last executing test programs: 17.025294476s ago: executing program 3 (id=2985): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x7d}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/169, 0xa9}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000002980)=""/255, 0xff}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000002900)=""/104, 0x68}, {&(0x7f0000000340)=""/250, 0xfa}], 0x7}, 0x1}], 0x4, 0x0, 0x0) 16.883846652s ago: executing program 3 (id=2986): openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x40) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) read$hidraw(r1, &(0x7f0000000140)=""/87, 0x57) syz_usb_ep_write(r0, 0x81, 0x58, &(0x7f0000000640)="7eda7fd763f24206dd21f481f483c67bfc3f46bd1c7a0154122686f3d1b58b72e51fe39e7d522d7249b4becb73464a282d0f0879afc868cde4c5c0dfb666980084042cd292e3437f6fb2d068e91b9767b782054faa06ba80") 7.59955645s ago: executing program 0 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0092eb64000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009000000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x24040080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x8, 0x0, 0x5, 0x6, {{0x16, 0x4, 0x0, 0x12, 0x58, 0x66, 0x0, 0xa, 0x0, 0x0, @broadcast, @rand_addr=0x64010100, {[@rr={0x7, 0xf, 0x56, [@remote, @remote, @private=0xa010100]}, @ssrr={0x89, 0x7, 0x2b, [@private=0xa010100]}, @noop, @cipso={0x86, 0x2b, 0x3, [{0x5, 0x8, "480de2a3286f"}, {0x5, 0x9, "25d137abd6ddd5"}, {0x5, 0x2}, {0x2, 0x12, "5f533024cc64aa99c8474648b0e8e166"}]}]}}}}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x78, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r8, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x270}, {0xfffffffc, 0x2, 0x3, 0x9}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20045081}, 0x4880) sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)='t', 0x5dc}], 0x1}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x228, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x65000c681b6e2db}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf6, 0x4, "9b775db8929ea420f4b93c0bf1688e94534acb503b87fbe90b26ae7dd4ba8f9a3c079e11fe7866fc7b65fa920b4e540cb50ee2bb140bb18e9617e26c032ddfbbe9c570c372a9f114cafb34a21b0f5a4f32ba8a50d37e652f9223ae478935553d0812f8e7b828b8362b5d146521e7be4b3e45e5aed20ea2855a577962f9a1112881794dfc06bbdf4d8694ad183ccf1b1b24b34c548d2cda1bed9d3a4e64fb6a7c06b07b42c22d775f75c0749a4808153119fbadb388ab68d30afae0611a9331d2d831858de446b047decbee5a0c3cda42a90eebadadc9fff3003c3e837d6e3c2d47377ae228b456d4c9589fbe32592571df30"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.&^\\.:/!\\[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4c249ab5ca5fa04e}, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x850) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x78, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xa9}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x61}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x78}}, 0x0) 7.135440753s ago: executing program 0 (id=3034): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000000100000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100b403000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.507724698s ago: executing program 1 (id=3037): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_vlan\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x1f4}, 0x1, 0x0, 0x0, 0x4000880}, 0x2400c000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)) 5.818048114s ago: executing program 0 (id=3039): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002000000730132000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = syz_create_resource$futex(&(0x7f0000000500)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000780)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) futex(r3, 0x6, 0x0, 0x0, 0x0, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r5 = syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) io_submit(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0xfffffe5f, 0x9, 0xa0}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c095}, 0x40000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) fcntl$dupfd(r1, 0x406, r1) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50, 0x0, 0x100000000, {0x7, 0x2d, 0x0, 0x0, 0x0, 0xfff7, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0xc95, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x181}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x0, 0x0) 5.370085145s ago: executing program 1 (id=3040): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x139}, 0x48) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101001, 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x139}, 0x48) (async) open(&(0x7f0000000040)='./file0\x00', 0x101001, 0x9) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) 4.643455923s ago: executing program 0 (id=3041): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x1f00, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x20, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x300, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) 3.907568445s ago: executing program 2 (id=3044): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef01010100000000000000000000000008000ffe2800028005000300010000001c000280"], 0x60}}, 0x0) 3.864276644s ago: executing program 4 (id=3045): mmap$IORING_OFF_CQ_RING(0x0, 0x7f, 0x4, 0x13, 0xffffffffffffffff, 0x8000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x4400, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000007b40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000007c00)={0x5, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x3, 0x0, @val=@netkit}, 0x1c) connect$inet(0xffffffffffffffff, 0x0, 0x0) getitimer(0x2, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8000002) 3.749167067s ago: executing program 2 (id=3046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRESDEC=r2], &(0x7f0000000740)='syzkaller\x00', 0x2, 0xfef, &(0x7f0000000780)=""/4079, 0x0, 0x0, '\x00', 0x0, 0xffffff3f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe979}, 0x94) 3.587767613s ago: executing program 1 (id=3047): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x7}]}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x7, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) mlockall(0x2) (async) r2 = syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0xba12, 0x814, 0x2000, 0x93}, &(0x7f00000003c0), &(0x7f0000000880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@caif=@dgm={0x25, 0x3, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x8045) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5000) (async) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x7, 0x6, 0xff}, 0x3b, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x92c, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x3, 0x4, 0x9, 0x400, 0x84, 0x1, 0x5, 0x8445, 0x6, 0x5, 0x1, 0x40], [0x1000000b, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x10000, 0x1, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x1e, 0x4, 0x7, 0x7fff, 0x6, 0x43fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x9, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x5, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x8005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x22000008, 0x2, 0x6d03, 0x6, 0x11, 0xb, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x1, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff243e, 0x1003]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) 3.572668999s ago: executing program 4 (id=3048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x4000000, 0x4004840}, 0x40000) 3.547331411s ago: executing program 0 (id=3049): ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000003, 0x4) listen(r0, 0x100004) (async) listen(r0, 0x100004) syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') r1 = openat$cuse(0xffffff9c, &(0x7f0000002240), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002280)='/sys/kernel/rcu_normal', 0x82802, 0x8) write$sndseq(r2, &(0x7f00000022c0)=[{0x2, 0xff, 0x8, 0x9, @tick=0x10001, {0x45, 0xff}, {0x3, 0x5}, @queue={0x0, {0x1, 0x5}}}], 0x1c) (async) write$sndseq(r2, &(0x7f00000022c0)=[{0x2, 0xff, 0x8, 0x9, @tick=0x10001, {0x45, 0xff}, {0x3, 0x5}, @queue={0x0, {0x1, 0x5}}}], 0x1c) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0xffffffffffffff6a) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002300)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002340), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002380)={'pimreg\x00', 0x5005}) write$tun(r5, &(0x7f00000023c0)=ANY=[], 0x5c) (async) write$tun(r5, &(0x7f00000023c0)=ANY=[], 0x5c) openat$vmci(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000002440)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000002480)={@local}) personality(0x4100001) (async) personality(0x4100001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000024c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002500)=ANY=[], 0x50) syz_open_dev$radio(&(0x7f0000002540), 0x0, 0x2) (async) r10 = syz_open_dev$radio(&(0x7f0000002540), 0x0, 0x2) r11 = dup2(r10, r9) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r11, 0x3, &(0x7f0000002580)={{0x77359400}, {0x77359400}}, &(0x7f00000025c0)) (async) timerfd_settime(r11, 0x3, &(0x7f0000002580)={{0x77359400}, {0x77359400}}, &(0x7f00000025c0)) preadv2(r4, &(0x7f0000002600)=[{&(0x7f0000002680)=""/88, 0x58}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/84, 0x54}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/70, 0x46}, {&(0x7f0000004800)=""/3, 0x3}, {&(0x7f0000004840)=""/214, 0xd6}, {&(0x7f0000004940)=""/184, 0xb8}, {&(0x7f0000004a00)=""/152, 0x98}], 0x9, 0x3, 0x6, 0x8) dup2(r7, r8) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000004ac0)={&(0x7f0000004b00)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7ff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63e, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xce3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x252, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0xfffffffd], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000005b00)={0x0, 0x1}) 3.224606472s ago: executing program 4 (id=3050): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3) (fail_nth: 27) 3.222111263s ago: executing program 2 (id=3051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800010328bd7000fff000000a800000ff0300060000000014000100fe80000000000000ff"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.919386558s ago: executing program 4 (id=3052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003280)=ANY=[@ANYBLOB="1400000010000ec000000000008400000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a01020000000000000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000000c00018004000200636f6e6e6c696d6974000000040002800900010073797a3000"], 0xfc}}, 0x0) 2.838028016s ago: executing program 2 (id=3053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x600}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 2.551413913s ago: executing program 2 (id=3054): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000a00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a80)="fd", 0x1}], 0x1}}, {{&(0x7f0000000ac0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)='f', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000b80)=@assoc_value={0x0}, &(0x7f0000000bc0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000c00)=@assoc_value={r4, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000c40)={r4, 0x659, 0x3}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="8000010018000000180034801400350069703665727370616e"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r8, &(0x7f0000000740)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0xf8}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000640)=r7, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000fdff2cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="604e0000007a01001c0012800e00010069703665727370616e00000008000280040012"], 0x3c}, 0x1, 0x8100}, 0x2800804c) 2.356217342s ago: executing program 4 (id=3055): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0xb, 0x4000000, 0x0, 0x3}, 0x0, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000180)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ppoll(&(0x7f00000001c0)=[{}, {r0, 0x10}, {0xffffffffffffffff, 0xc}, {}], 0x4, 0x0, &(0x7f0000000200)={[0xf81, 0x4]}, 0x8) sync() sync() syz_clone3(&(0x7f0000000240)={0x1020000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x25, 0x0, 0x0}, 0x58) 2.074555364s ago: executing program 2 (id=3056): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unlink(0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000340)=0x13e) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000000)={0x7, 0x9, {0xffffffffffffffff}, {}, 0xe, 0x9}) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x8, &(0x7f00000000c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x48) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20) close(r1) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000500)={0xe000200c}) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008240)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.042846012s ago: executing program 3 (id=2996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000002000000000000700000a20000000000a07000000000000000000070000000900010073797a30000000002c000000030a01040000000000000000070000000900010073797a30000000000900030073797a30000000007c000000060a01040000000000000000070000000900010073797a30000000000900020073797a3000000000500004804c0001800a0001006d617463680000003c0002800a0001006c696d6974000000080002400000000024000300000000", @ANYRES16=r0, @ANYRES8], 0xf0}}, 0x0) 1.892024026s ago: executing program 1 (id=3057): mmap$IORING_OFF_CQ_RING(0x0, 0x7f, 0x4, 0x13, 0xffffffffffffffff, 0x8000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x4400, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000007b40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000007c00)={0x5, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x3, 0x0, @val=@netkit}, 0x1c) connect$inet(0xffffffffffffffff, 0x0, 0x0) getitimer(0x2, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8000002) 1.89046335s ago: executing program 3 (id=3058): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000480)=0x4, 0x4) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@ip_ttl={{0x10, 0xff97}}], 0x10}}], 0x2, 0xf00) 1.774878304s ago: executing program 1 (id=3059): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$full(0xffffff9c, &(0x7f0000000180), 0x80, 0x0) fcntl$dupfd(r0, 0x0, r1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000340), 0x0, 0x40040) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000600)={0x0, 0x2, {0x0, 0x0, 0x3, 0x1f000000}}) ioctl$HIDIOCGUSAGE(r4, 0x501c4814, &(0x7f0000000380)={0x3, 0xffffffff, 0x0, 0xfffff803, 0x21185045}) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="2e00000010008188e6b62aa73f72cc9f0ba1f848460000005e1206021f1fe7030e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 1.744021784s ago: executing program 3 (id=3060): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x8fff5) (fail_nth: 4) 1.299424089s ago: executing program 3 (id=3061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x440000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0100001300010100000000000000", @ANYRES32], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000240)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000280)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000102000/0x1000)=nil, 0x1000, 0x8) timer_settime(r1, 0x1, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$pppoe(0x18, 0x1, 0x0) fsopen(&(0x7f0000000300)='nilfs2\x00', 0x1) getpeername(r2, 0x0, &(0x7f0000000340)) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000012640)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000012680)={0x24, 0x0, 0x0, &(0x7f00000126c0)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000012700), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000012740)=ANY=[@ANYRES32, @ANYRES32], 0x10) sendmsg$sock(r5, &(0x7f0000012780)={0x0, 0x0, &(0x7f00000127c0)=[{0x0}, {&(0x7f0000012800)}], 0x2}, 0x40) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000012840)={0x3, 0x100, 0x0, 0x4, 0x80000}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000012880)={{r4, 