last executing test programs: 2m54.036711054s ago: executing program 4 (id=99): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f0000000780)='}', 0x1, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendto$inet(r0, &(0x7f0000000380)="ab", 0x34000, 0x0, &(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10) write$make_it_fail(r1, &(0x7f0000000140)='1\x00', 0x2) 2m51.733728369s ago: executing program 4 (id=101): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) tkill(r2, 0x5) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000019580)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4e}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./sys\x00', 0x1ff) sendto(r0, &(0x7f0000000000)="96002cce5cc8fee55a7634151e9d2aada51d4790d767353753a423cc05a31ad0bfaf485611ed77853350a4831a56595dac6c0823e7c787b3b3bb32a4040541bdbf15f4ea9cbcdd1a2f54990e8dd4e8d43a9b934daf41d3a3939c568bbc285741b880ceee0c1b7691e42619c97b73d11309fc5cbe348091d7ce4eb0f1a23ecbc64a756f91ff7b72080718cd34f9c6b4bdc7321c55374c8d75c618e6c32763014781685c8f2ced03edaaa579ef99786bd14cc7367ab0064d328ab87e3144c871d18d5e37100c74b3bd79e732cf6c3e", 0xce, 0x4c840, &(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) mount(0x0, &(0x7f0000019600)='./sys\x00', &(0x7f0000019640)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) userfaultfd(0x800) read(r5, &(0x7f0000019880)=""/266, 0x10a) write$eventfd(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000019800)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x3, "f7428179d0136fe029bbc63478c1c8831faf0e84c35684adfd5119c89862c9bf", "ae41a0f29747090a2a4c7bfabf5b2215b3fefa8556140868a243884cf06c124d", "ddc77d4bbd793852e9406d06b39fa0dd062284397b1d954db5f5a50799f9ad58", "687b281c4aa8614b7eb2c4453a73a19d130be94eadfed56a16a622038be15327", "28bc027b8589590e69f9faf6e8cb8f73feae1ced1759a3697afa0ea859d982d6", "dc88b722e47c52820bd804c1", 0xfffffffc, 0x2, 0x3, 0x4, 0x4}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 2m49.938162573s ago: executing program 4 (id=104): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mtd(&(0x7f0000000040), 0x3, 0x103800) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000680)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000880)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)='O', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200080fc) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000005c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x6, 0x0, 0x400, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x3503, 0xa, 0x4, 0x0, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x200}}]}, 0x13c}}, 0x44050) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x20003) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0x15) ioctl$TCSETS(r7, 0x40204706, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) connect$unix(r5, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x13, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x1, 0x0) prlimit64(r1, 0xf, &(0x7f00000000c0)={0x7f1, 0x3}, &(0x7f0000000100)) 2m43.104188934s ago: executing program 4 (id=117): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) syz_open_procfs$userns(r0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x2c) getdents64(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtclass={0x68, 0x28, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x8, 0xfff1}, {0x0, 0xa}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x9}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x5, 0xffff, 0x18, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x68}}, 0x20000000) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x6}}}}, 0x7) 2m41.605148465s ago: executing program 4 (id=120): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0xffffffffffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x4caa) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xd, 0x5}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x4}]}}]}, 0x3c}}, 0x20004055) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 2m39.527236451s ago: executing program 4 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) (async) fallocate$kvm_guest_memfd(0xffffffffffffffff, 0x40, 0x8000, 0x2000) (async) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (rerun: 64) r1 = syz_clone(0x2015c011, 0x0, 0x0, 0x0, 0x0, 0x0) sync() (async) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x100000000000000, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000240)="2fc4860e699993cf6365cf5e7def", 0x0, 0x100b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0xf) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000380)={0x2aa2da483e7e02f9}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)=0x2) (async) r5 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000540)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f00000007c0)={0x0, &(0x7f0000000780)="a887c964db4a1812a20f4acf9fb6142d206ec2e93a3021339a6729e1b47aafc4cfd1a8e88e0e387b46cd710d846e42917f13c786", 0x34}) (async, rerun: 32) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000680)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000740)=0x0) (async, rerun: 32) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000b40)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80de, 0x8, 0x3, 0x12c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000a80)={0x2e, 0x50, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) (async) ioctl$TIOCGPTLCK(r11, 0x80045439, &(0x7f0000000b00)) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000400)=0xd) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000480)=0x7) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000004c0)=0x1e) write$usbip_server(r0, 0x0, 0x0) 2m24.278599153s ago: executing program 32 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) (async) fallocate$kvm_guest_memfd(0xffffffffffffffff, 0x40, 0x8000, 0x2000) (async) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (rerun: 64) r1 = syz_clone(0x2015c011, 0x0, 0x0, 0x0, 0x0, 0x0) sync() (async) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x100000000000000, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000240)="2fc4860e699993cf6365cf5e7def", 0x0, 0x100b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0xf) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000380)={0x2aa2da483e7e02f9}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)=0x2) (async) r5 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000540)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f00000007c0)={0x0, &(0x7f0000000780)="a887c964db4a1812a20f4acf9fb6142d206ec2e93a3021339a6729e1b47aafc4cfd1a8e88e0e387b46cd710d846e42917f13c786", 0x34}) (async, rerun: 32) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000680)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000740)=0x0) (async, rerun: 32) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000b40)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80de, 0x8, 0x3, 0x12c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000a80)={0x2e, 0x50, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) (async) ioctl$TIOCGPTLCK(r11, 0x80045439, &(0x7f0000000b00)) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000400)=0xd) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000480)=0x7) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000004c0)=0x1e) write$usbip_server(r0, 0x0, 0x0) 2m24.212937041s ago: executing program 0 (id=159): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80800) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 2m22.657789732s ago: executing program 0 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone3(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r2 = syz_open_dev$video4linux(&(0x7f0000019480), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000194c0)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1d, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000019540), 0x4, 0x40) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000019580)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000195c0)=0x1) getpid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) epoll_create(0xd4db) r5 = syz_usb_connect(0x3, 0x50, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r5, 0x4, 0x0, 0x0) syz_usb_ep_write(r5, 0x83, 0x0, 0x0) 2m17.27196974s ago: executing program 0 (id=166): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x8, 0xffffffff, 0x80}) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) r5 = syz_io_uring_complete(0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000019700)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@union={0xd, 0x2, 0x0, 0x5, 0x0, 0x80, [{0x1, 0x4, 0x5}, {0x0, 0x3, 0x8}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x9}}]}}, &(0x7f00000001c0)=""/133, 0x56, 0x85, 0x1, 0x5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019400)=ANY=[@ANYBLOB="0200f302000000000cdfffff00000f0080000010", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r7 = syz_usb_connect(0x3, 0x24, &(0x7f0000019380)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f00000193c0)={0x1c, &(0x7f00000196c0)={0x0, 0x39}, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000019680)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m7.953155195s ago: executing program 0 (id=177): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f00000002c0)='/dev/kvm\x00', 0x2002, &(0x7f0000000300)={@align=0x9, {0x5, 0x795, 0x3, 0x2}}, 0x6, &(0x7f0000000340), &(0x7f0000000380)=0x1}, 0x1, &(0x7f00000003c0)=[{0x3, 0x5f, &(0x7f0000000400)='\x00', &(0x7f0000000440)="8aae440138223c028eab06bd0524b4f18fc78f9999052f851eade9100d3df6207433d9d25388d8e025dae4fe0a75ab429c2edf5ebdb36d1b240bdf0f74f28016b71490513cf91de1dee00e43", 0x4c, 0x20}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) open(&(0x7f00000004c0)='./file1\x00', 0x4c27e, 0x1bb) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x42, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000005c0)={0x400, 0x1422, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/uprobe_events\x00', 0x181101, 0x0) mount$nfs4(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='udp']) open(0x0, 0x60142, 0x10) write(r3, &(0x7f0000000940)='p:s/_ ./file0:0', 0xf) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r4, &(0x7f00000009c0)='-:s/', 0x4) 1m59.81469269s ago: executing program 0 (id=187): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) 1m59.470300897s ago: executing program 0 (id=189): sync() r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) 1m43.966213376s ago: executing program 33 (id=189): sync() r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) 1m14.643976981s ago: executing program 3 (id=242): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x81}, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x848, 0x2, 0x1, 0x110, 0x9, 0x3}, 0x30, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000380), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000004c0)={&(0x7f00000005c0)={0x1d, r3}, 0x10, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES32=r2], 0x48}}, 0x0) 1m14.353128883s ago: executing program 3 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004500)={0x3, 0xd, &(0x7f00000045c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000004640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1m13.196797309s ago: executing program 3 (id=246): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d00, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = syz_ublk_setup_io_uring(0x1c46, &(0x7f0000000100)={0x0, 0xde8c, 0x800, 0x1, 0x49}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcb, 0x0, r0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 1m12.657788194s ago: executing program 3 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000206010800000000000000000200fffd14000780080011400000000005001500010000000500010006000000050005000a0000000500040000000000090002007b797a30000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x3) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1m8.471331437s ago: executing program 3 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xc, 0x4, 0x4, 0x5, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.261636148s ago: executing program 3 (id=261): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff, 0x1f2}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(r2, 0x0, 0x22, &(0x7f0000000140)=0x28262df73c041336, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x20002, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x11, r3, 0xf2f3b000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0xfffffffffffffffd}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x100, 0x0, &(0x7f0000000640)=""/256}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000600)='GPL\x00', 0x5, 0x29e, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) accept4(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) 1m5.375448821s ago: executing program 34 (id=261): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff, 0x1f2}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(r2, 0x0, 0x22, &(0x7f0000000140)=0x28262df73c041336, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x20002, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x11, r3, 0xf2f3b000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0xfffffffffffffffd}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x100, 0x0, &(0x7f0000000640)=""/256}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000600)='GPL\x00', 0x5, 0x29e, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) accept4(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) 35.131702058s ago: executing program 6 (id=306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000500)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xb6d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)="b8ebf8d305fafb29b667b7cbebf5d570f4ebb0645ce8b2", 0x17}, 0x1, 0x0, 0x0, 0x4040004}, 0x74) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect(r2, &(0x7f0000000340)=@xdp={0x2c, 0x0, r3}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44845}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl(r4, 0x3b8e, &(0x7f00000002c0)="10") readv(r5, &(0x7f000011a5c0)=[{&(0x7f000011a2c0)=""/233, 0xe9}], 0x1) 33.990123632s ago: executing program 6 (id=308): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x8, 0xffffffff, 0x80}) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) r5 = syz_io_uring_complete(0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000019700)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@union={0xd, 0x2, 0x0, 0x5, 0x0, 0x80, [{0x1, 0x4, 0x5}, {0x0, 0x3, 0x8}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x9}}]}}, &(0x7f00000001c0)=""/133, 0x56, 0x85, 0x1, 0x5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019400)=ANY=[@ANYRES32=0x1, @ANYRES32], 0x50) r7 = syz_usb_connect(0x3, 0x24, &(0x7f0000019380)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f00000193c0)={0x1c, &(0x7f00000196c0)={0x0, 0x39}, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000019680)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30.707083379s ago: executing program 6 (id=310): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10012}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8ab00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'bond0\x00', 0x800}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/wireless\x00') r5 = openat(r4, &(0x7f0000000040)='volumes\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xff, 0x0, 0x6, 0x8, 0x3, 0x6, 0x4, 0xbf, 0x38, 0x83, 0x6, 0x9, 0x20, 0x4, 0x2, 0x3, 0xff01}, [{0x3, 0x1, 0x2534, 0x3a, 0x2, 0xd7f7b3a7, 0xf7f, 0x97}, {0x2, 0x8, 0x8001, 0x3, 0xf, 0x1000, 0x6}, {0x1, 0x400, 0x10001, 0x4, 0xf, 0x8, 0x5, 0x5}, {0x6, 0xffff0000, 0x7, 0x40, 0x306, 0x7ff, 0xff, 0x10000}], "19c6c43f07a3ee94ff608ee680b006cccbed08ea425ec314845a000c5d21c1fb36b5aa61b7ec1e164b4cd67b8ee9164833b8752013b966d6048715bb491b612a9ebbbef01c4505573c1bacf43b5f20fedc4b698368692ebc86124892894219becba3f0be04de69ba879b1a23c065e891e56e1744ced40f55d12f4fcbd9119fee9f9a050113bd486d45", ['\x00', '\x00', '\x00', '\x00']}, 0x541) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) listen(r6, 0x10040) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf749a01b5174a79dfcecac91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x104) preadv(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/191, 0xbf}], 0x1, 0xe, 0x18000000) 27.064813963s ago: executing program 6 (id=318): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x1f7) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x16, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="b400000000000000791090000000000069000a00000000009500000000000000"], &(0x7f00000017c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001800)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) fanotify_mark(0xffffffffffffffff, 0x201, 0x40000021, r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') membarrier(0x10, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001540)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001580)={0xc}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000001640)={0x48, 0x11, 0x0, 0x0, 0x3, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) pread64(0xffffffffffffffff, &(0x7f00000004c0)=""/4113, 0x1011, 0x4b) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x8000, &(0x7f00000001c0)={0x11, 0x72, 0x80000}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x3, r5, 0x3, 0x80000}) 24.384166772s ago: executing program 6 (id=321): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xc}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000003c0)=0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000400)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket(0x2, 0xa, 0x300) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000480)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000e80), 0xffffffffffffffd2}, 0x48) 20.101547651s ago: executing program 6 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x800401, 0x0) chdir(&(0x7f0000000400)='./proc/fs/nfsd\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect(r0, &(0x7f00000000c0)=@xdp={0x2c, 0x2, 0x0, 0x21}, 0x80) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x91f, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$video(&(0x7f0000004740), 0x20000007, 0x189280) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xf, @any, 0x0, 0xffffffffffffffff}, 0xe) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004500)={0x3, 0xd, &(0x7f00000045c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000004640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004680)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000004700)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000500)={0x294, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004400)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="0c00008005000100980000007469fe961593d5ef1bf2980a084da6ed43009b2c7d7feff6bdce9c4eff825f760c62d8c5439a032c62c929cfdc2daa16a071b03dfc9f28e9fe0794f798ab24474dfff400889e4fec8cefa339886e7db5b06114f3fe104689d1943fac091a531a4f8af179fc80762b509d65dc0113c40110272f7fc386890329bcf7cf8d4230bdb5793f4527963fa28a28cca74ad3c98beeb9f2f134c173a8a2ff8c20bb"], 0x2c}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES8=r1, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b"], 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x0) 14.763097912s ago: executing program 2 (id=333): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000380), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 11.854072722s ago: executing program 2 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004500)={0x3, 0xd, &(0x7f00000045c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000004640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 