last executing test programs: 1m0.669464762s ago: executing program 3 (id=6152): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) fchmod(r0, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0c00040004000000040000070000000000080000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000040435522050000000000010902240001000010090904001001030003000921faff05012229000905810300000009fcf371ef3b6d96d5a194b101d631474806eb4aea"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xb, {[@local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00116d"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400080000002008001e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a0c4}, 0x4010) set_mempolicy(0x0, 0x0, 0x7) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$inet(r1, 0x0, 0x0, 0x20008004) 58.319531706s ago: executing program 3 (id=6164): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newnexthop={0x24, 0x68, 0x5, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x4}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r4) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) 54.430949294s ago: executing program 3 (id=6171): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904", @ANYRESDEC], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 52.737606979s ago: executing program 3 (id=6179): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x3, 0xff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08360001ce61fcb7e067b20800000000000000d964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163c", 0x51}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/166, 0xa6}], 0x1, 0x0, 0x0, 0x4000050}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="68000000020605000000000000000000040000010500010006000000050005000200000005000400000000000900020073797a31000000011c0007800800064000000009080012400000697d080008400000009011000300686173683a69702c6d61726b00000000132b971ac2ffe18e64ec295369ebf120eb4a226c24636790a9ad30a9b5627ee3fcb27f4e198a0852231a3f27a7d76c96559db9386e30dd8b51ce3388c4cee63d70c8b16954698c00128bf673e6b00d2e3b9286e540796c5f88aaedd8da1e65e2fe2c830a999c4b9acd04b850688191acec"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0xc489860c7116b61a, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRES8=r1, @ANYRES64=r2, @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4008641c, &(0x7f0000000500)={0x0, &(0x7f0000000480)=""/66}) chroot(&(0x7f0000000440)='./file0\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, r4) ptrace$cont(0x20, r4, 0x0, 0x6) ptrace$cont(0x18, r4, 0x51cd, 0x6) ptrace$peeksig(0x4209, r4, &(0x7f0000000100)={0x3, 0x0, 0x1}, &(0x7f0000000540)=[{}]) unshare(0x26020480) pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 49.684699391s ago: executing program 3 (id=6190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffe0000002000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000080000000000000000000001000004d46c00eafffd000000000000000009000000000000000700000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffffa90e000000000000060000000000000000000000000000001f00000000000000ff0100000000000002002000fce90c0f11e2e9a4f54b6a48d0ffffff000000002abd7000000000000a0001fd20feffff470003006465666c61746500"/241], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="340100001000010027bd700000010000fe880000000000000000000000000001ac14143d000000000000000000000000000107144e230405000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f9ffffffffffffff0000000000000000fbffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a00010020000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000a761b0b12976431ee1ac9693033256444bfebae2d53c4850661291abc53f270efbbcdfdd45a1b410dfb942d1dfd274efb933fa1fe977d26e50"], 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990001000000710000000800a10001000000080026008009000008009f0004000000"], 0x40}}, 0x20000000) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r12, 0x0, 0x20004804) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) 49.359712102s ago: executing program 3 (id=6191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x8) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_SEND_ZC={0x2f, 0xa, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x7b, 0x11}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x3, 0xc34, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x3}}}, 0x0) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000001900)={0x2e, 0x20, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000018c0)=@any_dev={0x1, 0x317, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x43}}}, &(0x7f0000001980)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 48.684052549s ago: executing program 32 (id=6191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x8) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_SEND_ZC={0x2f, 0xa, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x7b, 0x11}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x3, 