0x0, 0x408000, 0x0, 0x0, &(0x7f00000128c0)={@_ha_fsid}, &(0x7f0000012900)=0x1}, 0x0, &(0x7f0000012940)}) rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000003c0)={0x0, 0x2, 0x4, 0x8001, 0x3, 0x80, 0xfffffffffffffffd}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0x8, 0x9, 0xf29, 0x663, 0x7fffffff, 0x3}, 0x0, 0x0) 1.276987181s ago: executing program 4 (id=3062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000840)={0x1, 0x0, [{0x400000b3, 0x0, 0xffffffffffffff7f}]}) syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307812040000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020303000000f441a4440fb209050109ff037808ba07250108040300090402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000440)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000500)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000540)=0x3, 0xac5) syz_clone3(&(0x7f0000000580)={0x23800000, &(0x7f0000000600)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xa, &(0x7f0000000640)=0x0) io_submit(r9, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x7, r8, 0x0}]) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000700)={0x9d, 0x0, &(0x7f0000000740)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000007c0)=""/4}) process_vm_writev(r3, &(0x7f000001a480)=[{&(0x7f0000019400)=""/4096, 0x1000}], 0x1, &(0x7f000001a800)=[{&(0x7f000001a500)=""/181, 0xb5}], 0x1, 0x0) 560.751132ms ago: executing program 1 (id=3064): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f000040f000/0x4000)=nil, 0x4000, 0x13) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0x8000efab, 0x800, 0x2, 0x163}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0) epoll_create(0x401) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff0038000000200a01010000000000000000070000000900020073797a31000000000900010073797a"], 0xcc}}, 0x4000840) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x601c2, 0x0) ftruncate(r5, 0x8800000) read$FUSE(r5, &(0x7f0000002f40)={0x2020}, 0xfffffd6a) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04ff0b032abd7000ffdbdf25570000000c009900090000004100000006009500ffff000006009500faff00000600950006000000060095000a000000060095000180b119bf415cb8d9c90000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x200560d0}, 0x4000054) r9 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x7, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=3065): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200040000000000000fff58000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): USB device found, idVendor=04b4, idProduct=9321, bcdDevice= 0.40 [ 551.265144][ T2287] usb 4-1: config 1 interface 2 has no altsetting 0 [ 551.290536][ T2287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.290568][ T2287] usb 4-1: Product: syz [ 551.290584][ T2287] usb 4-1: Manufacturer: syz [ 551.290707][ T2287] usb 4-1: SerialNumber: syz [ 551.418546][ T25] usb 2-1: USB disconnect, device number 74 [ 551.418636][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 551.418689][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 551.462797][T14404] FAULT_INJECTION: forcing a failure. [ 551.462797][T14404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.462836][T14404] CPU: 1 UID: 0 PID: 14404 Comm: syz.4.2811 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.462865][T14404] Tainted: [L]=SOFTLOCKUP [ 551.462875][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 551.462887][T14404] Call Trace: [ 551.462896][T14404] [ 551.462905][T14404] dump_stack_lvl+0xe8/0x150 [ 551.462941][T14404] should_fail_ex+0x410/0x560 [ 551.462975][T14404] _copy_from_user+0x2d/0xb0 [ 551.462998][T14404] get_compat_msghdr+0xb3/0x4c0 [ 551.463029][T14404] ? __pfx_get_compat_msghdr+0x10/0x10 [ 551.463060][T14404] ? kfree+0x4d/0x650 [ 551.463088][T14404] ___sys_recvmsg+0x1db/0x5a0 [ 551.463118][T14404] ? __pfx____sys_recvmsg+0x10/0x10 [ 551.463152][T14404] ? lock_acquire+0x115/0x350 [ 551.463204][T14404] do_recvmmsg+0x38b/0x7f0 [ 551.463237][T14404] ? __pfx_do_recvmmsg+0x10/0x10 [ 551.463274][T14404] ? __mutex_unlock_slowpath+0x731/0x900 [ 551.463312][T14404] __sys_recvmmsg+0x1a5/0x290 [ 551.463339][T14404] ? __pfx___sys_recvmmsg+0x10/0x10 [ 551.463365][T14404] ? ksys_write+0x242/0x270 [ 551.463395][T14404] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 551.463427][T14404] __do_fast_syscall_32+0x27a/0x6b0 [ 551.463454][T14404] ? do_fast_syscall_32+0x33/0x70 [ 551.463479][T14404] ? asm_int80_emulation+0x1a/0x20 [ 551.463500][T14404] ? do_int80_emulation+0x299/0x500 [ 551.463524][T14404] ? trace_irq_disable+0x3b/0x140 [ 551.463554][T14404] do_fast_syscall_32+0x33/0x70 [ 551.463588][T14404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.463614][T14404] RIP: 0023:0xf7f690ec [ 551.463634][T14404] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 551.463653][T14404] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 551.463679][T14404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 551.463695][T14404] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.463707][T14404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.463720][T14404] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 551.463733][T14404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.463765][T14404] [ 551.806485][ T2287] usb 4-1: can't set first interface for hiFace device. [ 551.806520][ T2287] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 551.828632][ T2287] usb 4-1: can't set first interface for hiFace device. [ 551.828669][ T2287] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 551.833932][ T2287] usb 4-1: USB disconnect, device number 73 [ 551.896690][T13872] udevd[13872]: setting owner of /dev/bus/usb/004/073 to uid=0, gid=0 failed: No such file or directory [ 551.941292][T13872] udevd[13872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.194063][T14413] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2815'. [ 552.271732][T14423] FAULT_INJECTION: forcing a failure. [ 552.271732][T14423] name failslab, interval 1, probability 0, space 0, times 0 [ 552.271772][T14423] CPU: 0 UID: 0 PID: 14423 Comm: syz.0.2818 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.271805][T14423] Tainted: [L]=SOFTLOCKUP [ 552.271814][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 552.271828][T14423] Call Trace: [ 552.271838][T14423] [ 552.271848][T14423] dump_stack_lvl+0xe8/0x150 [ 552.271885][T14423] should_fail_ex+0x410/0x560 [ 552.271921][T14423] should_failslab+0xa8/0x100 [ 552.271949][T14423] ? skb_clone+0x212/0x3a0 [ 552.271974][T14423] kmem_cache_alloc_noprof+0xa1/0x600 [ 552.272001][T14423] ? skb_clone+0x212/0x3a0 [ 552.272032][T14423] skb_clone+0x212/0x3a0 [ 552.272060][T14423] __netlink_deliver_tap+0x413/0x860 [ 552.272100][T14423] ? netlink_deliver_tap+0x2e/0x1b0 [ 552.272129][T14423] netlink_deliver_tap+0x19c/0x1b0 [ 552.272158][T14423] netlink_unicast+0x781/0x940 [ 552.272195][T14423] netlink_sendmsg+0x813/0xb40 [ 552.272233][T14423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.272269][T14423] ? apparmor_socket_sendmsg+0x98/0x360 [ 552.272301][T14423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.272327][T14423] sock_sendmsg_nosec+0x13a/0x180 [ 552.272359][T14423] ____sys_sendmsg+0x54e/0x850 [ 552.272390][T14423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.272431][T14423] ___sys_sendmsg+0x2a5/0x360 [ 552.272454][T14423] ? __lock_acquire+0x747/0x2de0 [ 552.272481][T14423] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.272503][T14423] ? get_pid_task+0x20/0x1f0 [ 552.272524][T14423] ? get_pid_task+0x20/0x1f0 [ 552.272569][T14423] ? get_pid_task+0x20/0x1f0 [ 552.272626][T14423] ? __fget_files+0x2a/0x420 [ 552.272646][T14423] ? __fget_files+0x3a2/0x420 [ 552.272678][T14423] __sys_sendmsg+0x177/0x240 [ 552.272705][T14423] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.272751][T14423] __do_fast_syscall_32+0x27a/0x6b0 [ 552.272784][T14423] ? do_fast_syscall_32+0x33/0x70 [ 552.272809][T14423] ? asm_int80_emulation+0x1a/0x20 [ 552.272830][T14423] ? do_int80_emulation+0x299/0x500 [ 552.272854][T14423] ? trace_irq_disable+0x3b/0x140 [ 552.272883][T14423] do_fast_syscall_32+0x33/0x70 [ 552.272909][T14423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.272934][T14423] RIP: 0023:0xf7f770ec [ 552.272955][T14423] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 552.272974][T14423] RSP: 002b:00000000f540550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 552.272998][T14423] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 552.273014][T14423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.273027][T14423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.273041][T14423] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 552.273053][T14423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.273087][T14423] [ 553.027811][ T2287] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 553.089014][T14460] FAULT_INJECTION: forcing a failure. [ 553.089014][T14460] name failslab, interval 1, probability 0, space 0, times 0 [ 553.089053][T14460] CPU: 1 UID: 0 PID: 14460 Comm: syz.0.2827 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.089087][T14460] Tainted: [L]=SOFTLOCKUP [ 553.089096][T14460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 553.089109][T14460] Call Trace: [ 553.089118][T14460] [ 553.089128][T14460] dump_stack_lvl+0xe8/0x150 [ 553.089164][T14460] should_fail_ex+0x410/0x560 [ 553.089200][T14460] should_failslab+0xa8/0x100 [ 553.089231][T14460] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 553.089257][T14460] ? __d_alloc+0x37/0x6f0 [ 553.089277][T14460] ? __d_alloc+0x37/0x6f0 [ 553.089305][T14460] __d_alloc+0x37/0x6f0 [ 553.089327][T14460] ? seqcount_lockdep_reader_access+0xea/0x100 [ 553.089356][T14460] d_alloc_pseudo+0x21/0xc0 [ 553.089381][T14460] alloc_path_pseudo+0x107/0x220 [ 553.089414][T14460] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 553.089444][T14460] ? hugetlb_reserve_pages+0x3b8/0x1140 [ 553.089483][T14460] alloc_file_pseudo+0xa8/0x1e0 [ 553.089516][T14460] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 553.089543][T14460] ? rcu_is_watching+0x16/0xb0 [ 553.089581][T14460] hugetlb_file_setup+0x3ee/0x630 [ 553.089609][T14460] ksys_mmap_pgoff+0x1ec/0x760 [ 553.089648][T14460] __do_fast_syscall_32+0x27a/0x6b0 [ 553.089676][T14460] ? do_fast_syscall_32+0x33/0x70 [ 553.089701][T14460] ? asm_int80_emulation+0x1a/0x20 [ 553.089722][T14460] ? do_int80_emulation+0x299/0x500 [ 553.089746][T14460] ? trace_irq_disable+0x3b/0x140 [ 553.089783][T14460] do_fast_syscall_32+0x33/0x70 [ 553.089810][T14460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.089836][T14460] RIP: 0023:0xf7f770ec [ 553.089856][T14460] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 553.089875][T14460] RSP: 002b:00000000f53e450c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 553.089900][T14460] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 553.089916][T14460] RDX: 0000000000000002 RSI: 000000000004c831 RDI: 00000000ffffffff [ 553.089930][T14460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.089944][T14460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 553.089959][T14460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 553.089992][T14460] [ 553.261050][ T2287] usb 5-1: Using ep0 maxpacket: 8 [ 553.336320][ T2287] usb 5-1: unable to get BOS descriptor or descriptor too short [ 553.336376][ T2287] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 553.378177][ T2287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.378207][ T2287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.386355][ T2287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.386384][ T2287] usb 5-1: Product: 瞷떁뷾폙빖鉐핾蘫厝ಟ㭊퐯腐溺蛸鎷楄뿫ࠥ佑Ṉ䰌垔嗴풃쵂ￓ㲀‚㇯嘦⒯㿈㎙ꈛꄂ [ 553.386405][ T2287] usb 5-1: Manufacturer: 쓍士篿ﺕ䑲蠚肸梵ᬤﺡ쥀壻쬖ꇄ堵陃뇓봝뾪ﯬ빦䩱쐴㺢馪⦥쯜倅쀁ㄛ쓭쾙⨅겦툺ࡲ鞜츗촶윘遉Ꮏ쯳쒕⃘㪎达ୁ叻ꀥ뒾ĆꙚ䱄痶侻䦐֮剻쟮ᷪ햙㘲⿐ﮋ廍棫䬻槈ܭ部ጀᶮ鷴軿ꌵ玿㰆芈礰濑㿽 [ 553.386434][ T2287] usb 5-1: SerialNumber: syz [ 553.517712][ T30] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 553.673669][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 553.687011][ T30] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 553.692436][ T30] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 553.692465][ T30] usb 4-1: config 179 has no interface number 0 [ 553.692511][ T30] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 553.692558][ T30] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 553.692585][ T30] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 553.692617][ T30] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 553.692642][ T30] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 553.692683][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.730466][T14465] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 554.136429][ T2287] usb 5-1: 0:1 : does not exist [ 554.136457][ T2287] usb 5-1: 0:2 : does not exist [ 554.202933][T14478] netlink: 'syz.2.2836': attribute type 4 has an invalid length. [ 554.233046][T14478] netlink: 'syz.2.2836': attribute type 4 has an invalid length. [ 554.454003][ T25] usb 4-1: USB disconnect, device number 74 [ 554.454067][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 554.454099][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 554.483346][T14479] usb usb8: usbfs: process 14479 (syz.4.2825) did not claim interface 0 before use [ 554.516676][T14487] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2838'. [ 554.568156][T14487] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2838'. [ 554.569555][T14493] netlink: 'syz.0.2840': attribute type 10 has an invalid length. [ 554.569734][T14493] syz_tun: entered promiscuous mode [ 554.605336][T14478] netlink: 'syz.2.2836': attribute type 12 has an invalid length. [ 554.607151][T14493] bond9: (slave syz_tun): Releasing active interface [ 554.648826][T14493] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 554.794607][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 555.174376][T14511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 555.258794][ T8865] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 555.319236][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2848'. [ 555.409814][ T8865] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 555.410933][ T8865] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.410966][ T8865] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 555.410979][ T8865] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 555.410993][ T8865] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.411020][ T8865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.523305][T14520] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2850'. [ 555.525683][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'. [ 555.607768][ T25] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 555.760619][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 555.760661][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.761793][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 555.762602][ T25] usb 4-1: language id specifier not provided by device, defaulting to English [ 555.803950][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.803981][ T25] usb 4-1: Product: syz [ 555.803997][ T25] usb 4-1: SerialNumber: syz [ 555.813921][T14516] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 555.854599][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 555.854623][ T31] audit: type=1326 audit(1791874423.008:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 555.855467][ T31] audit: type=1326 audit(1791874423.008:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 555.856407][ T31] audit: type=1326 audit(1791874423.008:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf716762b code=0x7ffc0000 [ 555.856839][ T31] audit: type=1326 audit(1791874423.008:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 555.857075][ T31] audit: type=1326 audit(1791874423.008:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 555.887786][ T31] audit: type=1326 audit(1791874423.008:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf716762b code=0x7ffc0000 [ 555.887846][ T31] audit: type=1326 audit(1791874423.038:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 555.887913][ T31] audit: type=1326 audit(1791874423.038:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 555.887953][ T31] audit: type=1326 audit(1791874423.038:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 