11.505708034s ago: executing program 2 (id=340): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000700)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0xfffffff0, 0x7fff, 0x3, 0x0, "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"}}, 0x176) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000080), 0x10) listen(r0, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="0589", 0x2}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000000940)={0xbb8, 0x1, 0x5, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [{{0x254, 0x1, {{0x2, 0x7f3}, 0x86, 0x1, 0x2, 0x4, 0x25, 'syz0\x00', "cf698c45f47ff81989dac9b7fa46c635e14994050a1c66a00c996be650d89426", "c8b55a4a6246d541bc8a1a9faca0882a90b09afa15b49ccd6e1da7da5755c959", [{0x50b6, 0x6, {0x2, 0x8c9b}}, {0x3, 0x6, {0x1, 0x1}}, {0x1, 0x3, {0x0, 0x7fffffff}}, {0x1, 0x1, {0x1, 0x6}}, {0x1ff, 0x8001, {0x1, 0x400}}, {0x7, 0x3, {0x0, 0x6}}, {0x200, 0x3, {0x0, 0x4}}, {0x5, 0x400, {0x0, 0x8}}, {0x18, 0x6, {0x2, 0x62b9}}, {0x2, 0x3, {0x3, 0x80000001}}, {0x2, 0xf, {0x0, 0x94e}}, {0x5, 0x40, {0x1, 0x8}}, {0x2, 0x200, {0x3, 0x10}}, {0x6, 0x3, {0x2, 0x3}}, {0x401, 0x5, {0x3, 0x3}}, {0x8, 0x7, {0x2, 0x7fffffff}}, {0x7fff, 0x8000, {0x3, 0xee5}}, {0x8, 0x3, {0x3, 0x16e}}, {0xfeff, 0xaebd, {0x2, 0x2}}, {0x9, 0x1ff, {0x2, 0x8f}}, {0x0, 0x9, {0x0, 0x6}}, {0xcb, 0x6, {0x1, 0xa0ca}}, {0x3, 0x6, {0x2, 0x3}}, {0x401, 0x77e, {0x0, 0x40}}, {0x2, 0x9, {0x0, 0x1000}}, {0x5, 0x2, {0x2, 0x8c}}, {0xfffc, 0xeb4, {0x0, 0xfffffffd}}, {0x1, 0x3, {0x1, 0xffffff22}}, {0x5, 0x2b1}, {0x100, 0x39, {0x1, 0x86b4}}, {0x10, 0x6, {0x2, 0x1}}, {0x0, 0x2, {0x2, 0x5}}, {0x1, 0x1, {0x3, 0x1ff}}, {0x1000, 0x7, {0x2, 0x1}}, {0xd, 0x0, {0x2, 0xfffffff2}}, {0x1ff, 0x8, {0x0, 0x7}}, {0x0, 0x6, {0x1, 0x5}}, {0xfffb, 0x5, {0x1, 0x2}}, {0x400, 0x9, {0x3, 0xf00}}, {0xff, 0xbd2, {0x3c55830b8312319a, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x6, 0x9, 0x1ff, 0x1, 0xd, 'syz0\x00', "b64df4c7f6db83fc7d950db94f2b95761c7359bb74d08debd3b8e83c48838fab", "34b9d35100885a4ecbff512608545d584b4e746d9af00f50cd1fa2c0ed50fc30", [{0x1, 0x5, {0x1, 0x9}}, {0x101, 0x9, {0x0, 0x8}}, {0xc1, 0x1000, {0x0, 0x1}}, {0x7, 0x9b2, {0x2, 0xc2}}, {0x3ac9, 0x5, {0x2, 0xe70}}, {0x400, 0x8, {0x1}}, {0x5ad, 0x7, {0xc97d0b90dfc88dd6, 0x8}}, {0xfffd, 0x4, {0x3, 0xd}}, {0xffff, 0x0, {0x1, 0x5}}, {0x8, 0x200, {0x3, 0x8}}, {0x99ef, 0x3, {0x2, 0xffffffff}}, {0x40, 0x9, {0x2, 0x81}}, {0x8000, 0x543f, {0x0, 0x1}}, {0x1, 0x1, {0x0, 0x10001}}, {0xc3e, 0x7, {0x1, 0xd}}, {0x36, 0x2, {0x2}}, {0x8, 0x0, {0x2, 0x2}}, {0x0, 0x40, {0x1, 0xeb6c}}, {0x3, 0x0, {0x3, 0x80}}, {0x4, 0x8, {0x2, 0x4}}, {0x2182, 0xffff, {0x0, 0x10}}, {0xe, 0x4, {0x0, 0xc6f}}, {0x7, 0x230, {0x1, 0x40}}, {0xfe00, 0x4, {0x1, 0x100}}, {0x65, 0x0, {0x1, 0xe9f}}, {0xe, 0x5, {0x3, 0xf}}, {0x6, 0xc856, {0x1}}, {0xe3c5, 0x7fff, {0x0, 0xf54c}}, {0xf000, 0x3, {0x0, 0x10001}}, {0x4, 0x4, {0x1, 0xcf}}, {0x3, 0x9, {0x0, 0x10000}}, {0x0, 0x0, {0x3, 0x3ff}}, {0xcf7, 0xfffa, {0x2, 0x5}}, {0x9, 0x8, {0x0, 0x9}}, {0x99, 0x0, {0x1, 0x24000}}, {0x2, 0xb0ee, {0x2, 0x9}}, {0x3, 0x3, {0x3, 0x401}}, {0x1, 0x7, {0x2, 0x40}}, {0x1, 0x2, {0x2, 0x1}}, {0x19, 0x8000, {0x3, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x8d, 0x0, 0x10, 0xb, 0x1b, 'syz1\x00', "db4085dafcc2c1309a5821b5ee942a7e27a70d53da468431a5cf7014fb06e627", "46b92829ea26b4d33c386b988eed07d98ed1704c6b185c6d95f9bb82e0d8fdf5", [{0x5, 0x7, {0x3, 0x2d817e36}}, {0x4, 0xfffb, {0x1, 0x5}}, {0x9000, 0xfffd, {0x1}}, {0x400, 0x3, {0x1, 0x7}}, {0x9, 0x1ff, {0x0, 0x6}}, {0x1, 0x3, {0x2, 0x2}}, {0x47f, 0x3, {0x3, 0x1}}, {0x3, 0x5, {0x2}}, {0x8, 0x7f, {0x3, 0x7}}, {0xcdfa, 0x4, {0x0, 0xffffffff}}, {0xc52, 0xffbe, {0x0, 0x4}}, {0x5, 0x5, {0x3, 0x3ff}}, {0x80, 0x9, {0x3, 0x100}}, {0x4, 0x5, {0x0, 0x3}}, {0x5, 0x8, {0x2, 0x6}}, {0x7fff, 0x1, {0x1, 0x1}}, {0x1, 0x7, {0x2, 0xfffffff7}}, {0x4, 0x4, {0x1, 0x8}}, {0xff15, 0x4, {0x3, 0xff}}, {0x1, 0x0, {0x0, 0x4}}, {0x29, 0x6, {0x2, 0x2}}, {0x6, 0x3, {0x2, 0x80000001}}, {0xe000, 0x7f0, {0x1, 0x4}}, {0xffff, 0x4, {0x3, 0x860}}, {0x5, 0x8, {0x0, 0x1}}, {0x3, 0x3, {0x2, 0x3}}, {0x7, 0x0, {0x1, 0x5}}, {0x5, 0xb, {0x0, 0x7fff}}, {0x6a74, 0x2, {0x1, 0xa}}, {0x8835, 0x5, {0x0, 0xc00}}, {0x2, 0x890, {0x2, 0x7b}}, {0xfff5, 0xbc84, {0x3, 0x2}}, {0x903, 0x0, {0x0, 0x7}}, {0x0, 0x7, {0x1, 0x4}}, {0x6, 0x3, {0x1, 0x2}}, {0x7ff, 0x7, {0x2, 0x101}}, {0x8, 0xfff7, {0x0, 0xfffffff5}}, {0x0, 0x150, {0x1, 0x2be}}, {0x8, 0x7, {0x3, 0xa9}}, {0x3, 0xfff9, {0x2, 0x64dd3b75}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffff7}, 0xff, 0x1, 0x53a6, 0x7, 0xd, 'syz1\x00', "cfc2778f7ceeebcf434d64fe61122455602865cd9ccbfe87e7f5af65726e7c7b", "dd2d6f4c383477b11e791536e4a29f48f14e6bb6aa6b0095ed7cb021ffafb897", [{0x1, 0x4, {0x0, 0xa}}, {0xb6, 0x69c, {0x0, 0x6}}, {0x0, 0x24de, {0x1, 0x5}}, {0x3, 0x7, {0x3, 0x9f72}}, {0xb, 0xffff, {0x2, 0x8000}}, {0xb, 0x2a2, {0x1}}, {0x0, 0x8, {0x1, 0x80}}, {0x1, 0xe, {0x1, 0x2}}, {0x4, 0x10, {0x2, 0x8001}}, {0xf6e6, 0x1000, {0x2, 0x135a}}, {0xa, 0x4, {0x2, 0x4}}, {0x5, 0x6, {0x3, 0x4}}, {0x80, 0xeb1, {0x2, 0x9}}, {0x9, 0x0, {0x3}}, {0x604, 0x100, {0x0, 0x8}}, {0x4, 0x5, {0x0, 0x7000}}, {0x2, 0xf640, {0x0, 0x3}}, {0x7, 0x5, {0x0, 0x2}}, {0x7, 0x0, {0x3, 0x3}}, {0x890, 0x4, {0x0, 0xb}}, {0x0, 0x6, {0x2, 0xd}}, {0x9857, 0x0, {0x3, 0xa56}}, {0xb7, 0xfffe, {0x1, 0x10001}}, {0xb, 0xc, {0x1, 0x5}}, {0x0, 0x89f, {0x0, 0x7}}, {0x3, 0x9, {0x3}}, {0x4, 0x2, {0x2, 0xe96}}, {0xacbb, 0x1, {0x3}}, {0x6, 0x7, {0x1, 0x5}}, {0x4, 0x0, {0x1, 0x9}}, {0x2, 0x2, {0x0, 0x6}}, {0x7, 0x8000, {0x0, 0x621d}}, {0x5, 0x0, {0x3, 0x40}}, {0x1b0, 0x9, {0x1, 0xfffffff9}}, {0x3, 0x7, {0x2, 0x76e}}, {0x4, 0x6, {0x2, 0xffffffc0}}, {0xffff, 0x3b, {0x1, 0x7c0bad26}}, {0x0, 0x0, {0x3, 0x10}}, {0x7, 0x20, {0x3, 0x13d6}}, {0x40, 0x5, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x7, 0x7, 0x5, 0x9, 0x10, 'syz0\x00', "af2ca79a4a0c4bd032362d80837bd46d9f307c39650dad2f48c334e6187a4078", "c4bc246c95eaa281a03901b0d7c78eff94d04f1d49e91c7336a914f379a246a6", [{0x5, 0x8, {0x2, 0xf89}}, {0x3, 0x5, {0x1, 0x16}}, {0x4ee, 0x8, {0x0, 0x1}}, {0x8, 0x3, {0x1, 0x1}}, {0xfffd, 0x526b, {0x3, 0x3}}, {0xbf86, 0x8001, {0x1}}, {0x3, 0xfff9, {0x2, 0xfffffff0}}, {0xe474, 0x0, {0x1, 0x9}}, {0x0, 0x8, {0x2, 0x8}}, {0xe822, 0x1, {0x0, 0x5}}, {0x9, 0x9, {0x3, 0x9}}, {0x132c, 0x8, {0x2, 0x101}}, {0x5, 0xed3, {0x1, 0x5}}, {0x3ff, 0x0, {0x3, 0x86}}, {0x7, 0x8, {0x3, 0x1000}}, {0x6, 0x1}, {0xfff7, 0x0, {0x3, 0x2}}, {0x2, 0x4, {0x3, 0x5}}, {0x3, 0x4, {0x1, 0x39d}}, {0x8, 0xf, {0x2, 0x6}}, {0x101, 0x172, {0x0, 0x7}}, {0x6, 0xfff7, {0x3, 0x6}}, {0xfff, 0x9d00, {0x1, 0x10}}, {0xfff7, 0x8, {0x2}}, {0x9, 0x2, {0xe7d91bb2b40a53e1}}, {0x81, 0x9, {0x3, 0x81}}, {0xb, 0x0, {0x2, 0x9}}, {0x3d91, 0xfffd, {0x2, 0x3}}, {0x5, 0x8001, {0x1, 0x1000}}, {0x52, 0x7, {0x0, 0x6}}, {0x81, 0x5, {0x0, 0x5a3}}, {0xfffe, 0x100, {0x1, 0x8}}, {0x200, 0x9c, {0x2, 0x9}}, {0x5, 0x5}, {0x6, 0x9f, {0x3, 0x5c}}, {0x1000, 0xfffb, {0x1, 0xb8e}}, {0x7e, 0xd0d, {0x1}}, {0xfffa, 0x3, {0x2, 0x40000}}, {0x81, 0x2, {0x1, 0x6}}, {0xffff, 0x7, {0x2, 0x2}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000040}, 0x85) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016800c0001"], 0x4c}}, 0x0) r5 = accept4$unix(r1, 0x0, 0x0, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x41, 0x0) write$nbd(r6, 0x0, 0x40) sendmsg$AUDIT_TTY_SET(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x3f9, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1, 0x5}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x40041) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='\f\x00'], 0xc) 11.400452912s ago: executing program 1 (id=341): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff, 0x1f2}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(r2, 0x0, 0x22, &(0x7f0000000140)=0x28262df73c041336, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x20002, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x11, r3, 0xf2f3b000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0xfffffffffffffffd}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x100, 0x0, &(0x7f0000000640)=""/256}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000600)='GPL\x00', 0x5, 0x29e, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) accept4(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) 8.800524447s ago: executing program 5 (id=342): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000200)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000b40)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = syz_open_dev$swradio(&(0x7f0000000e00), 0x1, 0x2) pread64(r3, &(0x7f0000000e40)=""/73, 0xffffffeb, 0x936) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000ec0)={0xb}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) getpriority(0x2, 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r4, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r5}, &(0x7f0000000d80), &(0x7f0000000dc0)='%ps \x00'}, 0x20) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff8000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x17000000, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x17, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 8.124465073s ago: executing program 1 (id=343): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) open(&(0x7f00000004c0)='./file1\x00', 0x4c27e, 0x1bb) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x42, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000580)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000005c0)={0x400, 0x1422, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/uprobe_events\x00', 0x181101, 0x0) mount$nfs4(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='udp']) open(0x0, 0x60142, 0x10) write(r2, &(0x7f0000000940)='p:s/_ ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r3, &(0x7f00000009c0)='-:s/', 0x4) 7.631896676s ago: executing program 5 (id=344): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xc}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000003c0)=0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000400)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket(0x2, 0xa, 0x300) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000480)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000e80), 0xffffffffffffffd2}, 0x48) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x1, 0x0, 0x0, 0xa}, 0x20) 6.785517521s ago: executing program 1 (id=345): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e4f84a95de795f34fbaec085e4d743f992b1a09828042d45a7d90513185b27371953271a6a3d47c039bec66ae1e877c4e8aa8c24421cfd6b92c9a11b6c97a4ebda8334c279c4c16f061546024f732b5065a69e49903a310b1212cb0e06ec031be89b17d7600e4beb322afe25c9a081433bce021dbd12b5ac5fa38ded97bcd7d3a6213637bac70b2afc2f7d1e77534365ee9ebe41e2948aa8e1e7b69e276334744f54e1a43907a562ceae64e9a4c63580628bea3435c717692fc71e2933cd13", @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES64], 0x48) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) socket$inet6(0xa, 0xa, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) inotify_init1(0x800) syz_io_uring_setup(0xf03, &(0x7f0000000680)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000700), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) dup2(r4, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.946691621s ago: executing program 2 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x1bc}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001740)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000017c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001840)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000018c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000001900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001940)=0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000001980)) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x14) syz_open_dev$vim2m(&(0x7f0000001a00), 0x3, 0x2) fsopen(&(0x7f0000001a40)='romfs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='sys_mnt\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='lzo', 0x3) 5.883586794s ago: executing program 5 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x1bc}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001740)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000017c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001840)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000018c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000001900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001940)=0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000001980)) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x14) syz_open_dev$vim2m(&(0x7f0000001a00), 0x3, 0x2) fsopen(&(0x7f0000001a40)='romfs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='sys_mnt\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='lzo', 0x3) 3.736261499s ago: executing program 2 (id=348): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x8, 0xffffffff, 0x80}) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) syz_io_uring_complete(0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000019700)={0xa, 0x0, &(0x7f0000019740)={&(0x7f0000019780)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0xfe}]}, 0x68}, 0x1, 0x7}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x91, 0x91, 0x3, [@union={0xd, 0x4, 0x0, 0x5, 0x0, 0x80, [{0x1, 0x4, 0x5}, {0x0, 0x3, 0x8}, {0xc, 0x0, 0x80000000}, {0x8, 0x0, 0xfffffff2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x9}}, @datasec={0x8, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x9, 0x85}, {0x2, 0x3, 0x1}, {0x3, 0xfffffeff, 0x500000}, {0x3, 0x68d2, 0xe}], "d0"}]}, {0x0, [0x30]}}, &(0x7f00000001c0)=""/133, 0xaf, 0x85, 0x1, 0x5}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019400)=ANY=[@ANYBLOB="0200f302000000000cdfffff00000f0080000010", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x6, 0x10, &(0x7f0000019540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f00000195c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x24, &(0x7f0000019380)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) 3.735959289s ago: executing program 5 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004500)={0x3, 0xd, &(0x7f00000045c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 3.387256879s ago: executing program 1 (id=350): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf3000000000000025000200091bfeff85200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae78225355000000950000000000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b7984a8a8d0000000000000000", @ANYRES16, @ANYRES32], &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg}, 0x94) socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180000008000000000000000fdffffff07000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f00000002c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 3.206275682s ago: executing program 5 (id=351): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) tkill(r1, 0x5) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000019580)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4e}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./sys\x00', 0x1ff) sendto(r0, &(0x7f0000000000)="96002cce5cc8fee55a7634151e9d2aada51d4790d767353753a423cc05a31ad0bfaf485611ed77853350a4831a56595dac6c0823e7c787b3b3bb32a4040541bdbf15f4ea9cbcdd1a2f54990e8dd4e8d43a9b934daf41d3a3939c568bbc285741b880ceee0c1b7691e42619c97b73d11309fc5cbe348091d7ce4eb0f1a23ecbc64a756f91ff7b72080718cd34f9c6b4bdc7321c55374c8d75c618e6c32763014781685c8f2ced03edaaa579ef99786bd14cc7367ab0064d328ab87e3144c871d18d5e37100c74b3bd79e732cf6c3e", 0xce, 0x4c840, &(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) mount(0x0, &(0x7f0000019600)='./sys\x00', &(0x7f0000019640)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) userfaultfd(0x800) read(r5, &(0x7f0000019880)=""/266, 0x10a) write$eventfd(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000019800)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x3, "f7428179d0136fe029bbc63478c1c8831faf0e84c35684adfd5119c89862c9bf", "ae41a0f29747090a2a4c7bfabf5b2215b3fefa8556140868a243884cf06c124d", "ddc77d4bbd793852e9406d06b39fa0dd062284397b1d954db5f5a50799f9ad58", "687b281c4aa8614b7eb2c4453a73a19d130be94eadfed56a16a622038be15327", "28bc027b8589590e69f9faf6e8cb8f73feae1ced1759a3697afa0ea859d982d6", "dc88b722e47c52820bd804c1", 0xfffffffc, 0x2, 0x3, 0x4, 0x4}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 2.981875797s ago: executing program 1 (id=352): socket$kcm(0x2, 0xa, 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(r1, 0x84, 0x3, &(0x7f0000000a80)=""/4110, &(0x7f0000001ac0)=0xfffffffffffffee2) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000280)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x100800) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000440)={0x1, 0x1}, &(0x7f0000000500)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r9, &(0x7f0000000740), 0x1000) setsockopt$inet_sctp_SCTP_EVENT(r6, 0x84, 0x7f, &(0x7f0000000540)={r7, 0x8002}, 0x8) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x200, 0x0, 0x3, 0x254}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fff7e, 0x8, 0x2001, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b4, 0x1, 0x1, 0x129, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec34, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x4, 0x0, 0x0}}, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000300)={&(0x7f0000000000)=[{0xb, 0x3, 0x8, 0x2, 0x9}], 0x1, 0x28, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 139.778905ms ago: executing program 5 (id=353): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0xffffffffffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x4caa) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xd, 0x5}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x4}]}}]}, 0x3c}}, 0x20004055) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 17.533749ms ago: executing program 1 (id=354): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x2b2d, {0x8, 0x7, 0x101, 0xf6a4, 0xfffffffffffffff7}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x5, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) write$cgroup_int(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x143102) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, 0x0) chdir(&(0x7f0000000700)='./file0\x00') r3 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x3, 0x0, 0x0, r3, 0x0, 0x14}, 0xc1d, 0x0, 0x7, 0x4, 0x0, 0x0, 0x10}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) setresgid(0x0, r5, 0x0) r6 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000840)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x2, 0x0, 0xffffffffffffffff, 0x0, r5, 0x152}, 0x0, 0x0, 0xcf10, 0x6, 0x4d7a, 0xc74d, 0x3, 0x80, 0x7, 0x3, r6, r7}) setresuid(0x0, 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x103042, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 0s ago: executing program 2 (id=355): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) socket$unix(0x1, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = getuid() sendmsg$nl_netfilter(r8, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000052e6d1cd34e5d612e6cf49d1603b20201032dbd7000fedbdf250500000208003100e335c245fe6dfcadd74f89a82516b2c6d043c2265117ff93c1a9419fae86ce9bb220958dc3f72f8bd5912cde458e8c6f23d2a6dcb825a47b183fe59029a169ebc5110baa18386e1c7096a5bd8f1121df95a7b265c0aac0b08a5c6fe4aaf3509e980498cfdfa8792bafb86b3a98743789cbf6ca2686a4f47ad0d7801fddc96c954a1200"/183, @ANYRES32=r9, @ANYBLOB="4023c3282fbda95c3ec6b9b501fef9bc3ea3c47c844b0e82416313cd273fe6d8fffa858628cba26852905f28083c527a30417fa229f877cfcbe106e9765cc810ef46f648a0adade86d41312357a3189c90000000"], 0x70}, 0x1, 0x0, 0x0, 