ T36] audit: type=1800 audit(1793137362.983:5370): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=670464 res=0 errno=-22 [ 2087.833741][ T36] audit: type=1800 audit(1793137362.993:5371): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=670465 res=0 errno=-22 [ 2087.851105][ T5755] usb 4-1: 3:1 : does not exist [ 2087.851121][ T5755] usb 4-1: 3:2 : does not exist [ 2088.060115][T17203] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2088.220437][T17203] usb 10-1: Using ep0 maxpacket: 32 [ 2088.221758][T17203] usb 10-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2088.229503][T17203] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 2088.229528][T17203] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2088.229549][T17203] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2088.229817][T17203] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2088.229840][T17203] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2088.229865][T17203] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2088.229890][T17203] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2088.238771][T17203] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.333592][T17203] usb 10-1: config 0 descriptor?? [ 2089.280259][ T6471] net_ratelimit: 69 callbacks suppressed [ 2089.770105][ T5612] Bluetooth: hci7: command 0x0c1a tx timeout [ 2090.482033][T17203] usb 10-1: USB disconnect, device number 11 [ 2090.930129][T17203] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2091.060164][T17203] usb 10-1: device descriptor read/64, error -71 [ 2091.300314][T17203] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2091.430321][T17203] usb 10-1: device descriptor read/64, error -71 [ 2091.582903][T17203] usb usb10-port1: attempt power cycle [ 2091.648796][T19789] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2091.735772][T19789] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2091.753323][T19789] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2091.757704][T19789] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2091.759332][T19789] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2091.852920][T19789] Bluetooth: hci7: command 0x0c1a tx timeout [ 2092.064135][T17203] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2092.085642][T17203] usb 10-1: device descriptor read/8, error -71 [ 2092.421766][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 2092.421783][ T36] audit: type=1800 audit(1793137367.583:5392): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=670787 res=0 errno=-22 [ 2092.484037][T17203] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2092.501637][T17203] usb 10-1: device descriptor read/8, error -71 [ 2092.610676][T17203] usb usb10-port1: unable to enumerate USB device [ 2093.113658][T30480] rxe_eth0 speed is unknown, defaulting to 1000 [ 2093.174678][ T5755] usb 4-1: USB disconnect, device number 70 [ 2093.294587][T19789] Bluetooth: hci6: Invalid handle: 0x70bc > 0x0eff [ 2094.350208][T17203] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2094.404674][T30480] bridge0: port 1(bridge_slave_0) entered blocking state [ 2094.405360][T30480] bridge0: port 1(bridge_slave_0) entered disabled state [ 2094.405583][T30480] bridge_slave_0: entered allmulticast mode [ 2094.413542][T30480] bridge_slave_0: entered promiscuous mode [ 2094.428631][T30480] bridge0: port 2(bridge_slave_1) entered blocking state [ 2094.428910][T30480] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.429104][T30480] bridge_slave_1: entered allmulticast mode [ 2094.432774][T30480] bridge_slave_1: entered promiscuous mode [ 2094.480191][ T5612] Bluetooth: hci8: command tx timeout [ 2094.504469][T17203] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 2094.509856][T17203] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 2094.509881][T17203] usb 4-1: config 1 has no interface number 0 [ 2094.519270][T17203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.519291][T17203] usb 4-1: Product: syz [ 2094.519306][T17203] usb 4-1: Manufacturer: syz [ 2094.519321][T17203] usb 4-1: SerialNumber: syz [ 2094.560012][ C1] net_ratelimit: 110 callbacks suppressed [ 2094.605823][ T36] audit: type=1800 audit(1793137369.763:5393): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=676636 res=0 errno=-22 [ 2094.635587][ T36] audit: type=1800 audit(1793137369.793:5394): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=676668 res=0 errno=-22 [ 2094.637129][ T36] audit: type=1800 audit(1793137369.793:5395): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=676643 res=0 errno=-22 [ 2094.638706][ T36] audit: type=1800 audit(1793137369.793:5396): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=676644 res=0 errno=-22 [ 2094.711138][T30480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2094.723675][T17203] usb 4-1: 3:1 : does not exist [ 2094.723692][T17203] usb 4-1: 3:2 : does not exist [ 2094.768894][T30480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2095.027410][T30480] team0: Port device team_slave_0 added [ 2095.037959][T30480] team0: Port device team_slave_1 added [ 2095.102834][T17203] usb 4-1: USB disconnect, device number 71 [ 2095.162384][T30480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2095.162392][T30480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2095.165713][T30480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2095.167123][T30480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2095.167134][T30480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2095.167335][ T36] audit: type=1800 audit(1793137370.323:5397): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=676665 res=0 errno=-22 [ 2095.172172][T30480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2095.353177][ T36] audit: type=1800 audit(1793137370.513:5398): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=676666 res=0 errno=-22 [ 2095.357260][ T36] audit: type=1800 audit(1793137370.513:5399): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=676645 res=0 errno=-22 [ 2095.358034][ T36] audit: type=1800 audit(1793137370.513:5400): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=676667 res=0 errno=-22 [ 2095.435921][T28909] udevd[28909]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2095.520822][ T35] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2095.552841][T30480] hsr_slave_0: entered promiscuous mode [ 2095.558080][T30480] hsr_slave_1: entered promiscuous mode [ 2095.560206][T30480] debugfs: 'hsr0' already exists in 'hsr' [ 2095.560228][T30480] Cannot create hsr debugfs directory [ 2095.671693][ T35] usb 10-1: Using ep0 maxpacket: 32 [ 2095.673068][ T35] usb 10-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2095.674964][ T35] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 2095.674988][ T35] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2095.675009][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2095.675059][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2095.675082][ T35] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2095.675108][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2095.675131][ T35] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2095.675191][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.793060][ T36] audit: type=1800 audit(1793137370.953:5401): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=678607 res=0 errno=-22 [ 2095.799150][ T35] usb 10-1: config 0 descriptor?? [ 2096.024268][T17203] usb 10-1: USB disconnect, device number 16 [ 2096.560130][ T5612] Bluetooth: hci8: command tx timeout [ 2096.590153][T17203] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2096.731979][T30541] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6030'. [ 2096.740196][T17203] usb 10-1: Using ep0 maxpacket: 32 [ 2096.742492][T17203] usb 10-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2096.750586][T17203] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 2096.750611][T17203] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2096.750634][T17203] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2096.750685][T17203] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2096.750709][T17203] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2096.750734][T17203] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2096.750756][T17203] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2096.750817][T17203] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.772516][T17203] usb 