555.887994][ T31] audit: type=1326 audit(1791874423.038:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 556.229895][T14531] syz_tun: left promiscuous mode [ 556.234916][T14531] bond0: (slave syz_tun): Releasing backup interface [ 556.256262][T14531] team0: Port device syz_tun added [ 556.392552][T14533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.394119][T14533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.464602][T14534] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2844'. [ 556.531104][T14531] team0: Port device syz_tun removed [ 556.645291][ T25] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 556.670442][ T25] usb 4-1: USB disconnect, device number 75 [ 556.756023][ T8863] usb 5-1: USB disconnect, device number 79 [ 556.990177][T14531] bridge_slave_0: left allmulticast mode [ 556.990207][T14531] bridge_slave_0: left promiscuous mode [ 556.990441][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.008544][T14531] bridge_slave_1: left allmulticast mode [ 557.008568][T14531] bridge_slave_1: left promiscuous mode [ 557.008793][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.035647][T14531] bond0: (slave bond_slave_0): Releasing backup interface [ 557.049712][T14531] bond0: (slave bond_slave_1): Releasing backup interface [ 557.065981][T14531] team0: Port device team_slave_0 removed [ 557.096387][T14531] team0: Port device team_slave_1 removed [ 557.107963][T14531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.111406][T14531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.115859][T14531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.144060][T14531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.253362][T14531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 557.628852][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2862'. [ 557.814269][T14559] vlan2: entered promiscuous mode [ 557.816445][T14559] vlan2: entered allmulticast mode [ 557.816468][T14559] hsr0: entered allmulticast mode [ 557.816482][T14559] hsr_slave_0: entered allmulticast mode [ 557.816517][T14559] hsr_slave_1: entered allmulticast mode [ 557.981169][T14565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 557.981399][T14565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 557.981597][T14565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 557.981872][T14565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 557.982132][T14565] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 558.270408][T14584] FAULT_INJECTION: forcing a failure. [ 558.270408][T14584] name failslab, interval 1, probability 0, space 0, times 0 [ 558.270446][T14584] CPU: 1 UID: 0 PID: 14584 Comm: syz.3.2865 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.270476][T14584] Tainted: [L]=SOFTLOCKUP [ 558.270485][T14584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 558.270498][T14584] Call Trace: [ 558.270507][T14584] [ 558.270517][T14584] dump_stack_lvl+0xe8/0x150 [ 558.270554][T14584] should_fail_ex+0x410/0x560 [ 558.270589][T14584] should_failslab+0xa8/0x100 [ 558.270626][T14584] __kmalloc_cache_noprof+0xa3/0x600 [ 558.270653][T14584] ? alloc_netdev_mqs+0xc2d/0x12a0 [ 558.270678][T14584] ? alloc_netdev_mqs+0xc2d/0x12a0 [ 558.270705][T14584] ? __xdp_rxq_info_reg+0x171/0x280 [ 558.270735][T14584] alloc_netdev_mqs+0xc2d/0x12a0 [ 558.270770][T14584] rtnl_create_link+0x321/0xd70 [ 558.270805][T14584] rtnl_newlink_create+0x258/0x7b0 [ 558.270838][T14584] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 558.270866][T14584] ? __pfx___mutex_lock+0x10/0x10 [ 558.270904][T14584] ? ns_capable+0x89/0xe0 [ 558.270937][T14584] rtnl_newlink+0x166d/0x1c30 [ 558.270977][T14584] ? __pfx_rtnl_newlink+0x10/0x10 [ 558.270998][T14584] ? finish_task_switch+0x40e/0xc60 [ 558.271027][T14584] ? lockdep_hardirqs_on+0x7b/0x110 [ 558.271055][T14584] ? rcu_is_watching+0x16/0xb0 [ 558.271092][T14584] ? trace_sched_exit_tp+0x3a/0x130 [ 558.271121][T14584] ? __schedule+0x17f1/0x58f0 [ 558.271173][T14584] ? __pfx___schedule+0x10/0x10 [ 558.271193][T14584] ? nlmon_xmit+0xb0/0x100 [ 558.271235][T14584] ? __lock_acquire+0x747/0x2de0 [ 558.271263][T14584] ? preempt_schedule_common+0x7f/0xd0 [ 558.271286][T14584] ? preempt_schedule_thunk+0x16/0x40 [ 558.271317][T14584] ? __local_bh_enable_ip+0xe9/0x140 [ 558.271355][T14584] ? lock_acquire+0x115/0x350 [ 558.271395][T14584] ? __pfx_rtnl_newlink+0x10/0x10 [ 558.271415][T14584] rtnetlink_rcv_msg+0x802/0xc00 [ 558.271439][T14584] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 558.271459][T14584] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 558.271489][T14584] ? ref_tracker_free+0x689/0x830 [ 558.271523][T14584] ? __pfx_ref_tracker_free+0x10/0x10 [ 558.271565][T14584] netlink_rcv_skb+0x226/0x4a0 [ 558.271593][T14584] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 558.271626][T14584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.271678][T14584] netlink_unicast+0x7bd/0x940 [ 558.271716][T14584] netlink_sendmsg+0x813/0xb40 [ 558.271754][T14584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.271791][T14584] ? apparmor_socket_sendmsg+0x98/0x360 [ 558.271823][T14584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.271848][T14584] sock_sendmsg_nosec+0x13a/0x180 [ 558.271881][T14584] ____sys_sendmsg+0x54e/0x850 [ 558.271912][T14584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.271954][T14584] ___sys_sendmsg+0x2a5/0x360 [ 558.271977][T14584] ? __lock_acquire+0x747/0x2de0 [ 558.272006][T14584] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.272028][T14584] ? get_pid_task+0x20/0x1f0 [ 558.272050][T14584] ? get_pid_task+0x20/0x1f0 [ 558.272079][T14584] ? get_pid_task+0x20/0x1f0 [ 558.272136][T14584] ? __fget_files+0x2a/0x420 [ 558.272156][T14584] ? __fget_files+0x3a2/0x420 [ 558.272189][T14584] __sys_sendmsg+0x177/0x240 [ 558.272216][T14584] ? __pfx___sys_sendmsg+0x10/0x10 [ 558.272260][T14584] __do_fast_syscall_32+0x27a/0x6b0 [ 558.272288][T14584] ? do_fast_syscall_32+0x33/0x70 [ 558.272313][T14584] ? asm_int80_emulation+0x1a/0x20 [ 558.272333][T14584] ? do_int80_emulation+0x299/0x500 [ 558.272357][T14584] ? trace_irq_disable+0x3b/0x140 [ 558.272386][T14584] do_fast_syscall_32+0x33/0x70 [ 558.272411][T14584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.272436][T14584] RIP: 0023:0xf73ef0ec [ 558.272456][T14584] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 558.272472][T14584] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 558.272515][T14584] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 558.272531][T14584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.272545][T14584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.272557][T14584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 558.272570][T14584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.272604][T14584] [ 558.739984][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 558.755819][ T8859] usb 3-1: USB disconnect, device number 94 [ 559.118356][ T5681] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 559.242743][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 559.269777][ T5681] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 559.272541][ T5681] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 559.272576][ T5681] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 559.272615][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.301734][ T5681] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.302661][ T5681] usb 4-1: invalid MIDI out EP 0 [ 559.778753][T14630] binder: 14626:14630 ioctl c0306201 800016c0 returned -14 [ 559.812186][T14623] netlink: 'syz.0.2878': attribute type 49 has an invalid length. [ 559.986061][T14642] netlink: 'syz.4.2880': attribute type 1 has an invalid length. [ 559.994163][ T5681] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 560.001729][ T5681] usb 4-1: USB disconnect, device number 76 [ 560.019209][ T4931] Bluetooth: hci4: command 0x0c1a tx timeout [ 560.019254][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout [ 560.019283][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout [ 560.020217][ T4931] Bluetooth: hci1: command 0x0c1a tx timeout [ 560.020249][ T4931] Bluetooth: hci0: command 0x0c1a tx timeout [ 560.450710][T14642] fuse: Unknown parameter ' ' [ 560.456573][T14657] __nla_validate_parse: 1 callbacks suppressed [ 560.456595][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 560.469287][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 560.618070][ T5708] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 560.768520][ T5708] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 560.769721][ T5708] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 560.769749][ T5708] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 560.771439][ T5708] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 560.771468][ T5708] usb 1-1: Manufacturer: syz [ 560.771485][ T5708] usb 1-1: SerialNumber: syz [ 560.965368][T14638] loop4: detected capacity change from 0 to 2640 [ 561.005797][T14638] buffer_io_error: 10 callbacks suppressed [ 561.005819][T14638] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 561.005868][T14638] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 561.005895][T14638] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 561.005921][T14638] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 561.005946][T14638] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 561.005972][T14638] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 561.005996][T14638] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 561.006021][T14638] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 561.006047][T14638] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 561.006073][T14638] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 561.007177][ T5708] usb 1-1: USB disconnect, device number 69 [ 561.211044][ T5681] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 561.390274][ T5681] usb 3-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 561.391600][ T5681] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 561.391629][ T5681] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 561.391650][ T5681] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 561.391673][ T5681] usb 3-1: config 0 has no interface number 0 [ 561.391691][ T5681] usb 3-1: config 0 has no interface number 1 [ 561.405425][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.405455][ T5681] usb 3-1: Product: syz [ 561.405469][ T5681] usb 3-1: Manufacturer: syz [ 561.405483][ T5681] usb 3-1: SerialNumber: syz [ 561.416217][ T5681] usb 3-1: config 0 descriptor?? [ 561.428959][ T5681] cdc_acm 3-1:0.51: probe with driver cdc_acm failed with error -22 [ 561.607679][T14547] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 561.723965][T14673] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2885'. [ 561.758911][T14547] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 561.761480][T14547] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 561.761510][T14547] usb 4-1: config 0 has no interface number 0 [ 561.761555][T14547] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 561.806022][T14547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.806054][T14547] usb 4-1: Product: syz [ 561.806070][T14547] usb 4-1: Manufacturer: syz [ 561.806085][T14547] usb 4-1: SerialNumber: syz [ 561.835601][T14547] usb 4-1: config 0 descriptor?? [ 561.862229][T14547] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 562.012135][ T4931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 562.030894][ T4931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 562.032054][ T4931] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 562.037369][ T4931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 562.050903][ T4931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 562.266825][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 562.396652][ T5628] .`: (slave syz_tun): Releasing backup interface [ 562.399485][ T5628] syz_tun (unregistering): left allmulticast mode [ 562.487892][T14547] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 562.653089][T14547] usb 1-1: Using ep0 maxpacket: 16 [ 562.655462][T14547] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 562.661531][T14547] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.661564][T14547] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.661594][T14547] usb 1-1: config 0 interface 0 has no altsetting 0 [ 562.661627][T14547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.683388][T14547] usb 1-1: config 0 descriptor?? [ 562.864346][T14706] binder: 14705:14706 ioctl c0306201 800016c0 returned -14 [ 563.127010][T14547] hid_parser_main: 5 callbacks suppressed [ 563.127071][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.127122][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.127148][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.127173][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.127226][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.127252][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.127277][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.127302][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.127326][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.127378][T14547] elecom 0003:056E:00E6.0020: unknown main item tag 0x0 [ 563.140601][T14547] elecom 0003:056E:00E6.0020: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 563.151088][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.151151][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.347269][ T9903] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.566582][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'. [ 563.628617][ T9903] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.859839][T14547] usb 3-1: USB disconnect, device number 95 [ 563.885329][T14680] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2888'. [ 563.979697][ T9903] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.097799][ T5622] Bluetooth: hci5: command tx timeout [ 564.273559][T14680] ALSA: seq fatal error: cannot create timer (-16) [ 564.294824][ T9903] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.692019][ T5681] usb 4-1: USB disconnect, device number 77 [ 564.725131][ T5681] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 564.838549][T14547] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 565.010752][T14547] usb 2-1: Using ep0 maxpacket: 16 [ 565.011895][T14547] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 565.020189][T14547] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 565.020216][T14547] usb 2-1: config 0 has no interface number 0 [ 565.068193][T14547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.068215][T14547] usb 2-1: Product: syz [ 565.068225][T14547] usb 2-1: Manufacturer: syz [ 565.068234][T14547] usb 2-1: SerialNumber: syz [ 565.087412][T14547] usb 2-1: config 0 descriptor?? [ 565.131521][T14547] hub 2-1:0.132: bad descriptor, ignoring hub [ 565.131556][T14547] hub 2-1:0.132: probe with driver hub failed with error -5 [ 565.165023][T14547] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input131 [ 565.670892][T14547] usb 1-1: USB disconnect, device number 70 [ 565.988818][T14756] FAULT_INJECTION: forcing a failure. [ 565.988818][T14756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 565.988859][T14756] CPU: 0 UID: 0 PID: 14756 Comm: syz.3.2899 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.988890][T14756] Tainted: [L]=SOFTLOCKUP [ 565.988899][T14756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 565.988912][T14756] Call Trace: [ 565.988922][T14756] [ 565.988932][T14756] dump_stack_lvl+0xe8/0x150 [ 565.988970][T14756] should_fail_ex+0x410/0x560 [ 565.989007][T14756] prepare_alloc_pages+0x223/0x600 [ 565.989047][T14756] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 565.989080][T14756] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 565.989106][T14756] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 565.989146][T14756] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 565.989178][T14756] ? __pfx_policy_nodemask+0x10/0x10 [ 565.989207][T14756] ? __get_vm_area_node+0x155/0x2f0 [ 565.989227][T14756] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 565.989249][T14756] ? __vmalloc_noprof+0xd2/0x120 [ 565.989273][T14756] __alloc_pages_noprof+0x10/0x100 [ 