0xc34, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x3}}}, 0x0) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000001900)={0x2e, 0x20, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000018c0)=@any_dev={0x1, 0x317, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x43}}}, &(0x7f0000001980)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 29.014872425s ago: executing program 0 (id=6262): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/37, 0x25, 0x5, 0x10, 0x10000, 0x2, 0x9}}, 0x120) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000001300)=ANY=[@ANYBLOB="1201100300000020"], 0x0) write$UHID_INPUT(r4, &(0x7f0000000200)={0x8, {"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", 0x1000}}, 0x1006) socket$inet6(0xa, 0xa, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r6, &(0x7f0000001300)=""/112, 0x70) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x2, 0x7, 0x1cb, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket(0x10, 0x3, 0x0) r8 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 19.194523595s ago: executing program 5 (id=6289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b00100000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.996199535s ago: executing program 5 (id=6290): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0xffffffff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000100)='/)^{)/\x00', &(0x7f0000000200)='/dev/nullb0\x00', &(0x7f0000000240)='/dev/loop#\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='-\x00']}, &(0x7f00000005c0)={[&(0x7f0000000440)='{!)\x0f\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00']}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010003904000000000000060000000000", @ANYRES32=r5, @ANYBLOB="01980000000000002800128008000100677265001c00028006000e000200000008000700ac45d761e4"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195e", 0x1c, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r7 = dup(r6) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 17.583035663s ago: executing program 5 (id=6292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000200)=0xff, 0xff) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}}, 0x4000) ftruncate(r0, 0x801) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "6538c2f99fa0932f", "e5e206864d41b6b21e1b09296f2b9800", "9d6688a8", "43c16f98ae16df48"}, 0x28) 17.064173847s ago: executing program 5 (id=6293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x9}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x20f25bcc}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000005c0)=[{{0x3, 0x1, 0x1}, {0x3}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}], 0x10) bind$can_raw(r1, &(0x7f00000001c0), 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e22, @private=0xac14140a}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xf, 0x1, 'netdevsim0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500200000040630701204000010203010902600003010080020904000000010100000a240100000a0002010209040100000102000009040101010102000009050109100007fb000725010c800500090442000001020000090402010101020000090582092004067f0707250104d70200"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) 7.223718665s ago: executing program 0 (id=6269): setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x6, @multicast1, 0x4e20, 0x8000001, 'wlc\x00', 0x23, 0x400, 0x15}, 0x2c) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) (fail_nth: 1) 6.668127108s ago: executing program 0 (id=6323): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x101042, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '#! '}, {0x20, ':)@'}, {0x20, '-%}'}, {}, {0x20, '$\x00'}, {0x20, '/dev/dvb/adapter#/frontend#\x00'}]}, 0x38) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) r2 = eventfd(0x401) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ftruncate(r5, 0x6) socket(0x11, 0x800000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000740), 0x1ff, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80047601, &(0x7f0000010380)) write$eventfd(r2, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) read$eventfd(r2, &(0x7f00000012c0), 0x8) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x3, 0x59565955, 0x0, 0x4, 0x10001, 0xb, 0xfeedcafe, 0x0, 0x1, 0x0, 0x5}}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r8, 0x0) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r9, 0x800c6f40, &(0x7f0000000040)={""/4, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000003100)=ANY=[@ANYRES16], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.615630557s ago: executing program 0 (id=6328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="16a0469ad090b59068bd2a0ecae601d07e854a1670f53a2400f4ec84d17d59bcbf5591a9c0e043f60c7855dc4785da610e580ba382fc5cb46353f54dc648e6702802da0fcb29f7b7b193cdf88429eec7163cf0c23246c55e15325367cd05f0d444fd1aaef6fba9c636dc598d68ecc690294b7028522197ffe042d4dd", 