10-1: config 0 descriptor?? [ 2097.189394][T30550] overlayfs: failed to resolve './bus': -2 [ 2097.900161][T30548] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2097.900516][T30548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2097.956575][T30548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2097.957760][T30548] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2097.992982][T30548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2097.993325][T30548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2097.993631][T30548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2097.993933][T30548] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2097.994256][T30548] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2097.994536][T30548] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2098.077680][T30548] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2098.457626][ T5612] Bluetooth: hci1: Invalid handle: 0x70bc > 0x0eff [ 2098.882491][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.025985][T30568] input: syz1 as /devices/virtual/input/input32 [ 2099.036449][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 2099.036464][ T36] audit: type=1800 audit(1793137374.183:5414): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=679876 res=0 errno=-22 [ 2099.036506][ T36] audit: type=1800 audit(1793137374.193:5415): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=679891 res=0 errno=-22 [ 2099.036543][ T36] audit: type=1800 audit(1793137374.193:5416): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=679894 res=0 errno=-22 [ 2099.037822][ T36] audit: type=1800 audit(1793137374.193:5417): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=679893 res=0 errno=-22 [ 2099.050735][ T36] audit: type=1800 audit(1793137374.213:5418): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=679892 res=0 errno=-22 [ 2099.052033][ T36] audit: type=1800 audit(1793137374.213:5419): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=679883 res=0 errno=-22 [ 2099.053612][ T36] audit: type=1800 audit(1793137374.213:5420): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=679886 res=0 errno=-22 [ 2099.055103][ T36] audit: type=1800 audit(1793137374.213:5421): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=679879 res=0 errno=-22 [ 2099.082662][ T35] usb 10-1: USB disconnect, device number 17 [ 2099.227085][ T36] audit: type=1800 audit(1793137374.383:5422): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=679907 res=0 errno=-22 [ 2099.285212][ T36] audit: type=1800 audit(1793137374.443:5423): pid=28909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=679880 res=0 errno=-22 [ 2099.360757][T19789] Bluetooth: hci5: command 0x0c1a tx timeout [ 2099.523299][T30575] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6040'. [ 2099.851494][T30581] device-mapper: table: 248:22: crypt: Error allocating crypto tfm (-EINVAL) [ 2099.851520][T30581] device-mapper: ioctl: error adding target to table [ 2099.920018][ C1] net_ratelimit: 130 callbacks suppressed [ 2100.000227][T19789] Bluetooth: hci4: command 0x0c1a tx timeout [ 2100.000272][T19789] Bluetooth: hci1: command 0x2016 tx timeout [ 2100.000312][T19789] Bluetooth: hci8: command 0x0419 tx timeout [ 2100.000488][T29668] Bluetooth: hci3: command 0x0419 tx timeout [ 2100.000528][T29668] Bluetooth: hci2: command 0x0419 tx timeout [ 2100.000556][T29668] Bluetooth: hci0: command 0x0c1a tx timeout [ 2100.000588][T29668] Bluetooth: hci6: command 0x0405 tx timeout [ 2100.007122][ T5612] Bluetooth: hci7: command 0x0c1a tx timeout [ 2100.730080][T17203] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 2100.881312][T17203] usb 8-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 2100.882976][T17203] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2100.882998][T17203] usb 8-1: config 0 has no interfaces? [ 2100.883047][T17203] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.925664][T17203] usb 8-1: config 0 descriptor?? [ 2100.982153][T30605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6049'. [ 2101.155828][ T35] usb 8-1: USB disconnect, device number 21 [ 2101.251131][T30616] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6053'. [ 2101.743674][T30629] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6059'. [ 2102.075546][T30639] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6062'. [ 2102.080468][T19789] Bluetooth: hci8: command 0x0419 tx timeout [ 2102.242856][T30643] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2104.024283][T30656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6068'. [ 2104.160253][T19789] Bluetooth: hci8: command 0x0419 tx timeout [ 2104.894253][T19789] Bluetooth: hci1: Invalid handle: 0x70bc > 0x0eff [ 2104.960033][ C0] net_ratelimit: 120 callbacks suppressed [ 2106.248852][ T5612] Bluetooth: hci8: command 0x0419 tx timeout [ 2108.662545][T30689] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6079'. [ 2108.781805][T30694] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6082'. [ 2109.942497][T17203] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2109.990147][T30720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6089'. [ 2110.080051][ C1] net_ratelimit: 2920 callbacks suppressed [ 2110.095382][T17203] usb 8-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 2110.098261][T17203] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.098311][T17203] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2110.098375][T17203] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.116204][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 2110.116217][ T36] audit: type=1800 audit(1793137385.273:5429): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680003 res=0 errno=-22 [ 2110.117750][T17203] metro_usb 8-1:1.0: required endpoints missing [ 2110.179526][ T36] audit: type=1800 audit(1793137385.333:5430): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=680032 res=0 errno=-22 [ 2110.200758][ T36] audit: type=1800 audit(1793137385.363:5431): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=680010 res=0 errno=-22 [ 2110.202033][ T36] audit: type=1800 audit(1793137385.363:5432): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=680011 res=0 errno=-22 [ 2110.203541][ T36] audit: type=1800 audit(1793137385.363:5433): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=680012 res=0 errno=-22 [ 2110.233433][ T36] audit: type=1800 audit(1793137385.393:5434): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680052 res=0 errno=-22 [ 2110.377637][T17203] usb 8-1: USB disconnect, device number 22 [ 2110.493090][T30737] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6097'. [ 2110.531084][T30739] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6098'. [ 2111.597896][T30765] sd 0:0:1:0: [sg0] sg_open: flags=0x8401 [ 2111.597946][T30765] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff888063180000 [ 2111.597970][T30765] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768 [ 2111.597995][T30765] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 2111.598078][T30765] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 2111.598413][T30765] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2275 [ 2111.598439][T30765] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 2111.598480][T30765] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=262144 [ 2111.598502][T30765] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=262144, blk_size=262144 [ 2111.616535][T30764] sd 0:0:1:0: [sg0] sg_release [ 2111.616638][T17203] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=8 [ 2112.090260][T17203] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2112.241174][T17203] usb 4-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 2112.246415][T17203] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.246447][T17203] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2112.246490][T17203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.266196][T17203] metro_usb 4-1:1.0: required endpoints missing [ 2112.300991][ T36] audit: type=1800 audit(1793137387.463:5435): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680096 res=0 errno=-22 [ 2112.307837][ T36] audit: type=1800 audit(1793137387.463:5436): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=680125 