last executing test programs: 14m9.285340803s ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xec1af57558979226, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f99fae00"}, 0x0, 0x2, {0x0}, 0x20002}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) 14m2.478426026s ago: executing program 3 (id=26): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x22e, 0x43ba}}, @wr_crn={0x46, 0x20, {0x0, 0x8}}, @wrmsr={0x1e, 0x20, {0xbc2, 0xda}}, @wr_crn={0x46, 0x20, {0x2, 0xffffffff}}], 0x80}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f0000000300)={{0xd000, 0x0, 0x0, 0xf, 0xff, 0x8, 0x80, 0x9b, 0x8, 0x3, 0xb, 0x7f}, {0x100000, 0x5000, 0x3, 0x8, 0x9, 0xff, 0x4, 0x8, 0x52, 0xd, 0x5, 0x1}, {0x2, 0xeeee0000, 0x9, 0x6, 0x0, 0x7, 0x4, 0x7, 0x6, 0xf7, 0x8, 0xbe}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x2, 0x96, 0x80, 0x6b, 0x5, 0x2, 0xf7, 0x5}, {0x0, 0x3000, 0x0, 0xb, 0x9, 0x7, 0x29, 0x9, 0xd, 0x0, 0x1, 0x9}, {0xffff1000, 0xdddd0000, 0x9, 0x7, 0x2, 0x5, 0x7, 0x6, 0x4, 0x6, 0x9, 0x5}, {0x2000, 0xeeef0000, 0x8, 0x2, 0x70, 0xc, 0x4, 0x4, 0x9, 0x0, 0x0, 0x80}, {0x2000, 0x6000, 0x4, 0xf2, 0x4, 0x5, 0x8, 0xfc, 0x81, 0x3, 0x5, 0x4}, {0x10000, 0xbc92}, {0xe6e4a000, 0xfff7}, 0x80040038, 0x0, 0x4, 0x620360, 0xe, 0x4000, 0x1000, 0x0, [0x9, 0x4, 0x3, 0x6]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)='T', 0x1, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000006d00010025007000fddbdf250000000014a4"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r5) sendto$inet6(r4, &(0x7f00000002c0)='\x00', 0x1, 0x40, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={r8}, 0x8) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x208, 0x12, 0x100, 0x0}) 13m58.582788386s ago: executing program 3 (id=30): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 13m57.163668527s ago: executing program 3 (id=34): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000010c0)=0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)=0xff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) 13m52.50778355s ago: executing program 3 (id=35): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000240)=@ieee802154={0x24, @short}, 0xfffffffffffffd2f, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/117, 0x75}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f00000004c0)=""/181, 0xb2}], 0x3, &(0x7f00000001c0)=""/17, 0x11}, 0x7}], 0x1, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4002}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) 13m51.43363474s ago: executing program 3 (id=40): unshare(0x60480) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x18010, 0x0) unshare(0x20000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') 13m35.884640874s ago: executing program 32 (id=40): unshare(0x60480) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x18010, 0x0) unshare(0x20000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') 13m7.122288213s ago: executing program 1 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) epoll_create1(0x0) (async) r0 = epoll_create1(0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)={0x10000000}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x0, 0xcf, 0x8, 0x7, 0x3, 0x6, 0x13f, 0x27f, 0x40, 0x13f, 0x5, 0xfffc, 0x38, 0x1, 0x5, 0x1f}, [{0x3, 0x2, 0x9, 0xf, 0x2, 0xfffffffffffffff9, 0xe, 0x371}], "5b0cb335b2bd7427c55fdd6096038b0286f074c596db44fa5de10e16f846f932083a7e09a60935db12719e7d434dff2ad68930d958bd684f2bb3fa0a22fa3136f79b6fcd953ad3b21175e626fe63020ed4d574ff99dd2051b8d4b6b920991f5ccb0472f70e244c726f5c03cc36920d37a928096a5697d9226c4b9d0e2608636efa0e777c8dc65b98e768bfc1689261c711fde3a065e386b1bfb0f83b043a251a41d95131c29187954848", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb22) socket(0xa, 0x5, 0x0) (async) r4 = socket(0xa, 0x5, 0x0) listen(r4, 0x100) (async) listen(r4, 0x100) sendmsg$inet_sctp(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000008400000006"], 0x18, 0x48d1}, 0x1) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f00000007c0)={0x12, "e0e1e9fefc4ce6426d7b78e25b3c8db588a67394b7973f4d2567b0d565dd9174f85339efd0c22f46a7721482e15debc733a8da4b299dfc52fef0527cd154506a612453785f0e77bb280748720e940e01af3ab7241ece32b7f568861bcace6c762e8e604b063aa142e3a8f6d584a8d55c74b218c1264a625ba3923a3fc4dbd7f1"}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32, @ANYBLOB="140001"], 0x34}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) (async) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) socketpair$unix(0x1, 0x94372d24c0a0021a, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) (async) r9 = socket$inet6(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3) sendto$inet6(r9, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r9, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) 13m6.375897071s ago: executing program 1 (id=118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@private1, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 1) 13m5.833548061s ago: executing program 1 (id=119): syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$netlink(0x10, 0x3, 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) 13m5.526919599s ago: executing program 1 (id=120): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005b3296adcf2676ff590006000000000000000001008000"/37], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008090) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406c256e0000000000000109022400010000000009042000010300220009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000049500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r4, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0x34, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) (async) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000ac0)={@private, @private, 0x0}, &(0x7f0000000b00)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x29, 0xf, 0x2, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x40, 0xe99a, 0x3}}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20f6ffff6700e97802000000000000000a0004000000000008000500", @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c00)={'erspan0\x00', 0x0, 0x7, 0x1, 0x10001, 0x5, {{0x37, 0x4, 0x2, 0x5, 0xdc, 0x65, 0x0, 0x89, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x9, "ef977b349842f9"}, {0x2, 0xf, "2a7326128e8182d79b43562692"}, {0x0, 0x4, "619c"}, {0x6, 0x6, "4081537d"}]}, @noop, @lsrr={0x83, 0xf, 0xfd, [@private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_addr={0x44, 0x44, 0x56, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x6484}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x36ad}, {@multicast2, 0x4}, {@empty, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x170}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x1ff}]}, @timestamp_addr={0x44, 0x2c, 0xe9, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xb495}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}, {@private=0xa010101, 0xffffffc0}]}, @lsrr={0x83, 0x1b, 0x49, [@rand_addr=0x64010101, @rand_addr=0x64010101, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) (async) r13 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f00000000c0)={0x1d, r14, 0x8000000000000002}, 0x18) (async) bind$can_j1939(r13, &(0x7f00000000c0)={0x1d, r14, 0x0, {0x0, 0x0, 0x1}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r4, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000e40)=[0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000000ec0)=[{}, {}], 0x10, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) (async) r18 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x3f, 0x21, 0x0, r20}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x432}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001100)={0x4f4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6c}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x4}}, {{0x8, 0x1, r16}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x400c045}, 0x24000040) 13m1.400889554s ago: executing program 1 (id=129): r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x280080) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xfffffffffffffffe, {0x1, 0x2, 0xa, 0x4, 0x6, 0xde32, {0x5, 0x2000000000000002, 0x1000b, 0x100000a, 0x3, 0xfffffffffffffffe, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, r6, r7, 0x7, 0xffffff96}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getresgid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r10 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = socket(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendto(r12, &(0x7f0000004200)="9ea0c15b7cd645f66777c2f08b8ced194aca492b542eddc07f91a168e6deda63566bab9e6523f89403469e7dd7c55f905409622a5a3a79c5da66cb6be6f04c95105cce8383caeb7fc5d5fac806571297b7b99414b2261e76add49c816f8c40829c", 0x61, 0x80, &(0x7f0000004280)=@pppoe={0x18, 0x0, {0x2, @empty, 'veth1_virt_wifi\x00'}}, 0x80) sendmsg$nl_route_sched(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r16, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r17, r17) getresgid(&(0x7f0000002380), &(0x7f00000023c0)=0x0, &(0x7f0000002400)) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000002440)={{}, {0x1, 0xa}, [{0x2, 0x2, r1}, {0x2, 0x7}, {0x2, 0x1, r3}, {0x2, 0x0, r6}], {0x4, 0x5}, [{0x8, 0x6, r8}, {0x8, 0x0, r9}, {0x8, 0x4, r10}, {0x8, 0x1, r11}, {0x8, 0x2, r17}, {0x8, 0x1, r18}], {0x10, 0x5}, {0x20, 0x5}}, 0x74, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) 13m1.057996311s ago: executing program 2 (id=131): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x101) 12m59.487501873s ago: executing program 2 (id=135): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x21}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aae638005b"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) 12m58.03150594s ago: executing program 2 (id=137): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0x4, 0x7, 0x400) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1, 0x0, 0x333abdda, 0x401}) 12m57.618006401s ago: executing program 1 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1c, 0x7, @empty, 0x7}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0xd73fb73019f9dff3, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd, 0x9}, {0xfff3, 0xb}, {0x5, 0x3}}, [{0x4}]}, 0x28}}, 0x4008050) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='loginuid\x00') writev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r6, @ANYBLOB="000600000000000024001280110001006272696467655f736c617665000000000c0005800500190062000000"], 0x44}}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="6465660100000065"]) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000f80)=[@rdmsr={0x32, 0x18, {0xa47}}, @code={0x1, 0x80, {"4239558548b807000000000000000f23c00f21f835010004000f23f865400f7939c4c21d030d2a00000066b807008ec066b880000f00d0410f01cb2e0f00818000c0fe66baf80cb8f48e4f85ef66bafc0c66b8eb0066ef48b802000000000000000f23d80f21f835400000e00f23f8"}}, @uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0x3fc}}, @uexit={0x0, 0x18, 0x6}], 0xe0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 12m56.896468917s ago: executing program 2 (id=140): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe800000000000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 12m55.356048491s ago: executing program 2 (id=141): openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='zonefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000001b80)=[{{&(0x7f0000001540)={0xa, 0x4e21, 0x0, @private2, 0x803}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000010c0)="b3", 0x1}], 0x1}}], 0x1, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) 12m52.987969168s ago: executing program 2 (id=142): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x36, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) getsockname$unix(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0xffffffffffffff35, &(0x7f0000000000)={0x20, 0xa, 0x10, {0x10, 0x24, "7b60dc86fe066b529740ae13b132"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0xffffffffffffff35, &(0x7f0000000000)={0x20, 0xa, 0x10, {0x10, 0x24, "7b60dc86fe066b529740ae13b132"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffe}) setpriority(0x1, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000004000180d0000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000004000180d0000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) mmap(&(0x7f00003c6000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f00003c6000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 12m42.364813376s ago: executing program 33 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1c, 0x7, @empty, 0x7}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0xd73fb73019f9dff3, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd, 0x9}, {0xfff3, 0xb}, {0x5, 0x3}}, [{0x4}]}, 0x28}}, 0x4008050) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='loginuid\x00') writev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r6, @ANYBLOB="000600000000000024001280110001006272696467655f736c617665000000000c0005800500190062000000"], 0x44}}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="6465660100000065"]) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000f80)=[@rdmsr={0x32, 0x18, {0xa47}}, @code={0x1, 0x80, {"4239558548b807000000000000000f23c00f21f835010004000f23f865400f7939c4c21d030d2a00000066b807008ec066b880000f00d0410f01cb2e0f00818000c0fe66baf80cb8f48e4f85ef66bafc0c66b8eb0066ef48b802000000000000000f23d80f21f835400000e00f23f8"}}, @uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0x3fc}}, @uexit={0x0, 0x18, 0x6}], 0xe0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 12m37.284509813s ago: executing program 34 (id=142): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x36, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) getsockname$unix(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0xffffffffffffff35, &(0x7f0000000000)={0x20, 0xa, 0x10, {0x10, 0x24, "7b60dc86fe066b529740ae13b132"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0xffffffffffffff35, &(0x7f0000000000)={0x20, 0xa, 0x10, {0x10, 0x24, "7b60dc86fe066b529740ae13b132"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffe}) setpriority(0x1, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000004000180d0000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000004000180d0000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) mmap(&(0x7f00003c6000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f00003c6000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 9m54.34562422s ago: executing program 0 (id=361): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082b0100000000000000000800000000000000fe8000000000000000000000000000aaff"], 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 9m54.260138923s ago: executing program 0 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x470c, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0xffffffff) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40040010}, 0x0) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "9c"}, 0xc) write$smackfs_load(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="5b207472616e734a66642c20ed"], 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x20, 0x87, 0x0, 0x1, [@nested={0x1c, 0x56, 0x0, 0x1, [@typed={0x4, 0x34}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}]}, 0x34}}, 0x0) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) 9m52.907955135s ago: executing program 0 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 9m51.609689899s ago: executing program 0 (id=367): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aae638005b"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 9m50.26513946s ago: executing program 0 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x19, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) ustat(0x11, 0x0) 9m48.770457936s ago: executing program 0 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0009000000000000007a31000000003c00048018000180080001006c6f67000c00028008000540ffffff0820000180070001007274000014000280080002400000000108000140000000100900020073797a3200000000140000001100010000000000000000000100000a"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(r0) unshare(0x40040000) 9m33.625171764s ago: executing program 35 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0009000000000000007a31000000003c00048018000180080001006c6f67000c00028008000540ffffff0820000180070001007274000014000280080002400000000108000140000000100900020073797a3200000000140000001100010000000000000000000100000a"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(r0) unshare(0x40040000) 6m26.730543485s ago: executing program 8 (id=524): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x200, 0x80080) fsopen(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, r0, 0x3, 0x5, 0x4}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x7, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xfc, &(0x7f00000002c0)=""/252, 0x41100, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x0, 0x101, 0xc90}, 0x10, 0x19993, 0xffffffffffffffff, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000740)=[{0x0, 0x2}, {0x1, 0x4, 0x6, 0x2}, {0x4, 0x4, 0x8, 0x7}], 0x10, 0x2}, 0x94) 6m26.349530589s ago: executing program 8 (id=527): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x68, 0x5f, 0x0, 0x6, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x20, 0x10, 0x3}}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000400)={@private0, r2}, 0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x100000000000023e) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RWALK(r4, &(0x7f0000000300)={0x30, 0x6f, 0x1, {0x3, [{0x50, 0x4, 0x3}, {0x1, 0x1, 0x3}, {0x20, 0x3, 0x2}]}}, 0x30) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x9, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x7ff, 0xff, 0x1, {0x22, 0x632}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0xc, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x4, 0x10}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x14, 0x6, 0xca, 0xff, 0xbf}, 0x12, &(0x7f0000000140)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xb, 0x3, 0x3ff}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x415}}, {0x1e, &(0x7f00000001c0)=@string={0x1e, 0x3, "3ab9434cf6a7afda029301c537c733b36b7f24c4a3e571c279ceae4a"}}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x68, 0x5f, 0x0, 0x6, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x20, 0x10, 0x3}}) (async) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000400)={@private0, r2}, 0x14) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) (async) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x100000000000023e) (async) pipe2$9p(&(0x7f00000002c0), 0x80800) (async) write$P9_RWALK(r4, &(0x7f0000000300)={0x30, 0x6f, 0x1, {0x3, [{0x50, 0x4, 0x3}, {0x1, 0x1, 0x3}, {0x20, 0x3, 0x2}]}}, 0x30) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x9, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) (async) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x7ff, 0xff, 0x1, {0x22, 0x632}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0xc, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x4, 0x10}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x14, 0x6, 0xca, 0xff, 0xbf}, 0x12, &(0x7f0000000140)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xb, 0x3, 0x3ff}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x415}}, {0x1e, &(0x7f00000001c0)=@string={0x1e, 0x3, "3ab9434cf6a7afda029301c537c733b36b7f24c4a3e571c279ceae4a"}}]}) (async) 6m22.286180481s ago: executing program 8 (id=533): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r1 = getpid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) sched_setaffinity(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(0x0, 0x80800) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d59, 0x12d5c}}, 0x44) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0}, &(0x7f0000000c80), &(0x7f0000000cc0)=r4}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m16.290604178s ago: executing program 8 (id=540): syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0xfffc, 0x3, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8077a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x4, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="fe", 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x10000006, 0x4) 6m13.911103996s ago: executing program 8 (id=543): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000200001030000000000fe4480000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x71) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x40000010) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getxattr(&(0x7f00000013c0)='.