0xcc8a4}, 0x4880) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000080), 0x4a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.563161][ T5583] bridge_slave_1: entered allmulticast mode [ 101.572497][ T5583] bridge_slave_1: entered promiscuous mode [ 101.612099][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.612381][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.612508][ T5580] bridge_slave_0: entered allmulticast mode [ 101.614426][ T5580] bridge_slave_0: entered promiscuous mode [ 101.688697][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.688871][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.689252][ T5580] bridge_slave_1: entered allmulticast mode [ 101.691215][ T5580] bridge_slave_1: entered promiscuous mode [ 101.805462][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.805644][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.806245][ T5582] bridge_slave_0: entered allmulticast mode [ 101.808397][ T5582] bridge_slave_0: entered promiscuous mode [ 101.819879][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.881677][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.881805][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.882004][ T5584] bridge_slave_0: entered allmulticast mode [ 101.888530][ T5584] bridge_slave_0: entered promiscuous mode [ 101.903107][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.903429][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.903891][ T5582] bridge_slave_1: entered allmulticast mode [ 101.934620][ T5582] bridge_slave_1: entered promiscuous mode [ 101.949835][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.988767][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.989085][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.989244][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.989417][ T5584] bridge_slave_1: entered allmulticast mode [ 101.991658][ T5584] bridge_slave_1: entered promiscuous mode [ 102.051846][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.052012][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.052195][ T5581] bridge_slave_0: entered allmulticast mode [ 102.054208][ T5581] bridge_slave_0: entered promiscuous mode [ 102.083132][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.141360][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.141527][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.142147][ T5581] bridge_slave_1: entered allmulticast mode [ 102.144134][ T5581] bridge_slave_1: entered promiscuous mode [ 102.200171][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.202788][ T5583] team0: Port device team_slave_0 added [ 102.256196][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.259145][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.261234][ T5583] team0: Port device team_slave_1 added [ 102.302890][ T5580] team0: Port device team_slave_0 added [ 102.312903][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.363033][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.367418][ T5580] team0: Port device team_slave_1 added [ 102.431579][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.472506][ T5582] team0: Port device team_slave_0 added [ 102.474310][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.474325][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.474344][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.549445][ T5584] team0: Port device team_slave_0 added [ 102.551779][ T5582] team0: Port device team_slave_1 added [ 102.552603][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.552615][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.552635][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.610890][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.610903][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.610923][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.661654][ T5584] team0: Port device team_slave_1 added [ 102.665683][ T61] Bluetooth: hci2: command tx timeout [ 102.665715][ T61] Bluetooth: hci1: command tx timeout [ 102.665728][ T5589] Bluetooth: hci0: command tx timeout [ 102.708035][ T5581] team0: Port device team_slave_0 added [ 102.708950][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.708967][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.708990][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.791745][ T5581] team0: Port device team_slave_1 added [ 102.823716][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.823735][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.823762][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.825683][ T61] Bluetooth: hci3: command tx timeout [ 102.825719][ T61] Bluetooth: hci4: command tx timeout [ 102.892015][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.892030][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.892049][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.287052][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.287068][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.287087][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.361511][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.361526][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.361546][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.431121][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.431141][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.431168][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.509573][ T5583] hsr_slave_0: entered promiscuous mode [ 103.510919][ T5583] hsr_slave_1: entered promiscuous mode [ 103.512785][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.512797][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.512817][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.600947][ T5580] hsr_slave_0: entered promiscuous mode [ 103.601957][ T5580] hsr_slave_1: entered promiscuous mode [ 103.602764][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 103.602866][ T5580] Cannot create hsr debugfs directory [ 103.711988][ T5582] hsr_slave_0: entered promiscuous mode [ 103.713018][ T5582] hsr_slave_1: entered promiscuous mode [ 103.713750][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 103.713770][ T5582] Cannot create hsr debugfs directory [ 103.779894][ T5584] hsr_slave_0: entered promiscuous mode [ 103.781412][ T5584] hsr_slave_1: entered promiscuous mode [ 103.782113][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 103.782133][ T5584] Cannot create hsr debugfs directory [ 103.862383][ T5581] hsr_slave_0: entered promiscuous mode [ 103.863624][ T5581] hsr_slave_1: entered promiscuous mode [ 103.864277][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 103.864295][ T5581] Cannot create hsr debugfs directory [ 104.745549][ T61] Bluetooth: hci1: command tx timeout [ 104.745586][ T61] Bluetooth: hci0: command tx timeout [ 104.745611][ T61] Bluetooth: hci2: command tx timeout [ 104.842317][ T5583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.906591][ T4897] Bluetooth: hci3: command tx timeout [ 104.908731][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.914879][ T5583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.919809][ T4897] Bluetooth: hci4: command tx timeout [ 104.962818][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.974707][ T5583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.002973][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.029672][ T5583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.061298][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.189631][ T5580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.232077][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.246063][ T5580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.269211][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.273935][ T5580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.315048][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.348339][ T5580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.392953][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.563002][ T5582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.599116][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.630963][ T5582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.671600][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.678545][ T5582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.718633][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.761285][ T5582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.799354][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.951752][ T5584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.980674][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.995806][ T5584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.031524][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.047805][ T5584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.070765][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.104627][ T5584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.149659][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.294485][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.343724][ T5581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.383804][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.405056][ T5581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.439238][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.459217][ T5581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.501366][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.518020][ T5581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.559244][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.647123][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.691288][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.721249][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.721435][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.787598][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.787693][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.827239][ T5589] Bluetooth: hci0: command tx timeout [ 106.827252][ T61] Bluetooth: hci2: command tx timeout [ 106.827296][ T4897] Bluetooth: hci1: command tx timeout [ 106.904254][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.957877][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.958461][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.985793][ T4897] Bluetooth: hci4: command tx timeout [ 106.985830][ T4897] Bluetooth: hci3: command tx timeout [ 107.015054][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.039051][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.039714][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.137402][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.174437][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.204835][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.204993][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.302264][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.302401][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.398258][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.457860][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.492947][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.493197][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.562943][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.563067][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.687083][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.747944][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.748084][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.848609][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.848780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.085733][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.231718][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.619451][ T5583] veth0_vlan: entered promiscuous mode [ 109.674331][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.703960][ T5580] veth0_vlan: entered promiscuous mode [ 109.726310][ T5583] veth1_vlan: entered promiscuous mode [ 109.794428][ T5580] veth1_vlan: entered promiscuous mode [ 109.938285][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.016780][ T5583] veth0_macvtap: entered promiscuous mode [ 110.054160][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.076908][ T5583] veth1_macvtap: entered promiscuous mode [ 110.083748][ T5580] veth0_macvtap: entered promiscuous mode [ 110.149593][ T5580] veth1_macvtap: entered promiscuous mode [ 110.232972][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.285092][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.311962][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.361897][ T5584] veth0_vlan: entered promiscuous mode [ 110.376372][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.489881][ T5584] veth1_vlan: entered promiscuous mode [ 110.511791][ T5581] veth0_vlan: entered promiscuous mode [ 110.889543][ T5581] veth1_vlan: entered promiscuous mode [ 111.043984][ T5582] veth0_vlan: entered promiscuous mode [ 111.240318][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.240347][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.241058][ T5582] veth1_vlan: entered promiscuous mode [ 111.285597][ T5584] veth0_macvtap: entered promiscuous mode [ 111.350738][ T5584] veth1_macvtap: entered promiscuous mode [ 111.426826][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.426850][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.431361][ T5581] veth0_macvtap: entered promiscuous mode [ 111.514450][ T5581] veth1_macvtap: entered promiscuous mode [ 111.550640][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.550663][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.651200][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.692644][ T5582] veth0_macvtap: entered promiscuous mode [ 111.718201][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.720300][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.720322][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.766120][ T5582] veth1_macvtap: entered promiscuous mode [ 111.869850][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.908450][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.002205][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.132811][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.381284][ T5580] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.669148][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.669172][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.268352][ T1123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.274488][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.274512][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.313607][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.313632][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.495404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.505417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.515432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.525417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.535414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.545414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.555418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.565416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.575418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.585417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.599471][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.831843][ T5712] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.914541][ T1135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.915066][ T1135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.928402][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.928470][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.055769][ T9] usb 2-1: device not accepting address 2, error -71 [ 117.078329][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 117.109202][ T5712] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 117.229123][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.229165][ T5712] usb 1-1: Product: syz [ 117.229352][ T5712] usb 1-1: Manufacturer: syz [ 117.229371][ T5712] usb 1-1: SerialNumber: syz [ 117.779271][ T5712] usb 1-1: config 0 descriptor?? [ 117.951379][ T5712] usb 1-1: can't set config #0, error -71 [ 118.042709][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.042737][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.175536][ T5790] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 118.311913][ T5712] usb 1-1: USB disconnect, device number 2 [ 120.467235][ T1123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.653364][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.653389][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.926170][ T5703] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.965544][ T1284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.144657][ T5703] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.16 [ 121.153384][ T5703] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 121.153464][ T5703] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid maxpacket 30768, setting to 1024 [ 121.153492][ T5703] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 1024 [ 121.206032][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.206063][ T5703] usb 1-1: Product: syz [ 121.206079][ T5703] usb 1-1: Manufacturer: syz [ 121.206105][ T5703] usb 1-1: SerialNumber: syz [ 121.286057][ T1135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.404185][ T5703] usb-storage 1-1:1.0: USB Mass Storage device detected [ 121.702684][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.703226][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.703646][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.793839][ T5703] scsi host1: usb-storage 1-1:1.0 [ 121.838717][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.838960][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.839164][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.839338][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.896017][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.002104][ T5703] usb 1-1: USB disconnect, device number 3 [ 122.241918][ T1178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.289304][ T1123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.293028][ T1178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.323498][ T87] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.396377][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.889169][ T5811] jffs2: notice: (5811) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.905651][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.119035][ T38] audit: type=1326 audit(1791972173.829:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2ace2d9 code=0x7ffc0000 [ 123.119094][ T38] audit: type=1326 audit(1791972173.829:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2ace2d9 code=0x7ffc0000 [ 123.315460][ T5818] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.373073][ T38] audit: type=1326 audit(1791972173.999:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2ace2d9 code=0x7ffc0000 [ 123.373138][ T38] audit: type=1326 audit(1791972174.019:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2ace2d9 code=0x7ffc0000 [ 123.373184][ T38] audit: type=1326 audit(1791972174.069:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2ace2d9 code=0x7ffc0000 [ 123.391879][ T38] audit: type=1326 audit(1791972174.109:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8d2ace042 code=0x7ffc0000 [ 123.392049][ T38] audit: type=1326 