565.989301][T14756] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 565.989336][T14756] ? alloc_pages_noprof+0x140/0x2b0 [ 565.989370][T14756] __kasan_populate_vmalloc+0xb7/0x1c0 [ 565.989402][T14756] alloc_vmap_area+0xd1a/0x1420 [ 565.989450][T14756] ? __pfx_alloc_vmap_area+0x10/0x10 [ 565.989479][T14756] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 565.989505][T14756] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 565.989529][T14756] ? __get_vm_area_node+0x155/0x2f0 [ 565.989554][T14756] __get_vm_area_node+0x200/0x2f0 [ 565.989584][T14756] __vmalloc_node_range_noprof+0x343/0x1540 [ 565.989607][T14756] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 565.989663][T14756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 565.989688][T14756] ? lock_acquire+0x115/0x350 [ 565.989718][T14756] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 565.989742][T14756] __vmalloc_noprof+0xd2/0x120 [ 565.989764][T14756] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 565.989794][T14756] bpf_prog_alloc_no_stats+0x47/0x560 [ 565.989819][T14756] ? bpf_prog_alloc+0x2a/0x1a0 [ 565.989848][T14756] bpf_prog_alloc+0x3c/0x1a0 [ 565.989877][T14756] bpf_prog_load+0x7f8/0x1c20 [ 565.989916][T14756] ? __pfx_bpf_prog_load+0x10/0x10 [ 565.989970][T14756] __sys_bpf+0xd0d/0xd90 [ 565.990005][T14756] ? __pfx___sys_bpf+0x10/0x10 [ 565.990034][T14756] ? ksys_write+0x1e6/0x270 [ 565.990062][T14756] ? __mutex_unlock_slowpath+0x731/0x900 [ 565.990107][T14756] ? fput+0xa0/0xd0 [ 565.990146][T14756] ? ksys_write+0x242/0x270 [ 565.990176][T14756] __ia32_sys_bpf+0xba/0xd0 [ 565.990203][T14756] __do_fast_syscall_32+0x27a/0x6b0 [ 565.990231][T14756] ? do_fast_syscall_32+0x33/0x70 [ 565.990255][T14756] ? asm_int80_emulation+0x1a/0x20 [ 565.990277][T14756] ? do_int80_emulation+0x299/0x500 [ 565.990301][T14756] ? trace_irq_disable+0x3b/0x140 [ 565.990329][T14756] do_fast_syscall_32+0x33/0x70 [ 565.990355][T14756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.990381][T14756] RIP: 0023:0xf73ef0ec [ 565.990401][T14756] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 565.990420][T14756] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 565.990445][T14756] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 565.990461][T14756] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.990475][T14756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.990489][T14756] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 565.990502][T14756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.990535][T14756] [ 566.000158][T14756] syz.3.2899: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 566.000250][T14756] CPU: 0 UID: 0 PID: 14756 Comm: syz.3.2899 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.000277][T14756] Tainted: [L]=SOFTLOCKUP [ 566.000284][T14756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 566.000295][T14756] Call Trace: [ 566.000303][T14756] [ 566.000312][T14756] dump_stack_lvl+0xe8/0x150 [ 566.000345][T14756] warn_alloc+0x24d/0x270 [ 566.000370][T14756] ? lockdep_hardirqs_on+0x7b/0x110 [ 566.000395][T14756] ? __pfx_warn_alloc+0x10/0x10 [ 566.000416][T14756] ? kfree+0x1c5/0x650 [ 566.000442][T14756] ? __get_vm_area_node+0x219/0x2f0 [ 566.000469][T14756] __vmalloc_node_range_noprof+0x36b/0x1540 [ 566.000517][T14756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 566.000539][T14756] ? lock_acquire+0x115/0x350 [ 566.000567][T14756] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 566.000589][T14756] __vmalloc_noprof+0xd2/0x120 [ 566.000609][T14756] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 566.000636][T14756] bpf_prog_alloc_no_stats+0x47/0x560 [ 566.000658][T14756] ? bpf_prog_alloc+0x2a/0x1a0 [ 566.000685][T14756] bpf_prog_alloc+0x3c/0x1a0 [ 566.000710][T14756] bpf_prog_load+0x7f8/0x1c20 [ 566.000747][T14756] ? __pfx_bpf_prog_load+0x10/0x10 [ 566.000794][T14756] __sys_bpf+0xd0d/0xd90 [ 566.000825][T14756] ? __pfx___sys_bpf+0x10/0x10 [ 566.000852][T14756] ? ksys_write+0x1e6/0x270 [ 566.000877][T14756] ? __mutex_unlock_slowpath+0x731/0x900 [ 566.000918][T14756] ? fput+0xa0/0xd0 [ 566.000944][T14756] ? ksys_write+0x242/0x270 [ 566.000970][T14756] __ia32_sys_bpf+0xba/0xd0 [ 566.000995][T14756] __do_fast_syscall_32+0x27a/0x6b0 [ 566.001020][T14756] ? do_fast_syscall_32+0x33/0x70 [ 566.001042][T14756] ? asm_int80_emulation+0x1a/0x20 [ 566.001061][T14756] ? do_int80_emulation+0x299/0x500 [ 566.001088][T14756] ? trace_irq_disable+0x3b/0x140 [ 566.001113][T14756] do_fast_syscall_32+0x33/0x70 [ 566.001144][T14756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.001166][T14756] RIP: 0023:0xf73ef0ec [ 566.001185][T14756] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 566.001202][T14756] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 566.001222][T14756] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 566.001236][T14756] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.001248][T14756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.001260][T14756] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 566.001272][T14756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.001301][T14756] [ 566.004787][T14756] Mem-Info: [ 566.004800][T14756] active_anon:8437 inactive_anon:5 isolated_anon:0 [ 566.004800][T14756] active_file:171 inactive_file:60274 isolated_file:0 [ 566.004800][T14756] unevictable:0 dirty:96 writeback:0 [ 566.004800][T14756] slab_reclaimable:7308 slab_unreclaimable:106037 [ 566.004800][T14756] mapped:33008 shmem:2798 pagetables:1298 [ 566.004800][T14756] sec_pagetables:0 bounce:0 [ 566.004800][T14756] kernel_misc_reclaimable:0 [ 566.004800][T14756] free:1290776 free_pcp:11419 free_cma:0 [ 566.004851][T14756] Node 0 active_anon:33748kB inactive_anon:20kB active_file:684kB inactive_file:240704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131900kB dirty:380kB writeback:0kB shmem:11192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15904kB pagetables:5048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 566.004902][T14756] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 566.005938][T14756] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.005996][T14756] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 566.006033][T14756] Node 0 DMA32 free:1218784kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33748kB inactive_anon:20kB active_file:684kB inactive_file:240704kB unevictable:0kB writepending:380kB zspages:444kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:39532kB local_pcp:25288kB free_cma:0kB [ 566.006090][T14756] lowmem_reserve[]: 0 0 0 0 0 [ 566.006131][T14756] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.006180][T14756] lowmem_reserve[]: 0 0 0 0 0 [ 566.006214][T14756] Node 1 Normal free:3928960kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:392kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:6144kB local_pcp:0kB free_cma:0kB [ 566.006267][T14756] lowmem_reserve[]: 0 0 0 0 0 [ 566.006301][T14756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 566.006412][T14756] Node 0 DMA32: 1829*4kB (UME) 1509*8kB (UME) 1321*16kB (UME) 1056*32kB (UME) 532*64kB (UME) 311*128kB (UME) 152*256kB (UME) 57*512kB (UME) 23*1024kB (ME) 6*2048kB (UME) 236*4096kB (UM) = 1218764kB [ 566.006565][T14756] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 566.006658][T14756] Node 1 Normal: 10*4kB (M) 7*8kB (UM) 12*16kB (UM) 17*32kB (UM) 13*64kB (UM) 8*128kB (UM) 9*256kB (UM) 8*512kB (M) 4*1024kB (UM) 10*2048kB (UM) 951*4096kB (M) = 3928960kB [ 566.006809][T14756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.006826][T14756] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 566.006841][T14756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.006857][T14756] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 566.006872][T14756] 63257 total pagecache pages [ 566.006880][T14756] 18 pages in swap cache [ 566.006888][T14756] Free swap = 124796kB [ 566.006895][T14756] Total swap = 124996kB [ 566.006903][T14756] 2097051 pages RAM [ 566.009237][T14756] 0 pages HighMem/MovableOnly [ 566.009249][T14756] 433558 pages reserved [ 566.009256][T14756] 0 pages cma reserved [ 566.157501][ T9903] bridge_slave_1: left promiscuous mode [ 566.162258][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.181633][ T5622] Bluetooth: hci5: command tx timeout [ 566.199897][ T9903] bridge_slave_0: left promiscuous mode [ 566.204740][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.380604][ T5707] usb 2-1: USB disconnect, device number 75 [ 567.461745][T14774] binder: 14773:14774 ioctl c0306201 800016c0 returned -14 [ 567.824705][ T9903] .` (unregistering): (slave bridge0): Releasing backup interface [ 567.839335][ T9903] bridge0 (unregistering): left allmulticast mode [ 567.923240][ T9903] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.947143][ T9903] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.958083][ T9903] .` (unregistering): Released all slaves [ 567.966875][ T9903] bond2 (unregistering): Released all slaves [ 567.996950][ T9903] bond3 (unregistering): Released all slaves [ 568.031625][ T9903] bond4 (unregistering): Released all slaves [ 568.041839][ T9903] bond5 (unregistering): Released all slaves [ 568.064623][ T9903] bond6 (unregistering): Released all slaves [ 568.084751][ T9903] bond7 (unregistering): Released all slaves [ 568.108725][ T9903] bond8 (unregistering): Released all slaves [ 568.142726][ T9903] bond9 (unregistering): Released all slaves [ 568.163144][ T9903] bond10 (unregistering): Released all slaves [ 568.181942][ T9903] bond11 (unregistering): Released all slaves [ 568.210491][ T9903] bond0 (unregistering): (slave bond1): Releasing active interface [ 568.211905][ T9903] bond0 (unregistering): Released all slaves [ 568.233972][ T9903] bond1 (unregistering): Released all slaves [ 568.258055][ T5622] Bluetooth: hci5: command tx timeout [ 568.262293][ T9903] bond13 (unregistering): Released all slaves [ 568.282415][ T9903] bond12 (unregistering): Released all slaves [ 568.301695][ T9903] bond15 (unregistering): Released all slaves [ 568.329709][ T9903] bond14 (unregistering): (slave bond16): Releasing active interface [ 568.331037][ T9903] bond14 (unregistering): Released all slaves [ 568.352868][ T9903] bond16 (unregistering): Released all slaves [ 568.380678][ T9903] bond17 (unregistering): (slave bond18): Releasing active interface [ 568.381391][ T9903] bond17 (unregistering): Released all slaves [ 568.412811][ T9903] bond18 (unregistering): Released all slaves [ 568.470363][ T9903] bond19 (unregistering): Released all slaves [ 568.634556][T14788] FAULT_INJECTION: forcing a failure. [ 568.634556][T14788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.634605][T14788] CPU: 1 UID: 0 PID: 14788 Comm: syz.2.2904 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.634633][T14788] Tainted: [L]=SOFTLOCKUP [ 568.634642][T14788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 568.634654][T14788] Call Trace: [ 568.634663][T14788] [ 568.634672][T14788] dump_stack_lvl+0xe8/0x150 [ 568.634707][T14788] should_fail_ex+0x410/0x560 [ 568.634744][T14788] _copy_from_user+0x2d/0xb0 [ 568.634767][T14788] rfkill_fop_write+0x13b/0x560 [ 568.634791][T14788] ? common_file_perm+0x20e/0x2b0 [ 568.634824][T14788] ? __pfx_rfkill_fop_write+0x10/0x10 [ 568.634848][T14788] ? iov_iter_iovec_advance+0xf0/0x290 [ 568.634886][T14788] vfs_writev+0x4bb/0x990 [ 568.634916][T14788] ? __pfx_rfkill_fop_write+0x10/0x10 [ 568.634946][T14788] ? __pfx_vfs_writev+0x10/0x10 [ 568.634990][T14788] ? __fget_files+0x2a/0x420 [ 568.635016][T14788] ? __fget_files+0x3a2/0x420 [ 568.635036][T14788] ? __fget_files+0x2a/0x420 [ 568.635065][T14788] do_writev+0x154/0x2e0 [ 568.635095][T14788] ? __pfx_do_writev+0x10/0x10 [ 568.635133][T14788] __do_fast_syscall_32+0x27a/0x6b0 [ 568.635161][T14788] ? do_fast_syscall_32+0x33/0x70 [ 568.635185][T14788] ? asm_int80_emulation+0x1a/0x20 [ 568.635205][T14788] ? do_int80_emulation+0x299/0x500 [ 568.635229][T14788] ? trace_irq_disable+0x3b/0x140 [ 568.635257][T14788] do_fast_syscall_32+0x33/0x70 [ 568.635283][T14788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 568.635308][T14788] RIP: 0023:0xf7f280ec [ 568.635329][T14788] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 568.635348][T14788] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 568.635371][T14788] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 568.635391][T14788] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.635404][T14788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.635416][T14788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 568.635431][T14788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.635463][T14788] [ 568.881097][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.883304][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.883745][T14696] bridge_slave_0: entered allmulticast mode [ 568.886916][T14696] bridge_slave_0: entered promiscuous mode [ 568.900127][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.900269][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.903379][T14696] bridge_slave_1: entered allmulticast mode [ 568.907515][T14696] bridge_slave_1: entered promiscuous mode [ 568.949464][ T9903] tipc: Disabling bearer [ 568.949741][ T9903] tipc: Left network mode [ 569.039245][ T5681] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 569.047447][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.072070][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.187063][T14799] netlink: 'syz.2.2906': attribute type 8 has an invalid length. [ 569.195484][ T5681] usb 4-1: Using ep0 maxpacket: 32 [ 569.201486][ T5681] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 569.212362][T14696] team0: Port device team_slave_0 added [ 569.228135][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.228168][ T5681] usb 4-1: Product: syz [ 569.228183][ T5681] usb 4-1: Manufacturer: syz [ 569.228198][ T5681] usb 4-1: SerialNumber: syz [ 569.236838][ T5681] usb 4-1: config 0 descriptor?? [ 569.246987][T14696] team0: Port device team_slave_1 added [ 569.313947][ T5681] usb 4-1: selecting invalid altsetting 3 [ 569.313975][ T5681] comedi comedi5: could not set alternate setting 3 in high speed [ 569.313992][ T5681] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 569.353267][ T5681] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 569.379469][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 569.379491][ T31] audit: type=1326 audit(1791874436.538:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.0.2909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 569.379760][ T31] audit: type=1326 audit(1791874436.538:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.0.2909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 569.386389][ T31] audit: type=1326 audit(1791874436.538:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.0.2909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 569.471214][ T31] audit: type=1326 audit(1791874436.628:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.0.2909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 569.472061][ T31] audit: type=1326 audit(1791874436.628:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.0.2909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x7ffc0000 [ 569.503518][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.503536][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.503560][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.528308][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.528326][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.528351][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.683825][T14792] input: syz0 as /devices/virtual/input/input132 [ 569.814185][T14811] binder: 14810:14811 ioctl c0306201 800016c0 returned -14 [ 569.877850][T14792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.878381][T14792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.906366][T14696] hsr_slave_0: entered promiscuous mode [ 569.909828][T14696] hsr_slave_1: entered promiscuous mode [ 569.911798][T14696] debugfs: 'hsr0' already exists in 'hsr' [ 569.911820][T14696] Cannot create hsr debugfs directory [ 569.963901][T14545] usb 4-1: USB disconnect, device number 78 [ 570.277779][ T5708] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 570.337779][ T5622] Bluetooth: hci5: command tx timeout [ 