0x7c}, {&(0x7f0000000400)="211e98619f964b4094", 0x9}], 0x2, 0x0, 0x0, 0x20000}], 0x1, 0x8881) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2bcce712259784404032342b8a7ea09fc761b7df460e06cc23fea28d230e0084b8680d713b7d36bb12e739c21adf8e6919af964f311038f59cf6d942bc3d395b271ee52872ee11d024a713993af78bba236bb151833d1bc471e003c058dc4629fc0534c1ab071ca7ab537b6fef75de9f29266262293766e24ae6fdc8a65cca05b26bf83cacf2872fcb9ef02096b3faff10ea10aafe7ac016b1baae91a1b15ad488387dd73dd88a2afd9d", @ANYRES16=r4, @ANYBLOB="00022bbd7000fddbdf25010000000000000008410000004c001800000009696200"/98], 0x68}}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0xfffffff0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000014c0)={0x2020, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@nested={0x200c, 0x104, 0x0, 0x1, [@generic="d98465ef9cefe299", @generic="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", @generic="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"]}]}, 0x2020}, 0x1, 0x0, 0x0, 0x42804}, 0x24000004) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @multicast1}, {0x1}, 0x28, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x46}}, 'syzkaller0\x00'}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x406, r8) read$FUSE(r9, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r9, &(0x7f0000000400)=ANY=[], 0xa2) write$snddsp(r9, &(0x7f00000002c0)="a5484e0286e9da1bf37a65d869e5c233912ba18bb371200d878dfb3c14f50602a4577127b47e4ae01219fc07e67593d6c3c13237456a0b3c718879ead21b2997631e071d536248aaa749d6bc4eaf60ca266f871f2167afbf077d5d3124303f14422fead00e7429967d2c", 0x6a) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000340)=0x3) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000000c0)={0x4, r7}) getsockname$packet(r9, &(0x7f0000000880), &(0x7f00000008c0)=0x14) sendmsg$inet(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)="36753945343b339811003d6acdd88e58df99394b336fc84d567cd6a52fd3b87a36b47bfbbd15fcf21d37d1ae1057bcd5bcfdcaf0cf0844119de0e1adf22f625562d43d120db250673dd1169c69d831a2f81de8635af38e98735c4db86805a3ce552f8dc1c242e82143ec143336f89221f940daff95346414a09aac86242afdb35e5326ad3eea0c5d4bad61580e1c007fff959532678b2df865a2817bb377c32adc55afa4c5854c2f28a9ac31b40f357ce1c26a892a1c7504cef8fa9b69a6bdc51607c0f4cd94448ed0e2e0ce19cc236a50db1133", 0xd4}, {&(0x7f0000000540)="63f213525aa2ec47ad7b46964258774026e7155bc982b3529f7cbb20cb16e3f6a033c07f4deb127731978372e266124f8be57f2154383638182670", 0x3b}, {&(0x7f0000000580)="fca4698d1ef1b5981de1ca1586473e0cefed0cd87b6b435eededa1544def13f8c1840df9a8a149cc409a71ba46b925b22bc15ea5186f83", 0x37}, {&(0x7f00000005c0)="a2a8c9a6e30dd1f42229c0523b269054ad297668b5b2406cf0f3f155b81520df9a4e4393e5f0e9b4084c018698a7ce8af8197d06aaca4504724317ec6a4f2bcd74eb4d80b7c7339fa363926a952808d4384351ba82d7e8703294ddf13f56ab9209746179a193d2fcbf875086fb1564511b33146bd52f736a778bb8d3158ee40c952ffc", 0x83}, {&(0x7f0000000680)="f935cf424202ee55a7c85f7e45e114d868596217715e336cbce84f93f0d96c0519aa776b5221973b0b2d3c7198e5b72e35ea14f4960929f435e8338046e43d08d6996eac4c2ee05bb694693c57b0f6c767e7757701478733c4464af5f33acfce9d9167fd1b07d26beefb4939afb2acb581e7ef045080b5af23a9d0cded002dcbf3cceffd6567", 0x86}, {&(0x7f0000000740)="1db917e10fda1e416a0623662b1f13b5e8344663c29b247b8ec36dca96848bce9a154fca3e51fbecdcd13f1eaf96ef64a346f5e46dd5b20f57a15325c5de99b1803049295f8d69189adc757a2ed46e59aacd562bb514756681e48fe2965945f979e83802223be37bf43fab9c84bcf4a7854a5b0d14000993880b12383ef7408b986ae856aa08de9257807da49a110b5526c7f51477499f0560bf0599ec11aa2fe7c5a443949ff25249d3211883d5a670870effdc2110d3a439b80dee3173cfb1faff", 0xc2}], 0x6, &(0x7f0000000900)}, 0x4) 4.408572015s ago: executing program 4 (id=6330): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000006050001000700000009000200c1ddb9ac7cdb8b4e662a5b449c74e373797a300000f00014e4080006000000000008001340000000000500050002000000050004000400000011000300686173683a69702c706f72740000000000008ff16cafc6621847546de570f29d5529b1f1c6ee82ad5822c795793f2fc15c4dfa"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x84) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000008b000000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195}, 0x23) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="20071a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.866102136s ago: executing program 1 (id=6332): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000002980)={0x2020}, 0x2020) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x20040801) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000900)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0x4, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x18, '\x00', 0x6}, {0x8, 0x7b, 0x6, '\x00', 0x79}, {0x7, 0x0, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x0, '\x00', 0x45}, {0x50, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x7, '\x00', 0x80}, {0x6, 0x8, 