\x00', &(0x7f0000001400)=@known='system.posix_acl_default\x00', 0x0, 0x0) 6m10.701576641s ago: executing program 8 (id=549): r0 = syz_io_uring_setup(0x2666, &(0x7f0000000240)={0x0, 0x7736, 0x1ff, 0xefffffff, 0x3c3}, &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/{ys/kCrn0l/debug/sync/inf\x8c\x00'}, 0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) fcntl$setsig(r1, 0xa, 0x11) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000400000000008400000000000010ff0700000300000018000000000000008400000007000000ffffffff00000000"], 0x30, 0x14001}], 0x1, 0x4044040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x38}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0) 5m55.4006381s ago: executing program 36 (id=549): r0 = syz_io_uring_setup(0x2666, &(0x7f0000000240)={0x0, 0x7736, 0x1ff, 0xefffffff, 0x3c3}, &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/{ys/kCrn0l/debug/sync/inf\x8c\x00'}, 0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) fcntl$setsig(r1, 0xa, 0x11) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000400000000008400000000000010ff0700000300000018000000000000008400000007000000ffffffff00000000"], 0x30, 0x14001}], 0x1, 0x4044040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x38}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0) 5m30.912053846s ago: executing program 4 (id=604): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000950000001e000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x21}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aae638005b"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) 5m28.330628692s ago: executing program 4 (id=609): mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a44a, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r2) r4 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={'md5\x00'}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'netdevsim0\x00', @random="010000201000"}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1a, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xffffffff}, 0x50) syz_open_dev$MSR(&(0x7f0000000080), 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)={0x40, 0xf, 0x6, "59d11c5f2cc0"}, 0x0, 0x0, 0x0, 0x0}) 5m24.988265738s ago: executing program 4 (id=615): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f7", 0x8}], 0x1) 5m24.925283687s ago: executing program 4 (id=616): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c010000190001000000000000000000ac141418000000000000000000000000fc02000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000100000000000000000000000000000000000000000000000000fffffffffffffffff8ffffffffffffff000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000004000000000000000000000000000000ff0200000000000000000000000000010000000033"], 0x13c}}, 0x0) syz_emit_ethernet(0x396, &(0x7f0000000c80)=ANY=[@ANYBLOB="0180c20000050180c200000286dd6000000003603afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) 5m24.647273066s ago: executing program 4 (id=618): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000950000001e000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x21}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aae638005b"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) 5m21.753970628s ago: executing program 6 (id=622): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x4, 0x9, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009532ee20b0955fbd19252d38da49399610b61c9a48f3b77b9797b76f1364fd9883673c7904c2d98616befeac6077fb4d2dbe590b2c26f0c1bbfe54b11573aeaea02b1b9886bc851e86a38890eac1"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(r4, 0x0, 0x78) mkdir(&(0x7f0000000100)='./cgroup/../file0/file0\x00', 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb2, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="a3", 0x1}], 0x1}, 0x20008850) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='sched_switch\x00', r6, 0x0, 0xffffffffffffffff}, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 5m20.033511547s ago: executing program 6 (id=624): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x19, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) ustat(0x11, 0x0) 5m19.923158863s ago: executing program 7 (id=625): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (fail_nth: 1) 5m18.734593859s ago: executing program 7 (id=626): openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='zonefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000001b80)=[{{&(0x7f0000001540)={0xa, 0x4e21, 0x0, @private2, 0x803}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000010c0)="b3", 0x1}], 0x1}}], 0x1, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) 5m17.650658617s ago: executing program 4 (id=628): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x1, {0x1, 0x1}, {0x2, 0x0, 0x2}, 0x0, 0xff}, {0x2, 0x2, {0x0, 0xff, 0x4}, {0x0, 0x1, 0x1}, 0xfe, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x2}}, {0x3, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x5}, 0x0, 0xff}, {0x3, 0x2, {0x0, 0xff, 0x3}, {0x2, 0x1, 0x2}, 0x0, 0xfe}], 0xa0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000009c0)={0x2, &(0x7f0000000700)=[{0x6, 0x40, 0x1, 0xff}, {0xf23b, 0x79, 0x40}]}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_socket_connect_nvme_tcp() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r7) r8 = syz_open_procfs(r6, &(0x7f0000000100)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) recvmsg$inet_nvme(r5, &(0x7f00000005c0)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000540)=""/128, 0x80}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000780)=""/187, 0xbb}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x8, &(0x7f00000008c0)=""/233, 0xe9}, 0x12101) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {0x0, 0xfff3}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5m17.401959319s ago: executing program 7 (id=629): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5m16.091898745s ago: executing program 6 (id=630): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x0, 0x100, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r3, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000340)={0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x66642a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 5m10.091646525s ago: executing program 6 (id=632): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x5085, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xd30, 0x0, 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) bind$alg(r8, 0x0, 0x0) r11 = accept4(r8, 0x0, 0x0, 0x800) socket$inet6_sctp(0xa, 0x801, 0x84) recvmsg(r11, 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) dup3(r2, r0, 0x80000) 5m3.119379827s ago: executing program 6 (id=635): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x4000007ff}) 5m2.923166881s ago: executing program 7 (id=637): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000950000001e000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x21}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aae638005b"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) 5m2.43259402s ago: executing program 6 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r5, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x24, 0x30, 0x1, 0x0, 0x8000000, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m1.544908573s ago: executing program 37 (id=628): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x1, {0x1, 0x1}, {0x2, 0x0, 0x2}, 0x0, 0xff}, {0x2, 0x2, {0x0, 0xff, 0x4}, {0x0, 0x1, 0x1}, 0xfe, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x2}}, {0x3, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x5}, 0x0, 0xff}, {0x3, 0x2, {0x0, 0xff, 0x3}, {0x2, 0x1, 0x2}, 0x0, 0xfe}], 0xa0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000009c0)={0x2, &(0x7f0000000700)=[{0x6, 0x40, 0x1, 0xff}, {0xf23b, 0x79, 0x40}]}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_socket_connect_nvme_tcp() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r7) r8 = syz_open_procfs(r6, &(0x7f0000000100)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) recvmsg$inet_nvme(r5, &(0x7f00000005c0)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000540)=""/128, 0x80}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000780)=""/187, 0xbb}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x8, &(0x7f00000008c0)=""/233, 0xe9}, 0x12101) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {0x0, 0xfff3}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5m1.487277878s ago: executing program 7 (id=640): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 4m56.66909711s ago: executing program 7 (id=642): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0xfffffffffffffffe, 0x4008090) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x91d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x7, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) (async, rerun: 64) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) (async, rerun: 64) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x6c143, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000000000008, 0x129002) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa88a8080081004800080045000020fffe0000a02f9078ef31424195d1f2618a2b"], 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11e, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '1X[Z;Iag', "2abec5da054aa16c5886601c9ff606fd9a798e095f7ef9ff690d2a53e87a6250", "10c6c302", "4902000000841d00"}, 0x38) 4m44.72588511s ago: executing program 38 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r5, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x24, 0x30, 0x1, 0x0, 0x8000000, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m41.038095856s ago: executing program 39 (id=642): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0xfffffffffffffffe, 0x4008090) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x91d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x7, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) (async, rerun: 64) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) (async, rerun: 64) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x6c143, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000000000008, 0x129002) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa88a8080081004800080045000020fffe0000a02f9078ef31424195d1f2618a2b"], 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11e, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '1X[Z;Iag', "2abec5da054aa16c5886601c9ff606fd9a798e095f7ef9ff690d2a53e87a6250", "10c6c302", "4902000000841d00"}, 0x38) 6.863344455s ago: executing program 5 (id=841): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e41626f39a8279c18b630b2f155457ad8d2737df16c824e42ac78f6971b15a583c9b378971f75a42dd46c967192197392c8dada830aa30ecdcc2219274afba70cccb770304b8d55695a814223896da2348d8b7819f8f85a7fb2e8632000000c9fa35ed57dfd2a82dcd1dd4e43435ca3ed3e49a444fb7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) socket$packet(0x11, 0x3, 0x300) socket$kcm(0xa, 0x3, 0x3a) read$FUSE(r2, &(0x7f0000003b00)={0x2020}, 0x2020) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7e) close_range(r2, r6, 0x0) 5.236081571s ago: executing program 5 (id=842): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e41626f39a8279c18b630b2f155457ad8d2737df16c824e42ac78f6971b15a583c9b378971f75a42dd46c967192197392c8dada830aa30ecdcc2219274afba70cccb770304b8d55695a814223896da2348d8b7819f8f85a7fb2e8632000000c9fa35ed57dfd2a82dcd1dd4e43435ca3ed3e49a444fb7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) socket$packet(0x11, 0x3, 0x300) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') userfaultfd(0x80001) read$FUSE(r2, &(0x7f0000003b00)={0x2020}, 0x2020) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7e) close_range(r2, r6, 0x0) 3.553139423s ago: executing program 5 (id=843): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x7cf, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0xfffff801, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.246493681s ago: executing program 5 (id=844): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r1, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x4010084) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000980)={{r0}, 0x0, 0x8000, 0x8000}) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.085854923s ago: executing program 5 (id=845): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) shutdown(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) lseek(0xffffffffffffffff, 0xfff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r4}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x8, 0x62, 0x125, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x8000, 0x0, 0xff, 0x695866635b959906, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2}, 0x24) 0s ago: executing program 5 (id=846): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x5085, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xd30, 0x0, 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) bind$alg(r7, 0x0, 0x0) r10 = accept4(r7, 0x0, 0x0, 0x800) socket$inet6_sctp(0xa, 0x801, 0x84) recvmsg(r10, 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) dup3(r2, r0, 0x80000) kernel console output (not intermixed with test programs): elimit+0x10/0x10 [ 648.448578][ T8960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.448610][ T8960] ? __pfx__printk+0x10/0x10 [ 648.448635][ T8960] ? __might_fault+0xb0/0x130 [ 648.448678][ T8960] should_fail_ex+0x46c/0x600 [ 648.448712][ T8960] _copy_from_user+0x2d/0xb0 [ 648.448746][ T8960] ___sys_sendmsg+0x158/0x2a0 [ 648.448782][ T8960] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.448856][ T8960] ? __fget_files+0x2a/0x420 [ 648.448887][ T8960] ? __fget_files+0x3a6/0x420 [ 648.448928][ T8960] __x64_sys_sendmsg+0x1a1/0x260 [ 648.448964][ T8960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.449007][ T8960] ? __pfx_ksys_write+0x10/0x10 [ 648.449031][ T8960] ? rcu_is_watching+0x15/0xb0 [ 648.449069][ T8960] ? do_syscall_64+0xbe/0x3b0 [ 648.449105][ T8960] do_syscall_64+0xfa/0x3b0 [ 648.449133][ T8960] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.449162][ T8960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.449185][ T8960] ? clear_bhb_loop+0x60/0xb0 [ 648.449211][ T8960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.449233][ T8960] RIP: 0033:0x7f46d0a4ebe9 [ 648.449251][ T8960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.449270][ T8960] RSP: 002b:00007f46cecb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.449292][ T8960] RAX: ffffffffffffffda RBX: 00007f46d0c85fa0 RCX: 00007f46d0a4ebe9 [ 648.449308][ T8960] RDX: 000000000000e900 RSI: 0000200000000b40 RDI: 0000000000000003 [ 648.449323][ T8960] RBP: 00007f46cecb6090 R08: 0000000000000000 R09: 0000000000000000 [ 648.449336][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.449349][ T8960] R13: 00007f46d0c86038 R14: 00007f46d0c85fa0 R15: 00007fff54638b18 [ 648.449384][ T8960] [ 648.952057][ T8327] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 649.015400][ T8962] process 'syz.5.587' launched './file0' with NULL argv: empty string added [ 649.107563][ T8327] usb 8-1: Using ep0 maxpacket: 8 [ 649.107738][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.587'. [ 649.127150][ T8327] usb 8-1: unable to get BOS descriptor or descriptor too short [ 649.162536][ T8327] usb 8-1: config 4 interface 0 has no altsetting 0 [ 649.188147][ T8327] usb 8-1: string descriptor 0 read error: -22 [ 649.188254][ T8327] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 649.188280][ T8327] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 649.256575][ T8327] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 649.366724][ T8327] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 649.367120][ T8327] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 649.367172][ T8327] usb 8-1: media controller created [ 649.459523][ T8327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.551091][ T8415] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 649.551253][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 649.677776][ T8415] usb 6-1: device descriptor read/64, error -71 [ 649.722093][ T8967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.722129][ T8967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.900911][ T8967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.900945][ T8967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.938562][ T8415] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 650.068422][ T8415] usb 6-1: device descriptor read/64, error -71 [ 650.181069][ T8415] usb usb6-port1: attempt power cycle [ 650.538476][ T8415] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 650.540448][ T8327] zl10353_read_register: readreg error (reg=127, ret==0) [ 650.559419][ T8415] usb 6-1: device descriptor read/8, error -71 [ 650.797666][ T8415] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 650.828501][ T8415] usb 6-1: device descriptor read/8, error -71 [ 650.834488][ T8327] usb 8-1: USB disconnect, device number 3 [ 651.227670][ T8415] usb usb6-port1: unable to enumerate USB device [ 651.279063][ T8852] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.279280][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.279557][ T8852] bridge_slave_0: entered allmulticast mode [ 651.304036][ T8852] bridge_slave_0: entered promiscuous mode [ 652.545166][ T8852] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.545327][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.545582][ T8852] bridge_slave_1: entered allmulticast mode [ 652.587505][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 652.602110][ T8852] bridge_slave_1: entered promiscuous mode [ 653.023911][ T8991] netlink: 132 bytes leftover after parsing attributes in process `syz.5.594'. [ 653.260451][ T8852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.281890][ T8852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.733153][ T1027] bridge_slave_1: left allmulticast mode [ 654.733196][ T1027] bridge_slave_1: left promiscuous mode [ 654.733491][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.853487][ T1027] bridge_slave_0: left allmulticast mode [ 654.853523][ T1027] bridge_slave_0: left promiscuous mode [ 654.853847][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.951750][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.599'. [ 657.048559][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.089190][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.112457][ T1027] bond0 (unregistering): Released all slaves [ 657.768143][ T8852] team0: Port device team_slave_0 added [ 657.793207][ T8852] team0: Port device team_slave_1 added [ 657.980122][ T9038] netlink: 132 bytes leftover after parsing attributes in process `syz.6.605'. [ 661.715256][ T8279] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 661.888351][ T8279] usb 5-1: Using ep0 maxpacket: 16 [ 661.897212][ T8279] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 661.897245][ T8279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.897266][ T8279] usb 5-1: Product: syz [ 661.897281][ T8279] usb 5-1: Manufacturer: syz [ 661.897296][ T8279] usb 5-1: SerialNumber: syz [ 661.940364][ T8279] r8152-cfgselector 5-1: Unknown version 0x0000 [ 661.940391][ T8279] r8152-cfgselector 5-1: config 0 descriptor?? [ 662.361199][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.361218][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.361250][ T8852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.363831][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.363847][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.363877][ T8852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.791801][ T8415] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 662.953089][ T8415] usb 8-1: Using ep0 maxpacket: 32 [ 662.969398][ T8415] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.969433][ T8415] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.027904][ T8415] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 663.027939][ T8415] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 663.027962][ T8415] usb 8-1: Product: syz [ 663.027977][ T8415] usb 8-1: Manufacturer: syz [ 663.090416][ T8415] hub 8-1:4.0: USB hub found [ 663.182085][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.614'. [ 663.367776][ T8415] hub 8-1:4.0: 2 ports detected [ 663.468014][ T5156] Bluetooth: hci6: command 0x0406 tx timeout [ 663.683325][ T5851] r8152-cfgselector 5-1: USB disconnect, device number 39 [ 663.958892][ T9101] netlink: 132 bytes leftover after parsing attributes in process `syz.4.616'. [ 664.100025][ T8852] hsr_slave_0: entered promiscuous mode [ 664.101535][ T8852] hsr_slave_1: entered promiscuous mode [ 664.102489][ T8852] debugfs: 'hsr0' already exists in 'hsr' [ 664.102516][ T8852] Cannot create hsr debugfs directory [ 665.580770][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.581882][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.383307][ T1027] hsr_slave_0: left promiscuous mode [ 666.391162][ T8415] usb 8-1: USB disconnect, device number 4 [ 666.438955][ T1027] hsr_slave_1: left promiscuous mode [ 666.457740][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.457764][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.487724][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.487760][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.812702][ T1027] veth1_macvtap: left promiscuous mode [ 666.812833][ T1027] veth0_macvtap: left promiscuous mode [ 666.813137][ T1027] veth1_vlan: left promiscuous mode [ 666.813363][ T1027] veth0_vlan: left promiscuous mode [ 668.371169][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 669.094904][ T9141] FAULT_INJECTION: forcing a failure. [ 669.094904][ T9141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.095049][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.7.625 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 669.095075][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 669.095088][ T9141] Call Trace: [ 669.095096][ T9141] [ 669.095105][ T9141] dump_stack_lvl+0x189/0x250 [ 669.095143][ T9141] ? __pfx____ratelimit+0x10/0x10 [ 669.095173][ T9141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.095206][ T9141] ? __pfx__printk+0x10/0x10 [ 669.095231][ T9141] ? __might_fault+0xb0/0x130 [ 669.095275][ T9141] should_fail_ex+0x46c/0x600 [ 669.095311][ T9141] _copy_from_user+0x2d/0xb0 [ 669.095337][ T9141] ___sys_recvmsg+0x12e/0x510 [ 669.095378][ T9141] ? __pfx____sys_recvmsg+0x10/0x10 [ 669.095441][ T9141] ? __fget_files+0x3a6/0x420 [ 669.095485][ T9141] do_recvmmsg+0x30d/0x770 [ 669.095529][ T9141] ? __pfx_do_recvmmsg+0x10/0x10 [ 669.095561][ T9141] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 669.095592][ T9141] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 669.095635][ T9141] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 669.095678][ T9141] __x64_sys_recvmmsg+0x190/0x240 [ 669.095715][ T9141] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 669.095747][ T9141] ? rcu_is_watching+0x15/0xb0 [ 669.095788][ T9141] ? do_syscall_64+0xbe/0x3b0 [ 669.095823][ T9141] do_syscall_64+0xfa/0x3b0 [ 669.095852][ T9141] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.095881][ T9141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.095904][ T9141] ? clear_bhb_loop+0x60/0xb0 [ 669.095931][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.095953][ T9141] RIP: 0033:0x7f40170aebe9 [ 669.095973][ T9141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.095993][ T9141] RSP: 002b:00007f40152d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 669.096025][ T9141] RAX: ffffffffffffffda RBX: 00007f40172e6180 RCX: 00007f40170aebe9 [ 669.096041][ T9141] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000005 [ 669.096055][ T9141] RBP: 00007f40152d4090 R08: 0000000000000000 R09: 0000000000000000 [ 669.096069][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.096082][ T9141] R13: 00007f40172e6218 R14: 00007f40172e6180 R15: 00007ffe60ede008 [ 669.096119][ T9141] [ 671.626753][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 671.627550][ T5930] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 671.780114][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.780151][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.780193][ T5930] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 671.780218][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.849197][ T5930] usb 6-1: config 0 descriptor?? [ 672.383587][ T5930] hid_mf 0003:0079:1846.0004: collection stack underflow [ 672.383618][ T5930] hid_mf 0003:0079:1846.0004: item 0 4 0 12 parsing failed [ 672.384454][ T5930] hid_mf 0003:0079:1846.0004: HID parse failed. [ 672.384548][ T5930] hid_mf 0003:0079:1846.0004: probe with driver hid_mf failed with error -22 [ 678.511601][ T8279] usb 6-1: USB disconnect, device number 11 [ 686.591986][ T994] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 687.199107][ T994] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 687.199139][ T994] usb 6-1: config 150 has no interface number 0 [ 687.199195][ T994] usb 6-1: config 150 interface 204 has no altsetting 0 [ 687.199216][ T994] usb 6-1: config 150 interface 1 has no altsetting 0 [ 687.202000][ T994] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 687.202031][ T994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.202052][ T994] usb 6-1: Product: syz [ 687.202068][ T994] usb 6-1: Manufacturer: syz [ 687.202083][ T994] usb 6-1: SerialNumber: syz [ 688.640380][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 688.662497][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 688.667140][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 688.672842][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 688.679573][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 688.792097][ T994] xr_serial 6-1:150.204: xr_serial converter detected [ 688.816218][ T994] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 688.816281][ T994] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 688.892885][ T994] usb 6-1: USB disconnect, device number 12 [ 688.896894][ T994] xr_serial 6-1:150.204: device disconnected [ 690.758057][ T59] Bluetooth: hci4: command tx timeout [ 691.493552][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.503822][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.357631][ T5851] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 692.518080][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 692.551339][ T5851] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=88.ea [ 692.551371][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.551393][ T5851] usb 6-1: Product: syz [ 692.551407][ T5851] usb 6-1: Manufacturer: syz [ 692.551422][ T5851] usb 6-1: SerialNumber: syz [ 692.555406][ T5851] usb 6-1: config 0 descriptor?? [ 692.595182][ T5851] ati_remote 6-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 692.730185][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 692.827687][ T59] Bluetooth: hci4: command tx timeout [ 692.906543][ T994] usb 6-1: USB disconnect, device number 13 [ 692.991309][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 694.912515][ T59] Bluetooth: hci4: command tx timeout [ 694.943338][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 694.962555][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 694.963894][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 694.965743][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 694.966683][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.987626][ T59] Bluetooth: hci4: command tx timeout [ 696.987720][ T5156] Bluetooth: hci5: command tx timeout [ 698.295929][ T9230] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 699.067731][ T5156] Bluetooth: hci5: command tx timeout [ 701.147676][ T5156] Bluetooth: hci5: command tx timeout [ 703.222382][ T5156] Bluetooth: hci5: command tx timeout [ 704.532793][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 704.536381][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 704.538529][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 704.542736][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 704.550740][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 704.969689][ T6572] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 705.139410][ T6572] usb 6-1: Using ep0 maxpacket: 32 [ 705.142374][ T6572] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.142400][ T6572] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 705.214618][ T6572] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 705.214649][ T6572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.214670][ T6572] usb 6-1: Product: syz [ 705.214685][ T6572] usb 6-1: Manufacturer: syz [ 705.214699][ T6572] usb 6-1: SerialNumber: syz [ 705.275176][ T6572] usb 6-1: config 0 descriptor?? [ 706.673425][ T59] Bluetooth: hci7: command tx timeout [ 708.711257][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.736883][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.739391][ T8193] Bluetooth: hci7: command tx timeout [ 708.751101][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 708.752702][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 708.753708][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 708.836855][ T6572] usb 6-1: USB disconnect, device number 14 [ 709.408827][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.658'. [ 709.460622][ T9191] chnl_net:caif_netlink_parms(): no params data found [ 709.480628][ T9215] chnl_net:caif_netlink_parms(): no params data found [ 709.497001][ T9251] chnl_net:caif_netlink_parms(): no params data found [ 710.000804][ T37] audit: type=1326 audit(1756765313.866:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.5.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46d0a4ebe9 code=0x0 [ 710.823115][ T5156] Bluetooth: hci7: command tx timeout [ 710.897790][ T5156] Bluetooth: hci0: command tx timeout [ 711.036595][ T1027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.693755][ T1027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.799014][ T9299] random: crng reseeded on system resumption [ 712.903122][ T5156] Bluetooth: hci7: command tx timeout [ 712.977972][ T5156] Bluetooth: hci0: command tx timeout [ 713.943171][ T1027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.132760][ T5156] Bluetooth: hci0: command tx timeout [ 716.168778][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.168932][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.169202][ T9191] bridge_slave_0: entered allmulticast mode [ 716.173151][ T9191] bridge_slave_0: entered promiscuous mode [ 716.175739][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.175882][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.176083][ T9215] bridge_slave_0: entered allmulticast mode [ 716.190721][ T9215] bridge_slave_0: entered promiscuous mode [ 716.229151][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.229309][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.229657][ T9251] bridge_slave_0: entered allmulticast mode [ 716.239455][ T9251] bridge_slave_0: entered promiscuous mode [ 716.844235][ T1027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.880473][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.880649][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.880948][ T9191] bridge_slave_1: entered allmulticast mode [ 716.883822][ T9191] bridge_slave_1: entered promiscuous mode [ 716.918426][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.918577][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.918804][ T9215] bridge_slave_1: entered allmulticast mode [ 716.921712][ T9215] bridge_slave_1: entered promiscuous mode [ 716.923659][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.923829][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.924059][ T9251] bridge_slave_1: entered allmulticast mode [ 716.937777][ T9251] bridge_slave_1: entered promiscuous mode [ 717.137933][ T5156] Bluetooth: hci0: command tx timeout [ 718.184392][ T9191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.216196][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.279808][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.292231][ T9191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.329207][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.359410][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.453987][ T9191] team0: Port device team_slave_0 added [ 719.462617][ T9215] team0: Port device team_slave_0 added [ 719.477834][ T9251] team0: Port device team_slave_0 added [ 719.483846][ T9191] team0: Port device team_slave_1 added [ 719.516702][ T9215] team0: Port device team_slave_1 added [ 719.526207][ T9251] team0: Port device team_slave_1 added [ 720.892071][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.892089][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.892121][ T9191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.920973][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.920996][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.921031][ T9215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.929325][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.929345][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.929379][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.942014][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.942032][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.942064][ T9191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.072990][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.073007][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.073038][ T9215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.083421][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.083440][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.083475][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.185196][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.674'. [ 721.474799][ T1027] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.886928][ T9357] netlink: 'syz.5.677': attribute type 66 has an invalid length. [ 723.421914][ T1027] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.615026][ T9191] hsr_slave_0: entered promiscuous mode [ 723.616503][ T9191] hsr_slave_1: entered promiscuous mode [ 724.281349][ T9215] hsr_slave_0: entered promiscuous mode [ 724.282812][ T9215] hsr_slave_1: entered promiscuous mode [ 724.283818][ T9215] debugfs: 'hsr0' already exists in 'hsr' [ 724.283844][ T9215] Cannot create hsr debugfs directory [ 724.312952][ T9251] hsr_slave_0: entered promiscuous mode [ 724.314434][ T9251] hsr_slave_1: entered promiscuous mode [ 724.315420][ T9251] debugfs: 'hsr0' already exists in 'hsr' [ 724.315447][ T9251] Cannot create hsr debugfs directory [ 724.885422][ T1027] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.957251][ T9273] chnl_net:caif_netlink_parms(): no params data found [ 725.217790][ T5851] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 725.397790][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 725.400263][ T5851] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 725.400290][ T5851] usb 6-1: config 0 has no interface number 0 [ 725.400344][ T5851] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 725.400371][ T5851] usb 6-1: config 0 interface 196 has no altsetting 0 [ 725.405783][ T5851] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 725.405812][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.405832][ T5851] usb 6-1: Product: syz [ 725.405848][ T5851] usb 6-1: Manufacturer: syz [ 725.405863][ T5851] usb 6-1: SerialNumber: syz [ 725.415005][ T5851] usb 6-1: config 0 descriptor?? [ 725.416716][ T9376] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 725.475212][ T1027] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.078347][ T5851] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 726.163610][ T5851] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 726.288294][ T6026] usb 6-1: USB disconnect, device number 15 [ 726.489814][ T6026] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 726.602236][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.602473][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.602704][ T9273] bridge_slave_0: entered allmulticast mode [ 726.605653][ T9273] bridge_slave_0: entered promiscuous mode [ 726.760664][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.760778][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.760958][ T9273] bridge_slave_1: entered allmulticast mode [ 726.762931][ T9273] bridge_slave_1: entered promiscuous mode [ 727.117626][ T6026] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 727.266171][ T9273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.281434][ T6026] usb 6-1: config 1 interface 0 has no altsetting 0 [ 727.285775][ T6026] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 727.285807][ T6026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.285829][ T6026] usb 6-1: Product: syz [ 727.285843][ T6026] usb 6-1: Manufacturer: syz [ 727.285859][ T6026] usb 6-1: SerialNumber: syz [ 727.418421][ T9273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.997135][ T6026] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 728.099367][ T1027] bridge_slave_1: left allmulticast mode [ 728.099398][ T1027] bridge_slave_1: left promiscuous mode [ 728.099656][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.209744][ T1027] bridge_slave_0: left allmulticast mode [ 728.209779][ T1027] bridge_slave_0: left promiscuous mode [ 728.210073][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.294982][ T1027] bridge_slave_1: left allmulticast mode [ 728.295018][ T1027] bridge_slave_1: left promiscuous mode [ 728.295279][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.324295][ T9392] FAULT_INJECTION: forcing a failure. [ 728.324295][ T9392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.324333][ T9392] CPU: 0 UID: 0 PID: 9392 Comm: syz.5.682 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 728.324358][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 728.324371][ T9392] Call Trace: [ 728.324379][ T9392] [ 728.324389][ T9392] dump_stack_lvl+0x189/0x250 [ 728.324426][ T9392] ? __pfx____ratelimit+0x10/0x10 [ 728.324457][ T9392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.324490][ T9392] ? __pfx__printk+0x10/0x10 [ 728.324531][ T9392] should_fail_ex+0x46c/0x600 [ 728.324567][ T9392] _copy_to_user+0x31/0xb0 [ 728.324594][ T9392] simple_read_from_buffer+0xe1/0x170 [ 728.324630][ T9392] proc_fail_nth_read+0x1b6/0x220 [ 728.324658][ T9392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 728.324685][ T9392] ? rw_verify_area+0x2ac/0x4e0 [ 728.324711][ T9392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 728.324745][ T9392] vfs_read+0x203/0xa30 [ 728.324782][ T9392] ? __pfx_vfs_read+0x10/0x10 [ 728.324804][ T9392] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 728.324839][ T9392] ? mutex_lock_nested+0x154/0x1d0 [ 728.324861][ T9392] ? fdget_pos+0x253/0x320 [ 728.324902][ T9392] ksys_read+0x14b/0x260 [ 728.324933][ T9392] ? __pfx_ksys_read+0x10/0x10 [ 728.324957][ T9392] ? rcu_is_watching+0x15/0xb0 [ 728.324996][ T9392] ? do_syscall_64+0xbe/0x3b0 [ 728.325032][ T9392] do_syscall_64+0xfa/0x3b0 [ 728.325061][ T9392] ? lockdep_hardirqs_on+0x9c/0x150 [ 728.325090][ T9392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.325112][ T9392] ? clear_bhb_loop+0x60/0xb0 [ 728.325140][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.325162][ T9392] RIP: 0033:0x7f46d0a4d5fc [ 728.325181][ T9392] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 728.325200][ T9392] RSP: 002b:00007f46cec95030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 728.325223][ T9392] RAX: ffffffffffffffda RBX: 00007f46d0c86090 RCX: 00007f46d0a4d5fc [ 728.325240][ T9392] RDX: 000000000000000f RSI: 00007f46cec950a0 RDI: 0000000000000004 [ 728.325253][ T9392] RBP: 00007f46cec95090 R08: 0000000000000000 R09: 0000000000000000 [ 728.325267][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.325280][ T9392] R13: 00007f46d0c86128 R14: 00007f46d0c86090 R15: 00007fff54638b18 [ 728.325315][ T9392] [ 728.394224][ T9] usb 6-1: USB disconnect, device number 16 [ 728.420607][ T9] usblp0: removed [ 728.649595][ T1027] bridge_slave_0: left allmulticast mode [ 728.649631][ T1027] bridge_slave_0: left promiscuous mode [ 728.649958][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.179790][ T1027] bridge_slave_1: left allmulticast mode [ 729.179826][ T1027] bridge_slave_1: left promiscuous mode [ 729.182564][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.249627][ T1027] bridge_slave_0: left allmulticast mode [ 729.249663][ T1027] bridge_slave_0: left promiscuous mode [ 729.249942][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.958929][ T1027] ip6gretap0 (unregistering): left allmulticast mode [ 731.738719][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.798671][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.841862][ T1027] bond0 (unregistering): Released all slaves [ 732.670857][ T1027] bond1 (unregistering): Released all slaves [ 734.378105][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.470999][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.493095][ T1027] bond0 (unregistering): Released all slaves [ 734.778246][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.858621][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.921925][ T1027] bond0 (unregistering): Released all slaves [ 735.265564][ T9273] team0: Port device team_slave_0 added [ 735.836681][ T9273] team0: Port device team_slave_1 added [ 736.681238][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.681257][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.681289][ T9273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.705290][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.705311][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.705344][ T9273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.852777][ T9419] trusted_key: syz.5.685 sent an empty control message without MSG_MORE. [ 736.869425][ T9419] loop7: detected capacity change from 0 to 7 [ 736.881697][ C0] blk_print_req_error: 5 callbacks suppressed [ 736.881724][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.881757][ C0] buffer_io_error: 5 callbacks suppressed [ 736.881771][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.938334][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.938375][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.938774][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.938808][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.939020][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.939050][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.939561][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.939593][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.943837][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.943870][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.952496][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.952543][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.957676][ T9419] ldm_validate_partition_table(): Disk read failed. [ 736.960797][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.960837][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.962188][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.962225][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.962715][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.962749][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 736.963104][ T9419] Dev loop7: unable to read RDB block 0 [ 736.964118][ T9419] loop7: unable to read partition table [ 736.964396][ T9419] loop7: partition table beyond EOD, truncated [ 736.964429][ T9419] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 737.018093][ T9421] Invalid logical block size (-6) [ 738.165753][ T9273] hsr_slave_0: entered promiscuous mode [ 738.167145][ T9273] hsr_slave_1: entered promiscuous mode [ 738.182063][ T9273] debugfs: 'hsr0' already exists in 'hsr' [ 738.182095][ T9273] Cannot create hsr debugfs directory [ 739.218989][ T9455] FAULT_INJECTION: forcing a failure. [ 739.218989][ T9455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.219017][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.5.688 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 739.219034][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.219043][ T9455] Call Trace: [ 739.219049][ T9455] [ 739.219055][ T9455] dump_stack_lvl+0x189/0x250 [ 739.219082][ T9455] ? __pfx____ratelimit+0x10/0x10 [ 739.219103][ T9455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.219125][ T9455] ? __pfx__printk+0x10/0x10 [ 739.219141][ T9455] ? __might_fault+0xb0/0x130 [ 739.219170][ T9455] should_fail_ex+0x46c/0x600 [ 739.219194][ T9455] _copy_from_user+0x2d/0xb0 [ 739.219211][ T9455] __keyctl_dh_compute+0x16a/0xca0 [ 739.219229][ T9455] ? __might_fault+0xb0/0x130 [ 739.219252][ T9455] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 739.219273][ T9455] ? __lock_acquire+0xab9/0xd20 [ 739.219307][ T9455] ? __lock_acquire+0xab9/0xd20 [ 739.219330][ T9455] keyctl_dh_compute+0x109/0x160 [ 739.219344][ T9455] ? do_raw_spin_lock+0x121/0x290 [ 739.219361][ T9455] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 739.219381][ T9455] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 739.219400][ T9455] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.219425][ T9455] __se_sys_keyctl+0x423/0x910 [ 739.219447][ T9455] ? __pfx___se_sys_keyctl+0x10/0x10 [ 739.219465][ T9455] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 739.219483][ T9455] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 739.219499][ T9455] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 739.219522][ T9455] ? fput+0xa0/0xd0 [ 739.219537][ T9455] ? ksys_write+0x230/0x260 [ 739.219558][ T9455] ? __pfx_ksys_write+0x10/0x10 [ 739.219574][ T9455] ? rcu_is_watching+0x15/0xb0 [ 739.219602][ T9455] ? do_syscall_64+0xbe/0x3b0 [ 739.219621][ T9455] ? __x64_sys_keyctl+0x20/0xc0 [ 739.219642][ T9455] do_syscall_64+0xfa/0x3b0 [ 739.219662][ T9455] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.219688][ T9455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.219702][ T9455] ? clear_bhb_loop+0x60/0xb0 [ 739.219721][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.219735][ T9455] RIP: 0033:0x7f46d0a4ebe9 [ 739.219748][ T9455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.219761][ T9455] RSP: 002b:00007f46cec74038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 739.219777][ T9455] RAX: ffffffffffffffda RBX: 00007f46d0c86180 RCX: 00007f46d0a4ebe9 [ 739.219789][ T9455] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 739.219799][ T9455] RBP: 00007f46cec74090 R08: 0000000000000000 R09: 0000000000000000 [ 739.219809][ T9455] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001 [ 739.219819][ T9455] R13: 00007f46d0c86218 R14: 00007f46d0c86180 R15: 00007fff54638b18 [ 739.219842][ T9455] [ 740.910898][ T9465] FAULT_INJECTION: forcing a failure. [ 740.910898][ T9465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.910936][ T9465] CPU: 1 UID: 0 PID: 9465 Comm: syz.5.689 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 740.910962][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.910975][ T9465] Call Trace: [ 740.910983][ T9465] [ 740.910993][ T9465] dump_stack_lvl+0x189/0x250 [ 740.911031][ T9465] ? __pfx____ratelimit+0x10/0x10 [ 740.911061][ T9465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.911093][ T9465] ? __pfx__printk+0x10/0x10 [ 740.911117][ T9465] ? __might_fault+0xb0/0x130 [ 740.911161][ T9465] should_fail_ex+0x46c/0x600 [ 740.911196][ T9465] _copy_from_user+0x2d/0xb0 [ 740.911221][ T9465] ucma_write+0x161/0x2f0 [ 740.911254][ T9465] ? __pfx_ucma_write+0x10/0x10 [ 740.911287][ T9465] ? rw_verify_area+0x25b/0x4e0 [ 740.911319][ T9465] vfs_writev+0x4bf/0x970 [ 740.911354][ T9465] ? __pfx_ucma_write+0x10/0x10 [ 740.911387][ T9465] ? __pfx_vfs_writev+0x10/0x10 [ 740.911436][ T9465] ? __fget_files+0x2a/0x420 [ 740.911472][ T9465] ? __fget_files+0x3a6/0x420 [ 740.911501][ T9465] ? __fget_files+0x2a/0x420 [ 740.911549][ T9465] do_writev+0x153/0x2d0 [ 740.911583][ T9465] ? __pfx_do_writev+0x10/0x10 [ 740.911613][ T9465] ? rcu_is_watching+0x15/0xb0 [ 740.911652][ T9465] ? do_syscall_64+0xbe/0x3b0 [ 740.911688][ T9465] do_syscall_64+0xfa/0x3b0 [ 740.911716][ T9465] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.911745][ T9465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.911767][ T9465] ? clear_bhb_loop+0x60/0xb0 [ 740.911794][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.911815][ T9465] RIP: 0033:0x7f46d0a4ebe9 [ 740.911834][ T9465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.911854][ T9465] RSP: 002b:00007f46cecb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 740.911876][ T9465] RAX: ffffffffffffffda RBX: 00007f46d0c85fa0 RCX: 00007f46d0a4ebe9 [ 740.911893][ T9465] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000007 [ 740.911907][ T9465] RBP: 00007f46cecb6090 R08: 0000000000000000 R09: 0000000000000000 [ 740.911921][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.911934][ T9465] R13: 00007f46d0c86038 R14: 00007f46d0c85fa0 R15: 00007fff54638b18 [ 740.911968][ T9465] [ 742.842239][ T1027] hsr_slave_0: left promiscuous mode [ 742.887817][ T1027] hsr_slave_1: left promiscuous mode [ 743.066426][ T1027] hsr_slave_0: left promiscuous mode [ 743.107118][ T1027] hsr_slave_1: left promiscuous mode [ 743.149644][ T1027] hsr_slave_0: left promiscuous mode [ 743.199133][ T1027] hsr_slave_1: left promiscuous mode [ 743.201615][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.262164][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.517990][ T1027] veth0_macvtap: left promiscuous mode [ 743.518334][ T1027] veth1_vlan: left promiscuous mode [ 743.518557][ T1027] veth0_vlan: left promiscuous mode [ 744.348911][ T1027] veth1_macvtap: left promiscuous mode [ 744.349033][ T1027] veth0_macvtap: left promiscuous mode [ 744.349239][ T1027] veth1_vlan: left promiscuous mode [ 744.349387][ T1027] veth0_vlan: left promiscuous mode [ 745.657840][ T5851] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 745.807675][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 745.813788][ T5851] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 745.813819][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.813846][ T5851] usb 6-1: Product: syz [ 745.813862][ T5851] usb 6-1: Manufacturer: syz [ 745.813876][ T5851] usb 6-1: SerialNumber: syz [ 745.865559][ T5851] r8152-cfgselector 6-1: Unknown version 0x0000 [ 745.865587][ T5851] r8152-cfgselector 6-1: config 0 descriptor?? [ 747.378394][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 747.579467][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 748.149938][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.200758][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.206516][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.209407][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.211921][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 750.257921][ T5156] Bluetooth: hci1: command tx timeout [ 751.742770][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 751.979180][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 752.343661][ T5156] Bluetooth: hci1: command tx timeout [ 752.915734][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.915812][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.046190][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 