res=0 errno=-22 [ 2112.307879][ T36] audit: type=1800 audit(1793137387.463:5437): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=680103 res=0 errno=-22 [ 2112.308405][ T36] audit: type=1800 audit(1793137387.463:5438): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=680104 res=0 errno=-22 [ 2112.493035][T22933] usb 4-1: USB disconnect, device number 72 [ 2113.149555][T30797] sd 0:0:1:0: [sg0] sg_open: flags=0x8401 [ 2113.149607][T30797] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff888051b80000 [ 2113.149631][T30797] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768 [ 2113.149656][T30797] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 2113.159458][T30797] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 2113.163329][T30797] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2275 [ 2113.163373][T30797] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 2113.163449][T30797] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=262144 [ 2113.163487][T30797] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=262144, blk_size=262144 [ 2113.180336][T30796] sd 0:0:1:0: [sg0] sg_release [ 2113.180444][T22933] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=8 [ 2114.955869][T30831] sd 0:0:1:0: [sg0] sg_open: flags=0x8401 [ 2114.955931][T30831] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff888057e60000 [ 2114.955956][T30831] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768 [ 2114.955980][T30831] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 2114.956044][T30831] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 2114.956407][T30831] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2275 [ 2114.956434][T30831] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 2114.956481][T30831] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=262144 [ 2114.956505][T30831] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=262144, blk_size=262144 [ 2115.027366][T30830] sd 0:0:1:0: [sg0] sg_release [ 2115.027431][ T35] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=8 [ 2115.080076][T17203] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2115.230743][T17203] usb 4-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 2115.232056][T17203] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.232093][T17203] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2115.232135][T17203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.236826][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 2115.236840][ T36] audit: type=1800 audit(1793137390.393:5441): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680437 res=0 errno=-22 [ 2115.275554][ T36] audit: type=1800 audit(1793137390.403:5442): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=680466 res=0 errno=-22 [ 2115.275596][ T36] audit: type=1800 audit(1793137390.413:5443): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=680444 res=0 errno=-22 [ 2115.275619][ T36] audit: type=1800 audit(1793137390.413:5444): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=680445 res=0 errno=-22 [ 2115.275642][ T36] audit: type=1800 audit(1793137390.413:5445): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=680446 res=0 errno=-22 [ 2115.280033][ C1] net_ratelimit: 65 callbacks suppressed [ 2115.330464][T17203] metro_usb 4-1:1.0: required endpoints missing [ 2115.400913][ T36] audit: type=1800 audit(1793137390.553:5446): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680486 res=0 errno=-22 [ 2115.456622][ T35] usb 4-1: USB disconnect, device number 73 [ 2116.135639][ T5612] Bluetooth: hci6: Invalid handle: 0x70bc > 0x0eff [ 2116.249693][T30855] sd 0:0:1:0: [sg0] sg_open: flags=0x8401 [ 2116.249740][T30855] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff8880274ec000 [ 2116.249764][T30855] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768 [ 2116.249797][T30855] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 2116.249852][T30855] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 2116.258168][T30855] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2275 [ 2116.258216][T30855] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 2116.258288][T30855] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=262144 [ 2116.258342][T30855] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=262144, blk_size=262144 [ 2116.284586][T30854] sd 0:0:1:0: [sg0] sg_release [ 2116.284710][ T35] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=8 [ 2117.026627][T30871] device-mapper: table: 248:21: crypt: Error decoding and setting key (-ENOKEY) [ 2117.026652][T30871] device-mapper: ioctl: error adding target to table [ 2117.365152][T30881] Bluetooth: MGMT ver 1.23 [ 2117.507341][T30887] sd 0:0:1:0: [sg0] sg_open: flags=0x8401 [ 2117.507422][T30887] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff88805dde0000 [ 2117.507478][T30887] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768 [ 2117.507523][T30887] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 2117.507611][T30887] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 2117.508076][T30887] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2275 [ 2117.508120][T30887] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 2117.508193][T30887] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=262144 [ 2117.508233][T30887] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=262144, blk_size=262144 [ 2117.578196][T30886] sd 0:0:1:0: [sg0] sg_release [ 2117.578259][ T35] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=8 [ 2118.580683][T30900] FAULT_INJECTION: forcing a failure. [ 2118.580683][T30900] name failslab, interval 1, probability 5, space 0, times 9924 [ 2118.580717][T30900] CPU: 0 UID: 0 PID: 30900 Comm: syz.7.6154 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2118.580750][T30900] Tainted: [L]=SOFTLOCKUP [ 2118.580759][T30900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2118.580773][T30900] Call Trace: [ 2118.580783][T30900] [ 2118.580795][T30900] dump_stack_lvl+0xe8/0x150 [ 2118.580837][T30900] should_fail_ex+0x46b/0x600 [ 2118.580878][T30900] should_failslab+0xa8/0x100 [ 2118.580905][T30900] __kmalloc_cache_noprof+0x9c/0x670 [ 2118.580939][T30900] ? sctp_transport_new+0x7e/0x620 [ 2118.580972][T30900] ? sctp_transport_new+0x7e/0x620 [ 2118.581012][T30900] sctp_transport_new+0x7e/0x620 [ 2118.581048][T30900] sctp_assoc_add_peer+0x299/0x1430 [ 2118.581090][T30900] ? sctp_in_scope+0x167/0x1d0 [ 2118.581119][T30900] sctp_process_init+0xe9a/0x2cf0 [ 2118.581171][T30900] ? __pfx_sctp_process_init+0x10/0x10 [ 2118.581219][T30900] sctp_do_sm+0x189b/0x5dd0 [ 2118.581255][T30900] ? reacquire_held_locks+0x117/0x1a0 [ 2118.581294][T30900] ? __pfx_sctp_do_sm+0x10/0x10 [ 2118.581328][T30900] ? __lock_acquire+0x747/0x2de0 [ 2118.581398][T30900] ? ktime_get+0x45/0x220 [ 2118.581422][T30900] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 2118.581456][T30900] ? lockdep_hardirqs_on+0x7b/0x110 [ 2118.581481][T30900] ? ktime_get+0x45/0x220 [ 2118.581500][T30900] ? seqcount_lockdep_reader_access+0xea/0x100 [ 2118.581540][T30900] sctp_assoc_bh_rcv+0x401/0x6f0 [ 2118.581586][T30900] sctp_backlog_rcv+0x15c/0x370 [ 2118.581620][T30900] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 2118.581649][T30900] __release_sock+0x2ad/0x3d0 [ 2118.581677][T30900] ? __release_sock+0xaa/0x3d0 [ 2118.581708][T30900] release_sock+0x1be/0x290 [ 2118.581736][T30900] ? release_sock+0x2f/0x290 [ 2118.581768][T30900] sctp_sendmsg+0x19ba/0x2a50 [ 2118.581811][T30900] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2118.581835][T30900] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 2118.581878][T30900] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 2118.581908][T30900] ? __lock_acquire+0x747/0x2de0 [ 2118.581945][T30900] ? __lock_acquire+0x747/0x2de0 [ 2118.581980][T30900] ? sock_rps_record_flow+0x19/0x350 [ 2118.582015][T30900] ? inet_sendmsg+0x298/0x320 [ 2118.582048][T30900] ? __pfx_inet_sendmsg+0x10/0x10 [ 2118.582079][T30900] sock_sendmsg_nosec+0x10f/0x190 [ 2118.582111][T30900] ____sys_sendmsg+0x565/0x870 [ 2118.582145][T30900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2118.582177][T30900] ? import_iovec+0x73/0xa0 [ 2118.582211][T30900] ___sys_sendmsg+0x2a5/0x360 [ 2118.582231][T30900] ? __lock_acquire+0x747/0x2de0 [ 