0x7, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0xf, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf9, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x4, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xfa}, {0x8, 0x1, 0x3, '\x00', 0xf7}, {0x4, 0xe, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x17}, {0xf7, 0x89, 0x4}]}}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmmsg$unix(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000200)=""/18, 0x12}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2}}], 0x1, 0x41, 0x0) sendmsg$key(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x2, 0x6, 0x1, 0x7, 0x43, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1d, 0x18, 0x4, 0x21, 0xdc, "fd0a6efe47baad86d902086bdf0c7dc9673df5c88035d6f90a07d209c136affff757800c6847944ad866100b36677ab8b66e8c8b26c6cbca4e9e718582a8582595c819652a3085a6f11b72726a064d70c57620f1f2f32d0234ac404201dde8a358fc8b08f5ff52485b2d5500e58eae73617a17bb59de097b7262c54decbef8847d6e69d8ba318f8f4d4cb6d3494ca1905480b672faf4063f53cb36f5ea60bc920a0bacad573891b1a3d9eea4ba610740bdea38daae27c90ffa23d9a6a253ef287917705fb962d543874a32b495451115f0a22732ea14a28caf4caf61"}, @sadb_key={0x16, 0x9, 0x518, 0x0, "28cafa0c188f58d3b96723321f2d8851571b6dc4302138486a6e6857760d99ed1f1f51465845598c44d61d696ec64498c1bc258ec4ffedc790f27b29a0af2d6d0c41fa2cf9f69f07d7a8b7fec7da0cd639a264f7e376dd540ea79b9d15c3fab1930931e92be1d5f89234c93a62d1d2cb8c910788ff91120d5c9753aa4b3593ffe9266980dceedad0ec66d881af3429a990be6f0f83567a71b90ba3e4f4a99e567d2965"}, @sadb_x_sa2={0x2, 0x13, 0xd5, 0x0, 0x0, 0x70bd2d, 0x3501}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb1, 0x7, {0x6, 0x3c, 0x9, 0xd7, 0x0, 0xf6, 0x0, @in=@local, @in=@local}}, @sadb_ident={0x2, 0xa, 0x5, 0x0, 0x3b}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd26, 0x3507}]}, 0x218}}, 0x4008000) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 3.607327526s ago: executing program 2 (id=6333): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x9, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x2f, 0x520ea3af}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x11, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000540)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf250000000000000000000000000000000164010102000000000000000000070000000080a000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00`', @ANYRES8=r4, @ANYRESHEX=r4], 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x130, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_VF_PORTS={0x108, 0x18, 0x0, 0x1, [{0x4}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0xc, 0x2, 'batadv0\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a2f8880d5a2c291d00b1e639c87e83a3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5d7acc7210af4d4748db7f935e081304"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x80000001}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2eb904afd6abd136aa2f3cbe01d3c0a6"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '\\.\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x40}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "423c90dcc63fcacd5ed4187ed50ff2f8"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "964c036f93a9c7e502992a319f5848cc"}, @IFLA_PORT_PROFILE={0x11, 0x2, 'h\xc8^!\x11+@.^[%}\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6b72a17ea89aee20dce972262e4a3978"}, @IFLA_PORT_PROFILE={0xa, 0x2, '.,-@.\x00'}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.854221182s ago: executing program 0 (id=6334): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) 2.734601435s ago: executing program 1 (id=6335): capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x9, 0x2, 0x6, 0x3, 0xfff77ffd}) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xb5\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7X>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf', 0x3) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) r1 = socket$inet6(0xa, 0x1, 0xffffffff) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x8}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x59f9, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0x2c982) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xf, 0x1, 'netdevsim0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500200000040630701204000010203010902600003010080020904000000010100000a240100000a0002010209040100000102000009040101010102000009050109100007fb000725010c800500090442000001020000090402010101020000090582092004067f0707250104d70200"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) 2.416432033s ago: executing program 2 (id=6337): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48e1, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000500", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r4}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000000000001d124c110c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r8}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x14, 