754.092668][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 754.094931][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 754.105226][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 754.106246][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 754.427565][ T5156] Bluetooth: hci1: command tx timeout [ 754.768587][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 754.892395][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 755.593428][ T9] r8152-cfgselector 6-1: USB disconnect, device number 17 [ 757.053824][ T5156] Bluetooth: hci3: command tx timeout [ 757.054256][ T5156] Bluetooth: hci1: command tx timeout [ 759.091010][ T59] Bluetooth: hci3: command tx timeout [ 760.200889][ T9514] chnl_net:caif_netlink_parms(): no params data found [ 760.803853][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.696'. [ 761.120155][ T9517] chnl_net:caif_netlink_parms(): no params data found [ 761.137856][ T59] Bluetooth: hci3: command tx timeout [ 761.216979][ T9251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 761.937271][ T9251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 762.311086][ T9251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 762.346753][ T9587] bridge_slave_0: invalid flags given to default FDB implementation [ 762.347313][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.347630][ T9514] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.347935][ T9514] bridge_slave_0: entered allmulticast mode [ 762.354664][ T9514] bridge_slave_0: entered promiscuous mode [ 762.662114][ T9514] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.662264][ T9514] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.662531][ T9514] bridge_slave_1: entered allmulticast mode [ 762.664881][ T9514] bridge_slave_1: entered promiscuous mode [ 762.716861][ T9251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 763.217505][ T59] Bluetooth: hci3: command tx timeout [ 763.499638][ T9514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.790334][ T9514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.791181][ T9517] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.791339][ T9517] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.791578][ T9517] bridge_slave_0: entered allmulticast mode [ 763.794583][ T9517] bridge_slave_0: entered promiscuous mode [ 764.248652][ T9517] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.248903][ T9517] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.249180][ T9517] bridge_slave_1: entered allmulticast mode [ 764.252050][ T9517] bridge_slave_1: entered promiscuous mode [ 764.702503][ T9514] team0: Port device team_slave_0 added [ 764.862673][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 764.866385][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 764.881814][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 764.885283][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 764.886840][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 764.930287][ T9514] team0: Port device team_slave_1 added [ 765.061457][ T9517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.232466][ T1027] IPVS: stop unused estimator thread 0... [ 765.253861][ T9517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.868910][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.868930][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.868959][ T9514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.087794][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.087812][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.087843][ T9514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.094141][ T9517] team0: Port device team_slave_0 added [ 766.189063][ T9517] team0: Port device team_slave_1 added [ 766.784938][ T9662] random: crng reseeded on system resumption [ 766.978218][ T59] Bluetooth: hci4: command tx timeout [ 769.058001][ T59] Bluetooth: hci4: command tx timeout [ 769.783118][ T9517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.783137][ T9517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.783167][ T9517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.561436][ T9517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.561456][ T9517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.561487][ T9517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.600455][ T9514] hsr_slave_0: entered promiscuous mode [ 770.611720][ T9514] hsr_slave_1: entered promiscuous mode [ 770.615172][ T9514] debugfs: 'hsr0' already exists in 'hsr' [ 770.615204][ T9514] Cannot create hsr debugfs directory [ 771.138169][ T59] Bluetooth: hci4: command tx timeout [ 771.321555][ T9682] FAULT_INJECTION: forcing a failure. [ 771.321555][ T9682] name failslab, interval 1, probability 0, space 0, times 0 [ 771.322076][ T9682] CPU: 0 UID: 0 PID: 9682 Comm: syz.5.702 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 771.322103][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 771.322115][ T9682] Call Trace: [ 771.322124][ T9682] [ 771.322133][ T9682] dump_stack_lvl+0x189/0x250 [ 771.322172][ T9682] ? irqentry_exit+0x74/0x90 [ 771.322203][ T9682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.322246][ T9682] ? dump_stack+0x9/0x20 [ 771.322284][ T9682] should_fail_ex+0x46c/0x600 [ 771.322320][ T9682] should_failslab+0xa8/0x100 [ 771.322353][ T9682] __kmalloc_noprof+0xcb/0x430 [ 771.322382][ T9682] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 771.322420][ T9682] tomoyo_realpath_from_path+0xe3/0x5d0 [ 771.322454][ T9682] ? tomoyo_domain+0xda/0x130 [ 771.322491][ T9682] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 771.322517][ T9682] tomoyo_path_number_perm+0x1e8/0x5a0 [ 771.322546][ T9682] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 771.322577][ T9682] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 771.322608][ T9682] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.322646][ T9682] ? __lock_acquire+0xab9/0xd20 [ 771.322698][ T9682] ? __fget_files+0x2a/0x420 [ 771.322739][ T9682] ? __fget_files+0x2a/0x420 [ 771.322769][ T9682] ? __fget_files+0x3a6/0x420 [ 771.322798][ T9682] ? __fget_files+0x2a/0x420 [ 771.322834][ T9682] security_file_ioctl+0xcb/0x2d0 [ 771.322864][ T9682] __se_sys_ioctl+0x47/0x170 [ 771.322892][ T9682] do_syscall_64+0xfa/0x3b0 [ 771.322924][ T9682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.322944][ T9682] ? asm_sysvec_call_function_single+0x1a/0x20 [ 771.322967][ T9682] ? clear_bhb_loop+0x60/0xb0 [ 771.322995][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.323016][ T9682] RIP: 0033:0x7f46d0a4ebe9 [ 771.323036][ T9682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.323055][ T9682] RSP: 002b:00007f46cec74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.323078][ T9682] RAX: ffffffffffffffda RBX: 00007f46d0c86180 RCX: 00007f46d0a4ebe9 [ 771.323095][ T9682] RDX: 0000200000000800 RSI: 00000000c1105517 RDI: 000000000000000c [ 771.323109][ T9682] RBP: 00007f46cec74090 R08: 0000000000000000 R09: 0000000000000000 [ 771.323123][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.323137][ T9682] R13: 00007f46d0c86218 R14: 00007f46d0c86180 R15: 00007fff54638b18 [ 771.323172][ T9682] [ 771.323481][ T9682] ERROR: Out of memory at tomoyo_realpath_from_path. [ 771.853859][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 771.877820][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 771.881634][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 771.884390][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 771.885214][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 773.063881][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.704'. [ 773.461033][ T59] Bluetooth: hci4: command tx timeout [ 773.941651][ T59] Bluetooth: hci5: command tx timeout [ 775.170579][ T9517] hsr_slave_0: entered promiscuous mode [ 775.173458][ T9517] hsr_slave_1: entered promiscuous mode [ 775.174483][ T9517] debugfs: 'hsr0' already exists in 'hsr' [ 775.174509][ T9517] Cannot create hsr debugfs directory [ 776.017890][ T59] Bluetooth: hci5: command tx timeout [ 778.098089][ T59] Bluetooth: hci5: command tx timeout [ 779.247627][ T8279] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 779.408105][ T8279] usb 6-1: Using ep0 maxpacket: 16 [ 779.417004][ T8279] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 779.417033][ T8279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.417054][ T8279] usb 6-1: Product: syz [ 779.417069][ T8279] usb 6-1: Manufacturer: syz [ 779.417082][ T8279] usb 6-1: SerialNumber: syz [ 779.437976][ T8279] r8152-cfgselector 6-1: Unknown version 0x0000 [ 779.438009][ T8279] r8152-cfgselector 6-1: config 0 descriptor?? [ 780.179310][ T59] Bluetooth: hci5: command tx timeout [ 780.511881][ T9628] chnl_net:caif_netlink_parms(): no params data found [ 781.213916][ T8414] r8152-cfgselector 6-1: USB disconnect, device number 18 [ 782.451839][ T9799] tmpfs: Bad value for 'nr_inodes' [ 782.529654][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.529879][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.530151][ T9628] bridge_slave_0: entered allmulticast mode [ 782.534846][ T9628] bridge_slave_0: entered promiscuous mode [ 782.548024][ T9687] chnl_net:caif_netlink_parms(): no params data found [ 782.658820][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.659002][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.659304][ T9628] bridge_slave_1: entered allmulticast mode [ 782.662338][ T9628] bridge_slave_1: entered promiscuous mode [ 782.780020][ T9805] random: crng reseeded on system resumption [ 784.463559][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.631149][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.294107][ T9628] team0: Port device team_slave_0 added [ 785.487071][ T9628] team0: Port device team_slave_1 added [ 785.632223][ T9687] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.632394][ T9687] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.632678][ T9687] bridge_slave_0: entered allmulticast mode [ 785.635656][ T9687] bridge_slave_0: entered promiscuous mode [ 785.922457][ T9687] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.922736][ T9687] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.922978][ T9687] bridge_slave_1: entered allmulticast mode [ 785.928189][ T9687] bridge_slave_1: entered promiscuous mode [ 786.266930][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.266948][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.266987][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.551340][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.551358][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.551389][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.571792][ T9687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.720025][ T9687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.130492][ T6026] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 787.199505][ T9687] team0: Port device team_slave_0 added [ 787.280135][ T6026] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 787.280166][ T6026] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 787.280187][ T6026] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 787.280243][ T6026] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 787.282700][ T6026] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 787.282730][ T6026] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 787.282751][ T6026] usb 6-1: Product: syz [ 787.282767][ T6026] usb 6-1: Manufacturer: syz [ 787.360831][ T9840] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 787.366847][ T6026] cdc_wdm 6-1:1.0: skipping garbage [ 787.366867][ T6026] cdc_wdm 6-1:1.0: skipping garbage [ 787.407654][ T6026] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 787.407690][ T6026] cdc_wdm 6-1:1.0: Unknown control protocol [ 787.735577][ T1027] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.801009][ T9687] team0: Port device team_slave_1 added [ 787.812763][ T9628] hsr_slave_0: entered promiscuous mode [ 787.814493][ T9628] hsr_slave_1: entered promiscuous mode [ 787.815648][ T9628] debugfs: 'hsr0' already exists in 'hsr' [ 787.815678][ T9628] Cannot create hsr debugfs directory [ 787.920557][ T8327] usb 6-1: USB disconnect, device number 19 [ 788.572852][ T1027] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.741817][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.741836][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.741867][ T9687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.922583][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.922602][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.922632][ T9687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.201682][ T9859] random: crng reseeded on system resumption [ 789.373582][ T1027] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.215330][ T1027] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.258150][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 791.418450][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 791.428178][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 791.428214][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.428239][ T9] usb 6-1: Product: syz [ 791.428255][ T9] usb 6-1: Manufacturer: syz [ 791.428273][ T9] usb 6-1: SerialNumber: syz [ 791.453405][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 791.453436][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 791.920836][ T9687] hsr_slave_0: entered promiscuous mode [ 791.935758][ T9687] hsr_slave_1: entered promiscuous mode [ 791.944562][ T9687] debugfs: 'hsr0' already exists in 'hsr' [ 791.944591][ T9687] Cannot create hsr debugfs directory [ 793.228148][ T9514] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 793.290302][ T6026] r8152-cfgselector 6-1: USB disconnect, device number 20 [ 793.341540][ T1027] bridge_slave_1: left allmulticast mode [ 793.347974][ T1027] bridge_slave_1: left promiscuous mode [ 793.348286][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.428650][ T1027] bridge_slave_0: left allmulticast mode [ 793.428675][ T1027] bridge_slave_0: left promiscuous mode [ 793.428902][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.495881][ T1027] bridge_slave_1: left allmulticast mode [ 793.495917][ T1027] bridge_slave_1: left promiscuous mode [ 793.496266][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.550142][ T1027] bridge_slave_0: left allmulticast mode [ 793.550177][ T1027] bridge_slave_0: left promiscuous mode [ 793.550453][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.615255][ T1027] bridge_slave_1: left allmulticast mode [ 793.615292][ T1027] bridge_slave_1: left promiscuous mode [ 793.615603][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.680288][ T1027] bridge_slave_0: left allmulticast mode [ 793.680323][ T1027] bridge_slave_0: left promiscuous mode [ 793.680603][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.741175][ T1027] bridge_slave_1: left allmulticast mode [ 793.741204][ T1027] bridge_slave_1: left promiscuous mode [ 793.741434][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.799676][ T1027] bridge_slave_0: left allmulticast mode [ 793.799713][ T1027] bridge_slave_0: left promiscuous mode [ 793.800048][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.313874][ T9906] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 795.698483][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.516071][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.667720][ T1027] bond0 (unregistering): Released all slaves [ 797.128954][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.221111][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.300289][ T1027] bond0 (unregistering): Released all slaves [ 797.709120][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.798688][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.871723][ T1027] bond0 (unregistering): Released all slaves [ 798.340036][ T9920] random: crng reseeded on system resumption [ 806.136573][ T9936] netlink: 132 bytes leftover after parsing attributes in process `syz.5.726'. [ 806.191045][ T9937] netlink: 'syz.5.726': attribute type 1 has an invalid length. [ 806.191069][ T9937] netlink: 224 bytes leftover after parsing attributes in process `syz.5.726'. [ 806.338984][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.399076][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.444286][ T1027] bond0 (unregistering): Released all slaves [ 806.509163][ T9514] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 807.095873][ T9514] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 807.316236][ T9514] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 808.670705][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 808.695645][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 808.704959][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 808.715367][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 808.716343][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 809.410418][ T9966] netlink: 20 bytes leftover after parsing attributes in process `syz.5.728'. [ 810.737706][ T59] Bluetooth: hci0: command tx timeout [ 811.147691][ T1027] hsr_slave_0: left promiscuous mode [ 811.500091][ T1027] hsr_slave_1: left promiscuous mode [ 811.501101][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.540237][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.883399][ T9994] netlink: 20 bytes leftover after parsing attributes in process `syz.5.730'. [ 812.807645][ T1027] hsr_slave_0: left promiscuous mode [ 812.817701][ T59] Bluetooth: hci0: command tx timeout [ 812.830527][ T1027] hsr_slave_1: left promiscuous mode [ 812.834248][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.877152][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.017760][ T1027] hsr_slave_0: left promiscuous mode [ 813.058022][ T1027] hsr_slave_1: left promiscuous mode [ 813.059190][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.081246][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.244697][ T1027] hsr_slave_0: left promiscuous mode [ 813.257861][ T1027] hsr_slave_1: left promiscuous mode [ 813.258867][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.258898][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.309076][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.309111][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.429554][ T1027] veth1_macvtap: left promiscuous mode [ 813.429775][ T1027] veth0_macvtap: left promiscuous mode [ 813.430140][ T1027] veth1_vlan: left promiscuous mode [ 813.430407][ T1027] veth0_vlan: left promiscuous mode [ 813.550762][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.732'. [ 814.342594][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.907473][ T59] Bluetooth: hci0: command tx timeout [ 815.222843][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 815.237649][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 815.239057][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 815.240887][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 815.241764][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 815.538305][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 815.708480][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 816.993132][ T59] Bluetooth: hci0: command tx timeout [ 817.377565][ T59] Bluetooth: hci1: command tx timeout [ 819.239657][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 819.382944][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 819.465910][ T59] Bluetooth: hci1: command tx timeout [ 820.476990][T10022] random: crng reseeded on system resumption [ 821.571570][ T59] Bluetooth: hci1: command tx timeout [ 822.181081][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 822.318542][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 823.627697][ T59] Bluetooth: hci1: command tx timeout [ 825.183387][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 825.204581][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 825.205884][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 825.229083][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 825.232299][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 826.595120][T10041] random: crng reseeded on system resumption [ 827.301560][ T59] Bluetooth: hci6: command tx timeout [ 829.138669][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 829.377645][ T59] Bluetooth: hci6: command tx timeout [ 829.378844][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 830.675198][ T5156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 830.707965][ T5156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 830.709867][ T5156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 830.711738][ T5156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 830.713068][ T5156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 831.467886][ T5156] Bluetooth: hci6: command tx timeout [ 832.328622][ T9517] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 832.624405][T10055] netlink: 'syz.5.743': attribute type 1 has an invalid length. [ 832.624431][T10055] netlink: 224 bytes leftover after parsing attributes in process `syz.5.743'. [ 832.818828][ T5156] Bluetooth: hci7: command tx timeout [ 833.068963][ T6572] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 833.286551][ T6572] usb 6-1: Using ep0 maxpacket: 8 [ 833.302119][ T6572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 833.302173][ T6572] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 833.302199][ T6572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.319949][ T6572] usb 6-1: config 0 descriptor?? [ 833.544464][ T6572] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 833.554873][ T5156] Bluetooth: hci6: command tx timeout [ 833.748641][ T994] usb 6-1: USB disconnect, device number 21 [ 834.898876][ T5156] Bluetooth: hci7: command tx timeout [ 836.079328][T10103] random: crng reseeded on system resumption [ 837.017070][ T5156] Bluetooth: hci7: command tx timeout [ 837.806722][ T9954] chnl_net:caif_netlink_parms(): no params data found [ 839.057583][ T5156] Bluetooth: hci7: command tx timeout [ 841.867821][ T37] audit: type=1326 audit(1756765900.560:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10124 comm="syz.5.750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46d0a4ebe9 code=0x0 [ 843.686546][T10008] chnl_net:caif_netlink_parms(): no params data found [ 843.716046][T10037] chnl_net:caif_netlink_parms(): no params data found [ 843.867832][T10052] chnl_net:caif_netlink_parms(): no params data found [ 845.597977][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.598133][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.598423][ T9954] bridge_slave_0: entered allmulticast mode [ 845.601505][ T9954] bridge_slave_0: entered promiscuous mode [ 845.857944][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.858113][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.858399][ T9954] bridge_slave_1: entered allmulticast mode [ 845.861363][ T9954] bridge_slave_1: entered promiscuous mode [ 846.315760][T10171] random: crng reseeded on system resumption [ 849.353438][ T9954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.823456][ T9954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.823817][T10008] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.823973][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.824190][T10008] bridge_slave_0: entered allmulticast mode [ 849.844931][T10008] bridge_slave_0: entered promiscuous mode [ 850.149025][T10037] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.149173][T10037] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.149404][T10037] bridge_slave_0: entered allmulticast mode [ 850.156334][T10037] bridge_slave_0: entered promiscuous mode [ 850.419188][T10008] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.419287][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.419465][T10008] bridge_slave_1: entered allmulticast mode [ 850.422131][T10008] bridge_slave_1: entered promiscuous mode [ 850.430574][T10052] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.430752][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.431045][T10052] bridge_slave_0: entered allmulticast mode [ 850.537620][T10052] bridge_slave_0: entered promiscuous mode [ 850.541241][T10037] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.541477][T10037] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.541646][T10037] bridge_slave_1: entered allmulticast mode [ 850.546590][T10037] bridge_slave_1: entered promiscuous mode [ 850.849841][T10052] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.850010][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.850264][T10052] bridge_slave_1: entered allmulticast mode [ 850.857564][T10052] bridge_slave_1: entered promiscuous mode [ 851.060429][ T9954] team0: Port device team_slave_0 added [ 851.451492][ T9954] team0: Port device team_slave_1 added [ 851.523107][T10008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.756168][T10220] random: crng reseeded on system resumption [ 853.169257][T10037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.174993][T10008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.237847][T10224] tmpfs: Bad value for 'nr_inodes' [ 853.819250][T10052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.438829][T10037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.502689][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.502709][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.502740][ T9954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.571059][T10052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.521781][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.521800][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.521828][ T9954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.126018][T10008] team0: Port device team_slave_0 added [ 857.670962][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.765'. [ 858.762690][T10037] team0: Port device team_slave_0 added [ 858.776460][T10008] team0: Port device team_slave_1 added [ 858.799916][T10052] team0: Port device team_slave_0 added [ 858.881339][T10037] team0: Port device team_slave_1 added [ 858.884137][T10052] team0: Port device team_slave_1 added [ 859.347733][T10008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.347751][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.347845][T10008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.629737][ T9954] hsr_slave_0: entered promiscuous mode [ 859.632701][ T9954] hsr_slave_1: entered promiscuous mode [ 859.635996][T10008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.636013][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.636042][T10008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.674035][T10037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.674059][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.674091][T10037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.675808][T10052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.675824][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.675856][T10052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.427603][T10037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.427622][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.427651][T10037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.442287][T10052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.442304][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.442334][T10052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.655375][T10272] tmpfs: Bad value for 'nr_inodes' [ 865.920702][T10287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.772'. [ 866.834037][T10008] hsr_slave_0: entered promiscuous mode [ 866.835511][T10008] hsr_slave_1: entered promiscuous mode [ 866.849705][T10008] debugfs: 'hsr0' already exists in 'hsr' [ 866.849738][T10008] Cannot create hsr debugfs directory [ 867.467281][T10052] hsr_slave_0: entered promiscuous mode [ 867.471345][T10052] hsr_slave_1: entered promiscuous mode [ 867.472463][T10052] debugfs: 'hsr0' already exists in 'hsr' [ 867.472489][T10052] Cannot create hsr debugfs directory [ 867.507654][T10037] hsr_slave_0: entered promiscuous mode [ 867.509473][T10037] hsr_slave_1: entered promiscuous mode [ 867.510637][T10037] debugfs: 'hsr0' already exists in 'hsr' [ 867.510663][T10037] Cannot create hsr debugfs directory [ 868.400385][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 868.426769][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 868.442181][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 868.459253][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 868.465860][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 870.587800][ T59] Bluetooth: hci3: command tx timeout [ 872.667541][ T59] Bluetooth: hci3: command tx timeout [ 874.737916][ T59] Bluetooth: hci3: command tx timeout [ 875.169550][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.779'. [ 876.252265][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.487759][ T6026] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 876.493200][T10298] chnl_net:caif_netlink_parms(): no params data found [ 876.580132][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 876.584423][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 876.596939][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 876.605954][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 876.608578][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.638653][ T6026] usb 6-1: Using ep0 maxpacket: 16 [ 876.680621][ T6026] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 876.680651][ T6026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.680671][ T6026] usb 6-1: Product: syz [ 876.680687][ T6026] usb 6-1: Manufacturer: syz [ 876.680701][ T6026] usb 6-1: SerialNumber: syz [ 876.720054][ T6026] r8152-cfgselector 6-1: Unknown version 0x0000 [ 876.720080][ T6026] r8152-cfgselector 6-1: config 0 descriptor?? [ 876.826871][ T5156] Bluetooth: hci3: command tx timeout [ 877.554728][T10298] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.554879][T10298] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.555192][T10298] bridge_slave_0: entered allmulticast mode [ 877.572175][T10298] bridge_slave_0: entered promiscuous mode [ 877.810023][T10298] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.810428][T10298] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.810702][T10298] bridge_slave_1: entered allmulticast mode [ 877.813662][T10298] bridge_slave_1: entered promiscuous mode [ 878.207272][T10298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.260930][T10298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.276243][ T1027] bridge_slave_1: left allmulticast mode [ 878.276285][ T1027] bridge_slave_1: left promiscuous mode [ 878.276599][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.344422][ T1027] bridge_slave_0: left allmulticast mode [ 878.344466][ T1027] bridge_slave_0: left promiscuous mode [ 878.344760][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.407280][ T1027] bridge_slave_1: left allmulticast mode [ 878.407877][ T1027] bridge_slave_1: left promiscuous mode [ 878.409746][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.502290][ T994] r8152-cfgselector 6-1: USB disconnect, device number 22 [ 878.579842][ T1027] bridge_slave_0: left allmulticast mode [ 878.579877][ T1027] bridge_slave_0: left promiscuous mode [ 878.580148][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.652533][ T1027] bridge_slave_1: left allmulticast mode [ 878.652570][ T1027] bridge_slave_1: left promiscuous mode [ 878.652847][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.737770][ T5156] Bluetooth: hci0: command tx timeout [ 878.740140][ T1027] bridge_slave_0: left allmulticast mode [ 878.740172][ T1027] bridge_slave_0: left promiscuous mode [ 878.740443][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.846168][ T1027] bridge_slave_1: left allmulticast mode [ 878.846196][ T1027] bridge_slave_1: left promiscuous mode [ 878.846396][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.904717][ T1027] bridge_slave_0: left allmulticast mode [ 878.904751][ T1027] bridge_slave_0: left promiscuous mode [ 878.905040][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.994207][ T1027] bridge_slave_1: left allmulticast mode [ 878.994244][ T1027] bridge_slave_1: left promiscuous mode [ 878.994646][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.049081][ T1027] bridge_slave_0: left allmulticast mode [ 879.049108][ T1027] bridge_slave_0: left promiscuous mode [ 879.049309][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.758940][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.838275][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.910744][ T1027] bond0 (unregistering): Released all slaves [ 880.448477][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.530111][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.598420][ T1027] bond0 (unregistering): Released all slaves [ 880.658022][ T8327] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 880.827595][ T5156] Bluetooth: hci0: command tx timeout [ 880.830056][ T8327] usb 6-1: Using ep0 maxpacket: 8 [ 880.832729][ T8327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 880.832780][ T8327] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 880.832806][ T8327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.886164][ T8327] usb 6-1: config 0 descriptor?? [ 881.018827][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.111199][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.111634][ T8327] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 881.182310][ T1027] bond0 (unregistering): Released all slaves [ 881.316948][ T994] usb 6-1: USB disconnect, device number 23 [ 881.541822][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.618508][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.682250][ T1027] bond0 (unregistering): Released all slaves [ 882.009885][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.023363][ T5156] Bluetooth: hci0: command tx timeout [ 883.098525][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.339137][ T1027] bond0 (unregistering): Released all slaves [ 884.779372][T10052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 884.987645][T10052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 885.062409][T10298] team0: Port device team_slave_0 added [ 885.067722][ T5156] Bluetooth: hci0: command tx timeout [ 885.072598][T10052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 885.173518][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 885.186192][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 885.233884][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 885.236474][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.787'. [ 885.261393][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 885.262961][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 885.351538][T10298] team0: Port device team_slave_1 added [ 885.366050][T10052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 886.241121][T10298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.241140][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.241171][T10298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.452818][T10298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.452836][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.452867][T10298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.307735][ T59] Bluetooth: hci1: command tx timeout [ 888.997557][ T1027] hsr_slave_0: left promiscuous mode [ 889.007858][ T6026] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 889.047789][ T1027] hsr_slave_1: left promiscuous mode [ 889.048904][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.083569][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.157563][ T6026] usb 6-1: Using ep0 maxpacket: 8 [ 889.160448][ T6026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 