audit(1791972174.109:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff8d2ace0d7 code=0x7ffc0000 [ 123.442346][ T38] audit: type=1326 audit(1791972174.169:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff8d2a8afd1 code=0x7ffc0000 [ 123.442498][ T38] audit: type=1326 audit(1791972174.169:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff8d2acf0c9 code=0x7ffc0000 [ 123.525527][ T38] audit: type=1326 audit(1791972174.189:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff8d2a8b03b code=0x7ffc0000 [ 123.685485][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 123.686936][ T5818] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 123.693460][ T5825] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 123.737430][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.737462][ T5818] usb 3-1: Product: syz [ 123.737478][ T5818] usb 3-1: Manufacturer: syz [ 123.737495][ T5818] usb 3-1: SerialNumber: syz [ 123.788044][ T5818] usb 3-1: config 0 descriptor?? [ 123.821541][ T5818] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 125.825247][ T5818] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 125.832877][ T5818] visor 3-1:0.0: probe with driver visor failed with error -71 [ 125.938568][ T5818] usb 3-1: USB disconnect, device number 2 [ 126.135600][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.318553][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 126.319474][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 126.328424][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.328523][ T10] usb 2-1: Product: syz [ 126.328573][ T10] usb 2-1: Manufacturer: syz [ 126.328615][ T10] usb 2-1: SerialNumber: syz [ 128.693789][ T10] usb 2-1: config 0 descriptor?? [ 128.848634][ T10] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 128.852784][ T10] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 128.852964][ T10] visor 2-1:0.0: probe with driver visor failed with error -71 [ 129.137765][ T10] usb 2-1: USB disconnect, device number 4 [ 133.086945][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.087060][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.612485][ T5879] netlink: 'syz.4.27': attribute type 1 has an invalid length. [ 143.120207][ T5879] team0: Port device gretap1 added [ 145.018981][ T5785] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.305537][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 146.655627][ T9] usb 4-1: device not accepting address 2, error -71 [ 146.905635][ T5802] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 147.226304][ T5802] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.16 [ 147.230485][ T5802] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 147.230566][ T5802] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid maxpacket 30768, setting to 1024 [ 147.230598][ T5802] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 1024 [ 147.333597][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.333630][ T5802] usb 5-1: Product: syz [ 147.333648][ T5802] usb 5-1: Manufacturer: syz [ 147.333665][ T5802] usb 5-1: SerialNumber: syz [ 147.487640][ T5802] usb-storage 5-1:1.0: USB Mass Storage device detected [ 147.672134][ T5802] scsi host1: usb-storage 5-1:1.0 [ 147.812709][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033cf7800: rx timeout, send abort [ 147.911624][ T5802] usb 5-1: USB disconnect, device number 2 [ 148.313230][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033cf6000: rx timeout, send abort [ 148.313537][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033cf7800: abort rx timeout. Force session deactivation [ 148.501725][ T5903] ======================================================= [ 148.501725][ T5903] WARNING: The mand mount option has been deprecated and [ 148.501725][ T5903] and is ignored by this kernel. Remove the mand [ 148.501725][ T5903] option from the mount to silence this warning. [ 148.501725][ T5903] ======================================================= [ 148.552099][ T5903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.344501][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033cf6000: abort rx timeout. Force session deactivation [ 152.758128][ T5932] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 152.893657][ T5936] netlink: 'syz.0.42': attribute type 1 has an invalid length. [ 155.471948][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060f1b400: rx timeout, send abort [ 155.972777][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061075400: rx timeout, send abort [ 155.974151][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060f1b400: abort rx timeout. Force session deactivation [ 156.689022][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061075400: abort rx timeout. Force session deactivation [ 157.284610][ T5961] nvme_fabrics: found same hostid 499d05a1-d022-474c-9f2b-b93de338f43a but different hostnqn nqÐpÉV [ 159.638325][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061238c00: rx timeout, send abort [ 160.138452][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061238c00: abort rx timeout. Force session deactivation [ 160.454382][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806034f400: rx timeout, send abort [ 163.320364][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806034f400: abort rx timeout. Force session deactivation [ 166.499121][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'. [ 170.095948][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 172.115636][ T5571] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.275486][ T5571] usb 2-1: Using ep0 maxpacket: 32 [ 172.276453][ T5571] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 172.278114][ T5571] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.278171][ T5571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.348914][ T5571] usb 2-1: config 0 descriptor?? [ 172.389998][ T5571] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 172.454358][ T5571] usb 2-1: Detected SIO [ 172.594230][ T5571] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 174.618401][ T5571] usb 2-1: USB disconnect, device number 5 [ 174.802969][ T5571] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 174.803846][ T5571] ftdi_sio 2-1:0.0: device disconnected [ 176.022803][ T6038] nbd0: detected capacity change from 0 to 63 [ 176.859906][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e28c00: rx timeout, send abort [ 176.861442][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e2b000: rx timeout, send abort [ 177.361561][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e28c00: abort rx timeout. Force session deactivation [ 177.361719][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e2b000: abort rx timeout. Force session deactivation [ 177.364778][ T61] block nbd0: Receive control failed (result -104) [ 177.395153][ T6047] syz.2.70 (6047) used greatest stack depth: 19208 bytes left [ 179.163118][ T6061] syz.2.75 uses obsolete (PF_INET,SOCK_PACKET) [ 179.250481][ T6067] nbd1: detected capacity change from 0 to 63 [ 179.469154][ T61] block nbd1: Receive control failed (result -104) [ 181.411875][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061761000: rx timeout, send abort [ 181.531008][ T61] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 181.531901][ T61] Bluetooth: hci3: Injecting HCI hardware error event [ 181.533880][ T61] Bluetooth: hci3: hardware error 0x00 [ 181.550727][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061763c00: rx timeout, send abort [ 181.641382][ T6079] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 181.710200][ T6086] netlink: 'syz.4.72': attribute type 1 has an invalid length. [ 181.911983][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061761000: abort rx timeout. Force session deactivation [ 182.055971][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061763c00: abort rx timeout. Force session deactivation [ 183.046021][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806177d800: rx timeout, send abort [ 183.531094][ T4897] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 183.531339][ T4897] Bluetooth: hci0: Injecting HCI hardware error event [ 183.539368][ T4897] Bluetooth: hci0: hardware error 0x00 [ 183.945590][ T61] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 184.266433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806177d800: abort rx timeout. Force session deactivation [ 184.268914][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032360c00: rx timeout, send abort [ 184.994485][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032360c00: abort rx timeout. Force session deactivation [ 185.698861][ T6129] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 185.865493][ T5705] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 186.037442][ T5705] usb 3-1: not running at top speed; connect to a high speed hub [ 186.037489][ T5705] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 186.100561][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.100636][ T5705] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.100679][ T5705] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 186.141192][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.141222][ T5705] usb 3-1: Product: syz [ 186.141238][ T5705] usb 3-1: Manufacturer: syz [ 186.141254][ T5705] usb 3-1: SerialNumber: syz [ 186.270399][ T5705] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 186.270829][ T5705] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 186.270912][ T5705] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 186.273151][ T5705] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 186.314845][ T5705] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 186.331132][ T5705] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 186.344524][ T5705] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 186.355260][ T5705] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 186.368908][ T5705] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 186.371582][ T5705] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 186.392493][ T5705] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 187.647700][ T4897] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 187.690497][ C1] vcan0: j1939_tp_rxtimer: 0xffff888037005400: rx timeout, send abort [ 187.739525][ T5802] usb 3-1: USB disconnect, device number 3 [ 187.841995][ T5802] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 188.037831][ T5802] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 188.093354][ T5802] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 188.154810][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032aea400: rx timeout, send abort [ 188.190585][ C1] vcan0: j1939_tp_rxtimer: 0xffff888037005400: abort rx timeout. Force session deactivation [ 188.392738][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 188.744664][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032aea400: abort rx timeout. Force session deactivation [ 189.191933][ T5802] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 189.220592][ T5802] keyspan 3-1:1.0: device disconnected [ 190.371076][ T6160] nbd2: detected capacity change from 0 to 63 [ 191.468150][ T4897] block nbd2: Receive control failed (result -104) [ 192.221452][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880355bd000: rx timeout, send abort [ 192.221501][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803452bc00: rx timeout, send abort [ 192.721534][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880355bd000: abort rx timeout. Force session deactivation [ 192.721687][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803452bc00: abort rx timeout. Force session deactivation [ 193.927754][ T6188] mmap: syz.1.112 (6188) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.504103][ T4897] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 194.539135][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.539229][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.565516][ T4897] Bluetooth: hci4: Injecting HCI hardware error event [ 194.566778][ T61] Bluetooth: hci4: hardware error 0x00 [ 197.083382][ T6216] jffs2: notice: (6216) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 198.494583][ T6227] nbd3: detected capacity change from 0 to 63 [ 198.533615][ T5589] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 198.618845][ T4897] block nbd3: Receive control failed (result -104) [ 199.560513][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041ccbc00: rx timeout, send abort [ 199.796164][ T5802] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 199.798744][ T6246] program syz.3.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.906767][ T38] kauditd_printk_skb: 38 callbacks suppressed [ 199.906789][ T38] audit: type=1326 audit(1791972250.639:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2386ee2d9 code=0x7ffc0000 [ 199.906840][ T38] audit: type=1326 audit(1791972250.639:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2386ee2d9 code=0x7ffc0000 [ 199.911595][ T38] audit: type=1326 audit(1791972250.639:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2386ee2d9 code=0x7ffc0000 [ 199.911651][ T38] audit: type=1326 audit(1791972250.639:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2386ee2d9 code=0x7ffc0000 [ 199.911925][ T38] audit: type=1326 audit(1791972250.639:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe2386ee2d9 code=0x7ffc0000 [ 199.912480][ T38] audit: type=1326 audit(1791972250.639:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2386ee2d9 code=0x7ffc0000 [ 199.912531][ T38] audit: type=1326 audit(1791972250.639:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2386ee2d9 code=0x7ffc0000 [ 199.913203][ T38] audit: type=1326 audit(1791972250.639:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2386ee2d9 code=0x7ffc0000 [ 199.913917][ T38] audit: type=1326 audit(1791972250.639:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2386ee2d9 code=0x7ffc0000 [ 199.913967][ T38] audit: type=1326 audit(1791972250.639:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2386aeb0e code=0x7ffc0000 [ 200.004927][ T5802] usb 1-1: Using ep0 maxpacket: 16 [ 200.060607][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041ccbc00: abort rx timeout. Force session deactivation [ 200.062025][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803c20a800: rx timeout, send abort [ 200.125186][ T5802] usb 1-1: unable to get BOS descriptor or descriptor too short [ 200.125249][ T5802] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 200.155424][ T5802] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 200.280780][ T61] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 200.294402][ T5802] usb 1-1: string descriptor 0 read error: -22 [ 200.294552][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.328524][ T6256] IPv6: Can't replace route, no match found [ 200.415480][ T5703] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 200.562167][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803c20a800: abort rx timeout. Force session deactivation [ 200.595650][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.595713][ T5703] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 200.601681][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.617852][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 200.617883][ T5703] usb 3-1: Product: syz [ 200.617899][ T5703] usb 3-1: Manufacturer: syz [ 200.861961][ T5703] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 200.862061][ T5703] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 201.167644][ T5703] usb 3-1: USB disconnect, device number 4 [ 202.448855][ T6278] sctp: [Deprecated]: syz.1.134 (pid 6278) Use of int in maxseg socket option. [ 202.448855][ T6278] Use struct sctp_assoc_value instead [ 202.497788][ T6278] ip6gretap1: entered allmulticast mode [ 202.523888][ T6278] batman_adv: batadv0: Adding interface: ip6gretap1 [ 202.523904][ T6278] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.523929][ T6278] batman_adv: batadv0: Interface activated: ip6gretap1 [ 204.855456][ T5705] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 204.956862][ T5571] usb 1-1: USB disconnect, device number 5 [ 205.080738][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 205.084085][ T5705] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 205.103807][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.103837][ T5705] usb 3-1: Product: syz [ 205.103853][ T5705] usb 3-1: Manufacturer: syz [ 205.103870][ T5705] usb 3-1: SerialNumber: syz [ 205.142143][ T5705] usb 3-1: config 0 descriptor?? [ 205.169511][ T5705] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 205.357880][ T5705] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 205.358051][ T5705] visor 3-1:0.0: probe with driver visor failed with error -71 [ 205.390058][ T5705] usb 3-1: USB disconnect, device number 5 [ 205.801479][ T5818] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 205.975111][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b545400: rx timeout, send abort [ 206.151151][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 206.424687][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803c1ef000: rx timeout, send abort [ 206.490378][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b545400: abort rx timeout. Force session deactivation [ 206.718851][ T59] block nbd0: Possible stuck request ffff88802869e000: control (read@0,1024B). Runtime 30 seconds [ 206.723927][ T59] block nbd0: Possible stuck request ffff88802869e1c0: control (read@1024,1024B). Runtime 30 seconds [ 206.723970][ T59] block nbd0: Possible stuck request ffff88802869e380: control (read@2048,1024B). Runtime 30 seconds [ 206.724003][ T59] block nbd0: Possible stuck request ffff88802869e540: control (read@3072,1024B). Runtime 30 seconds [ 207.104312][ T6304] macvtap1: entered promiscuous mode [ 207.104567][ T6304] macvtap1: entered allmulticast mode [ 207.104584][ T6304] veth1_vlan: entered allmulticast mode [ 207.169039][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803c1ef000: abort rx timeout. Force session deactivation [ 207.282543][ T5818] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 207.287743][ T5818] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 207.287776][ T5818] usb 1-1: config 4 has no interface number 0 [ 207.287827][ T5818] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.287858][ T5818] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.287901][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.198364][ T5818] hub 1-1:4.128: USB hub found [ 208.199917][ T5818] hub 1-1:4.128: 27 ports detected [ 208.221619][ T5818] hub 1-1:4.128: Using single TT (err -22) [ 208.222150][ T5818] hub 1-1:4.128: insufficient power available to use all downstream ports [ 209.386741][ T5818] hub 1-1:4.128: config failed, can't get hub status (err -32) [ 209.674478][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.675149][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.722667][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.723465][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.908249][ T59] block nbd1: Possible stuck request ffff888028730000: control (read@0,1024B). Runtime 30 seconds [ 209.908300][ T59] block nbd1: Possible stuck request ffff8880287301c0: control (read@1024,1024B). Runtime 30 seconds [ 209.908326][ T59] block nbd1: Possible stuck request ffff888028730380: control (read@2048,2048B). Runtime 30 seconds [ 210.660703][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 211.161325][ T6333] macvtap1: entered promiscuous mode [ 211.161577][ T6333] macvtap1: entered allmulticast mode [ 211.161595][ T6333] veth1_vlan: entered