570.433705][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'. [ 570.433752][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'. [ 571.096845][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 571.621690][ T9903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.621760][ T9903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.730659][T14856] binder: 14855:14856 ioctl c0306201 800016c0 returned -14 [ 571.735349][ T9903] veth1_macvtap: left promiscuous mode [ 571.746878][ T9903] veth0_macvtap: left promiscuous mode [ 571.756108][ T9903] veth1_vlan: left promiscuous mode [ 571.762636][ T9903] veth0_vlan: left promiscuous mode [ 572.611140][ T9903] team0 (unregistering): Port device team_slave_1 removed [ 572.644133][ T9903] team0 (unregistering): Port device team_slave_0 removed [ 572.700925][T14545] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 572.716483][ T31] audit: type=1326 audit(1791874439.868:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14873 comm="syz.1.2929" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744f0ec code=0x7ffc0000 [ 572.743702][ T31] audit: type=1326 audit(1791874439.868:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14873 comm="syz.1.2929" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744f0ec code=0x7ffc0000 [ 572.746154][ T31] audit: type=1326 audit(1791874439.898:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14873 comm="syz.1.2929" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf744f0ec code=0x7ffc0000 [ 572.746828][ T31] audit: type=1326 audit(1791874439.898:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14873 comm="syz.1.2929" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744f0ec code=0x7ffc0000 [ 572.772617][ T31] audit: type=1326 audit(1791874439.908:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14873 comm="syz.1.2929" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744f0ec code=0x7ffc0000 [ 572.889456][T14545] usb 3-1: Using ep0 maxpacket: 16 [ 572.891775][T14545] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 572.895742][T14545] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.895789][T14545] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.933324][T14545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.933349][T14545] usb 3-1: Product: syz [ 572.933395][T14545] usb 3-1: Manufacturer: syz [ 572.933410][T14545] usb 3-1: SerialNumber: syz [ 572.958215][T14545] usb 3-1: config 0 descriptor?? [ 573.466321][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2930'. [ 573.466918][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2930'. [ 574.485272][ T5681] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 574.640071][ T5681] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 574.647264][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.647295][ T5681] usb 4-1: Product: syz [ 574.647311][ T5681] usb 4-1: Manufacturer: syz [ 574.647326][ T5681] usb 4-1: SerialNumber: syz [ 575.072131][ T5681] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 575.072205][ T5681] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 575.410104][T14696] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 575.433038][ T5681] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 575.433080][ T5681] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 575.485458][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.499521][T14696] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 575.506417][ T5681] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 575.571420][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 575.575290][ T8869] usb 3-1: USB disconnect, device number 96 [ 575.579561][T14696] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 575.627739][ T5681] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 575.633975][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 575.651757][T14696] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 575.715055][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.818220][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'. [ 576.158091][ T5708] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 576.261290][T14696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.310635][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 576.311403][ T5708] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 576.312642][ T5708] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 576.312672][ T5708] usb 3-1: config 0 has no interface number 0 [ 576.312714][ T5708] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 576.312740][ T5708] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 576.312767][ T5708] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 576.312801][ T5708] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 576.312846][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.406020][ T5708] usb 3-1: config 0 descriptor?? [ 576.415959][T14696] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.436034][ T5708] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 576.479245][ T9899] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.479396][ T9899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.508638][T14966] syzkaller0: entered promiscuous mode [ 576.508664][T14966] syzkaller0: entered allmulticast mode [ 576.531975][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.532107][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.583050][T14966] FAULT_INJECTION: forcing a failure. [ 576.583050][T14966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.583078][T14966] CPU: 1 UID: 0 PID: 14966 Comm: syz.0.2942 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.583097][T14966] Tainted: [L]=SOFTLOCKUP [ 576.583103][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 576.583110][T14966] Call Trace: [ 576.583116][T14966] [ 576.583122][T14966] dump_stack_lvl+0xe8/0x150 [ 576.583145][T14966] should_fail_ex+0x410/0x560 [ 576.583166][T14966] _copy_from_iter+0x1d3/0x1660 [ 576.583188][T14966] ? _copy_from_iter+0x21b/0x1660 [ 576.583206][T14966] ? __pfx__copy_from_iter+0x10/0x10 [ 576.583226][T14966] ? __pfx__copy_from_iter+0x10/0x10 [ 576.583248][T14966] copy_page_from_iter+0x219/0x2d0 [ 576.583269][T14966] skb_copy_datagram_from_iter+0x2f4/0x720 [ 576.583291][T14966] packet_sendmsg+0x37bd/0x51a0 [ 576.583315][T14966] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 576.583344][T14966] ? __lock_acquire+0x747/0x2de0 [ 576.583363][T14966] ? kstrtouint+0x6e/0xe0 [ 576.583381][T14966] ? __pfx_packet_sendmsg+0x10/0x10 [ 576.583398][T14966] ? aa_sk_perm+0x713/0x900 [ 576.583422][T14966] ? downgrade_write+0x400/0x430 [ 576.583439][T14966] ? __pfx_aa_sk_perm+0x10/0x10 [ 576.583458][T14966] ? aa_sock_msg_perm+0x144/0x210 [ 576.583479][T14966] ? apparmor_socket_sendmsg+0x98/0x360 [ 576.583496][T14966] ? __pfx_packet_sendmsg+0x10/0x10 [ 576.583514][T14966] sock_sendmsg_nosec+0x13a/0x180 [ 576.583532][T14966] __sys_sendto+0x408/0x5a0 [ 576.583548][T14966] ? __pfx___sys_sendto+0x10/0x10 [ 576.583574][T14966] ? __fget_files+0x3a2/0x420 [ 576.583592][T14966] ? ksys_write+0x242/0x270 [ 576.583609][T14966] __ia32_sys_sendto+0xdd/0x100 [ 576.583624][T14966] __do_fast_syscall_32+0x27a/0x6b0 [ 576.583640][T14966] ? do_fast_syscall_32+0x33/0x70 [ 576.583654][T14966] ? asm_int80_emulation+0x1a/0x20 [ 576.583667][T14966] ? do_int80_emulation+0x299/0x500 [ 576.583681][T14966] ? trace_irq_disable+0x3b/0x140 [ 576.583697][T14966] do_fast_syscall_32+0x33/0x70 [ 576.583712][T14966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.583727][T14966] RIP: 0023:0xf7f770ec [ 576.583740][T14966] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 576.583752][T14966] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 576.583768][T14966] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 576.583778][T14966] RDX: 000000000000fdef RSI: 0000000000000004 RDI: 0000000080000140 [ 576.583786][T14966] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 576.583794][T14966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 576.583802][T14966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.583820][T14966] [ 577.060087][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.079258][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.268650][ T5681] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 577.301539][T14696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.438348][T14545] usb 4-1: USB disconnect, device number 79 [ 577.459059][ T5681] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 577.462004][ T5681] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.462060][ T5681] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.474858][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.474961][ T5681] usb 1-1: Product: syz [ 577.474976][ T5681] usb 1-1: Manufacturer: syz [ 577.474990][ T5681] usb 1-1: SerialNumber: syz [ 577.750818][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 577.750841][ T31] audit: type=1326 audit(1791874444.908:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14988 comm="syz.3.2945" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ef0ec code=0x0 [ 577.754972][ T31] audit: type=1326 audit(1791874444.908:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14988 comm="syz.3.2945" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ef0ec code=0x0 [ 577.826107][T14696] veth0_vlan: entered promiscuous mode [ 577.998186][T14696] veth1_vlan: entered promiscuous mode [ 578.089200][T14696] veth0_macvtap: entered promiscuous mode [ 578.105578][T14696] veth1_macvtap: entered promiscuous mode [ 578.148119][T14696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.257246][T14696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.382032][ T9903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.382183][ T9903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.382226][ T9903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.383994][T14997] syzkaller0: entered promiscuous mode [ 578.384014][T14997] syzkaller0: entered allmulticast mode [ 578.482383][ T9903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.815834][ T5681] usb 1-1: USB disconnect, device number 72 [ 578.855479][ T9899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.855506][ T9899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.896817][ T8869] usb 3-1: USB disconnect, device number 97 [ 578.924288][ T8869] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 579.069794][ T9902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.069818][ T9902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.109827][T15003] tunl0: left promiscuous mode [ 579.110627][T15003] gre0: left promiscuous mode [ 579.121047][T15003] gretap0: left promiscuous mode [ 579.153804][T15003] erspan0: left promiscuous mode [ 579.160427][T15003] ip_vti0: left promiscuous mode [ 579.161047][T15003] ip6_vti0: left promiscuous mode [ 579.170026][T15003] sit0: left promiscuous mode [ 579.170549][T15003] ip6tnl0: left promiscuous mode [ 579.180898][T15003] ip6gre0: left promiscuous mode [ 579.181415][T15003] ip6gretap0: left promiscuous mode [ 579.203746][T15003] vcan0: left promiscuous mode [ 579.210188][T15003] team0: left promiscuous mode [ 579.213227][T15003] dummy0: left promiscuous mode [ 579.215066][T15003] nlmon0: left promiscuous mode [ 579.216259][T15003] batadv0: left promiscuous mode [ 579.217009][T15003] vxcan0: left promiscuous mode [ 579.221042][T15003] vxcan1: left promiscuous mode [ 579.225636][T15003] veth0: left promiscuous mode [ 579.229876][T15003] veth1: left promiscuous mode [ 579.231734][T15003] wg0: left promiscuous mode [ 579.233349][T15003] wg1: left promiscuous mode [ 579.235263][T15003] wg2: left promiscuous mode [ 579.236348][T15003] veth1_to_bridge: left promiscuous mode [ 579.243641][T15003] veth0_to_bond: left promiscuous mode [ 579.246317][T15003] bond_slave_0: left promiscuous mode [ 579.246938][T15003] veth1_to_bond: left promiscuous mode [ 579.253897][T15003] bond_slave_1: left promiscuous mode [ 579.264270][T15003] veth0_to_team: left promiscuous mode [ 579.266226][T15003] team_slave_0: left promiscuous mode [ 579.273069][T15003] veth1_to_team: left promiscuous mode [ 579.273752][T15003] team_slave_1: left promiscuous mode [ 579.283237][T15003] veth0_to_batadv: left promiscuous mode [ 579.292879][T15003] batadv_slave_0: left promiscuous mode [ 579.293565][T15003] veth1_to_batadv: left promiscuous mode [ 579.300971][T15003] batadv_slave_1: left promiscuous mode [ 579.301645][T15003] xfrm0: left promiscuous mode [ 579.302284][T15003] veth0_to_hsr: left promiscuous mode [ 579.332721][T15003] hsr_slave_0: left promiscuous mode [ 579.336538][T15003] veth1_to_hsr: left promiscuous mode [ 579.361574][T15003] hsr_slave_1: left promiscuous mode [ 579.362299][T15003] veth1_virt_wifi: left promiscuous mode [ 579.363019][T15003] veth0_virt_wifi: left promiscuous mode [ 579.363728][T15003] virt_wifi0: left promiscuous mode [ 579.395082][T15003] vlan0: left promiscuous mode [ 579.396054][T15003] vlan1: left promiscuous mode [ 579.396963][T15003] macvlan0: left promiscuous mode [ 579.413558][T15003] macvlan1: left promiscuous mode [ 579.414599][T15003] ipvlan0: left promiscuous mode [ 579.415331][T15003] ipvlan1: left promiscuous mode [ 579.417399][T15003] macvtap0: left promiscuous mode [ 579.443309][T15003] macsec0: left promiscuous mode [ 579.446916][T15003] geneve0: left promiscuous mode [ 579.457897][T15003] geneve1: left promiscuous mode [ 579.458719][T15003] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 579.483182][T15003] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 579.487193][T15003] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 579.511813][T15003] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 579.525739][T15003] gretap1: left promiscuous mode [ 579.533216][T15003] bond2: left promiscuous mode [ 579.537107][T15003] rmnet0: left promiscuous mode [ 579.549521][T15003] bond1: left promiscuous mode [ 579.556380][T15003] veth2: left promiscuous mode [ 579.564494][T15003] veth3: left promiscuous mode [ 579.572471][T15003] bridge1: left promiscuous mode [ 579.583592][T15003] bond3: left promiscuous mode [ 579.592850][T15003] veth4: left promiscuous mode [ 579.597082][T15003] veth5: left promiscuous mode [ 579.600680][T15003] bond5: left promiscuous mode [ 579.621423][T15003] bond6: left promiscuous mode [ 579.635813][T15003] bond7: left promiscuous mode [ 579.686991][T15017] netlink: Failed to add helper -22 [ 579.687057][T15017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.787660][ T5708] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 579.809857][T15003] bridge2: left promiscuous mode [ 579.842107][T15003] ipvlan2: left promiscuous mode [ 579.857077][T15003] 8021q: adding VLAN 0 to HW filter on device bond18 [ 579.888828][T15003] 8021q: adding VLAN 0 to HW filter on device bond20 [ 579.909834][T15003] 8021q: adding VLAN 0 to HW filter on device bond22 [ 579.948689][ T5708] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 579.950186][ T5708] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.950240][ T5708] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x6 has invalid wMaxPacketSize 0 [ 579.950263][ T5708] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.950290][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 579.953837][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.953865][ T5708] usb 1-1: Product: syz [ 579.953880][ T5708] usb 1-1: Manufacturer: syz [ 579.953896][ T5708] usb 1-1: SerialNumber: syz [ 580.030200][ T5708] usb 1-1: config 0 descriptor?? [ 580.254991][ T5708] usb 1-1: USB disconnect, device number 73 [ 580.276804][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 580.450515][T15032] bond17: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 580.464579][T15032] bond17 (unregistering): Released all slaves [ 580.546505][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 580.562624][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.565447][ T4931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.604192][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.609154][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 580.906959][ T31] audit: type=1326 audit(1791874448.058:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.2.2957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 580.907446][ T31] audit: type=1326 