889.160497][ T6026] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 889.160522][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.166139][ T6026] usb 6-1: config 0 descriptor?? [ 889.277889][ T1027] hsr_slave_0: left promiscuous mode [ 889.317676][ T1027] hsr_slave_1: left promiscuous mode [ 889.319702][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.349139][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.387644][ T59] Bluetooth: hci1: command tx timeout [ 889.410050][ T6026] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 889.521328][ T1027] hsr_slave_0: left promiscuous mode [ 889.538679][ T1027] hsr_slave_1: left promiscuous mode [ 889.553057][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.588635][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.727494][ T1027] hsr_slave_0: left promiscuous mode [ 889.767750][ T1027] hsr_slave_1: left promiscuous mode [ 889.768960][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.791763][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.947623][ T1027] hsr_slave_0: left promiscuous mode [ 889.967773][ T1027] hsr_slave_1: left promiscuous mode [ 889.988494][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.028539][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.001734][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 891.182194][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 891.243376][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 891.248252][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 891.265730][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 891.277200][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 891.308318][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 891.457522][ T59] Bluetooth: hci1: command tx timeout [ 892.558424][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 892.708548][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 893.458068][ T59] Bluetooth: hci4: command tx timeout [ 893.537518][ T59] Bluetooth: hci1: command tx timeout [ 894.098552][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 894.260410][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 895.551159][ T59] Bluetooth: hci4: command tx timeout [ 895.608651][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 895.758782][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 897.148397][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 897.298528][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 897.618039][ T59] Bluetooth: hci4: command tx timeout [ 898.118781][T10298] hsr_slave_0: entered promiscuous mode [ 898.120293][T10298] hsr_slave_1: entered promiscuous mode [ 898.121300][T10298] debugfs: 'hsr0' already exists in 'hsr' [ 898.121326][T10298] Cannot create hsr debugfs directory [ 898.433633][ T8327] usb 6-1: USB disconnect, device number 24 [ 899.021429][T10333] chnl_net:caif_netlink_parms(): no params data found [ 899.699230][ T59] Bluetooth: hci4: command tx timeout [ 900.858049][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.858149][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.858635][T10333] bridge_slave_0: entered allmulticast mode [ 900.860623][T10333] bridge_slave_0: entered promiscuous mode [ 901.017245][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.018016][T10333] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.018194][T10333] bridge_slave_1: entered allmulticast mode [ 901.020128][T10333] bridge_slave_1: entered promiscuous mode [ 903.049892][T10333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.163726][T10411] random: crng reseeded on system resumption [ 904.013714][T10333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.031405][T10359] chnl_net:caif_netlink_parms(): no params data found [ 906.750883][T10333] team0: Port device team_slave_0 added [ 906.913642][T10333] team0: Port device team_slave_1 added [ 910.569348][T10333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.569365][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.569395][T10333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.771211][T10333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.771229][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.771263][T10333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.897539][ T994] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 910.921242][T10385] chnl_net:caif_netlink_parms(): no params data found [ 910.963957][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.964115][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.964381][T10359] bridge_slave_0: entered allmulticast mode [ 910.968352][T10359] bridge_slave_0: entered promiscuous mode [ 910.987989][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.988254][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.988567][T10359] bridge_slave_1: entered allmulticast mode [ 910.992299][T10359] bridge_slave_1: entered promiscuous mode [ 911.050343][ T994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 911.050379][ T994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 911.050422][ T994] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 911.050446][ T994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.099832][ T994] usb 6-1: config 0 descriptor?? [ 911.101093][T10428] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 912.830312][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.937134][T10333] hsr_slave_0: entered promiscuous mode [ 912.945899][T10333] hsr_slave_1: entered promiscuous mode [ 912.953850][T10333] debugfs: 'hsr0' already exists in 'hsr' [ 912.953881][T10333] Cannot create hsr debugfs directory [ 913.024720][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.826825][ T994] usbhid 6-1:0.0: can't add hid device: -71 [ 913.826960][ T994] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 913.845525][ T994] usb 6-1: USB disconnect, device number 25 [ 914.008613][T10359] team0: Port device team_slave_0 added [ 914.079131][T10385] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.079319][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.079491][T10385] bridge_slave_0: entered allmulticast mode [ 914.081489][T10385] bridge_slave_0: entered promiscuous mode [ 914.085091][T10359] team0: Port device team_slave_1 added [ 914.213447][T10385] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.213625][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.213868][T10385] bridge_slave_1: entered allmulticast mode [ 914.216926][T10385] bridge_slave_1: entered promiscuous mode [ 914.307518][ T994] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 914.457513][ T994] usb 6-1: Using ep0 maxpacket: 8 [ 914.473517][ T994] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 914.473547][ T994] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 914.473574][ T994] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 914.473599][ T994] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.473644][ T994] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 914.473667][ T994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.750917][ T994] usb 6-1: GET_CAPABILITIES returned 0 [ 914.750970][ T994] usbtmc 6-1:16.0: can't read capabilities [ 914.781055][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.781073][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.781102][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.866447][T10385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.878640][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.878657][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.878687][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.879601][T10298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 914.973820][ T5851] usb 6-1: USB disconnect, device number 26 [ 915.018292][T10385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.041993][T10298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 915.281780][T10298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 915.464442][T10298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 915.576112][T10385] team0: Port device team_slave_0 added [ 915.741080][T10385] team0: Port device team_slave_1 added [ 916.018647][T10359] hsr_slave_0: entered promiscuous mode [ 916.020860][T10359] hsr_slave_1: entered promiscuous mode [ 916.021828][T10359] debugfs: 'hsr0' already exists in 'hsr' [ 916.021854][T10359] Cannot create hsr debugfs directory [ 916.228504][T10385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.228523][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.228554][T10385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.235393][T10385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.235411][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.235440][T10385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.389434][T10385] hsr_slave_0: entered promiscuous mode [ 917.390898][T10385] hsr_slave_1: entered promiscuous mode [ 917.391938][T10385] debugfs: 'hsr0' already exists in 'hsr' [ 917.391963][T10385] Cannot create hsr debugfs directory [ 918.625331][T10333] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 918.678173][T10333] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 918.974107][T10333] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 919.163215][T10333] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 920.147627][ T5851] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 920.317831][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 920.337994][ T5851] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 920.338024][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.338043][ T5851] usb 6-1: Product: syz [ 920.338056][ T5851] usb 6-1: Manufacturer: syz [ 920.338069][ T5851] usb 6-1: SerialNumber: syz [ 920.381852][ T5851] r8152-cfgselector 6-1: Unknown version 0x0000 [ 920.381878][ T5851] r8152-cfgselector 6-1: config 0 descriptor?? [ 921.545436][T10298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.646629][ T1027] bridge_slave_1: left allmulticast mode [ 921.646665][ T1027] bridge_slave_1: left promiscuous mode [ 921.646940][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.709223][ T1027] bridge_slave_0: left allmulticast mode [ 921.709250][ T1027] bridge_slave_0: left promiscuous mode [ 921.709542][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.786392][ T1027] bridge_slave_1: left allmulticast mode [ 921.786435][ T1027] bridge_slave_1: left promiscuous mode [ 921.786725][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.839932][ T1027] bridge_slave_0: left allmulticast mode [ 921.839968][ T1027] bridge_slave_0: left promiscuous mode [ 921.840244][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.912207][ T1027] bridge_slave_1: left allmulticast mode [ 921.912234][ T1027] bridge_slave_1: left promiscuous mode [ 921.912482][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.979887][ T1027] bridge_slave_0: left allmulticast mode [ 921.979922][ T1027] bridge_slave_0: left promiscuous mode [ 921.980198][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.055674][ T1027] bridge_slave_1: left allmulticast mode [ 922.055714][ T1027] bridge_slave_1: left promiscuous mode [ 922.056010][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.129991][ T1027] bridge_slave_0: left allmulticast mode [ 922.130028][ T1027] bridge_slave_0: left promiscuous mode [ 922.130312][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.190975][ T5851] r8152-cfgselector 6-1: USB disconnect, device number 27 [ 922.796491][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.892560][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.185593][ T1027] bond0 (unregistering): Released all slaves [ 924.176788][T10477] kernel profiling enabled (shift: 7) [ 924.269205][T10479] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 924.275436][T10479] comedi comedi3: 8255: I/O port conflict (0x100002,4) [ 924.280893][T10479] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 924.301038][T10479] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 924.301319][T10479] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 924.302591][T10479] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 924.306834][T10479] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 924.307111][T10479] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 924.312342][T10479] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 924.313275][T10479] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 924.313575][T10479] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 924.314126][T10479] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 925.799438][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.919116][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.982600][ T1027] bond0 (unregistering): Released all slaves [ 926.404848][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.541828][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.688187][ T1027] bond0 (unregistering): Released all slaves [ 927.235329][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.329837][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.429254][ T1027] bond0 (unregistering): Released all slaves [ 927.483160][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.808'. [ 928.411618][T10490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 928.724569][T10298] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.800049][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.800429][ T8749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.082567][T10333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.305203][T10333] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.360065][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.360478][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.845559][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 929.861838][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 929.890061][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 929.906543][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 929.916214][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.916464][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.920510][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.187740][ T1027] hsr_slave_0: left promiscuous mode [ 930.238557][ T1027] hsr_slave_1: left promiscuous mode [ 930.239601][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.298685][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.437594][ T1027] hsr_slave_0: left promiscuous mode [ 930.477562][ T1027] hsr_slave_1: left promiscuous mode [ 930.478349][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.529083][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.667581][ T1027] hsr_slave_0: left promiscuous mode [ 930.687569][ T1027] hsr_slave_1: left promiscuous mode [ 930.688549][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.748515][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.836736][ T1027] hsr_slave_0: left promiscuous mode [ 930.867583][ T1027] hsr_slave_1: left promiscuous mode [ 930.868588][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.898452][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.798440][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 931.974727][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 932.021117][ T5156] Bluetooth: hci3: command tx timeout [ 933.395000][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 933.538480][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 934.097559][ T5156] Bluetooth: hci3: command tx timeout [ 934.788742][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 934.958502][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 936.129745][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 936.133363][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 936.134722][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 936.135973][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 936.136799][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 936.182159][ T59] Bluetooth: hci3: command tx timeout [ 936.409729][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 936.579005][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 937.229629][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.265470][ T5156] Bluetooth: hci5: command tx timeout [ 938.265910][ T5156] Bluetooth: hci3: command tx timeout [ 939.105618][T10359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 939.239367][T10359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 939.382534][T10359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 939.583293][T10359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 940.337653][ T59] Bluetooth: hci5: command tx timeout [ 940.637473][T10385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 940.782971][T10498] chnl_net:caif_netlink_parms(): no params data found [ 940.810185][T10385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 940.966155][T10385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 941.137726][T10385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 941.509130][T10504] chnl_net:caif_netlink_parms(): no params data found [ 941.691490][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.815'. [ 942.429958][ T59] Bluetooth: hci5: command tx timeout [ 942.727238][T10544] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 943.235177][T10498] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.235435][T10498] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.235647][T10498] bridge_slave_0: entered allmulticast mode [ 943.304223][T10498] bridge_slave_0: entered promiscuous mode [ 943.455290][T10498] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.455503][T10498] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.455734][T10498] bridge_slave_1: entered allmulticast mode [ 943.544763][T10498] bridge_slave_1: entered promiscuous mode [ 944.074006][T10504] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.074144][T10504] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.074349][T10504] bridge_slave_0: entered allmulticast mode [ 944.076236][T10504] bridge_slave_0: entered promiscuous mode [ 944.128839][T10498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.179507][T10504] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.179611][T10504] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.179817][T10504] bridge_slave_1: entered allmulticast mode [ 944.181780][T10504] bridge_slave_1: entered promiscuous mode [ 944.186227][T10498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.577507][ T59] Bluetooth: hci5: command tx timeout [ 944.908038][T10504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.911873][T10498] team0: Port device team_slave_0 added [ 944.922550][T10504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.094179][T10498] team0: Port device team_slave_1 added [ 945.626034][T10504] team0: Port device team_slave_0 added [ 945.851023][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 945.883081][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 945.909758][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 945.922245][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 945.924041][T10504] team0: Port device team_slave_1 added [ 945.927745][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 946.501465][T10498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.501484][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.501515][T10498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.678780][T10498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.678799][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.678831][T10498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.924012][T10504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.924027][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.924048][T10504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.040950][T10504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.040964][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.040985][T10504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.555541][T10498] hsr_slave_0: entered promiscuous mode [ 947.557079][T10498] hsr_slave_1: entered promiscuous mode [ 948.098169][ T59] Bluetooth: hci0: command tx timeout [ 948.213751][T10504] hsr_slave_0: entered promiscuous mode [ 948.215170][T10504] hsr_slave_1: entered promiscuous mode [ 948.216106][T10504] debugfs: 'hsr0' already exists in 'hsr' [ 948.216131][T10504] Cannot create hsr debugfs directory [ 950.177476][ T59] Bluetooth: hci0: command tx timeout [ 952.248968][T10581] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 952.310764][ T59] Bluetooth: hci0: command tx timeout [ 953.045053][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 953.051503][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 953.053316][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 953.054678][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 953.055531][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 954.508052][ T59] Bluetooth: hci0: command tx timeout [ 955.076518][T10559] chnl_net:caif_netlink_parms(): no params data found [ 955.139856][ T59] Bluetooth: hci1: command tx timeout [ 957.672624][ T59] Bluetooth: hci1: command tx timeout [ 959.697775][ T59] Bluetooth: hci1: command tx timeout [ 960.020393][T10559] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.020543][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.020841][T10559] bridge_slave_0: entered allmulticast mode [ 960.023856][T10559] bridge_slave_0: entered promiscuous mode [ 960.123212][T10559] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.123369][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.123612][T10559] bridge_slave_1: entered allmulticast mode [ 960.154004][T10559] bridge_slave_1: entered promiscuous mode [ 960.685797][T10559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.711267][T10559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.741822][T10582] chnl_net:caif_netlink_parms(): no params data found [ 960.974476][T10559] team0: Port device team_slave_0 added [ 960.982462][T10559] team0: Port device team_slave_1 added [ 961.523953][T10559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.523972][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.524003][T10559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.686850][ T1027] bridge_slave_1: left allmulticast mode [ 961.686885][ T1027] bridge_slave_1: left promiscuous mode [ 961.694142][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.777875][ T59] Bluetooth: hci1: command tx timeout [ 961.869584][ T1027] bridge_slave_0: left allmulticast mode [ 961.869610][ T1027] bridge_slave_0: left promiscuous mode [ 961.869828][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.951546][ T1027] bridge_slave_1: left allmulticast mode [ 961.951590][ T1027] bridge_slave_1: left promiscuous mode [ 961.951894][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.013213][ T1027] bridge_slave_0: left allmulticast mode [ 962.013250][ T1027] bridge_slave_0: left promiscuous mode [ 962.014848][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.097213][ T1027] bridge_slave_1: left allmulticast mode [ 962.097240][ T1027] bridge_slave_1: left promiscuous mode [ 962.112171][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.171889][ T1027] bridge_slave_0: left allmulticast mode [ 962.171925][ T1027] bridge_slave_0: left promiscuous mode [ 962.173534][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.088250][ T6572] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 963.228951][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.247460][ T6572] usb 6-1: Using ep0 maxpacket: 8 [ 963.259577][ T6572] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 963.259607][ T6572] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 963.259633][ T6572] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 963.259658][ T6572] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.259703][ T6572] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 963.259726][ T6572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.417014][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.484287][ T6572] usb 6-1: usb_control_msg returned -32 [ 963.484346][ T6572] usbtmc 6-1:16.0: can't read capabilities [ 963.501946][ T6572] usb 6-1: USB disconnect, device number 28 [ 963.522789][ T1027] bond0 (unregistering): Released all slaves [ 965.228812][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.288386][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.354650][ T1027] bond0 (unregistering): Released all slaves [ 966.978129][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.059170][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.122169][ T1027] bond0 (unregistering): Released all slaves [ 967.169555][T10559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.169574][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.169606][T10559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.806713][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.834'. [ 967.823038][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.823261][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.823508][T10582] bridge_slave_0: entered allmulticast mode [ 967.826542][T10582] bridge_slave_0: entered promiscuous mode [ 968.060053][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.060324][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.060619][T10582] bridge_slave_1: entered allmulticast mode [ 968.063610][T10582] bridge_slave_1: entered promiscuous mode [ 968.287833][ T994] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 968.406274][T10559] hsr_slave_0: entered promiscuous mode [ 968.408788][T10559] hsr_slave_1: entered promiscuous mode [ 968.409986][T10559] debugfs: 'hsr0' already exists in 'hsr' [ 968.410016][T10559] Cannot create hsr debugfs directory [ 968.443135][ T994] usb 6-1: Using ep0 maxpacket: 16 [ 968.449537][ T994] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 968.449569][ T994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.449590][ T994] usb 6-1: Product: syz [ 968.449608][ T994] usb 6-1: Manufacturer: syz [ 968.449626][ T994] usb 6-1: SerialNumber: syz [ 968.464086][ T994] r8152-cfgselector 6-1: Unknown version 0x0000 [ 968.464116][ T994] r8152-cfgselector 6-1: config 0 descriptor?? [ 968.688010][ T1027] hsr_slave_0: left promiscuous mode [ 968.733863][ T1027] hsr_slave_1: left promiscuous mode [ 968.734942][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.758978][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.898421][ T1027] hsr_slave_0: left promiscuous mode [ 968.918332][ T1027] hsr_slave_1: left promiscuous mode [ 968.921288][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.959365][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.097994][ T1027] hsr_slave_0: left promiscuous mode [ 969.138692][ T1027] hsr_slave_1: left promiscuous mode [ 969.140085][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.182908][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.219188][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 970.368909][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 970.967296][ T994] r8152-cfgselector 6-1: USB disconnect, device number 29 [ 972.354520][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 972.498721][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 975.168436][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 975.308495][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 977.353447][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.450638][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.225203][T10582] team0: Port device team_slave_0 added [ 978.450173][T10582] team0: Port device team_slave_1 added [ 978.841936][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.841956][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.841984][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.876892][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.876911][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.876946][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.118427][T10651] netlink: 132 bytes leftover after parsing attributes in process `syz.5.838'. [ 979.169787][T10652] netlink: 'syz.5.838': attribute type 1 has an invalid length. [ 979.169808][T10652] netlink: 224 bytes leftover after parsing attributes in process `syz.5.838'. [ 979.382182][T10498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 979.510849][T10655] random: crng reseeded on system resumption [ 979.807036][T10582] hsr_slave_0: entered promiscuous mode [ 979.850120][T10582] hsr_slave_1: entered promiscuous mode [ 979.867106][T10582] debugfs: 'hsr0' already exists in 'hsr' [ 979.867136][T10582] Cannot create hsr debugfs directory [ 979.889528][T10498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 980.139410][T10498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 981.666529][T10498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 981.939783][T10664] random: crng reseeded on system resumption [ 983.667007][T10504] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 983.733169][T10673] random: crng reseeded on system resumption [ 984.337451][T10504] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 986.099278][T10504] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 986.423205][T10682] input: syz0 as /devices/virtual/input/input12 [ 986.534422][T10504] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 988.686640][T10498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.979323][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 988.979387][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 988.988367][ C1] ------------[ cut here ]------------ [ 988.988383][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 988.988498][ C1] WARNING: CPU: 1 PID: 29 at kernel/workqueue.c:2256 __queue_work+0x2e5/0x1010 [ 988.988543][ C1] Modules linked in: [ 988.988564][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 988.988591][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 988.988605][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 988.988634][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 96 a3 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 e0 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 8d 6c 34 00 eb 2e e8 86 6c 34 00 e9 [ 988.988651][ C1] RSP: 0018:ffffc90000a3f828 EFLAGS: 00010046 [ 988.988680][ C1] RAX: 01fc325db7099f00 RBX: 0000000000000000 RCX: ffff88801ca91dc0 [ 988.988693][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 988.988704][ C1] RBP: ffff888068948998 R08: 0000000000000000 R09: 0000000000000100 [ 988.988716][ C1] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 988.988731][ C1] R13: dffffc0000000000 R14: ffff8880325c7168 R15: ffff88801ca928cc [ 988.988746][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 988.988761][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 988.988774][ C1] CR2: 0000200000001000 CR3: 000000002828e000 CR4: 00000000003526f0 [ 988.988790][ C1] Call Trace: [ 988.988798][ C1] [ 988.988823][ C1] call_timer_fn+0x17b/0x5f0 [ 988.988852][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 988.988881][ C1] ? call_timer_fn+0xbe/0x5f0 [ 988.988908][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 988.988947][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 988.988972][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 988.989002][ C1] __run_timer_base+0x709/0x970 [ 988.989047][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 988.989092][ C1] run_timer_softirq+0xb7/0x180 [ 988.989118][ C1] handle_softirqs+0x22c/0x710 [ 988.989159][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 988.989199][ C1] run_ktimerd+0xcf/0x190 [ 988.989239][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 988.989269][ C1] ? schedule+0x91/0x360 [ 988.989307][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 988.989332][ C1] smpboot_thread_fn+0x542/0xa60 [ 988.989359][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 988.989390][ C1] kthread+0x711/0x8a0 [ 988.989425][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 988.989450][ C1] ? __pfx_kthread+0x10/0x10 [ 988.989490][ C1] ? __pfx_kthread+0x10/0x10 [ 988.989522][ C1] ret_from_fork+0x3f9/0x770 [ 988.989550][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 988.989579][ C1] ? __switch_to_asm+0x39/0x70 [ 988.989595][ C1] ? __switch_to_asm+0x33/0x70 [ 988.989610][ C1] ? __pfx_kthread+0x10/0x10 [ 988.989637][ C1] ret_from_fork_asm+0x1a/0x30 [ 988.989670][ C1] [ 988.989679][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 988.989693][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 988.989714][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 988.989725][ C1] Call Trace: [ 988.989732][ C1] [ 988.989739][ C1] dump_stack_lvl+0x99/0x250 [ 988.989769][ C1] ? __asan_memcpy+0x40/0x70 [ 988.989790][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 988.989819][ C1] ? __pfx__printk+0x10/0x10 [ 988.989854][ C1] vpanic+0x281/0x750 [ 988.989879][ C1] ? __pfx__printk+0x10/0x10 [ 988.989898][ C1] ? __pfx_vpanic+0x10/0x10 [ 988.989924][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 988.989960][ C1] panic+0xb9/0xc0 [ 988.989989][ C1] ? __pfx_panic+0x10/0x10 [ 988.990034][ C1] __warn+0x31b/0x4b0 [ 988.990060][ C1] ? __queue_work+0x2e5/0x1010 [ 988.990090][ C1] ? __queue_work+0x2e5/0x1010 [ 988.990116][ C1] report_bug+0x2be/0x4f0 [ 988.990141][ C1] ? __queue_work+0x2e5/0x1010 [ 988.990168][ C1] ? __queue_work+0x2e5/0x1010 [ 988.990195][ C1] ? __queue_work+0x2e7/0x1010 [ 988.990230][ C1] handle_bug+0x84/0x160 [ 988.990264][ C1] exc_invalid_op+0x1a/0x50 [ 988.990295][ C1] asm_exc_invalid_op+0x1a/0x20 [ 988.990314][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 988.990341][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 96 a3 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 e0 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 8d 6c 34 00 eb 2e e8 86 6c 34 00 e9 [ 988.990358][ C1] RSP: 0018:ffffc90000a3f828 EFLAGS: 00010046 [ 988.990375][ C1] RAX: 01fc325db7099f00 RBX: 0000000000000000 RCX: ffff88801ca91dc0 [ 988.990390][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 988.990404][ C1] RBP: ffff888068948998 R08: 0000000000000000 R09: 0000000000000100 [ 988.990418][ C1] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 988.990434][ C1] R13: dffffc0000000000 R14: ffff8880325c7168 R15: ffff88801ca928cc [ 988.990464][ C1] ? __queue_work+0x2e4/0x1010 [ 988.990500][ C1] call_timer_fn+0x17b/0x5f0 [ 988.990524][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 988.990549][ C1] ? call_timer_fn+0xbe/0x5f0 [ 988.990573][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 988.990610][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 988.990632][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 988.990660][ C1] __run_timer_base+0x709/0x970 [ 988.990701][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 988.990745][ C1] run_timer_softirq+0xb7/0x180 [ 988.990768][ C1] handle_softirqs+0x22c/0x710 [ 988.990799][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 988.990833][ C1] run_ktimerd+0xcf/0x190 [ 988.990859][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 988.990884][ C1] ? schedule+0x91/0x360 [ 988.990918][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 988.990943][ C1] smpboot_thread_fn+0x542/0xa60 [ 988.990972][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 988.991007][ C1] kthread+0x711/0x8a0 [ 988.991042][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 988.991069][ C1] ? __pfx_kthread+0x10/0x10 [ 988.991107][ C1] ? __pfx_kthread+0x10/0x10 [ 988.991140][ C1] ret_from_fork+0x3f9/0x770 [ 988.991170][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 988.991204][ C1] ? __switch_to_asm+0x39/0x70 [ 988.991230][ C1] ? __switch_to_asm+0x33/0x70 [ 988.991247][ C1] ? __pfx_kthread+0x10/0x10 [ 988.991281][ C1] ret_from_fork_asm+0x1a/0x30 [ 988.991321][ C1] [ 988.991614][ C1] Kernel Offset: disabled