allmulticast mode [ 214.870513][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d51d800: rx timeout, send abort [ 214.870563][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061066800: rx timeout, send abort [ 215.346861][ T5684] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 215.370598][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d51d800: abort rx timeout. Force session deactivation [ 215.370750][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061066800: abort rx timeout. Force session deactivation [ 215.510474][ T5684] usb 3-1: not running at top speed; connect to a high speed hub [ 215.510546][ T5684] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 215.511827][ T5684] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.511899][ T5684] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 215.514347][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.514374][ T5684] usb 3-1: Product: syz [ 215.514393][ T5684] usb 3-1: Manufacturer: syz [ 215.514410][ T5684] usb 3-1: SerialNumber: syz [ 215.666033][ T5684] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 215.666902][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 215.666983][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 215.672853][ T5684] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 215.714044][ T5684] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 215.734546][ T5684] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 215.752760][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 215.763063][ T5684] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 217.155808][ T5571] usb 3-1: USB disconnect, device number 6 [ 217.293188][ T5571] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 217.323471][ T5571] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 217.363059][ T5571] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 217.413064][ T5571] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 217.440659][ T5571] keyspan 3-1:1.0: device disconnected [ 217.580380][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 217.833206][ T6370] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 218.257576][ T4897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.295648][ T4897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.301582][ T4897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.303273][ T4897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.336764][ T4897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.704996][ T6375] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 218.745019][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 218.763261][ T9] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 218.763294][ T9] usb 2-1: Product: syz [ 218.798477][ T9] usb 2-1: config 0 descriptor?? [ 218.907104][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 218.913921][ T9] usb 2-1: Detected FT232H [ 222.276595][ T5589] Bluetooth: hci5: command tx timeout [ 222.364014][ T58] block nbd2: Possible stuck request ffff88802876e000: control (read@0,1024B). Runtime 30 seconds [ 222.364067][ T58] block nbd2: Possible stuck request ffff88802876e1c0: control (read@1024,1024B). Runtime 30 seconds [ 222.364099][ T58] block nbd2: Possible stuck request ffff88802876e380: control (read@2048,1024B). Runtime 30 seconds [ 222.364130][ T58] block nbd2: Possible stuck request ffff88802876e540: control (read@3072,1024B). Runtime 30 seconds [ 222.547191][ T6375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.713336][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 222.724485][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 222.733619][ T9] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 222.745956][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 222.757195][ T6376] bond1: (slave gretap1): making interface the new active one [ 222.826776][ T9] usb 2-1: USB disconnect, device number 6 [ 222.854771][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 222.867682][ T9] ftdi_sio 2-1:0.0: device disconnected [ 224.365474][ T4897] Bluetooth: hci5: command tx timeout [ 224.429948][ T4897] Bluetooth: hci1: command 0x0406 tx timeout [ 224.430144][ T4897] Bluetooth: hci2: command 0x0406 tx timeout [ 225.593773][ T6376] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 226.093242][ T5820] usb 1-1: USB disconnect, device number 6 [ 226.445092][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033234c00: rx timeout, send abort [ 226.821005][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068412000: rx timeout, send abort [ 226.958225][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033234c00: abort rx timeout. Force session deactivation [ 227.086784][ T61] Bluetooth: hci5: command tx timeout [ 227.322204][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068412000: abort rx timeout. Force session deactivation [ 229.239667][ T61] Bluetooth: hci5: command tx timeout [ 229.308243][ T58] block nbd3: Possible stuck request ffff8880287d5080: control (read@0,1024B). Runtime 30 seconds [ 229.308290][ T58] block nbd3: Possible stuck request ffff8880287d5240: control (read@1024,3072B). Runtime 30 seconds [ 229.343162][ T6425] Bluetooth: MGMT ver 1.23 [ 229.343209][ T6425] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 232.140374][ T6432] syz.3.175 (6432) used greatest stack depth: 17984 bytes left [ 232.461597][ T38] kauditd_printk_skb: 42 callbacks suppressed [ 232.461619][ T38] audit: type=1326 audit(1791972283.189:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 232.461671][ T38] audit: type=1326 audit(1791972283.189:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 232.462743][ T38] audit: type=1326 audit(1791972283.189:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 232.462796][ T38] audit: type=1326 audit(1791972283.189:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 232.462844][ T38] audit: type=1326 audit(1791972283.189:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 232.520556][ T38] audit: type=1326 audit(1791972283.189:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 232.642073][ T38] audit: type=1326 audit(1791972283.359:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 232.642139][ T38] audit: type=1326 audit(1791972283.359:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 232.751160][ T38] audit: type=1326 audit(1791972283.479:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 233.788181][ T38] audit: type=1326 audit(1791972284.519:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 237.002623][ T5860] block nbd0: Possible stuck request ffff88802869e000: control (read@0,1024B). Runtime 60 seconds [ 237.002675][ T5860] block nbd0: Possible stuck request ffff88802869e1c0: control (read@1024,1024B). Runtime 60 seconds [ 237.002705][ T5860] block nbd0: Possible stuck request ffff88802869e380: control (read@2048,1024B). Runtime 60 seconds [ 237.002733][ T5860] block nbd0: Possible stuck request ffff88802869e540: control (read@3072,1024B). Runtime 60 seconds [ 238.506376][ T4947] udevd[4947]: worker [6017] /devices/virtual/block/nbd0 is taking a long time [ 239.157515][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.159199][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.159470][ T6367] bridge_slave_0: entered allmulticast mode [ 239.199275][ T6367] bridge_slave_0: entered promiscuous mode [ 239.204537][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.204799][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.205009][ T6367] bridge_slave_1: entered allmulticast mode [ 239.250198][ T6367] bridge_slave_1: entered promiscuous mode [ 239.403617][ T6367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.422947][ T6367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.495548][ T6367] team0: Port device team_slave_0 added [ 239.499710][ T6367] team0: Port device team_slave_1 added [ 239.561675][ T6367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.561695][ T6367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.561724][ T6367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.612797][ T6367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.612816][ T6367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.612846][ T6367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.747507][ T6367] hsr_slave_0: entered promiscuous mode [ 239.750151][ T6367] hsr_slave_1: entered promiscuous mode [ 239.759808][ T6367] debugfs: 'hsr0' already exists in 'hsr' [ 239.759860][ T6367] Cannot create hsr debugfs directory [ 239.891980][ T6478] bond2: option lacp_rate: invalid value (5) [ 239.971244][ T6478] bond2 (unregistering): Released all slaves [ 240.015580][ T59] block nbd1: Possible stuck request ffff888028730000: control (read@0,1024B). Runtime 60 seconds [ 240.015633][ T59] block nbd1: Possible stuck request ffff8880287301c0: control (read@1024,1024B). Runtime 60 seconds [ 240.015668][ T59] block nbd1: Possible stuck request ffff888028730380: control (read@2048,2048B). Runtime 60 seconds [ 240.405927][ T6488] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 240.679188][ T6488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.794173][ T6491] bond2: (slave gretap2): making interface the new active one [ 240.866887][ T6491] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 241.542419][ T5818] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 241.618996][ T5820] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 241.698030][ T5818] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.16 [ 241.699416][ T5818] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 241.699478][ T5818] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid maxpacket 30768, setting to 1024 [ 241.699498][ T5818] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 1024 [ 241.704315][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.704335][ T5818] usb 3-1: Product: syz [ 241.704346][ T5818] usb 3-1: Manufacturer: syz [ 241.704357][ T5818] usb 3-1: SerialNumber: syz [ 241.810898][ T5820] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 241.812754][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 241.812788][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.812829][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.931259][ T5820] usb 4-1: config 0 descriptor?? [ 242.016282][ T5818] usb-storage 3-1:1.0: USB Mass Storage device detected [ 242.164852][ T5818] scsi host1: usb-storage 3-1:1.0 [ 242.416794][ T5818] usb 3-1: USB disconnect, device number 7 [ 243.675685][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 244.349193][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 244.349243][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 244.349272][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 244.349301][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 244.349357][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 244.349384][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 244.349410][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 244.434828][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 244.434873][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 244.434902][ T5820] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 247.180439][ T6367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.253240][ T5820] magicmouse 0003:05AC:0265.0001: hidraw0: USB HID v7f.fd Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 247.327561][ T5820] usb 4-1: USB disconnect, device number 4 [ 247.456979][ T5785] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 247.545716][ T6520] fido_id[6520]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:0265.0001/report_descriptor': No such device [ 247.645497][ T5785] usb 3-1: Using ep0 maxpacket: 16 [ 247.646412][ T5785] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 247.651204][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.651231][ T5785] usb 3-1: Product: syz [ 247.651247][ T5785] usb 3-1: Manufacturer: syz [ 247.651264][ T5785] usb 3-1: SerialNumber: syz [ 247.726937][ T6367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.789669][ T6367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.790944][ T5785] usb 3-1: config 0 descriptor?? [ 247.876384][ T5785] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 248.008993][ T6367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.054657][ T6367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.107307][ T5785] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 248.107450][ T5785] visor 3-1:0.0: probe with driver visor failed with error -71 [ 248.157379][ T5785] usb 3-1: USB disconnect, device number 8 [ 248.191826][ T6367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.248250][ T6367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.380002][ T6367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.281787][ T6367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.382420][ T6367] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.587809][ T6367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.587836][ T6367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.685587][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.704868][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.738735][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.738832][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.172657][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041c2c000: rx timeout, send abort [ 250.672751][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041c2c000: abort rx timeout. Force session deactivation [ 250.672883][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ae4fc00: rx timeout, send abort [ 250.698115][ T6548] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 251.103532][ T6548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.173004][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ae4fc00: abort rx timeout. Force session deactivation [ 251.264894][ T4947] udevd[4947]: worker [6018] /devices/virtual/block/nbd1 is taking a long time [ 251.265010][ T4947] udevd[4947]: worker [6036] /devices/virtual/block/nbd2 is taking a long time [ 251.421366][ T6550] bond1: (slave gretap1): making interface the new active one [ 251.443518][ T6550] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 251.607222][ T6557] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 251.730405][ T6557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.817403][ T58] block nbd2: Possible stuck request ffff88802876e000: control (read@0,1024B). Runtime 60 seconds [ 253.817453][ T58] block nbd2: Possible stuck request ffff88802876e1c0: control (read@1024,1024B). Runtime 60 seconds [ 253.817484][ T58] block nbd2: Possible stuck request ffff88802876e380: control (read@2048,1024B). Runtime 60 seconds [ 253.817515][ T58] block nbd2: Possible stuck request ffff88802876e540: control (read@3072,1024B). Runtime 60 seconds [ 254.001459][ T6561] bond3: (slave gretap3): making interface the new active one [ 254.020619][ T6561] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 254.671899][ T6367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.748035][ T6574] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 255.020836][ T6574] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20000 [ 255.667431][ T6367] veth0_vlan: entered promiscuous mode [ 255.735663][ T6367] veth1_vlan: entered promiscuous mode [ 255.871066][ T6367] veth0_macvtap: entered promiscuous mode [ 255.917916][ T6367] veth1_macvtap: entered promiscuous mode [ 255.980999][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.981063][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.169629][ T6367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.250386][ T6367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.553490][ T6592] overlayfs: overlapping lowerdir path [ 258.695492][ T1230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.695560][ T1230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.695600][ T1230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.695639][ T1230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.762007][ T5589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.810025][ T5589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.811690][ T5589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.832765][ T5589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.854767][ T5589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.989774][ T58] block nbd3: Possible stuck request ffff8880287d5080: control (read@0,1024B). Runtime 60 seconds [ 259.989826][ T58] block nbd3: Possible stuck request ffff8880287d5240: control (read@1024,3072B). Runtime 60 seconds [ 260.435603][ T6612] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 260.787127][ T6612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.953878][ T6614] bond1: (slave gretap1): making interface the new active one [ 260.997204][ T6614] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 261.146028][ T5589] Bluetooth: hci6: command tx timeout [ 261.359824][ T5871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.359850][ T5871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.662318][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.662345][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.230492][ T5589] Bluetooth: hci6: command tx timeout [ 264.703939][ T4947] udevd[4947]: worker [6144] /devices/virtual/block/nbd3 is taking a long time [ 265.306446][ T5589] Bluetooth: hci6: command tx timeout [ 265.547042][ T6653] Unsupported ieee802154 address type: 0 [ 266.990551][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 267.388263][ T5589] Bluetooth: hci6: command tx timeout [ 267.535495][ T59] block nbd0: Possible stuck request ffff88802869e000: control (read@0,1024B). Runtime 90 seconds [ 267.535557][ T59] block nbd0: Possible stuck request ffff88802869e1c0: control (read@1024,1024B). Runtime 90 seconds [ 267.535592][ T59] block nbd0: Possible stuck request ffff88802869e380: control (read@2048,1024B). Runtime 90 seconds [ 267.535626][ T59] block nbd0: Possible stuck request ffff88802869e540: control (read@3072,1024B). Runtime 90 seconds [ 269.955471][ T5703] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 270.075489][ T59] block nbd1: Possible stuck request ffff888028730000: control (read@0,1024B). Runtime 90 seconds [ 270.075540][ T59] block nbd1: Possible stuck request ffff8880287301c0: control (read@1024,1024B). Runtime 90 seconds [ 270.075573][ T59] block nbd1: Possible stuck request ffff888028730380: control (read@2048,2048B). Runtime 90 seconds [ 270.165392][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035588400: rx timeout, send abort [ 270.166910][ T5703] usb 2-1: not running at top speed; connect to a high speed hub [ 270.166952][ T5703] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 270.170531][ T5703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.170636][ T5703] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x81, skipping [ 270.170664][ T5703] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 270.251930][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.252019][ T5703] usb 2-1: Product: syz [ 270.252101][ T5703] usb 2-1: Manufacturer: syz [ 270.252471][ T5703] usb 2-1: SerialNumber: syz [ 270.426795][ T5703] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 270.459782][ T5703] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 270.460578][ T5703] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 270.513057][ T5703] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 270.666010][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035588400: abort rx timeout. Force session deactivation [ 