2118.582265][T30900] ? __pfx____sys_sendmsg+0x10/0x10 [ 2118.582295][T30900] ? __pfx_futex_wake_mark+0x10/0x10 [ 2118.582353][T30900] ? __fget_files+0x3a8/0x420 [ 2118.582387][T30900] ? __fget_files+0x2a/0x420 [ 2118.582423][T30900] __sys_sendmmsg+0x279/0x4e0 [ 2118.582452][T30900] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2118.582473][T30900] ? do_futex+0x3e7/0x4e0 [ 2118.582509][T30900] ? sctp_inet_listen+0x1db/0x930 [ 2118.582552][T30900] ? rcu_is_watching+0x16/0xb0 [ 2118.582586][T30900] __x64_sys_sendmmsg+0xa0/0xc0 [ 2118.582611][T30900] do_syscall_64+0x166/0x520 [ 2118.582634][T30900] ? trace_irq_disable+0x3b/0x140 [ 2118.582655][T30900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2118.582676][T30900] ? clear_bhb_loop+0x70/0xc0 [ 2118.582703][T30900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2118.582725][T30900] RIP: 0033:0x7f642949f559 [ 2118.582746][T30900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2118.582766][T30900] RSP: 002b:00007f64276f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2118.582791][T30900] RAX: ffffffffffffffda RBX: 00007f6429725fa0 RCX: 00007f642949f559 [ 2118.582808][T30900] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000004 [ 2118.582822][T30900] RBP: 00007f6429536b20 R08: 0000000000000000 R09: 0000000000000000 [ 2118.582837][T30900] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000000 [ 2118.582851][T30900] R13: 00007f6429726038 R14: 00007f6429725fa0 R15: 00007fff06a18778 [ 2118.582881][T30900] [ 2119.219422][T30915] sd 0:0:1:0: [sg0] sg_open: flags=0x8401 [ 2119.219495][T30915] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff88803548c000 [ 2119.219541][T30915] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768 [ 2119.219588][T30915] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 2119.219678][T30915] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 2119.257460][T30915] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2275 [ 2119.257522][T30915] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 2119.257597][T30915] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=262144 [ 2119.257639][T30915] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=262144, blk_size=262144 [ 2119.337021][T30914] sd 0:0:1:0: [sg0] sg_release [ 2119.337122][T20052] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=8 [ 2119.350489][T30919] 0x000000000000-0x000000010000 : "" [ 2119.388028][ T36] audit: type=1800 audit(1793137394.543:5447): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680599 res=0 errno=-22 [ 2119.388073][ T36] audit: type=1800 audit(1793137394.543:5448): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=680611 res=0 errno=-22 [ 2119.399543][ T36] audit: type=1800 audit(1793137394.553:5449): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680628 res=0 errno=-22 [ 2119.440136][T19789] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2119.457264][T30919] ftl_cs: FTL header not found. [ 2119.459005][ T36] audit: type=1800 audit(1793137394.613:5450): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680640 res=0 errno=-22 [ 2119.857882][T30925] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6165'. [ 2119.857943][T30925] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6165'. [ 2120.174639][T30932] netlink: 208 bytes leftover after parsing attributes in process `syz.7.6167'. [ 2120.320036][ C0] net_ratelimit: 298 callbacks suppressed [ 2120.726851][T30947] sd 0:0:1:0: [sg0] sg_open: flags=0x8401 [ 2120.726895][T30947] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff8880894b0000 [ 2120.726919][T30947] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768 [ 2120.726947][T30947] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 2120.727000][T30947] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 2120.727358][T30947] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2275 [ 2120.727385][T30947] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 2120.727429][T30947] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=262144 [ 2120.727450][T30947] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=262144, blk_size=262144 [ 2120.745293][T30925] FAULT_INJECTION: forcing a failure. [ 2120.745293][T30925] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2120.745322][T30925] CPU: 0 UID: 0 PID: 30925 Comm: syz.9.6165 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2120.745349][T30925] Tainted: [L]=SOFTLOCKUP [ 2120.745356][T30925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2120.745368][T30925] Call Trace: [ 2120.745376][T30925] [ 2120.745385][T30925] dump_stack_lvl+0xe8/0x150 [ 2120.745418][T30925] should_fail_ex+0x46b/0x600 [ 2120.745453][T30925] get_futex_key+0x1ab/0x1410 [ 2120.745482][T30925] ? __lock_acquire+0x747/0x2de0 [ 2120.745512][T30925] ? __pfx_get_futex_key+0x10/0x10 [ 2120.745540][T30925] futex_wake+0x119/0x600 [ 2120.745571][T30925] ? __pfx_futex_wake+0x10/0x10 [ 2120.745594][T30925] ? do_raw_spin_lock+0x12b/0x2f0 [ 2120.745633][T30925] do_futex+0x458/0x4e0 [ 2120.745660][T30925] ? __pfx_do_futex+0x10/0x10 [ 2120.745688][T30925] ? __might_fault+0xaf/0x130 [ 2120.745716][T30925] mm_exit_exec_release+0x10d/0x290 [ 2120.745745][T30925] exit_mm+0x50/0x240 [ 2120.745768][T30925] do_exit+0x6a8/0x2360 [ 2120.745796][T30925] ? __pfx_do_exit+0x10/0x10 [ 2120.745815][T30925] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2120.745851][T30925] ? rt_spin_unlock+0x159/0x200 [ 2120.745880][T30925] do_group_exit+0x22d/0x2f0 [ 2120.745900][T30925] ? rt_spin_unlock+0x165/0x200 [ 2120.745931][T30925] get_signal+0x1216/0x12c0 [ 2120.745976][T30925] arch_do_signal_or_restart+0xbb/0x860 [ 2120.746000][T30925] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2120.746038][T30925] exit_to_user_mode_loop+0x10e/0x770 [ 2120.746057][T30925] ? rcu_is_watching+0x16/0xb0 [ 2120.746083][T30925] do_syscall_64+0x328/0x520 [ 2120.746104][T30925] ? trace_irq_disable+0x3b/0x140 [ 2120.746123][T30925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.746142][T30925] ? clear_bhb_loop+0x70/0xc0 [ 2120.746165][T30925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.746185][T30925] RIP: 0033:0x7f1db136f559 [ 2120.746211][T30925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2120.746228][T30925] RSP: 002b:00007f1daf5c60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2120.746249][T30925] RAX: fffffffffffffe00 RBX: 00007f1db15f5fa8 RCX: 00007f1db136f559 [ 2120.746264][T30925] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1db15f5fa8 [ 2120.746277][T30925] RBP: 00007f1db15f5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2120.746290][T30925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2120.746302][T30925] R13: 00007f1db15f6038 R14: 00007ffe5d692b70 R15: 00007ffe5d692c58 [ 2120.746333][T30925] [ 2120.806438][T30946] sd 0:0:1:0: [sg0] sg_release [ 2120.806843][ T10] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=8 [ 2121.780915][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2121.930197][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 2121.930230][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 2121.930243][ T36] audit: type=1800 audit(1793137397.083:5453): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680792 res=0 errno=-22 [ 2121.932218][ T10] usb 10-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2121.989259][ T36] audit: type=1800 audit(1793137397.153:5454): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680803 res=0 errno=-22 [ 2122.004257][ T10] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 2122.004283][ T10] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2122.004305][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2122.004361][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2122.004384][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2122.004409][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2122.004470][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.031095][ T5612] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2122.135601][ T10] usb 10-1: config 0 descriptor?? [ 2122.147321][ T36] audit: type=1800 audit(1793137397.293:5455): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680822 res=0 errno=-22 [ 2122.153330][ T5612] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2122.172120][ T5612] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2122.174094][ T5612] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2122.190914][ T5612] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2122.311481][ T36] audit: type=1800 audit(1793137397.463:5456): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=680851 res=0 errno=-22 [ 2122.361958][ T36] audit: type=1800 audit(1793137397.513:5457): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=680829 res=0 errno=-22 [ 2122.367341][ T36] audit: type=1800 audit(1793137397.523:5458): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=680830 res=0 errno=-22 [ 2122.512533][ T36] audit: type=1800 audit(1793137397.643:5459): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=680831 res=0 errno=-22 [ 2122.512578][ T36] audit: type=1800 audit(1793137397.643:5460): pid=30687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680887 res=0 errno=-22 [ 2122.709864][ T36] audit: type=1800 audit(1793137397.863:5461): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680871 res=0 errno=-22 [ 2122.821890][ T10] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2122.827929][ T10] usb 10-1: USB disconnect, device number 18 [ 2122.849891][ T10] usblp0: removed [ 2122.885067][ T36] audit: type=1800 audit(1793137398.043:5462): pid=30687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=680898 res=0 errno=-22 [ 2123.369225][T30991] 0x000000000000-0x000000010000 : "" [ 2123.427661][T30991] ftl_cs: FTL header not found. [ 2123.732691][T30974] rxe_eth0 speed is unknown, defaulting to 1000 [ 2124.178002][T31013] FAULT_INJECTION: forcing a failure. [ 2124.178002][T31013] name failslab, interval 1, probability 5, space 0, times 9923 [ 2124.178038][T31013] CPU: 1 UID: 0 PID: 31013 Comm: syz.3.6195 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2124.178069][T31013] Tainted: [L]=SOFTLOCKUP [ 2124.178077][T31013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2124.178091][T31013] Call Trace: [ 2124.178100][T31013] [ 2124.178110][T31013] dump_stack_lvl+0xe8/0x150 [ 2124.178148][T31013] should_fail_ex+0x46b/0x600 [ 2124.178186][T31013] should_failslab+0xa8/0x100 [ 2124.178209][T31013] ? mempool_init_node+0x21f/0x510 [ 2124.178236][T31013] kmem_cache_alloc_noprof+0x99/0x680 [ 2124.178268][T31013] ? mempool_init_node+0x21f/0x510 [ 2124.178298][T31013] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 2124.178325][T31013] mempool_init_node+0x21f/0x510 [ 2124.178360][T31013] ? __pfx_mempool_free_slab+0x10/0x10 [ 2124.178384][T31013] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 2124.178413][T31013] mempool_init_noprof+0x3a/0x50 [ 2124.178442][T31013] bioset_init+0x2f6/0x7e0 [ 2124.178473][T31013] ? __pfx_bioset_init+0x10/0x10 [ 2124.178500][T31013] ? __kasan_kmalloc+0x93/0xb0 [ 2124.178533][T31013] ? __kmalloc_cache_node_noprof+0x45c/0x670 [ 2124.178566][T31013] ? __alloc_disk_node+0x5e/0x670 [ 2124.178590][T31013] ? __alloc_disk_node+0x5e/0x670 [ 2124.178624][T31013] __alloc_disk_node+0x7b/0x670 [ 2124.178655][T31013] __blk_alloc_disk+0x105/0x1d0 [ 2124.178685][T31013] ? __pfx___blk_alloc_disk+0x10/0x10 [ 2124.178744][T31013] dm_create+0x486/0xf80 [ 2124.178777][T31013] dev_create+0x1f7/0x400 [ 2124.178802][T31013] ? __pfx_dev_create+0x10/0x10 [ 2124.178835][T31013] dm_ctl_ioctl+0x9ec/0xe10 [ 2124.178866][T31013] ? __pfx_dev_create+0x10/0x10 [ 2124.178894][T31013] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 2124.178949][T31013] ? __fget_files+0x2a/0x420 [ 2124.178982][T31013] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2124.179005][T31013] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 2124.179028][T31013] __se_sys_ioctl+0xff/0x170 [ 2124.179063][T31013] do_syscall_64+0x166/0x520 [ 2124.179087][T31013] ? trace_irq_disable+0x3b/0x140 [ 2124.179108][T31013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.179131][T31013] ? clear_bhb_loop+0x70/0xc0 [ 2124.179157][T31013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.179179][T31013] RIP: 0033:0x7f9c897ff559 [ 2124.179199][T31013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2124.179219][T31013] RSP: 002b:00007f9c87a4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2124.179243][T31013] RAX: ffffffffffffffda RBX: 00007f9c89a85fa0 RCX: 00007f9c897ff559 [ 2124.179260][T31013] RDX: 0000200000000740 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 2124.179275][T31013] RBP: 00007f9c89896b20 R08: 0000000000000000 R09: 0000000000000000 [ 2124.179290][T31013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2124.179305][T31013] R13: 00007f9c89a86038 R14: 00007f9c89a85fa0 R15: 00007ffe9d9c1ba8 [ 2124.179340][T31013] [ 2124.800267][T19789] Bluetooth: hci9: command tx timeout [ 2125.352076][T30974] bridge0: port 1(bridge_slave_0) entered blocking state [ 2125.352151][T30974] bridge0: port 1(bridge_slave_0) entered disabled state [ 2125.352300][T30974] bridge_slave_0: entered allmulticast mode [ 2125.355517][T30974] bridge_slave_0: entered promiscuous mode [ 2125.359248][T30974] bridge0: port 2(bridge_slave_1) entered blocking state [ 2125.360413][T30974] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.361017][T30974] bridge_slave_1: entered allmulticast mode [ 2125.365308][T30974] bridge_slave_1: entered promiscuous mode [ 2125.476961][T17203] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 2125.506631][T30974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2125.517653][T30974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2125.520071][ C1] net_ratelimit: 83 callbacks suppressed [ 2125.595331][T30974] team0: Port device team_slave_0 added [ 2125.602743][T30974] team0: Port device team_slave_1 added [ 2125.630117][T17203] usb 8-1: Using ep0 maxpacket: 32 [ 2125.632083][T17203] usb 8-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 2125.634900][T17203] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 2125.634915][T17203] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2125.634926][T17203] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2125.634956][T17203] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2125.634968][T17203] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2125.634982][T17203] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2125.635017][T17203] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.646179][T17203] usb 8-1: config 0 descriptor?? [ 2125.966098][T17203] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2126.024704][T17203] usb 8-1: USB disconnect, device number 23 [ 2126.058952][T30974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2126.058963][T30974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2126.058986][T30974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2126.074023][T30974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2126.074033][T30974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2126.074058][T30974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2126.095550][T17203] usblp0: removed [ 2126.427925][T30974] hsr_slave_0: entered promiscuous mode [ 2126.432429][T30974] hsr_slave_1: entered promiscuous mode [ 2126.437380][T30974] debugfs: 'hsr0' already exists in 'hsr' [ 2126.437400][T30974] Cannot create hsr debugfs directory [ 2126.758724][T31053] input: syz1 as /devices/virtual/input/input33 [ 2126.884424][T19789] Bluetooth: hci9: command tx timeout [ 2127.136779][T31055] syzkaller1: entered promiscuous mode [ 2127.136799][T31055] syzkaller1: entered allmulticast mode [ 2127.586363][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 2127.586378][ T36] audit: type=1800 audit(1793137402.743:5486): pid=30974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24360 res=0 errno=-13 [ 2128.960133][T19789] Bluetooth: hci9: command tx timeout [ 2129.720256][T28689] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2129.870948][T28689] usb 4-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 2129.873460][T28689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.873488][T28689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2129.873543][T28689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.883308][ T36] audit: type=1800 audit(1793137405.033:5487): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=690090 res=0 errno=-22 [ 2129.926081][ T36] audit: type=1800 audit(1793137405.083:5488): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=690119 res=0 errno=-22 [ 2129.950050][ T36] audit: type=1800 audit(1793137405.103:5489): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=690097 res=0 errno=-22 [ 2129.954560][ T36] audit: type=1800 audit(1793137405.113:5490): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=690098 res=0 errno=-22 [ 2129.958997][ T36] audit: type=1800 audit(1793137405.113:5491): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=690099 res=0 errno=-22 [ 2129.974334][ T36] audit: type=1800 audit(1793137405.133:5492): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=690139 res=0 errno=-22 [ 2130.040370][T28689] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 2130.045463][T28689] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 2130.047363][ T36] audit: type=1800 audit(1793137405.203:5493): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=690155 res=0 errno=-22 [ 2130.064023][ T36] audit: type=1800 audit(1793137405.223:5494): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=690169 res=0 errno=-22 [ 2130.074140][ T36] audit: type=1800 audit(1793137405.233:5495): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=690140 res=0 errno=-22 [ 2130.134203][T31116] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 2130.186095][T28689] usb 4-1: USB disconnect, device number 74 [ 2130.210566][T28689] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 2130.211624][T28689] metro_usb 4-1:1.0: device disconnected [ 2130.555481][T31128] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6231'. [ 2130.639710][T31128] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.659569][T31128] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.720034][ C1] net_ratelimit: 60 callbacks suppressed [ 2130.784404][T31132] device-mapper: table: 248:21: crypt: Error decoding and setting key (-ENOKEY) [ 2130.784425][T31132] device-mapper: ioctl: error adding target to table [ 2131.040141][T19789] Bluetooth: hci9: command tx timeout [ 2132.510117][T28689] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2132.663104][T28689] usb 4-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 2132.664395][T28689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2132.664412][T28689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2132.664444][T28689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.671499][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 2132.671513][ T36] audit: type=1800 audit(1793137407.833:5498): pid=30687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=690224 res=0 errno=-22 [ 2132.689206][ T36] audit: type=1800 audit(1793137407.843:5499): pid=30687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=690253 res=0 errno=-22 [ 2132.697180][T28689] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 2132.697911][ T36] audit: type=1800 audit(1793137407.853:5500): pid=30687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=690231 res=0 errno=-22 [ 2132.715692][T28689] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 2132.716616][ T36] audit: type=1800 audit(1793137407.853:5501): pid=30687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=690232 res=0 errno=-22 [ 2132.727102][ T36] audit: type=1800 audit(1793137407.883:5502): pid=30687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=690233 res=0 errno=-22 [ 2132.748660][ T36] audit: type=1800 audit(1793137407.903:5503): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=690273 res=0 errno=-22 [ 2132.758237][ T36] audit: type=1800 audit(1793137407.913:5504): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=690289 res=0 errno=-22 [ 2132.772673][ T36] audit: type=1800 audit(1793137407.933:5505): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=690303 res=0 errno=-22 [ 2132.782630][ T36] audit: type=1800 audit(1793137407.943:5506): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=690274 res=0 errno=-22 [ 2132.784938][ T36] audit: type=1800 audit(1793137407.943:5507): pid=30716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=690277 res=0 errno=-22 [ 2132.892969][T31158] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 2132.918047][T28689] usb 4-1: USB disconnect, device number 75 [ 2132.952011][T28689] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 2132.958376][T28689] metro_usb 4-1:1.0: device disconnected [ 2133.205043][T31163] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6241'. [ 2133.205080][T31163] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6241'. [ 2133.467648][T31165] FAULT_INJECTION: forcing a failure. [ 2133.467648][T31165] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2133.467679][T31165] CPU: 0 UID: 0 PID: 31165 Comm: syz.7.6241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2133.467705][T31165] Tainted: [L]=SOFTLOCKUP [ 2133.467713][T31165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2133.467724][T31165] Call Trace: [ 2133.467732][T31165] [ 2133.467742][T31165] dump_stack_lvl+0xe8/0x150 [ 2133.467780][T31165] should_fail_ex+0x46b/0x600 [ 2133.467815][T31165] get_futex_key+0x1ab/0x1410 [ 2133.467843][T31165] ? __lock_acquire+0x747/0x2de0 [ 2133.467873][T31165] ? __pfx_get_futex_key+0x10/0x10 [ 2133.467897][T31165] futex_wake+0x119/0x600 [ 2133.467923][T31165] ? __pfx_futex_wake+0x10/0x10 [ 2133.467936][T31165] ? do_raw_spin_lock+0x12b/0x2f0 [ 2133.467958][T31165] do_futex+0x458/0x4e0 [ 2133.467974][T31165] ? __pfx_do_futex+0x10/0x10 [ 2133.467990][T31165] ? __might_fault+0xaf/0x130 [ 2133.468006][T31165] mm_exit_exec_release+0x10d/0x290 [ 2133.468023][T31165] exit_mm+0x50/0x240 [ 2133.468036][T31165] do_exit+0x6a8/0x2360 [ 2133.468051][T31165] ? __pfx_do_exit+0x10/0x10 [ 2133.468062][T31165] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2133.468083][T31165] ? rt_spin_unlock+0x159/0x200 [ 2133.468100][T31165] do_group_exit+0x22d/0x2f0 [ 2133.468111][T31165] ? rt_spin_unlock+0x165/0x200 [ 2133.468127][T31165] get_signal+0x1216/0x12c0 [ 2133.468153][T31165] arch_do_signal_or_restart+0xbb/0x860 [ 2133.468167][T31165] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2133.468187][T31165] exit_to_user_mode_loop+0x10e/0x770 [ 2133.468198][T31165] ? rcu_is_watching+0x16/0xb0 [ 2133.468212][T31165] do_syscall_64+0x328/0x520 [ 2133.468224][T31165] ? trace_irq_disable+0x3b/0x140 [ 2133.468236][T31165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.468247][T31165] ? clear_bhb_loop+0x70/0xc0 [ 2133.468260][T31165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.468270][T31165] RIP: 0033:0x7f642949f559 [ 2133.468282][T31165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2133.468291][T31165] RSP: 002b:00007f64276b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2133.468305][T31165] RAX: fffffffffffffe00 RBX: 00007f6429726188 RCX: 00007f642949f559 [ 2133.468313][T31165] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6429726188 [ 2133.468320][T31165] RBP: 00007f6429726180 R08: 0000000000000000 R09: 0000000000000000 [ 2133.468327][T31165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2133.468333][T31165] R13: 00007f6429726218 R14: 00007fff06a18690 R15: 00007fff06a18778 [ 2133.468350][T31165] [ 2134.470209][T20052] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 2134.651064][T20052] usb 8-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 2134.653279][T20052] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 2134.653292][T20052] usb 8-1: config 1 has no interface number 0 [ 2134.655845][T20052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.655857][T20052] usb 8-1: Product: syz [ 2134.655866][T20052] usb 8-1: Manufacturer: syz [ 2134.655874][T20052] usb 8-1: SerialNumber: syz [ 2134.713209][T20052] usb 8-1: 3:1 : does not exist [ 2134.713226][T20052] usb 8-1: 3:2 : does not exist [ 2134.949648][T31199] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6254'. [ 2134.949752][T31199] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6254'. [ 2135.254012][T31201] FAULT_INJECTION: forcing a failure. [ 2135.254012][T31201] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2135.254043][T31201] CPU: 1 UID: 0 PID: 31201 Comm: syz.3.6254 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2135.254069][T31201] Tainted: [L]=SOFTLOCKUP [ 2135.254076][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2135.254087][T31201] Call Trace: [ 2135.254095][T31201] [ 2135.254103][T31201] dump_stack_lvl+0xe8/0x150 [ 2135.254137][T31201] should_fail_ex+0x46b/0x600 [ 2135.254172][T31201] get_futex_key+0x893/0x1410 [ 2135.254201][T31201] ? __lock_acquire+0x747/0x2de0 [ 2135.254232][T31201] ? __pfx_get_futex_key+0x10/0x10 [ 2135.254271][T31201] futex_wake+0x119/0x600 [ 2135.254304][T31201] ? __pfx_futex_wake+0x10/0x10 [ 2135.254328][T31201] ? do_raw_spin_lock+0x12b/0x2f0 [ 2135.254369][T31201] do_futex+0x458/0x4e0 [ 2135.254400][T31201] ? __pfx_do_futex+0x10/0x10 [ 2135.254427][T31201] ? __might_fault+0xaf/0x130 [ 2135.254456][T31201] mm_exit_exec_release+0x10d/0x290 [ 2135.254488][T31201] exit_mm+0x50/0x240 [ 2135.254512][T31201] do_exit+0x6a8/0x2360 [ 2135.254542][T31201] ? __pfx_do_exit+0x10/0x10 [ 2135.254562][T31201] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2135.254598][T31201] ? rt_spin_unlock+0x159/0x200 [ 2135.254626][T31201] do_group_exit+0x22d/0x2f0 [ 2135.254646][T31201] ? rt_spin_unlock+0x165/0x200 [ 2135.254674][T31201] get_signal+0x1216/0x12c0 [ 2135.254722][T31201] arch_do_signal_or_restart+0xbb/0x860 [ 2135.254744][T31201] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2135.254774][T31201] exit_to_user_mode_loop+0x10e/0x770 [ 2135.254793][T31201] ? rcu_is_watching+0x16/0xb0 [ 2135.254819][T31201] do_syscall_64+0x328/0x520 [ 2135.254841][T31201] ? trace_irq_disable+0x3b/0x140 [ 2135.254860][T31201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2135.254880][T31201] ? clear_bhb_loop+0x70/0xc0 [ 2135.254897][T31201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2135.254908][T31201] RIP: 0033:0x7f9c897ff559 [ 2135.254922][T31201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2135.254939][T31201] RSP: 002b:00007f9c87a0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2135.254962][T31201] RAX: fffffffffffffe00 RBX: 00007f9c89a86188 RCX: 00007f9c897ff559 [ 2135.254977][T31201] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c89a86188 [ 2135.254989][T31201] RBP: 00007f9c89a86180 R08: 0000000000000000 R09: 0000000000000000 [ 2135.255002][T31201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2135.255014][T31201] R13: 00007f9c89a86218 R14: 00007ffe9d9c1ac0 R15: 00007ffe9d9c1ba8 [ 2135.255047][T31201] [ 2135.756669][T31203] netlink: 88 bytes leftover after parsing attributes in process `syz.9.6256'. [ 2135.757760][T31203] syzkaller1: entered promiscuous mode [ 2135.757780][T31203] syzkaller1: entered allmulticast mode [ 2135.920011][ C1] net_ratelimit: 56 callbacks suppressed [ 2136.000233][ T38] INFO: task syz.1.5564:28392 blocked for more than 143 seconds. [ 2136.000262][ T38] Tainted: G L syzkaller #0 [ 2136.000274][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2136.000284][ T38] task:syz.1.5564 state:D stack:24584 pid:28392 tgid:28390 ppid:24114 task_flags:0x400140 flags:0x00080002 [ 2136.000336][ T38] Call Trace: [ 2136.000344][ T38] [ 2136.000360][ T38] __schedule+0x171d/0x56e0 [ 2136.000410][ T38] ? trace_irq_disable+0x3b/0x140 [ 2136.000434][ T38] ? __pfx___schedule+0x10/0x10 [ 2136.000471][ T38] rt_mutex_schedule+0x76/0xf0 [ 2136.000498][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 2136.000533][ T38] ? rt_mutex_slowlock_block+0x33f/0x6a0 [ 2136.000563][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 2136.000655][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 2136.000684][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2136.000729][ T38] ? lock_acquire+0x232/0x350 [ 2136.000763][ T38] ? devlink_health_report+0x305/0xb20 [ 2136.000861][ T38] mutex_lock_nested+0x163/0x1d0 [ 2136.000894][ T38] devlink_health_report+0x305/0xb20 [ 2136.000927][ T38] nsim_dev_health_break_write+0x197/0x240 [ 2136.001018][ T38] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 2136.001060][ T38] full_proxy_write+0x127/0x1f0 [ 2136.001091][ T38] ? __pfx_full_proxy_write+0x10/0x10 [ 2136.001118][ T38] vfs_write+0x29f/0xbb0 [ 2136.001155][ T38] ? __pfx_vfs_write+0x10/0x10 [ 2136.001190][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2136.001216][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2136.001239][ T38] ? mutex_lock_nested+0x14d/0x1d0 [ 2136.001264][ T38] ? fdget_pos+0x11e/0x160 [ 2136.001298][ T38] ksys_write+0x156/0x270 [ 2136.001329][ T38] ? __pfx_ksys_write+0x10/0x10 [ 2136.001351][ T38] ? __task_pid_nr_ns+0x28/0x470 [ 2136.001386][ T38] do_syscall_64+0x166/0x520 [ 2136.001409][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2136.001430][ T38] ? clear_bhb_loop+0x70/0xc0 [ 2136.001469][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2136.001489][ T38] RIP: 0033:0x7f25c45df559 [ 2136.001538][ T38] RSP: 002b:00007f25c282e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2136.001561][ T38] RAX: ffffffffffffffda RBX: 00007f25c4865fa0 RCX: 00007f25c45df559 [ 2136.001576][ T38] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 2136.001590][ T38] RBP: 00007f25c4676b20 R08: 0000000000000000 R09: 0000000000000000 [ 2136.001604][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2136.001617][ T38] R13: 00007f25c4866038 R14: 00007f25c4865fa0 R15: 00007ffd66bfc358 [ 2136.001652][ T38] [ 2136.001705][ T38] [ 2136.001705][ T38] Showing all locks held in the system: [ 2136.001717][ T38] locks held by ktimers/0/16: 1, on CPU#0: [ 2136.001731][ T38] #0: ffff8880b843cae0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 2136.001792][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 2136.001807][ T38] #0: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2136.001948][ T38] locks held by getty/5355: 2, on CPU#1: [ 2136.001964][ T38] #0: ffff8880385f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2136.002020][ T38] #1: ffffc900044ce2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 2136.002073][ T38] locks held by kworker/u8:19/10035: 5, last CPU#0: [ 2136.002088][ T38] #0: ffff88802c29e940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2136.002145][ T38] #1: ffffc9000658fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2136.002266][ T38] #2: ffffffff8f255b80 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2136.002320][ T38] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2136.002373][ T38] #4: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 2136.002428][ T38] locks held by kworker/u8:22/14909: 3, on CPU#0: [ 2136.002443][ T38] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2136.002499][ T38] #1: ffffc90005087c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2136.002554][ T38] #2: ffffffff90806858 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2136.002610][ T38] locks held by kworker/u8:0/23910: 2, on CPU#0: [ 2136.002626][ T38] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2136.002681][ T38] #1: ffffc900040d7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2136.002745][ T38] locks held by syz-executor/28171: 7, on CPU#0: [ 2136.002760][ T38] #0: ffff88803688e510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2136.002816][ T38] #1: ffff8880263f1078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2136.002866][ T38] #2: ffff88802b4fb698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2136.002920][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2136.002977][ T38] #4: ffff888060480160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0 [ 2136.003112][ T38] #5: ffff888035508310 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 2136.003166][ T38] #6: ffff88806d2758f8 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520 [ 2136.003236][ T38] locks held by syz.1.5564/28392: 3, on CPU#0: [ 2136.003251][ T38] #0: ffff88803b991928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x11e/0x160 [ 2136.003303][ T38] #1: ffff88801fe80510 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2136.003360][ T38] #2: ffff888035508310 (&devlink->lock_key#18){+.+.