audit(1791874448.058:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.2.2957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 580.917655][ T31] audit: type=1326 audit(1791874448.068:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.2.2957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 580.917715][ T31] audit: type=1326 audit(1791874448.068:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.2.2957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 580.917757][ T31] audit: type=1326 audit(1791874448.068:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.2.2957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 580.917798][ T31] audit: type=1326 audit(1791874448.068:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.2.2957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 580.917838][ T31] audit: type=1326 audit(1791874448.068:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.2.2957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 580.917886][ T31] audit: type=1326 audit(1791874448.068:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.2.2957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf711762b code=0x7ffc0000 [ 581.131934][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 581.204007][T15042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2957'. [ 581.204037][T15042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2957'. [ 581.204053][T15042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2957'. [ 581.435265][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2964'. [ 581.547394][T15057] FAULT_INJECTION: forcing a failure. [ 581.547394][T15057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.547436][T15057] CPU: 0 UID: 0 PID: 15057 Comm: syz.3.2965 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.547468][T15057] Tainted: [L]=SOFTLOCKUP [ 581.547477][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 581.547491][T15057] Call Trace: [ 581.547500][T15057] [ 581.547511][T15057] dump_stack_lvl+0xe8/0x150 [ 581.547561][T15057] should_fail_ex+0x410/0x560 [ 581.547597][T15057] _copy_to_user+0x31/0xb0 [ 581.547621][T15057] simple_read_from_buffer+0xe1/0x170 [ 581.547658][T15057] proc_fail_nth_read+0x1bb/0x230 [ 581.547682][T15057] ? common_file_perm+0x20e/0x2b0 [ 581.547716][T15057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.547744][T15057] ? rw_verify_area+0x24a/0x4c0 [ 581.547767][T15057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.547792][T15057] vfs_read+0x213/0xa80 [ 581.547820][T15057] ? __pfx___mutex_lock+0x10/0x10 [ 581.547847][T15057] ? __pfx_vfs_read+0x10/0x10 [ 581.547871][T15057] ? __fget_files+0x2a/0x420 [ 581.547898][T15057] ? __fget_files+0x3a2/0x420 [ 581.547916][T15057] ? __fget_files+0x2a/0x420 [ 581.547945][T15057] ksys_read+0x150/0x270 [ 581.547970][T15057] ? __pfx_ksys_read+0x10/0x10 [ 581.547994][T15057] ? asm_int80_emulation+0x1a/0x20 [ 581.548021][T15057] do_int80_emulation+0x198/0x500 [ 581.548047][T15057] ? trace_irq_disable+0x3b/0x140 [ 581.548069][T15057] ? asm_int80_emulation+0x1a/0x20 [ 581.548088][T15057] ? clear_bhb_loop+0x70/0xc0 [ 581.548108][T15057] ? clear_bhb_loop+0x70/0xc0 [ 581.548135][T15057] asm_int80_emulation+0x1a/0x20 [ 581.548156][T15057] RIP: 0023:0xf714762b [ 581.548178][T15057] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 581.548196][T15057] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 581.548222][T15057] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0 [ 581.548238][T15057] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 581.548252][T15057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.548265][T15057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 581.548279][T15057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.548313][T15057] [ 581.732836][T15058] FAULT_INJECTION: forcing a failure. [ 581.732836][T15058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.732875][T15058] CPU: 1 UID: 0 PID: 15058 Comm: syz.4.2966 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.732902][T15058] Tainted: [L]=SOFTLOCKUP [ 581.732910][T15058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 581.732922][T15058] Call Trace: [ 581.732930][T15058] [ 581.732939][T15058] dump_stack_lvl+0xe8/0x150 [ 581.732977][T15058] should_fail_ex+0x410/0x560 [ 581.733017][T15058] _copy_from_user+0x2d/0xb0 [ 581.733037][T15058] get_compat_msghdr+0xb3/0x4c0 [ 581.733064][T15058] ? __pfx_get_compat_msghdr+0x10/0x10 [ 581.733093][T15058] ? kfree+0x4d/0x650 [ 581.733119][T15058] ___sys_recvmsg+0x1db/0x5a0 [ 581.733147][T15058] ? __pfx____sys_recvmsg+0x10/0x10 [ 581.733174][T15058] ? lock_acquire+0x115/0x350 [ 581.733224][T15058] do_recvmmsg+0x38b/0x7f0 [ 581.733254][T15058] ? __pfx_do_recvmmsg+0x10/0x10 [ 581.733289][T15058] ? __mutex_unlock_slowpath+0x731/0x900 [ 581.733325][T15058] __sys_recvmmsg+0x1a5/0x290 [ 581.733349][T15058] ? __pfx___sys_recvmmsg+0x10/0x10 [ 581.733372][T15058] ? ksys_write+0x242/0x270 [ 581.733399][T15058] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 581.733428][T15058] __do_fast_syscall_32+0x27a/0x6b0 [ 581.733453][T15058] ? do_fast_syscall_32+0x33/0x70 [ 581.733475][T15058] ? asm_int80_emulation+0x1a/0x20 [ 581.733494][T15058] ? do_int80_emulation+0x299/0x500 [ 581.733516][T15058] ? trace_irq_disable+0x3b/0x140 [ 581.733542][T15058] do_fast_syscall_32+0x33/0x70 [ 581.733566][T15058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 581.733589][T15058] RIP: 0023:0xf7fb30ec [ 581.733607][T15058] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 581.733623][T15058] RSP: 002b:00000000f544550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 581.733644][T15058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 581.733658][T15058] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.733670][T15058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.733681][T15058] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 581.733693][T15058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.733721][T15058] [ 582.658068][ T4931] Bluetooth: hci2: command tx timeout [ 582.688060][ T8869] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 582.817794][ T8869] usb 1-1: device descriptor read/64, error -71 [ 582.969167][T15037] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.971824][T15037] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.971938][T15037] bridge_slave_0: entered allmulticast mode [ 583.001617][T15037] bridge_slave_0: entered promiscuous mode [ 583.021397][T15037] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.021915][T15037] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.022272][T15037] bridge_slave_1: entered allmulticast mode [ 583.048932][T15037] bridge_slave_1: entered promiscuous mode [ 583.058086][ T8869] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 583.132604][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 583.132633][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 583.132836][T15037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.176951][T15037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.189278][ T8869] usb 1-1: device descriptor read/64, error -71 [ 583.266057][T15037] team0: Port device team_slave_0 added [ 583.283306][T15037] team0: Port device team_slave_1 added [ 583.298064][ T8869] usb usb1-port1: attempt power cycle [ 583.370586][T15037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.370603][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.370620][T15037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.376877][T15037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.376891][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.376908][T15037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.601120][T15037] hsr_slave_0: entered promiscuous mode [ 583.603993][T15037] hsr_slave_1: entered promiscuous mode [ 583.606997][T15037] debugfs: 'hsr0' already exists in 'hsr' [ 583.607023][T15037] Cannot create hsr debugfs directory [ 583.640667][ T8869] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 583.661472][ T8869] usb 1-1: device descriptor read/8, error -71 [ 583.707656][ T5708] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 583.857830][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 583.858581][ T5708] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 583.861550][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.866821][ T5708] usb 3-1: config 0 descriptor?? [ 583.899835][ T8869] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 583.918533][ T8869] usb 1-1: device descriptor read/8, error -71 [ 584.030639][ T8869] usb usb1-port1: unable to enumerate USB device [ 584.146180][ T5708] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 584.160637][ T5708] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 584.160669][ T5708] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 584.485176][T15037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.577048][T15101] FAULT_INJECTION: forcing a failure. [ 584.577048][T15101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.577088][T15101] CPU: 0 UID: 0 PID: 15101 Comm: syz.3.2978 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.577118][T15101] Tainted: [L]=SOFTLOCKUP [ 584.577126][T15101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 584.577139][T15101] Call Trace: [ 584.577149][T15101] [ 584.577158][T15101] dump_stack_lvl+0xe8/0x150 [ 584.577195][T15101] should_fail_ex+0x410/0x560 [ 584.577230][T15101] _copy_from_user+0x2d/0xb0 [ 584.577253][T15101] get_compat_msghdr+0xb3/0x4c0 [ 584.577283][T15101] ? __pfx_get_compat_msghdr+0x10/0x10 [ 584.577325][T15101] ___sys_sendmsg+0x201/0x360 [ 584.577357][T15101] ? __lock_acquire+0x747/0x2de0 [ 584.577387][T15101] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.577410][T15101] ? get_pid_task+0x20/0x1f0 [ 584.577432][T15101] ? get_pid_task+0x20/0x1f0 [ 584.577451][T15101] ? get_pid_task+0x20/0x1f0 [ 584.577510][T15101] ? __fget_files+0x2a/0x420 [ 584.577530][T15101] ? __fget_files+0x3a2/0x420 [ 584.577560][T15101] __sys_sendmsg+0x177/0x240 [ 584.577586][T15101] ? __pfx___sys_sendmsg+0x10/0x10 [ 584.577629][T15101] __do_fast_syscall_32+0x27a/0x6b0 [ 584.577657][T15101] ? do_fast_syscall_32+0x33/0x70 [ 584.577682][T15101] ? asm_int80_emulation+0x1a/0x20 [ 584.577702][T15101] ? do_int80_emulation+0x299/0x500 [ 584.577726][T15101] ? trace_irq_disable+0x3b/0x140 [ 584.577754][T15101] do_fast_syscall_32+0x33/0x70 [ 584.577779][T15101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 584.577804][T15101] RIP: 0023:0xf73ef0ec [ 584.577824][T15101] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 584.577842][T15101] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 584.577868][T15101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 584.577885][T15101] RDX: 0000000000040010 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.577898][T15101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.577910][T15101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 584.577923][T15101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.577955][T15101] [ 584.578334][T15098] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5629] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[15098] [ 584.740689][ T4931] Bluetooth: hci2: command tx timeout [ 584.860037][T15037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.999255][T15106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2980'. [ 585.192335][T15037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.276146][T15110] FAULT_INJECTION: forcing a failure. [ 585.276146][T15110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.276185][T15110] CPU: 1 UID: 0 PID: 15110 Comm: syz.0.2981 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.276214][T15110] Tainted: [L]=SOFTLOCKUP [ 585.276223][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 585.276236][T15110] Call Trace: [ 585.276245][T15110] [ 585.276255][T15110] dump_stack_lvl+0xe8/0x150 [ 585.276289][T15110] should_fail_ex+0x410/0x560 [ 585.276323][T15110] _copy_from_iter+0x1d3/0x1660 [ 585.276361][T15110] ? __lock_acquire+0x747/0x2de0 [ 585.276386][T15110] ? __pfx__copy_from_iter+0x10/0x10 [ 585.276430][T15110] tun_get_user+0x256/0x4450 [ 585.276474][T15110] ? aa_file_perm+0x18b/0x15f0 [ 585.276505][T15110] ? aa_file_perm+0x4ed/0x15f0 [ 585.276526][T15110] ? __pfx_tun_get_user+0x10/0x10 [ 585.276558][T15110] ? __lock_acquire+0x747/0x2de0 [ 585.276588][T15110] ? kstrtoull+0x137/0x1d0 [ 585.276619][T15110] ? ref_tracker_alloc+0x341/0x4b0 [ 585.276653][T15110] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 585.276687][T15110] ? lock_acquire+0x115/0x350 [ 585.276711][T15110] ? tun_get+0x1c/0x2f0 [ 585.276745][T15110] ? tun_get+0x1c/0x2f0 [ 585.276772][T15110] ? tun_get+0x1c/0x2f0 [ 585.276806][T15110] tun_chr_write_iter+0x113/0x200 [ 585.276837][T15110] vfs_write+0x612/0xba0 [ 585.276871][T15110] ? __pfx_vfs_write+0x10/0x10 [ 585.276914][T15110] ? __fget_files+0x2a/0x420 [ 585.276945][T15110] ksys_write+0x150/0x270 [ 585.276971][T15110] ? __pfx_ksys_write+0x10/0x10 [ 585.277005][T15110] __do_fast_syscall_32+0x27a/0x6b0 [ 585.277033][T15110] ? do_fast_syscall_32+0x33/0x70 [ 585.277058][T15110] ? asm_int80_emulation+0x1a/0x20 [ 585.277079][T15110] ? do_int80_emulation+0x299/0x500 [ 585.277103][T15110] ? trace_irq_disable+0x3b/0x140 [ 585.277132][T15110] do_fast_syscall_32+0x33/0x70 [ 585.277158][T15110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.277184][T15110] RIP: 0023:0xf7f770ec [ 585.277204][T15110] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 585.277222][T15110] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 585.277247][T15110] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000140 [ 585.277262][T15110] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 585.277275][T15110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.277288][T15110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 585.277302][T15110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.277335][T15110] [ 585.427792][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 585.427812][ T31] audit: type=1326 audit(1791874452.578:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15107 comm="syz.3.2982" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ef0ec code=0x0 [ 585.473653][T15037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.884354][T15037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 585.896349][T15037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.909303][T15037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 585.914995][T15037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.915946][T15037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 585.922291][T15037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.923857][T15037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 585.933254][T15037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.037845][ T5681] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 586.081459][T15037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.110891][T15037] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.121545][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.121662][ T9902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.153811][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.153945][ T9901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.189541][ T5681] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 586.191510][ T5681] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.191564][ T5681] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 586.191588][ T5681] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 586.191613][ T5681] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.191655][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.353361][T15037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.489995][T15037] veth0_vlan: entered promiscuous mode [ 586.514837][ T4931] Bluetooth: hci3: unexpected subevent 0x10 length: 5 > 2 [ 586.535620][T15037] veth1_vlan: entered promiscuous mode [ 586.629171][T15037] veth0_macvtap: entered promiscuous mode [ 586.636719][T15037] veth1_macvtap: entered promiscuous mode [ 586.675798][T15037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.693769][T15037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.735027][ T9902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.773761][ T5673] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 586.830623][ T4931] Bluetooth: hci2: command tx timeout [ 586.908034][ T1255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.908153][ T1255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.908187][ T1255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.949557][ T5673] usb 4-1: Using ep0 maxpacket: 32 [ 586.950972][ T5673] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 586.962479][ T5673] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 586.962513][ T5673] usb 4-1: config 0 interface 0 has no altsetting 0 [ 586.962547][ T5673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.008377][ T5673] usb 4-1: config 0 descriptor?? [ 587.039871][T15136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.039895][T15136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.124132][ T9902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.124156][ T9902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.229840][T15141] ALSA: mixer_oss: invalid OSS volume '' [ 587.251914][T15116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.255359][T15116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.311678][ T5681] [drm] Initialized gud 1.0.0 for 1-1:1.0 on minor 1 [ 587.627855][ T8869] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 587.767819][T14547] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 587.780439][ T8869] usb 5-1: not running at top speed; connect to a high speed hub [ 587.780477][ T8869] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 587.781806][ T8869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.784567][ T8869] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 587.784590][ T8869] usb 5-1: Product: syz [ 587.784605][ T8869] usb 5-1: Manufacturer: syz [ 587.812333][ T8869] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 587.917656][T14547] usb 2-1: Using ep0 maxpacket: 8 [ 587.923659][T14547] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 587.924704][T14547] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 587.924743][T14547] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 587.924786][T14547] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 587.924814][T14547] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 587.924849][T14547] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 587.924874][T14547] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 587.924898][T14547] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 587.924924][T14547] usb 2-1: config 168 interface 0 has no altsetting 0 [ 587.926103][T14547] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 587.926138][T14547] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 587.926176][T14547] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 587.926203][T14547] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 587.926228][T14547] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 587.926254][T14547] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 587.926280][T14547] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 587.926306][T14547] usb 2-1: config 168 interface 0 has no altsetting 0 [ 587.927291][T14547] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 587.927324][T14547] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 587.927363][T14547] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 587.927391][T14547] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 587.927418][T14547] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 587.927444][T14547] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 587.927469][T14547] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 587.927496][T14547] usb 2-1: config 168 interface 0 has no altsetting 0 [ 587.934314][T14547] usb 2-1: string descriptor 0 read error: -22 [ 587.934450][T14547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.955294][T14547] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 588.050210][ T8869] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 588.073696][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2983'. [ 588.074313][ T8869] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 588.074385][ T8869] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 588.075045][ T8869] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 588.172484][T14547] usb 2-1: USB disconnect, device number 76 [ 588.288901][ T8869] usb 5-1: USB disconnect, device number 80 [ 588.586344][T15157] netlink: 'syz.4.2992': attribute type 1 has an invalid length. [ 588.784750][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 588.784776][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 588.837720][T14547] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 588.897916][ T4931] Bluetooth: hci2: command tx timeout [ 589.008043][T14547] usb 5-1: Using ep0 maxpacket: 8 [ 589.010629][T14547] usb 5-1: unable to get BOS descriptor or descriptor too short [ 589.010684][T14547] usb 5-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=68.be [ 589.011708][T14547] usb 5-1: config 10 has an invalid interface number: 188 but max is 0 [ 589.011734][T14547] usb 5-1: config 10 has no interface number 0 [ 589.011781][T14547] usb 5-1: config 10 interface 188 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10 [ 589.011810][T14547] usb 5-1: config 10 interface 188 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024 [ 589.011839][T14547] usb 5-1: config 10 interface 188 altsetting 134 has a duplicate endpoint with address 0xA, skipping [ 589.011857][T14547] usb 5-1: config 10 interface 188 has no altsetting 0 [ 589.014265][T14547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.014323][T14547] usb 5-1: Product: syz [ 589.014340][T14547] usb 5-1: Manufacturer: syz [ 589.014355][T14547] usb 5-1: SerialNumber: syz [ 589.031816][T15157] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 589.252432][T14547] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 589.314405][T14547] usb 5-1: USB disconnect, device number 81 [ 589.397439][T13870] udevd[13870]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:10.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.556360][ T5673] usbhid 4-1:0.0: can't add hid device: -71 [ 589.556484][ T5673] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 589.563204][ T5673] usb 4-1: USB disconnect, device number 80 [ 589.856658][ T5681] Console: switching to colour frame buffer device 128x48 [ 589.888987][ T5681] gud 1-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 589.905420][ T5681] usb 1-1: USB disconnect, device number 78 [ 589.940476][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.967008][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 589.981077][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 589.986013][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 590.009989][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 590.057300][T15170] netlink: 'syz.2.2997': attribute type 4 has an invalid length. [ 590.057329][T15170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2997'. [ 590.058542][T15170] .`: renamed from bond0 [ 590.174509][ T5681] Console: switching to colour VGA+ 80x25 [ 590.175148][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2998'. [ 590.428753][T15176] netlink: 'syz.1.3000': attribute type 10 has an invalid length. [ 590.491930][T15176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.501161][T15176] team0: Port device netdevsim1 added [ 590.549007][T15181] binder: 15179:15181 ioctl 401845e0 800002c0 returned -22 [ 590.574084][T15181] netlink: 'syz.4.3002': attribute type 4 has an invalid length. [ 591.104689][ T9902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.104721][ T9902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.131631][ T8869] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 591.279914][ T8869] usb 1-1: Using ep0 maxpacket: 16 [ 591.280686][ T8869] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 591.308727][ T8869] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 591.308787][ T8869] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.308816][ T8869] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 591.308844][ T8869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.308882][ T8869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.316885][ T8869] usb 1-1: config 0 descriptor?? [ 591.509170][ T9902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.521053][ T9902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.651845][T15210] bond1: option arp_validate: invalid value (18446744073709551614) [ 591.675562][T15210] bond1 (unregistering): Released all slaves [ 591.806708][ T9902] bridge0: port 1(netdevsim1) entered disabled state [ 591.855870][ T8869] hid_parser_main: 12 callbacks suppressed [ 591.855901][ T8869] hid-retrode 0003:0403:97C1.0021: unknown main item tag 0x2 [ 591.855932][ T8869] hid-retrode 0003:0403:97C1.0021: global environment stack underflow [ 591.855949][ T8869] hid-retrode 0003:0403:97C1.0021: item 0 1 1 11 parsing failed [ 591.864299][ T8869] hid-retrode 0003:0403:97C1.0021: probe with driver hid-retrode failed with error -22 [ 591.882904][ T9902] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 591.882936][ T9902] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 591.888021][ T9902] bridge0: port 1(netdevsim1) entered disabled state [ 591.971915][ T9902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.971958][ T9902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.006988][T15190] tc_dump_action: action bad kind [ 592.075110][T14544] usb 1-1: USB disconnect, device number 79 [ 592.102111][ T4931] Bluetooth: hci4: command tx timeout [ 592.210273][ T9902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.210302][ T9902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.355468][T15174] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.355645][T15174] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.355803][T15174] bridge_slave_0: entered allmulticast mode [ 592.385628][T15174] bridge_slave_0: entered promiscuous mode [ 592.400443][T15174] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.400665][T15174] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.400816][T15174] bridge_slave_1: entered allmulticast mode [ 592.403107][T15174] bridge_slave_1: entered promiscuous mode [ 592.474858][T15174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.478666][T15174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.538296][T15174] team0: Port device team_slave_0 added [ 592.651407][T15174] team0: Port device team_slave_1 added [ 592.847739][T15236] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3018'. [ 592.883353][T15174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.883369][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.883386][T15174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.974091][T15174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.974109][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.974133][T15174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.064819][ T9902] bridge_slave_1: left allmulticast mode [ 593.064851][ T9902] bridge_slave_1: left promiscuous mode [ 593.065813][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.826866][ T9902] bond1 (unregistering): (slave bridge1): Releasing active interface [ 593.826901][ T9902] veth3: entered promiscuous mode [ 593.872124][ T9902] bond2 (unregistering): Released all slaves [ 593.905815][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3020'. [ 593.905845][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3020'. [ 593.907112][ T9902] bond1 (unregistering): (slave veth3): Releasing active interface [ 593.907140][ T9902] veth3: left promiscuous mode [ 593.944080][ T9902] bond1 (unregistering): Released all slaves [ 594.002518][ T9902] bond3 (unregistering): (slave veth5): Releasing active interface [ 594.005849][ T9902] bond3 (unregistering): Released all slaves [ 594.024625][ T9902] bond5 (unregistering): Released all slaves [ 594.044253][ T9902] bond6 (unregistering): Released all slaves [ 594.079062][ T9902] bond7 (unregistering): Released all slaves [ 594.103169][ T9902] bond8 (unregistering): Released all slaves [ 594.124339][ T9902] bond9 (unregistering): Released all slaves [ 594.162067][ T9902] bond10 (unregistering): Released all slaves [ 594.177968][ T4931] Bluetooth: hci4: command tx timeout [ 594.186494][ T9902] bond11 (unregistering): Released all slaves [ 594.203409][ T9902] bond4 (unregistering): (slave bond12): Releasing active interface [ 594.204249][ T9902] bond4 (unregistering): Released all slaves [ 594.223248][ T9902] bond12 (unregistering): Released all slaves [ 594.256207][ T9902] bond13 (unregistering): (slave bond14): Releasing active interface [ 594.260565][ T9902] bond13 (unregistering): Released all slaves [ 594.282874][ T9902] bond14 (unregistering): Released all slaves [ 594.306693][ T9902] bond16 (unregistering): Released all slaves [ 594.332500][ T9902] bond15 (unregistering): Released all slaves [ 594.344635][ T9902] bond17 (unregistering): Released all slaves [ 594.356214][ T9902] bond0 (unregistering): Released all slaves [ 594.368993][ T9902] bond18 (unregistering): (slave bond19): Releasing active interface [ 594.369572][ T9902] bond18 (unregistering): Released all slaves [ 594.393776][ T9902] bond19 (unregistering): Released all slaves [ 594.411620][ T9902] bond20 (unregistering): (slave bond21): Releasing active interface [ 594.412244][ T9902] bond20 (unregistering): Released all slaves [ 594.435451][ T9902] bond21 (unregistering): Released all slaves [ 594.449433][ T9902] bond22 (unregistering): (slave bond23): Releasing active interface [ 594.450084][ T9902] bond22 (unregistering): Released all slaves [ 594.463230][ T9902] bond23 (unregistering): Released all slaves [ 594.546366][T15174] hsr_slave_0: entered promiscuous mode [ 594.554061][T15174] hsr_slave_1: entered promiscuous mode [ 594.554917][T15174] debugfs: 'hsr0' already exists in 'hsr' [ 594.554939][T15174] Cannot create hsr debugfs directory [ 595.197403][ T9902] : left promiscuous mode [ 595.423227][T15274] netlink: 'syz.4.3026': attribute type 3 has an invalid length. [ 595.423255][T15274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3026'. [ 595.450065][T15280] netlink: 'syz.0.3028': attribute type 10 has an invalid length. [ 595.655918][ T9902] tipc: Left network mode [ 596.067455][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 596.266830][ T4931] Bluetooth: hci4: command tx timeout [ 596.289691][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 596.297408][T15306] tipc: Enabling of bearer rejected, failed to enable media [ 596.444458][ T9902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.444488][ T9902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.445578][ T9902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.445599][ T9902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.482328][ T9902] veth1_macvtap: left promiscuous mode [ 596.482369][ T9902] veth0_macvtap: left promiscuous mode [ 596.482541][ T9902] veth1_vlan: left promiscuous mode [ 596.484605][ T9902] veth0_vlan: left promiscuous mode [ 597.372342][ T9902] team0 (unregistering): Port device team_slave_1 removed [ 597.400059][ T9902] team0 (unregistering): Port device team_slave_0 removed [ 597.667962][ T8869] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 597.736388][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 597.849968][ T8869] usb 5-1: Using ep0 maxpacket: 8 [ 597.850706][ T8869] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 597.852395][ T8869] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 597.852430][ T8869] usb 5-1: config 179 has no interface number 0 [ 597.852469][ T8869] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 597.852496][ T8869] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 597.852524][ T8869] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 597.852547][ T8869] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 597.852572][ T8869] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 597.852613][ T8869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.961792][T15334] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 598.339690][ T4931] Bluetooth: hci4: command tx timeout [ 598.378105][ T8869] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input136 [ 598.492953][ T8860] usb 5-1: USB disconnect, device number 82 [ 598.493395][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 598.493464][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 598.681905][T15174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 598.702733][T15174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 598.704927][T15174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 598.749728][T15174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 598.750783][T15174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 598.779322][T15174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 598.782067][T15174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 598.842394][T15174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.051414][T15174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.129110][T15174] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.166489][ T9904] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.166612][ T9904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.213735][T15136] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.213871][T15136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.610709][T15174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.850432][T15174] veth0_vlan: entered promiscuous mode [ 599.876841][T15174] veth1_vlan: entered promiscuous mode [ 600.032348][T15174] veth0_macvtap: entered promiscuous mode [ 600.037465][ T31] audit: type=1800 audit(1791874467.188:5463): pid=15392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3047" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 600.054513][T15174] veth1_macvtap: entered promiscuous mode [ 600.236080][T15174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.278940][T15174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.289769][T14544] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 600.318045][ T5673] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 600.326049][T15404] IPv6: Can't replace route, no match found [ 600.449920][T14544] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 600.451442][T14544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.459081][ T1255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.459842][ T1255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.459889][ T1255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.459923][ T1255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.461048][T14544] usb 1-1: config 0 descriptor?? [ 600.473383][T14544] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 600.515967][ T5673] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 600.543874][ T5673] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 600.543906][ T5673] usb 2-1: config 0 has no interface number 0 [ 600.543959][ T5673] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 600.543988][ T5673] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 600.544032][ T5673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.547096][ T5673] usb 2-1: config 0 descriptor?? [ 600.578706][T15393] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 600.650897][ T5673] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 600.687895][T15408] netlink: 'syz.4.3052': attribute type 3 has an invalid length. [ 600.687922][T15408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 600.687943][T15408] netlink: 'syz.4.3052': attribute type 3 has an invalid length. [ 600.687958][T15408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 600.758783][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3052'. [ 600.819502][ T8856] usb 2-1: USB disconnect, device number 77 [ 600.870077][T15136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.870103][T15136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.992184][ T31] audit: type=1326 audit(1791874468.148:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.4.3055" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb30ec code=0x7ffc0000 [ 600.992464][ T31] audit: type=1326 audit(1791874468.148:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.4.3055" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb30ec code=0x7ffc0000 [ 600.995126][ T31] audit: type=1326 audit(1791874468.148:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.4.3055" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb30ec code=0x7ffc0000 [ 600.996658][ T31] audit: type=1326 audit(1791874468.148:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.4.3055" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb30ec code=0x7ffc0000 [ 601.018385][ T31] audit: type=1326 audit(1791874468.148:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.4.3055" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb30ec code=0x7ffc0000 [ 601.051877][ T31] audit: type=1326 audit(1791874468.208:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.4.3055" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=470 compat=1 ip=0xf7fb30ec code=0x7ffc0000 [ 601.051929][ T31] audit: type=1326 audit(1791874468.208:5470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.4.3055" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb30ec code=0x7ffc0000 [ 601.051995][ T31] audit: type=1326 audit(1791874468.208:5471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.4.3055" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb30ec code=0x7ffc0000 [ 601.053624][ T31] audit: type=1326 audit(1791874468.208:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.4.3055" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb30ec code=0x7ffc0000 [ 601.120807][T15411] ip6erspan0: entered allmulticast mode [ 601.124559][ T9902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.124579][ T9902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.344745][T15420] ebt_limit: overflow, try lower: 50331648/65280 [ 601.697161][T15432] FAULT_INJECTION: forcing a failure. [ 601.697161][T15432] name failslab, interval 1, probability 0, space 0, times 0 [ 601.697200][T15432] CPU: 0 UID: 0 PID: 15432 Comm: syz.3.3060 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.697236][T15432] Tainted: [L]=SOFTLOCKUP [ 601.697245][T15432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 601.697256][T15432] Call Trace: [ 601.697266][T15432] [ 601.697276][T15432] dump_stack_lvl+0xe8/0x150 [ 601.697316][T15432] should_fail_ex+0x410/0x560 [ 601.697351][T15432] should_failslab+0xa8/0x100 [ 601.697385][T15432] __kmalloc_noprof+0xfe/0x720 [ 601.697410][T15432] ? tomoyo_encode+0x2ad/0x570 [ 601.697430][T15432] ? tomoyo_encode+0x2ad/0x570 [ 601.697456][T15432] tomoyo_encode+0x2ad/0x570 [ 601.697481][T15432] tomoyo_realpath_from_path+0x5fa/0x640 [ 601.697502][T15432] tomoyo_path_perm+0x283/0x560 [ 601.697519][T15432] ? tomoyo_path_perm+0x251/0x560 [ 601.697542][T15432] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 601.697577][T15432] ? current_check_access_path+0x1fb/0x510 [ 601.697632][T15432] ? mnt_get_write_access+0x66/0x280 [ 601.697670][T15432] security_path_truncate+0x152/0x310 [ 601.697696][T15432] vfs_truncate+0x46b/0x540 [ 601.697725][T15432] ? __pfx_vfs_truncate+0x10/0x10 [ 601.697753][T15432] ? do_getname+0x151/0x250 [ 601.697783][T15432] ksys_truncate+0xf3/0x1c0 [ 601.697807][T15432] ? __pfx_ksys_truncate+0x10/0x10 [ 601.697841][T15432] __ia32_compat_sys_truncate+0x5b/0x70 [ 601.697867][T15432] __do_fast_syscall_32+0x27a/0x6b0 [ 601.697895][T15432] ? do_fast_syscall_32+0x33/0x70 [ 601.697919][T15432] ? asm_int80_emulation+0x1a/0x20 [ 601.697939][T15432] ? do_int80_emulation+0x299/0x500 [ 601.697963][T15432] ? trace_irq_disable+0x3b/0x140 [ 601.697991][T15432] do_fast_syscall_32+0x33/0x70 [ 601.698016][T15432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.698042][T15432] RIP: 0023:0xf747f0ec [ 601.698062][T15432] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 601.698080][T15432] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 000000000000005c [ 601.698104][T15432] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 000000000008fff5 [ 601.698119][T15432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 601.698133][T15432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 601.698145][T15432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 601.698158][T15432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 601.698192][T15432] [ 601.786100][T15432] ERROR: Out of memory at tomoyo_realpath_from_path. [ 601.810636][T15431] netlink: 'syz.1.3059': attribute type 10 has an invalid length. [ 602.058517][T15431] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 602.135645][T15431] team0: Port device wlan0 added [ 602.397802][ T8860] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 602.480428][ T5710] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 602.549098][ T8860] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 602.550383][ T8860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 602.550447][ T8860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.550471][ T8860] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 602.550516][ T8860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.563230][ T8860] usb 4-1: config 0 descriptor?? [ 602.628155][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 602.632128][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 602.632247][ T5710] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 602.634538][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.634647][ T5710] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 602.640198][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.640225][ T5710] usb 5-1: Product: syz [ 602.640240][ T5710] usb 5-1: Manufacturer: syz [ 602.640254][ T5710] usb 5-1: SerialNumber: syz [ 602.765606][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 602.767005][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 602.787453][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 602.805489][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 602.806740][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 603.015550][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'. [ 603.125512][ T8860] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 603.275380][T14544] gspca_stv06xx: I2C: Read error writing address: -71 [ 603.284036][T14544] usb 1-1: USB disconnect, device number 80 [ 603.288327][T15437] binder: 15436:15437 unknown command 0 [ 603.288356][T15437] binder: 15436:15437 ioctl c0306201 80000700 returned -22 [ 603.302572][T15437] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[15443] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[15437] [ 603.490686][ T9904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - ** replaying previous printk message ** [ 603.490686][ T9904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.508238][ T12] ------------[ cut here ]------------ [ 603.508256][ T12] time_after(jiffies, timeout) [ 603.508285][ T12] WARNING: io_uring/io_uring.c:2359 at io_ring_exit_work+0x4d0/0x9a0, CPU#0: kworker/u8:0/12 [ 603.544685][ T12] Modules linked in: [ 603.548732][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.559749][ T12] Tainted: [L]=SOFTLOCKUP [ 603.565081][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 603.575641][ T12] Workqueue: iou_exit io_ring_exit_work [ 603.581365][ T12] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 603.587159][ T12] Code: c6 05 8b eb 38 10 01 48 c7 c7 40 3a 6b 8c be 25 00 00 00 48 c7 c2 20 31 6b 8c e8 2b c4 78 00 e9 70 fe ff ff e8 a1 20 9d 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 603.607639][ T12] RSP: 0018:ffffc90000117940 EFLAGS: 00010293 [ 603.613767][ T12] RAX: ffffffff812aefcf RBX: 00000001000075c5 RCX: ffff88801eef0000 [ 603.622653][ T12] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 603.630836][ T12] RBP: ffffc90000117ad0 R08: ffffc900001178c7 R09: 1ffff92000022f18 [ 603.638931][ T12] R10: dffffc0000000000 R11: fffff52000022f19 R12: dffffc0000000000 [ 603.646997][ T12] R13: 00000001000075c1 R14: 0000000000002000 R15: ffff8880674b8000 [ 603.655064][ T12] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 603.664082][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 603.671009][ T12] CR2: 0000000080c2c000 CR3: 0000000054fb2000 CR4: 00000000003526f0 [ 603.679119][ T12] Call Trace: [ 603.682455][ T12] [ 603.685484][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 603.691108][ T12] ? rcu_is_watching+0x16/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 603.695952][ T12] ? process_scheduled_works+0x97a/0x1630 [ 603.702042][ T12] process_scheduled_works+0xc3d/0x1630 [ 603.708323][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 603.714356][ T12] ? assign_work+0x3cf/0x5d0 [ 603.719494][ T12] worker_thread+0xa47/0xfb0 [ 603.724174][ T12] kthread+0x38b/0x480 [ 603.728387][ T12] ? __pfx_worker_thread+0x10/0x10 [ 603.733930][ T12] ? __pfx_kthread+0x10/0x10 [ 603.738699][ T12] ret_from_fork+0x514/0xb70 [ 603.743360][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 603.748670][ T12] ? __switch_to+0xc89/0x1420 [ 603.753442][ T12] ? __pfx_kthread+0x10/0x10 [ 603.758153][ T12] ret_from_fork_asm+0x1a/0x30 [ 603.763040][ T12] [ 603.767272][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 603.774591][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.785461][ T12] Tainted: [L]=SOFTLOCKUP [ 603.789815][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 603.799878][ T12] Workqueue: iou_exit io_ring_exit_work [ 603.805453][ T12] Call Trace: [ 603.808736][ T12] [ 603.811682][ T12] vpanic+0x56d/0xa60 [ 603.815950][ T12] ? __pfx__printk+0x10/0x10 [ 603.820568][ T12] ? __pfx_vpanic+0x10/0x10 [ 603.825085][ T12] ? is_bpf_text_address+0x292/0x2b0 [ 603.830380][ T12] ? is_bpf_text_address+0x26/0x2b0 [ 603.835608][ T12] panic+0xc5/0xd0 [ 603.839344][ T12] ? __pfx_panic+0x10/0x10 [ 603.843780][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 603.848730][ T12] __warn+0x315/0x4c0 [ 603.852725][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 603.857854][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 603.862975][ T12] __report_bug+0x276/0x570 [ 603.867491][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 603.872623][ T12] ? __pfx___report_bug+0x10/0x10 [ 603.877662][ T12] ? trace_contention_end+0x3d/0x140 [ 603.882966][ T12] ? __mutex_lock+0x30b/0x1550 [ 603.887755][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 603.892881][ T12] report_bug+0x16b/0x220 [ 603.897222][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 603.902346][ T12] ? io_ring_exit_work+0x4d2/0x9a0 [ 603.907469][ T12] handle_bug+0x9c/0x200 [ 603.911727][ T12] exc_invalid_op+0x1a/0x50 [ 603.916238][ T12] asm_exc_invalid_op+0x1a/0x20 [ 603.921088][ T12] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 603.926823][ T12] Code: c6 05 8b eb 38 10 01 48 c7 c7 40 3a 6b 8c be 25 00 00 00 48 c7 c2 20 31 6b 8c e8 2b c4 78 00 e9 70 fe ff ff e8 a1 20 9d 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 603.946433][ T12] RSP: 0018:ffffc90000117940 EFLAGS: 00010293 [ 603.952506][ T12] RAX: ffffffff812aefcf RBX: 00000001000075c5 RCX: ffff88801eef0000 [ 603.960482][ T12] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 603.968455][ T12] RBP: ffffc90000117ad0 R08: ffffc900001178c7 R09: 1ffff92000022f18 [ 603.976433][ T12] R10: dffffc0000000000 R11: fffff52000022f19 R12: dffffc0000000000 [ 603.984407][ T12] R13: 00000001000075c1 R14: 0000000000002000 R15: ffff8880674b8000 [ 603.992392][ T12] ? io_ring_exit_work+0x4cf/0x9a0 [ 603.997553][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 604.003037][ T12] ? rcu_is_watching+0x16/0xb0 [ 604.007813][ T12] ? process_scheduled_works+0x97a/0x1630 [ 604.013543][ T12] process_scheduled_works+0xc3d/0x1630 [ 604.019127][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.025126][ T12] ? assign_work+0x3cf/0x5d0 [ 604.029728][ T12] worker_thread+0xa47/0xfb0 [ 604.034357][ T12] kthread+0x38b/0x480 [ 604.038434][ T12] ? __pfx_worker_thread+0x10/0x10 [ 604.043558][ T12] ? __pfx_kthread+0x10/0x10 [ 604.048159][ T12] ret_from_fork+0x514/0xb70 [ 604.052757][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 604.057874][ T12] ? __switch_to+0xc89/0x1420 [ 604.062562][ T12] ? __pfx_kthread+0x10/0x10 [ 604.067161][ T12] ret_from_fork_asm+0x1a/0x30 [ 604.071945][ T12] [ 604.075113][ T12] Kernel Offset: disabled [ 604.079437][ T12] Rebooting in 86400 seconds..