270.669555][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803558a000: rx timeout, send abort [ 270.740865][ T5703] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 270.819776][ T5703] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 270.824987][ T5703] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 270.872910][ T5703] usb 2-1: USB disconnect, device number 7 [ 270.940292][ T5703] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 270.964804][ T5703] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 271.060967][ T5703] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 271.139964][ T5703] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 271.162464][ T5703] keyspan 2-1:1.0: device disconnected [ 271.169627][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803558a000: abort rx timeout. Force session deactivation [ 271.270466][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.272331][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.273029][ T6599] bridge_slave_0: entered allmulticast mode [ 271.285504][ T6599] bridge_slave_0: entered promiscuous mode [ 271.296424][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.298155][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.298386][ T6599] bridge_slave_1: entered allmulticast mode [ 271.317525][ T6599] bridge_slave_1: entered promiscuous mode [ 272.779115][ T6599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.801364][ T6599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.845714][ T5705] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 273.006369][ T5705] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 273.006441][ T5705] usb 3-1: too many configurations: 102, using maximum allowed: 8 [ 273.008596][ T5705] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 273.008629][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.008653][ T5705] usb 3-1: config 1 has no interface number 0 [ 273.010124][ T5705] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 273.010154][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.010177][ T5705] usb 3-1: config 1 has no interface number 0 [ 273.011417][ T5705] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 273.011446][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.011469][ T5705] usb 3-1: config 1 has no interface number 0 [ 273.013182][ T5705] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 273.013211][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.013235][ T5705] usb 3-1: config 1 has no interface number 0 [ 273.044509][ T5705] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 273.044541][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.044563][ T5705] usb 3-1: config 1 has no interface number 0 [ 273.057506][ T5705] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 273.057538][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.057561][ T5705] usb 3-1: config 1 has no interface number 0 [ 273.059188][ T5705] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 273.059216][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.059240][ T5705] usb 3-1: config 1 has no interface number 0 [ 273.106418][ T5705] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 273.106468][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.106493][ T5705] usb 3-1: config 1 has no interface number 0 [ 273.163201][ T5705] usb 3-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 273.163233][ T5705] usb 3-1: Product: syz [ 273.163249][ T5705] usb 3-1: Manufacturer: syz [ 273.163265][ T5705] usb 3-1: SerialNumber: syz [ 273.370182][ T6599] team0: Port device team_slave_0 added [ 273.394244][ T6599] team0: Port device team_slave_1 added [ 275.872613][ T5821] usb 3-1: USB disconnect, device number 9 [ 275.954897][ T6599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.954917][ T6599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.954946][ T6599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.075833][ T6599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.075853][ T6599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.075883][ T6599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.587011][ T6712] FAULT_INJECTION: forcing a failure. [ 276.587011][ T6712] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 276.587243][ T6712] CPU: 0 UID: 0 PID: 6712 Comm: syz.3.228 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 276.587276][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 276.587298][ T6712] Call Trace: [ 276.587307][ T6712] [ 276.587318][ T6712] dump_stack_lvl+0xe8/0x150 [ 276.587364][ T6712] should_fail_ex+0x46b/0x600 [ 276.587407][ T6712] _copy_from_user+0x2d/0xb0 [ 276.587433][ T6712] kstrtouint_from_user+0xd6/0x180 [ 276.587471][ T6712] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 276.587515][ T6712] ? lock_acquire+0x115/0x350 [ 276.587555][ T6712] proc_fail_nth_write+0x8e/0x210 [ 276.587589][ T6712] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 276.587632][ T6712] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 276.587664][ T6712] vfs_write+0x29f/0xbb0 [ 276.587705][ T6712] ? __pfx_vfs_write+0x10/0x10 [ 276.587738][ T6712] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.587774][ T6712] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 276.587805][ T6712] ? mutex_lock_nested+0x152/0x1d0 [ 276.587829][ T6712] ? fdget_pos+0x252/0x320 [ 276.587867][ T6712] ksys_write+0x156/0x270 [ 276.587900][ T6712] ? __pfx_ksys_write+0x10/0x10 [ 276.587944][ T6712] do_syscall_64+0x166/0x520 [ 276.587976][ T6712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.587999][ T6712] ? clear_bhb_loop+0x70/0xc0 [ 276.588028][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.588051][ T6712] RIP: 0033:0x7f034de1eb0e [ 276.588077][ T6712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 276.588096][ T6712] RSP: 002b:00007f034c094fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.588119][ T6712] RAX: ffffffffffffffda RBX: 00007f034c0956c0 RCX: 00007f034de1eb0e [ 276.588136][ T6712] RDX: 0000000000000001 RSI: 00007f034c0950a0 RDI: 0000000000000004 [ 276.588150][ T6712] RBP: 00007f034c095090 R08: 0000000000000000 R09: 0000000000000000 [ 276.588164][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.588184][ T6712] R13: 00007f034e0e6128 R14: 00007f034e0e6090 R15: 00007ffdc576b218 [ 276.588241][ T6712] [ 277.827285][ T6706] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 278.228766][ T6599] hsr_slave_0: entered promiscuous mode [ 278.237456][ T6599] hsr_slave_1: entered promiscuous mode [ 278.240198][ T6599] debugfs: 'hsr0' already exists in 'hsr' [ 278.240269][ T6599] Cannot create hsr debugfs directory [ 278.855570][ T5821] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 279.052619][ T5821] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.16 [ 279.054151][ T5821] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 279.054228][ T5821] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid maxpacket 30768, setting to 1024 [ 279.054257][ T5821] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 1024 [ 279.115318][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.115347][ T5821] usb 3-1: Product: syz [ 279.115362][ T5821] usb 3-1: Manufacturer: syz [ 279.115377][ T5821] usb 3-1: SerialNumber: syz [ 279.308471][ T5821] usb-storage 3-1:1.0: USB Mass Storage device detected [ 279.347050][ T5821] scsi host1: usb-storage 3-1:1.0 [ 279.513993][ T6599] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.578807][ T5703] usb 3-1: USB disconnect, device number 10 [ 279.620514][ T6599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.623550][ T6599] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.747693][ T6599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.750683][ T6599] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 279.831308][ T6599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.833080][ T6599] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 279.929992][ T6599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.137557][ T6599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.381662][ T6599] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.486644][ T6761] 9p: Bad value for 'wfdno' [ 282.561277][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.561419][ T6646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.614841][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.616340][ T6646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.829501][ T5712] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 282.995509][ T5712] usb 6-1: Using ep0 maxpacket: 16 [ 282.996380][ T5712] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 282.999010][ T5712] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 283.002447][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.002475][ T5712] usb 6-1: Product: syz [ 283.002491][ T5712] usb 6-1: Manufacturer: syz [ 283.002507][ T5712] usb 6-1: SerialNumber: syz [ 283.042834][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f14a000: rx timeout, send abort [ 283.198672][ T5712] r8152-cfgselector 6-1: Unknown version 0x0000 [ 283.198722][ T5712] r8152-cfgselector 6-1: config 0 descriptor?? [ 283.248064][ T6769] syz.3.240: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 283.248329][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 283.248348][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 283.248359][ T6769] Call Trace: [ 283.248365][ T6769] [ 283.248373][ T6769] dump_stack_lvl+0xe8/0x150 [ 283.248404][ T6769] warn_alloc+0x24d/0x270 [ 283.248436][ T6769] ? __pfx_warn_alloc+0x10/0x10 [ 283.248461][ T6769] ? xsk_setsockopt+0x52a/0x960 [ 283.248480][ T6769] ? __x64_sys_setsockopt+0x143/0x1b0 [ 283.248518][ T6769] __vmalloc_node_range_noprof+0x127/0x1540 [ 283.248565][ T6769] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.248591][ T6769] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 283.248618][ T6769] ? xskq_create+0x56/0x220 [ 283.248643][ T6769] xskq_create+0x148/0x220 [ 283.248668][ T6769] ? xsk_init_queue+0x8a/0xe0 [ 283.248690][ T6769] xsk_init_queue+0x8a/0xe0 [ 283.248711][ T6769] xsk_setsockopt+0x52a/0x960 [ 283.248733][ T6769] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.248762][ T6769] ? __fget_files+0x2a/0x420 [ 283.248786][ T6769] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 283.248805][ T6769] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.248826][ T6769] do_sock_setsockopt+0x17c/0x1b0 [ 283.248852][ T6769] __x64_sys_setsockopt+0x143/0x1b0 [ 283.248879][ T6769] do_syscall_64+0x166/0x520 [ 283.248904][ T6769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.248921][ T6769] ? clear_bhb_loop+0x70/0xc0 [ 283.248942][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.248958][ T6769] RIP: 0033:0x7f034de5e2d9 [ 283.248974][ T6769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.248987][ T6769] RSP: 002b:00007f034c074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.249004][ T6769] RAX: ffffffffffffffda RBX: 00007f034e0e6180 RCX: 00007f034de5e2d9 [ 283.249016][ T6769] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 283.249026][ T6769] RBP: 00007f034def5888 R08: 0000000000000004 R09: 0000000000000000 [ 283.249036][ T6769] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.249047][ T6769] R13: 00007f034e0e6218 R14: 00007f034e0e6180 R15: 00007ffdc576b218 [ 283.249073][ T6769] [ 283.249817][ T6769] Mem-Info: [ 283.249829][ T6769] active_anon:196 inactive_anon:20807 isolated_anon:0 [ 283.249829][ T6769] active_file:26448 inactive_file:37377 isolated_file:0 [ 283.249829][ T6769] unevictable:0 dirty:151 writeback:0 [ 283.249829][ T6769] slab_reclaimable:12161 slab_unreclaimable:107091 [ 283.249829][ T6769] mapped:41810 shmem:14496 pagetables:1402 [ 283.249829][ T6769] sec_pagetables:0 bounce:0 [ 283.249829][ T6769] kernel_misc_reclaimable:0 [ 283.249829][ T6769] free:1246707 free_pcp:3583 free_cma:0 [ 283.249873][ T6769] Node 0 active_anon:784kB inactive_anon:83228kB active_file:105604kB inactive_file:149508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167240kB dirty:604kB writeback:0kB shmem:57984kB kernel_stack:14600kB pagetables:5448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.249913][ T6769] Node 1 active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.249948][ T6769] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.249994][ T6769] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 283.250025][ T6769] Node 0 DMA32 free:1048108kB boost:0kB min:3900kB low:6412kB high:8924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:784kB inactive_anon:83228kB active_file:105604kB inactive_file:149508kB unevictable:0kB writepending:604kB zspages:8kB present:3129332kB managed:2540300kB mlocked:0kB bounce:0kB free_pcp:14332kB local_pcp:11524kB free_cma:0kB [ 283.250072][ T6769] lowmem_reserve[]: 0 0 1 1 1 [ 283.250101][ T6769] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1804kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.250153][ T6769] lowmem_reserve[]: 0 0 0 0 0 [ 283.250181][ T6769] Node 1 Normal free:3923360kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.250227][ T6769] lowmem_reserve[]: 0 0 0 0 0 [ 283.250259][ T6769] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.250595][ T6769] Node 0 DMA32: 363*4kB (ME) 144*8kB (UM) 146*16kB (UME) 193*32kB (ME) 336*64kB (ME) 248*128kB (ME) 99*256kB (UME) 30*512kB (M) 39*1024kB (M) 17*2048kB (UME) 212*4096kB (M) = 1048172kB [ 283.250734][ T6769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.250815][ T6769] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 6*16kB (UM) 7*32kB (UM) 5*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 956*4096kB (M) = 3923360kB [ 283.250941][ T6769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.250954][ T6769] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.250966][ T6769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.250979][ T6769] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.250991][ T6769] 78324 total pagecache pages [ 283.251003][ T6769] 7 pages in swap cache [ 283.251008][ T6769] Free swap = 124864kB [ 283.251014][ T6769] Total swap = 124996kB [ 283.251021][ T6769] 2097051 pages RAM [ 283.251027][ T6769] 0 pages HighMem/MovableOnly [ 283.251032][ T6769] 429909 pages reserved [ 283.251038][ T6769] 0 pages cma reserved [ 283.542934][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f14a000: abort rx timeout. Force session deactivation [ 283.543103][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f149c00: rx timeout, send abort [ 284.043214][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f149c00: abort rx timeout. Force session deactivation [ 284.146301][ T58] block nbd2: Possible stuck request ffff88802876e000: control (read@0,1024B). Runtime 90 seconds [ 284.146352][ T58] block nbd2: Possible stuck request ffff88802876e1c0: control (read@1024,1024B). Runtime 90 seconds [ 284.146384][ T58] block nbd2: Possible stuck request ffff88802876e380: control (read@2048,1024B). Runtime 90 seconds [ 284.146415][ T58] block nbd2: Possible stuck request ffff88802876e540: control (read@3072,1024B). Runtime 90 seconds [ 284.285630][ T5712] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 286.305941][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060c42000: rx timeout, send abort [ 286.806035][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060c42000: abort rx timeout. Force session deactivation [ 286.865980][ T6599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.869836][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802dc97800: rx timeout, send abort [ 286.923338][ T6805] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 286.984193][ T6805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.997847][ T5818] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 287.146515][ T5818] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 287.165923][ T5818] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.165957][ T5818] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 287.214390][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 287.214422][ T5818] usb 6-1: Product: syz [ 287.214439][ T5818] usb 6-1: Manufacturer: syz [ 287.298953][ T5818] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 287.343911][ T5818] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 287.369910][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802dc97800: abort rx timeout. Force session deactivation [ 287.414111][ T6807] bond2: (slave gretap2): making interface the new active one [ 287.451859][ T6807] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 287.533825][ T5684] usb 6-1: USB disconnect, device number 3 [ 287.620506][ T5684] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 287.621604][ T5684] iuu_phoenix 6-1:1.0: device disconnected [ 290.087848][ T6599] veth0_vlan: entered promiscuous mode [ 290.134158][ T6835] FAULT_INJECTION: forcing a failure. [ 290.134158][ T6835] name failslab, interval 1, probability 0, space 0, times 1 [ 290.134196][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.5.253 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.134221][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 290.134234][ T6835] Call Trace: [ 290.134243][ T6835] [ 290.134253][ T6835] dump_stack_lvl+0xe8/0x150 [ 290.134299][ T6835] should_fail_ex+0x46b/0x600 [ 290.134343][ T6835] should_failslab+0xa8/0x100 [ 290.134377][ T6835] kmem_cache_alloc_node_noprof+0xac/0x660 [ 290.134413][ T6835] ? __alloc_skb+0x1db/0x7a0 [ 290.134439][ T6835] ? __alloc_skb+0x1db/0x7a0 [ 290.134472][ T6835] __alloc_skb+0x1db/0x7a0 [ 290.134504][ T6835] netlink_sendmsg+0x5d4/0xb40 [ 290.134550][ T6835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.134588][ T6835] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 290.134618][ T6835] ? __kernel_text_address+0xd/0x30 [ 290.134645][ T6835] ? unwind_get_return_address+0x4d/0x90 [ 290.134677][ T6835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.134710][ T6835] sock_sendmsg_nosec+0x13a/0x180 [ 290.134736][ T6835] ____sys_sendmsg+0x565/0x870 [ 290.134779][ T6835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.134822][ T6835] ? import_iovec+0x73/0xa0 [ 290.134851][ T6835] ___sys_sendmsg+0x2a5/0x360 [ 290.134883][ T6835] ? __lock_acquire+0x747/0x2de0 [ 290.134919][ T6835] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.134992][ T6835] ? __fget_files+0x2a/0x420 [ 290.135019][ T6835] ? __fget_files+0x3a8/0x420 [ 290.135059][ T6835] __x64_sys_sendmsg+0x1b7/0x290 [ 290.135107][ T6835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.135160][ T6835] do_syscall_64+0x166/0x520 [ 290.135191][ T6835] ? trace_irq_disable+0x3b/0x140 [ 290.135222][ T6835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.135245][ T6835] ? clear_bhb_loop+0x70/0xc0 [ 290.135272][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.135294][ T6835] RIP: 0033:0x7f9af5fae2d9 [ 290.135314][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.135333][ T6835] RSP: 002b:00007f9af4206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.135356][ T6835] RAX: ffffffffffffffda RBX: 00007f9af6235fa0 RCX: 00007f9af5fae2d9 [ 290.135379][ T6835] RDX: 000000000000c040 RSI: 0000200000000080 RDI: 0000000000000003 [ 290.135392][ T6835] RBP: 00007f9af4206090 R08: 0000000000000000 R09: 0000000000000000 [ 290.135405][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.135418][ T6835] R13: 00007f9af6236038 R14: 00007f9af6235fa0 R15: 00007ffdab8244e8 [ 290.135453][ T6835] [ 290.481417][ T6599] veth1_vlan: entered promiscuous mode [ 290.545822][ T58] block nbd3: Possible stuck request ffff8880287d5080: control (read@0,1024B). Runtime 90 seconds [ 290.545881][ T58] block nbd3: Possible stuck request