}-{4:4}, at: devlink_health_report+0x305/0xb20 [ 2136.003419][ T38] locks held by syz-executor/28654: 4, on CPU#0: [ 2136.003434][ T38] #0: ffff88803688e510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2136.003489][ T38] #1: ffff888037791878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2136.003541][ T38] #2: ffff88802b4fb698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2136.003597][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2136.003653][ T38] locks held by syz-executor/29287: 4, on CPU#1: [ 2136.003668][ T38] #0: ffff88803688e510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2136.003724][ T38] #1: ffff888079b5f078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2136.003776][ T38] #2: ffff88802b4fb698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2136.003831][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2136.003888][ T38] locks held by syz-executor/29995: 4, on CPU#1: [ 2136.003903][ T38] #0: ffff88803688e510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2136.003959][ T38] #1: ffff88802a62f478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2136.004010][ T38] #2: ffff88802b4fb698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2136.004065][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2136.004120][ T38] locks held by syz-executor/30480: 4, on CPU#0: [ 2136.004135][ T38] #0: ffff88803688e510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2136.004197][ T38] #1: ffff88803f4d1c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2136.004249][ T38] #2: ffff88802b4fb698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2136.004304][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2136.004359][ T38] locks held by syz-executor/30974: 4, on CPU#0: [ 2136.004374][ T38] #0: ffff88803688e510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2136.004430][ T38] #1: ffff888060e2c878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2136.004481][ T38] #2: ffff88802b4fb698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2136.004538][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2136.004619][ T38] locks held by syz.7.6250/31188: 2, on CPU#0: [ 2136.004634][ T38] #0: ffff88805dde01b0 (&card->controls_rwsem){++++}-{4:4}, at: snd_ctl_elem_write+0x38/0x550 [ 2136.004726][ T38] #1: ffff88806b5bec80 (&mixer->lock){+.+.}-{4:4}, at: snd_us16x08_master_put+0x11d/0x4e0 [ 2136.004828][ T38] locks held by syz.9.6256/31202: 1, on CPU#1: [ 2136.004843][ T38] #0: ffffffff90806858 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 2136.004895][ T38] locks held by syz.3.6257/31207: 2, on CPU#1: [ 2136.004909][ T38] #0: ffff888041558930 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 2136.004963][ T38] #1: ffffffff90806858 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa18/0x1420 [ 2136.005013][ T38] [ 2136.005019][ T38] ============================================= [ 2136.005019][ T38] [ 2136.005034][ T38] NMI backtrace for cpu 1 [ 2136.005052][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2136.005079][ T38] Tainted: [L]=SOFTLOCKUP [ 2136.005086][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2136.005097][ T38] Call Trace: [ 2136.005105][ T38] [ 2136.005114][ T38] dump_stack_lvl+0xe8/0x150 [ 2136.005145][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2136.005174][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2136.005207][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2136.005239][ T38] sys_info+0x135/0x170 [ 2136.005300][ T38] watchdog+0xfd2/0x1030 [ 2136.005329][ T38] ? watchdog+0x1c7/0x1030 [ 2136.005356][ T38] kthread+0x38b/0x470 [ 2136.005378][ T38] ? __pfx_watchdog+0x10/0x10 [ 2136.005396][ T38] ? __pfx_kthread+0x10/0x10 [ 2136.005419][ T38] ret_from_fork+0x514/0xb70 [ 2136.005444][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2136.005467][ T38] ? __switch_to+0xc78/0x1410 [ 2136.005490][ T38] ? __pfx_kthread+0x10/0x10 [ 2136.005515][ T38] ret_from_fork_asm+0x1a/0x30 [ 2136.005553][ T38] [ 2136.005560][ T38] Sending NMI from CPU 1 to CPUs 0: [ 2136.005590][ C0] NMI backtrace for cpu 0 [ 2136.005607][ C0] CPU: 0 UID: 0 PID: 10035 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2136.005632][ C0] Tainted: [L]=SOFTLOCKUP [ 2136.005639][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2136.005650][ C0] Workqueue: bat_events batadv_dat_purge [ 2136.005744][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2f/0xb0 [ 2136.005774][ C0] Code: 8b 04 24 65 48 8b 0d 58 04 07 12 65 48 8b 15 58 04 07 12 41 89 d1 41 81 e1 00 00 00 ff 41 b8 00 01 00 00 44 23 81 fc 0b 00 00 <45> 09 c1 74 1e 45 85 c0 74 6b 81 fa ff ff ff 0f 77 63 81 e2 00 00 [ 2136.005791][ C0] RSP: 0018:ffffc90000007e18 EFLAGS: 00000046 [ 2136.005806][ C0] RAX: ffffffff81b3f426 RBX: 0000000000000001 RCX: ffff88803aaf1f40 [ 2136.005820][ C0] RDX: 8000000001000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 2136.005832][ C0] RBP: ffff8880b8428b28 R08: 0000000000000000 R09: 0000000001000000 [ 2136.005845][ C0] R10: dffffc0000000000 R11: fffffbfff21a99b8 R12: 000000000000000f [ 2136.005858][ C0] R13: dffffc0000000000 R14: ffff8880b8428880 R15: 18e27f085180a1d3 [ 2136.005872][ C0] FS: 0000000000000000(0000) GS:ffff888124732000(0000) knlGS:0000000000000000 [ 2136.005887][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2136.005900][ C0] CR2: 00007f9c8984cc40 CR3: 000000008c82a000 CR4: 00000000003526f0 [ 2136.005917][ C0] Call Trace: [ 2136.005924][ C0] [ 2136.005931][ C0] __hrtimer_get_next_event+0x66/0x600 [ 2136.005960][ C0] hrtimer_interrupt+0x635/0xa80 [ 2136.006000][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 2136.006027][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2136.006046][ C0] [ 2136.006053][ C0] [ 2136.006060][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2136.006079][ C0] RIP: 0010:__local_bh_enable_ip+0x1c1/0x2b0 [ 2136.006104][ C0] Code: f7 89 df e8 61 01 00 00 41 f7 c4 00 02 00 00 74 05 e8 93 e9 46 00 9c 58 a9 00 02 00 00 75 23 41 f7 c4 00 02 00 00 74 01 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 91 eb ea 09 cc 90 0f 0b 90 e9 66 fe [ 2136.006119][ C0] RSP: 0018:ffffc9000658fa38 EFLAGS: 00000206 [ 2136.006134][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000000000046 [ 2136.006145][ C0] RDX: 0000000000000006 RSI: ffffffff8daef22a RDI: ffffffff8becee80 [ 2136.006158][ C0] RBP: 1ffff1100755e567 R08: ffffffff90d4cdbf R09: 1ffffffff21a99b7 [ 2136.006172][ C0] R10: dffffc0000000000 R11: fffffbfff21a99b8 R12: 0000000000000282 [ 2136.006185][ C0] R13: dffffc0000000000 R14: ffff88803aaf2b3c R15: 0000000000000001 [ 2136.006209][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 2136.006237][ C0] __batadv_dat_purge+0x343/0x400 [ 2136.006263][ C0] ? __batadv_dat_purge+0xae/0x400 [ 2136.006288][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 2136.006315][ C0] ? process_scheduled_works+0x97a/0x1630 [ 2136.006342][ C0] batadv_dat_purge+0x20/0x70 [ 2136.006366][ C0] process_scheduled_works+0xc3d/0x1630 [ 2136.006409][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2136.006438][ C0] ? assign_work+0x3cf/0x5d0 [ 2136.006467][ C0] worker_thread+0xa47/0xfb0 [ 2136.006501][ C0] ? __kthread_parkme+0x71/0x1f0 [ 2136.006524][ C0] kthread+0x38b/0x470 [ 2136.006543][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2136.006569][ C0] ? __pfx_kthread+0x10/0x10 [ 2136.006590][ C0] ret_from_fork+0x514/0xb70 [ 2136.006611][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2136.006630][ C0] ? __switch_to+0xc78/0x1410 [ 2136.006649][ C0] ? __pfx_kthread+0x10/0x10 [ 2136.006669][ C0] ret_from_fork_asm+0x1a/0x30 [ 2136.006703][ C0] [ 2136.007607][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2137.326100][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2137.337386][ T38] Tainted: [L]=SOFTLOCKUP [ 2137.341703][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2137.351758][ T38] Call Trace: [ 2137.355045][ T38] [ 2137.357977][ T38] vpanic+0x56d/0xa60 [ 2137.361973][ T38] ? __pfx___schedule+0x10/0x10 [ 2137.366851][ T38] ? __pfx_vpanic+0x10/0x10 [ 2137.371362][ T38] panic+0xc5/0xd0 [ 2137.375109][ T38] ? __pfx_panic+0x10/0x10 [ 2137.379518][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 2137.384970][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 2137.390343][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 2137.396510][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 2137.402672][ T38] watchdog+0x102b/0x1030 [ 2137.407001][ T38] ? watchdog+0x1c7/0x1030 [ 2137.411423][ T38] kthread+0x38b/0x470 [ 2137.415488][ T38] ? __pfx_watchdog+0x10/0x10 [ 2137.420158][ T38] ? __pfx_kthread+0x10/0x10 [ 2137.424758][ T38] ret_from_fork+0x514/0xb70 [ 2137.429358][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2137.434466][ T38] ? __switch_to+0xc78/0x1410 [ 2137.439144][ T38] ? __pfx_kthread+0x10/0x10 [ 2137.443741][ T38] ret_from_fork_asm+0x1a/0x30 [ 2137.448526][ T38] [ 2137.451791][ T38] Kernel Offset: disabled [ 2137.456131][ T38] Rebooting in 86400 seconds..