ffff8880287d5240: control (read@1024,3072B). Runtime 90 seconds [ 290.585580][ T5684] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 290.727937][ T6599] veth0_macvtap: entered promiscuous mode [ 290.747301][ T5684] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.16 [ 290.752017][ T5684] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 290.752093][ T5684] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid maxpacket 30768, setting to 1024 [ 290.752124][ T5684] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 1024 [ 290.810717][ T6599] veth1_macvtap: entered promiscuous mode [ 290.825941][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.825972][ T5684] usb 3-1: Product: syz [ 290.825989][ T5684] usb 3-1: Manufacturer: syz [ 290.826006][ T5684] usb 3-1: SerialNumber: syz [ 290.923338][ T5684] usb-storage 3-1:1.0: USB Mass Storage device detected [ 290.957243][ T5684] scsi host1: usb-storage 3-1:1.0 [ 291.089372][ T6599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.153307][ T6599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.294006][ T6645] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.348322][ T6645] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.355713][ T87] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.355768][ T87] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.382362][ T10] usb 3-1: USB disconnect, device number 11 [ 293.312969][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805da4b400: rx timeout, send abort [ 293.349854][ T6644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.349879][ T6644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.374438][ T6857] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 293.481995][ T6857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.711984][ T6860] bond3: (slave gretap3): making interface the new active one [ 293.813058][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805da4b400: abort rx timeout. Force session deactivation [ 293.813238][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802aea3000: rx timeout, send abort [ 293.813783][ T6860] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 294.091595][ T6650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.091622][ T6650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.313310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802aea3000: abort rx timeout. Force session deactivation [ 296.323571][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.385879][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.392121][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.421489][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.423989][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.613738][ T59] block nbd0: Possible stuck request ffff88802869e000: control (read@0,1024B). Runtime 120 seconds [ 297.613982][ T59] block nbd0: Possible stuck request ffff88802869e1c0: control (read@1024,1024B). Runtime 120 seconds [ 297.614096][ T59] block nbd0: Possible stuck request ffff88802869e380: control (read@2048,1024B). Runtime 120 seconds [ 297.614208][ T59] block nbd0: Possible stuck request ffff88802869e540: control (read@3072,1024B). Runtime 120 seconds [ 298.587351][ T5589] Bluetooth: hci3: command tx timeout [ 301.385890][ T5589] Bluetooth: hci3: command tx timeout [ 301.467207][ T59] block nbd1: Possible stuck request ffff888028730000: control (read@0,1024B). Runtime 120 seconds [ 301.467279][ T59] block nbd1: Possible stuck request ffff8880287301c0: control (read@1024,1024B). Runtime 120 seconds [ 301.467313][ T59] block nbd1: Possible stuck request ffff888028730380: control (read@2048,2048B). Runtime 120 seconds [ 303.229085][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 303.396536][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 303.402036][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 303.403074][ T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 303.403093][ T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 303.403109][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 303.403144][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 303.403160][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 303.403178][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.403194][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 303.403210][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 303.403241][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.469058][ T5589] Bluetooth: hci3: command tx timeout [ 303.558039][ T9] usb 7-1: config 0 descriptor?? [ 305.552687][ T5589] Bluetooth: hci3: command tx timeout [ 305.647021][ T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 305.806009][ T9] usb 7-1: USB disconnect, device number 2 [ 305.905581][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 306.020763][ T9] usblp0: removed [ 306.206690][ T5712] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 306.213876][ T5838] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 306.219767][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.365417][ T5712] usb 6-1: Using ep0 maxpacket: 32 [ 306.366380][ T5712] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 306.395096][ T5838] usb 2-1: config 0 descriptor?? [ 306.514531][ T5712] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 306.514627][ T5712] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 306.514652][ T5712] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 306.514705][ T5712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.514796][ T5712] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 306.514823][ T5712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.514844][ T5712] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 306.514870][ T5712] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 306.514986][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.874968][ T5712] usb 6-1: config 0 descriptor?? [ 307.005781][ T5838] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 307.009608][ T5838] [drm:udl_init] *ERROR* Selecting channel failed [ 307.338126][ T5712] usb 6-1: can't set config #0, error -71 [ 307.392167][ T5712] usb 6-1: USB disconnect, device number 4 [ 308.174931][ T5838] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 308.174962][ T5838] [drm] Initialized udl on minor 1 [ 308.444208][ T5838] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 308.569208][ T6951] binder: 6948:6951 ioctl 4018620d 0 returned -22 [ 308.717983][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 308.718032][ T38] audit: type=1326 audit(1791972359.369:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 308.718146][ T38] audit: type=1326 audit(1791972359.369:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 308.718352][ T38] audit: type=1326 audit(1791972359.379:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 308.718609][ T38] audit: type=1326 audit(1791972359.379:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 308.718865][ T38] audit: type=1326 audit(1791972359.379:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 308.719070][ T38] audit: type=1326 audit(1791972359.389:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 308.719155][ T38] audit: type=1326 audit(1791972359.389:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 308.719456][ T38] audit: type=1326 audit(1791972359.399:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 308.719712][ T38] audit: type=1326 audit(1791972359.399:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 308.720009][ T38] audit: type=1326 audit(1791972359.399:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.1.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 309.430163][ T5838] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 309.805484][ T5838] usb 2-1: USB disconnect, device number 8 [ 310.667599][ T6959] binder: 6955:6959 ioctl 4018620d 0 returned -22 [ 314.455577][ T5868] block nbd2: Possible stuck request ffff88802876e000: control (read@0,1024B). Runtime 120 seconds [ 314.455629][ T5868] block nbd2: Possible stuck request ffff88802876e1c0: control (read@1024,1024B). Runtime 120 seconds [ 314.455663][ T5868] block nbd2: Possible stuck request ffff88802876e380: control (read@2048,1024B). Runtime 120 seconds [ 314.455693][ T5868] block nbd2: Possible stuck request ffff88802876e540: control (read@3072,1024B). Runtime 120 seconds [ 314.853868][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.861059][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.861236][ T6871] bridge_slave_0: entered allmulticast mode [ 314.863428][ T6871] bridge_slave_0: entered promiscuous mode [ 314.930726][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.931585][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.931748][ T6871] bridge_slave_1: entered allmulticast mode [ 314.964545][ T6871] bridge_slave_1: entered promiscuous mode [ 315.267373][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.315720][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.571655][ T6871] team0: Port device team_slave_0 added [ 315.593706][ T6871] team0: Port device team_slave_1 added [ 317.860694][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.860777][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.410502][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.410523][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.410551][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.473717][ T6995] Zero length message leads to an empty skb [ 318.548288][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.548308][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.548338][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.635526][ T5838] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 318.787249][ T5838] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 318.795750][ T5838] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 318.796135][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.811219][ T5838] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 318.811303][ T5838] usb 6-1: Manufacturer: syz [ 318.868087][ T5838] usb 6-1: config 0 descriptor?? [ 319.025368][ T5838] rc_core: IR keymap rc-hauppauge not found [ 319.025390][ T5838] Registered IR keymap rc-empty [ 319.063424][ T5838] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 319.106430][ T6871] hsr_slave_0: entered promiscuous mode [ 319.127936][ T6871] hsr_slave_1: entered promiscuous mode [ 319.155742][ T6871] debugfs: 'hsr0' already exists in 'hsr' [ 319.155773][ T6871] Cannot create hsr debugfs directory [ 319.218068][ T5838] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 319.301957][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.313641][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.855431][ T5802] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 319.961567][ T5684] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 320.697366][ T5802] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 320.704911][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.046175][ T5868] block nbd3: Possible stuck request ffff8880287d5080: control (read@0,1024B). Runtime 120 seconds [ 321.046229][ T5868] block nbd3: Possible stuck request ffff8880287d5240: control (read@1024,3072B). Runtime 120 seconds [ 321.166449][ T5785] usb 6-1: USB disconnect, device number 5 [ 321.195442][ T5684] usb 7-1: not running at top speed; connect to a high speed hub [ 321.195487][ T5684] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 321.242435][ T5684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.242467][ T5684] usb 7-1: Product: syz [ 321.242494][ T5684] usb 7-1: Manufacturer: syz [ 321.242509][ T5684] usb 7-1: SerialNumber: syz [ 321.418375][ T5684] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 321.460715][ T5684] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 321.497540][ T5684] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 321.540602][ T5802] dln2 2-1:1.0: USB write failed: -110 [ 321.562273][ T5802] dln2 2-1:1.0: failed to initialize hardware [ 321.568352][ T5802] dln2 2-1:1.0: probe with driver dln2 failed with error -110 [ 323.140318][ T5684] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 323.169621][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.172397][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.229366][ T5802] usb 2-1: USB disconnect, device number 9 [ 323.364748][ T5684] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 323.448480][ T5684] usb 7-1: USB disconnect, device number 3 [ 324.499218][ T5684] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 324.741856][ T5684] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 324.883724][ T5684] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 324.913595][ T5684] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 324.915161][ T5684] keyspan 7-1:1.0: device disconnected [ 324.942699][ T7048] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 324.951924][ T7049] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.677076][ T59] block nbd0: Possible stuck request ffff88802869e000: control (read@0,1024B). Runtime 150 seconds [ 327.677127][ T59] block nbd0: Possible stuck request ffff88802869e1c0: control (read@1024,1024B). Runtime 150 seconds [ 327.677158][ T59] block nbd0: Possible stuck request ffff88802869e380: control (read@2048,1024B). Runtime 150 seconds [ 327.677188][ T59] block nbd0: Possible stuck request ffff88802869e540: control (read@3072,1024B). Runtime 150 seconds [ 327.896894][ T5785] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 327.973328][ T6871] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 329.141916][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.216891][ T6871] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 329.248332][ T5785] usb 7-1: device not accepting address 4, error -71 [ 329.432958][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.448756][ T6871] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 329.556281][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.669080][ T6871] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 329.810856][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.755141][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.071283][ T6871] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.176556][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.179880][ T6647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.247429][ T59] block nbd1: Possible stuck request ffff888028730000: control (read@0,1024B). Runtime 150 seconds [ 332.247484][ T59] block nbd1: Possible stuck request ffff8880287301c0: control (read@1024,1024B). Runtime 150 seconds [ 332.247518][ T59] block nbd1: Possible stuck request ffff888028730380: control (read@2048,2048B). Runtime 150 seconds [ 332.469070][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.474248][ T6647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.802061][ T5785] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 334.618203][ T5785] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 334.635033][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.876271][ T5785] dln2 3-1:1.0: USB write failed: -110 [ 334.901198][ T5785] dln2 3-1:1.0: failed to initialize hardware [ 334.918577][ T5838] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 334.963661][ T5785] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 335.145568][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 335.148034][ T5838] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 335.153073][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.153108][ T5838] usb 6-1: Product: syz [ 335.153125][ T5838] usb 6-1: Manufacturer: syz [ 335.153140][ T5838] usb 6-1: SerialNumber: syz [ 335.225499][ T5838] usb 6-1: config 0 descriptor?? [ 335.253435][ T5838] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 335.324548][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.334823][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.433601][ T5838] usb 6-1: clie_3_5_startup: get config number bad return length: 0 [ 335.433775][ T5838] visor 6-1:0.0: probe with driver visor failed with error -5 [ 335.669527][ T5838] usb 6-1: USB disconnect, device number 6 [ 337.833289][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.978242][ T5802] usb 3-1: USB disconnect, device number 12 [ 340.877998][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f145c00: rx timeout, send abort [ 341.202998][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.251833][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.299332][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.302279][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.329376][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.378105][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f145c00: abort rx timeout. Force session deactivation [ 341.378289][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061226c00: rx timeout, send abort [ 341.781229][ T7147] overlayfs: overlapping lowerdir path [ 341.854108][ T6647] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.878387][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061226c00: abort rx timeout. Force session deactivation [ 342.406509][ T7160] binder: 7156:7160 ioctl 4018620d 0 returned -22 [ 342.557025][ T38] kauditd_printk_skb: 127 callbacks suppressed [ 342.557073][ T38] audit: type=1326 audit(1791972393.219:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 342.557329][ T38] audit: type=1326 audit(1791972393.219:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 342.557597][ T38] audit: type=1326 audit(1791972393.229:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 342.557670][ T38] audit: type=1326 audit(1791972393.229:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 342.557995][ T38] audit: type=1326 audit(1791972393.229:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 342.558216][ T38] audit: type=1326 audit(1791972393.229:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 342.558502][ T38] audit: type=1326 audit(1791972393.229:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 342.558627][ T38] audit: type=1326 audit(1791972393.239:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 342.558677][ T38] audit: type=1326 audit(1791972393.239:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 342.558981][ T38] audit: type=1326 audit(1791972393.239:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.1.329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 343.810895][ T61] Bluetooth: hci6: command tx timeout [ 344.794755][ T7174] binder: 7170:7174 ioctl 4018620d 0 returned -22 [ 345.720623][ T5868] block nbd2: Possible stuck request ffff88802876e000: control (read@0,1024B). Runtime 150 seconds [ 345.720678][ T5868] block nbd2: Possible stuck request ffff88802876e1c0: control (read@1024,1024B). Runtime 150 seconds [ 345.720712][ T5868] block nbd2: Possible stuck request ffff88802876e380: control (read@2048,1024B). Runtime 150 seconds [ 345.720745][ T5868] block nbd2: Possible stuck request ffff88802876e540: control (read@3072,1024B). Runtime 150 seconds [ 345.720803][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 345.932250][ T61] Bluetooth: hci6: command tx timeout [ 346.227854][ T6647] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.401370][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.336'. [ 347.804516][ T7191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.334'. [ 347.845457][ T7190] macvtap1: entered promiscuous mode [ 347.851046][ T7190] macvtap1: entered allmulticast mode [ 347.851082][ T7190] veth1_vlan: entered allmulticast mode [ 347.931327][ T6871] veth0_vlan: entered promiscuous mode [ 347.945385][ T5589] Bluetooth: hci6: command tx timeout [ 348.143230][ T6871] veth1_vlan: entered promiscuous mode [ 349.514302][ T5821] input: syz0 as /devices/virtual/misc/uhid/0005:FFFFFFF0:7FFF.0002/input/input6 [ 350.036083][ T5589] Bluetooth: hci6: command tx timeout [ 350.864466][ T5821] hid-generic 0005:FFFFFFF0:7FFF.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 351.395673][ T5868] block nbd3: Possible stuck request ffff8880287d5080: control (read@0,1024B). Runtime 150 seconds [ 351.395728][ T5868] block nbd3: Possible stuck request ffff8880287d5240: control (read@1024,3072B). Runtime 150 seconds [ 351.555927][ T6647] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.679999][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.340'. [ 354.637439][ T7237] binder: 7225:7237 ioctl 4018620d 0 returned -22 [ 354.744480][ T38] kauditd_printk_skb: 309 callbacks suppressed [ 354.744530][ T38] audit: type=1326 audit(1791972405.439:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 354.744586][ T38] audit: type=1326 audit(1791972405.439:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 354.894724][ T38] audit: type=1326 audit(1791972405.439:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 354.895040][ T38] audit: type=1326 audit(1791972405.439:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 354.895091][ T38] audit: type=1326 audit(1791972405.439:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 354.895439][ T38] audit: type=1326 audit(1791972405.439:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 354.895725][ T38] audit: type=1326 audit(1791972405.439:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 354.896017][ T38] audit: type=1326 audit(1791972405.449:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 354.896124][ T38] audit: type=1326 audit(1791972405.449:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 354.896206][ T38] audit: type=1326 audit(1791972405.449:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faf1733e2d9 code=0x7ffc0000 [ 355.032725][ T6647] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.805125][ T4947] udevd[4947]: worker [6017] /devices/virtual/block/nbd0 timeout; kill it [ 356.805321][ T4947] udevd[4947]: seq 10678 '/devices/virtual/block/nbd0' killed [ 357.825504][ T59] block nbd0: Possible stuck request ffff88802869e000: control (read@0,1024B). Runtime 180 seconds [ 357.825559][ T59] block nbd0: Possible stuck request ffff88802869e1c0: control (read@1024,1024B). Runtime 180 seconds [ 357.825593][ T59] block nbd0: Possible stuck request ffff88802869e380: control (read@2048,1024B). Runtime 180 seconds [ 357.825625][ T59] block nbd0: Possible stuck request ffff88802869e540: control (read@3072,1024B). Runtime 180 seconds [ 358.892115][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.351'. [ 358.905890][ T7252] macvtap2: entered promiscuous mode [ 358.905911][ T7252] macvtap2: entered allmulticast mode [ 358.964586][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.043239][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.058543][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.100971][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.104685][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.278399][ T39] INFO: task syz.4.131:6260 blocked for more than 143 seconds. [ 360.278469][ T39] Not tainted syzkaller #0 [ 360.278483][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.278544][ T39] task:syz.4.131 state:D stack:27184 pid:6260 tgid:6259 ppid:5582 task_flags:0x400140 flags:0x00080002 [ 360.278626][ T39] Call Trace: [ 360.278636][ T39] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 360.278691][ T39] __schedule+0x16d9/0x5700 [ 360.278834][ T39] ? __pfx___schedule+0x10/0x10 [ 360.278911][ T39] ? __pfx___schedule+0x10/0x10 [ 360.279035][ T39] rt_mutex_schedule+0x76/0xf0 [ 360.279104][ T39] rt_mutex_slowlock_block+0x55e/0x690 [ 360.279184][ T39] ? rt_mutex_slowlock_block+0x33c/0x690 [ 360.279257][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 360.279340][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 360.279407][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 360.279516][ T39] ? sync_bdevs+0x276/0x470 [ 360.279971][ T39] mutex_lock_nested+0x168/0x1d0 [ 360.280009][ T39] sync_bdevs+0x276/0x470 [ 360.283114][ T39] __ia32_s ** replaying previous printk message ** [ 360.283114][ T39] __ia32_sys_sync+0xc5/0x120 [ 360.284497][ T39] ? __pfx___ia32_sys_sync+0x10/0x10 [ 360.310926][ T39] ? do_syscall_64+0xc8/0x520 [ 360.311017][ T39] do_syscall_64+0x166/0x520 [ 360.311053][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.311090][ T39] ? clear_bhb_loop+0x70/0xc0 [ 360.311157][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.311232][ T39] RIP: 0033:0x7ff8d2ace2d9 [ 360.311299][ T39] RSP: 002b:00007ff8d0d26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 360.311361][ T39] RAX: ffffffffffffffda RBX: 00007ff8d2d55fa0 RCX: 00007ff8d2ace2d9 [ 360.311381][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.311440][ T39] RBP: 00007ff8d2d55fa0 R08: 0000000000000000 R09: 0000000000000000 [ 360.311457][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.311472][ T39] R13: 00007ff8d2d56038 R14: 00007ff8d2d55fa0 R15: 00007ffde1e8b9f8 [ 360.311589][ T39] [ 360.311796][ T39] [ 360.311796][ T39] Showing all locks held in the system: [ 360.311810][ T39] locks held by pr/ttyS0/17: 2, last CPU#0: [ 360.311874][ T39] #0: ffffffff8f09d818 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 360.311974][ T39] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 360.312164][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 360.312220][ T39] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 360.312343][ T39] locks held by kworker/0:1H/59: 8, last CPU#0: [ 360.312395][ T39] #0: ffff88813ff2b538 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.312539][ T39] #1: ffffc9000125fc40 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.312749][ T39] #2: ffff8880331948d8 (&grp->list_mutex/1){.+.+}-{4:4}, at: rt_spin_lock+0x1e2/0x400 [ 360.313221][ T39] #3: ffff88806181c108 (&q->lock){+.+.}-{3:3}, at: rt_spin_lock+0x1e2/0x400 [ 360.315636][ T39] #4: ffff88807ff270b0 (&runtime->sleep){+.+.}-{3:3}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 360.316063][ T39] #5: ffff8880b8424548 (psi_seq){-...}-{0:0}, at: psi_task_change+0xc9/0x320 [ 360.324247][ T39] #6: ffff8880b8424548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 360.324304][ T39] #7: ffff8880b8424548 (psi_seq){-...}-{0:0}, at: psi_task_change+0xc9/0x320 [ 360.324371][ T39] locks held by kworker/u8:7/1123: 4, on CPU#1: [ 360.324404][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.324472][ T39] #1: ffffc90006b0fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.324538][ T39] #2: ffff8880621a0938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 360.324595][ T39] #3: ffff88813fffc2d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xc5f/0x2600 [ 360.324654][ T39] locks held by kworker/u8:8/1135: 5, last CPU#0: [ 360.324671][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.324735][ T39] #1: ffff8880b8424548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 360.324796][ T39] #2: ffff8880b84262d8 (&base->lock){-...}-{2:2}, at: __mod_timer+0x922/0xf10 [ 360.331789][ T39] #3: ffffffff9ae33f30 (&obj_hash[i].lock){-...}-{2:2}, at: debug_object_activate+0xa8/0x3b0 [ 360.331946][ T39] #4: ffff8880603294e0 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 360.332153][ T39] locks held by klogd/4936: 1, last CPU#1: [ 360.332197][ T39] #0: ffff88801b75deb8 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 360.379467][ T39] locks held by udevd/4947: 1, last CPU#0: [ 360.379533][ T39] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 360.379759][ T39] locks held by getty/5336: 2, on CPU#1: [ 360.379804][ T39] #0: ffff888036c6a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 360.380162][ T39] #1: ffffc900044eb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 360.380324][ T39] locks held by syz-executor/5568: 4, last CPU#1: [ 360.380367][ T39] #0: ffff888012b2b7b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 360.380538][ T39] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 360.380700][ T39] #2: ffff88803c20fc58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 360.380883][ T39] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 360.392641][ T39] locks held by kworker/1:4/5685: 2, last CPU#1: [ 360.392697][ T39] #0: ffff88813ff2b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.392837][ T39] #1: ffffc900060c7c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.392987][ T39] locks held by kworker/1:6/5802: 2, last CPU#1: [ 360.393005][ T39] #0: ffff88813ff2b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.393121][ T39] #1: ffffc900064a7c40 (pcpu_balance_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.393262][ T39] locks held by kworker/u8:12/5870: 5, last CPU#1: [ 360.393320][ T39] #0: ffff8880338de138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.393439][ T39] #1: ffffc9000669fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.393637][ T39] #2: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: cfg80211_wiphy_work+0xb4/0x420 [ 360.471152][ T39] #3: ffff8880b8529410 ((lock)#3){+.+.}-{3:3}, at: kcov_remote_start+0xeb/0x730 [ 360.471228][ T39] #4: ffff8880b843c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 360.471349][ T39] locks held by udevd/6017: 1, on CPU#0: [ 360.471368][ T39] #0: ffff88802866b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 360.471522][ T39] locks held by udevd/6018: 1, on CPU#0: [ 360.471540][ T39] #0: ffff88802866c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 360.510886][ T39] locks held by udevd/6036: 1, on CPU#1: [ 360.510943][ T39] #0: ffff8880286fc4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 360.511095][ T39] locks held by udevd/6144: 1, on CPU#1: [ 360.511145][ T39] #0: ffff88802871c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 360.511257][ T39] locks held by syz.4.131/6260: 1, on CPU#1: [ 360.511273][ T39] #0: ffff88802871c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 360.511450][ T39] locks held by syz-executor/6367: 1, last CPU#1: [ 360.511468][ T39] #0: ffff888033c00510 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 360.511673][ T39] locks held by syz.0.189/6492: 1, on CPU#0: [ 360.511691][ T39] #0: ffff88802871c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 360.511850][ T39] locks held by kworker/u8:15/6644: 8, last CPU#1: [ 360.511906][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.512028][ T39] #1: ffffc90010d17c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.512186][ T39] #2: ffff88803c71a310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 360.512338][ T39] #3: ffff8880278d3d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 360.512551][ T39] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 360.512650][ T39] #5: ffff8880b8540e98 ((&pcs->lock)){+.+.}-{3:3}, at: __kmalloc_node_track_caller_noprof+0x32a/0x7b0 [ 360.512790][ T39] #6: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 360.538281][ T39] #7: ffff8880b8524548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 360.538473][ T39] locks held by kworker/u8:16/6645: 6, last CPU#1: [ 360.538530][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.538675][ T39] #1: ffffc9000f9a7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.538764][ T39] #2: ffff888021f9c310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 360.538970][ T39] #3: ffff888060329520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 360.539116][ T39] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 360.539276][ T39] #5: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 360.539444][ T39] locks held by kworker/u8:18/6647: 9, last CPU#1: [ 360.539495][ T39] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.539611][ T39] #1: ffffc90010d47c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.539722][ T39] #2: ffffffff905c8040 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 360.539850][ T39] #3: ffff8880600c2160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 360.539984][ T39] #4: ffff888036d8c310 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 360.540137][ T39] #5: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x87f/0x1160 [ 360.541042][ T39] #6: ffff888062c69060 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: register_netdevice+0x1892/0x1ed0 [ 360.579414][ T39] #7: ffffffff9b05b9c0 (&net->mpls.platform_mutex){+.+.}-{4:4}, at: mpls_dev_notify+0x82/0xd30 [ 360.579554][ T39] #8: ffff8880b8543418 (&pcp->lock){+.+.}-{3:3}, at: __free_frozen_pages+0x7b2/0x1070 [ 360.579758][ T39] locks held by syz-executor/6871: 2, last CPU#1: [ 360.579777][ T39] #0: ffffffff9097fdb8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 360.579889][ T39] #1: ffffffff90645998 (nl_table_wait.lock){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1f0 [ 360.580043][ T39] locks held by syz-executor/7142: 1, on CPU#0: [ 360.580093][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 360.580207][ T39] locks held by syz-executor/7259: 1, on CPU#0: [ 360.580270][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 360.580388][ T39] locks held by syz.2.355/7272: 3, last CPU#1: [ 360.580405][ T39] #0: ffff88802c3337b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 360.580585][ T39] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 360.580660][ T39] #2: ffff88803d9c1118 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 360.584072][ T39] locks held by syz.2.355/7273: 3, on CPU#0: [ 360.584136][ T39] #0: ffffffff90647d80 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 360.584309][ T39] #1: ffffffff90647b98 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 360.584444][ T39] #2: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x22a/0x650 [ 360.584569][ T39] locks held by syz.2.355/7276: 1, last CPU#1: [ 360.584626][ T39] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 360.584813][ T39] [ 360.584821][ T39] ============================================= [ 360.584821][ T39] [ 360.584868][ T39] NMI backtrace for cpu 1 [ 360.584907][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 360.584935][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.584954][ T39] Call Trace: [ 360.584964][ T39] [ 360.584975][ T39] dump_stack_lvl+0xe8/0x150 [ 360.585015][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 360.585043][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.585071][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 360.585103][ T39] sys_info+0x135/0x170 [ 360.585126][ T39] watchdog+0xfd7/0x1030 [ 360.585168][ T39] ? watchdog+0x1c7/0x1030 [ 360.585214][ T39] kthread+0x38b/0x470 [ 360.585238][ T39] ? __pfx_watchdog+0x10/0x10 [ 360.585268][ T39] ? __pfx_kthread+0x10/0x10 [ 360.585293][ T39] ret_from_fork+0x514/0xb70 [ 360.585322][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 360.585346][ T39] ? __switch_to+0xc89/0x1420 [ 360.585382][ T39] ? __pfx_kthread+0x10/0x10 [ 360.585407][ T39] ret_from_fork_asm+0x1a/0x30 [ 360.585449][ T39] [ 360.585532][ T39] Sending NMI from CPU 1 to CPUs 0: [ 360.585569][ C0] NMI backtrace for cpu 0 [ 360.585584][ C0] CPU: 0 UID: 0 PID: 7274 Comm: syz.1.354 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 360.585605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.585623][ C0] RIP: 0010:lockdep_hardirqs_on+0x86/0x110 [ 360.585654][ C0] Code: 48 8b 83 e8 0b 00 00 48 3b 83 00 0c 00 00 75 67 49 89 fe 48 c7 c7 02 00 8c 8d e8 d5 1d 00 00 65 c7 05 f2 19 4c 08 01 00 00 00 <4c> 89 b3 b0 0b 00 00 8b 83 a8 0b 00 00 ff c0 89 83 a8 0b 00 00 89 [ 360.585671][ C0] RSP: 0018:ffffc9002427f8b0 EFLAGS: 00000002 [ 360.585687][ C0] RAX: 0000000000000000 RBX: ffff88802c239f40 RCX: 8000000000000002 [ 360.585701][ C0] RDX: 0000000000000006 RSI: ffffffff8d8c0002 RDI: ffffffff8bcc6980 [ 360.585714][ C0] RBP: ffffc9002427f998 R08: ffffffff90b2397f R09: 1ffffffff216472f [ 360.585728][ C0] R10: dffffc0000000000 R11: fffffbfff2164730 R12: 1ffff9200484ff25 [ 360.585743][ C0] R13: 0000000000000246 R14: ffffffff8b5e0c40 R15: ffffc9002427f920 [ 360.585756][ C0] FS: 00007faf155756c0(0000) GS:ffff8881249bb000(0000) knlGS:0000000000000000 [ 360.585773][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.585785][ C0] CR2: 0000200000001000 CR3: 000000005b76a000 CR4: 00000000003526f0 [ 360.585803][ C0] Call Trace: [ 360.585810][ C0] [ 360.585819][ C0] _raw_spin_unlock_irqrestore+0x30/0x80 [ 360.585846][ C0] rt_spin_lock+0x17a/0x400 [ 360.585869][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 360.585887][ C0] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 360.585910][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 360.585942][ C0] snd_rawmidi_kernel_write1+0xb1/0x620 [ 360.585965][ C0] ? rt_spin_unlock+0x159/0x200 [ 360.585987][ C0] ? rt_spin_unlock+0x165/0x200 [ 360.586009][ C0] snd_rawmidi_write+0x5bc/0xbc0 [ 360.586039][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 360.586071][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 360.586095][ C0] ? __import_iovec+0x40b/0x7e0 [ 360.586118][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 360.586140][ C0] ? security_file_permission+0x75/0x260 [ 360.586169][ C0] ? rw_verify_area+0x209/0x4d0 [ 360.586194][ C0] vfs_writev+0x4c4/0x990 [ 360.586212][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 360.586242][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 360.586268][ C0] ? __fget_files+0x2a/0x420 [ 360.586294][ C0] ? __fget_files+0x3a8/0x420 [ 360.586315][ C0] ? __fget_files+0x2a/0x420 [ 360.586341][ C0] do_writev+0x15a/0x2e0 [ 360.586359][ C0] ? __pfx_do_writev+0x10/0x10 [ 360.586383][ C0] do_syscall_64+0x166/0x520 [ 360.586408][ C0] ? trace_irq_disable+0x3b/0x140 [ 360.586433][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.586451][ C0] ? clear_bhb_loop+0x70/0xc0 [ 360.586472][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.586490][ C0] RIP: 0033:0x7faf1733e2d9 [ 360.586506][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.586521][ C0] RSP: 002b:00007faf15575028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 360.586539][ C0] RAX: ffffffffffffffda RBX: 00007faf175c6090 RCX: 00007faf1733e2d9 [ 360.586552][ C0] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: 0000000000000006 [ 360.586563][ C0] RBP: 00007faf173d5888 R08: 0000000000000000 R09: 0000000000000000 [ 360.586575][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.586586][ C0] R13: 00007faf175c6128 R14: 00007faf175c6090 R15: 00007ffd58e6ca88 [ 360.586609][ C0] [ 360.704706][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 360.707389][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 360.710032][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 362.264146][ T39] Call Trace: [ 362.267481][ T39] [ 362.270417][ T39] vpanic+0x56d/0xa60 [ 362.274404][ T39] ? __pfx_vpanic+0x10/0x10 [ 362.278912][ T39] ? irqentry_exit+0x218/0x920 [ 362.283715][ T39] panic+0xc5/0xd0 [ 362.287438][ T39] ? __pfx_panic+0x10/0x10 [ 362.291870][ T39] watchdog+0x1030/0x1030 [ 362.296236][ T39] ? watchdog+0x1c7/0x1030 [ 362.300669][ T39] kthread+0x38b/0x470 [ 362.304738][ T39] ? __pfx_watchdog+0x10/0x10 [ 362.309430][ T39] ? __pfx_kthread+0x10/0x10 [ 362.314050][ T39] ret_from_fork+0x514/0xb70 [ 362.318670][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 362.323781][ T39] ? __switch_to+0xc89/0x1420 [ 362.328469][ T39] ? __pfx_kthread+0x10/0x10 [ 362.333082][ T39] ret_from_fork_asm+0x1a/0x30 [ 362.337857][ T39] [ 362.341493][ T39] Kernel Offset: disabled [ 362.345848][ T39] Rebooting in 86400 seconds..