0x80, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 2.145052193s ago: executing program 2 (id=6338): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x9, 0xa]}}) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x300, 0x1, 0x8, r0, &(0x7f00000004c0)="e4", 0x1, 0x5, 0x0, 0x2}]) 1.950610962s ago: executing program 4 (id=6339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) (fail_nth: 10) 1.639890633s ago: executing program 4 (id=6340): socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073"], 0x20}}, 0x4000800) connect$vsock_stream(r0, 0x0, 0x0) (async) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYBLOB="dc07c72ab162d61478b5cc2fb3e9c6f34a7a201de74c6290ea7035fc2746eb5fb4dcea8d19d3bb29ade356de85c55f9f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.347204902s ago: executing program 1 (id=6341): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc01c5868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='(\x00', 0x323a80, &(0x7f0000000040)={@align, {0x3, 0x200, 0x200, 0xfbc}}, 0x8000, &(0x7f0000000080), &(0x7f00000000c0)=0x29}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x1, 0x1, 0x3, 0x9}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xfd70}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) landlock_restrict_self(0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) userfaultfd(0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x4000000000, 0x800, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="a0", 0x1}], 0x1}}], 0x1, 0x24004cd1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r7}}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001980)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r10, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1e4b7aa0cecd4e9368cf0526388079bc72c3ec7855b90e525a39e39ee0c2ed95d2a30800781d78bfe41c6b86ce6d", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf251c00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40090) 1.291708298s ago: executing program 4 (id=6342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61"], 0x4c}}, 0x0) 1.249888444s ago: executing program 2 (id=6343): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_usb_connect$uac3(0x1, 0x97, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040e5130100400801020301090285000301018009080bfffd012430040904000000010130000a2401060a001000000009f401000001023000090401010101023000172401b00900000000000210000000000000080404000009050109ff030610000a25250000000007599f0904020000010230000904020101010230000905820908000805010a2525fc660000060200"], 0x0) (async) r2 = syz_usb_connect$uac3(0x1, 0x97, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040e5130100400801020301090285000301018009080bfffd012430040904000000010130000a2401060a001000000009f401000001023000090401010101023000172401b00900000000000210000000000000080404000009050109ff030610000a25250000000007599f0904020000010230000904020101010230000905820908000805010a2525fc660000060200"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e22, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c2) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b0c28bd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="0000000000620000200012800b00010065727370616e00001000028004001200067588c63f7f8100"], 0x40}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) r8 = openat$cgroup_int(r5, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = open$dir(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2000, 0xe8) getdents64(r10, &(0x7f0000000200)=""/150, 0x96) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000eb180f00ffff279c7000e3dbdf2500eeff00", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x14044080}, 0x48000) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x27) (async) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x27) dup(r4) (async) r11 = dup(r4) close(r6) write$UHID_INPUT(r11, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) (async) write$UHID_INPUT(r11, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 992.689173ms ago: executing program 4 (id=6344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000280), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000004c0)={0x4, 0x1, 0x8, "fc788b50d8e2ecf973392381e1f620dfe64b628f3301d7a896e6ad92fc6fc4ea", 0x38415262}) io_submit(r6, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0x41}]) write$sndseq(r5, &(0x7f00000003c0)=[{0x10, 0x6, 0xf2, 0x8, @time={0x39, 0x7}, {0x9, 0x9}, {0x6, 0x7}, @connect={{0x7, 0x4}, {0x4, 0x21}}}], 0x1c) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x24) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "6538c2f99fa0932f", "e5e206864d41b6b21e1b09296f2b9800", "9d6688a8", "43c16f98ae16df48"}, 0x28) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000007c0)={{&(0x7f0000000380)=[{0x5, 0xa2, 0x0, {0x3, 0xf61}, 0x1e0000000000, 0x5, 0x3}, {0x10000, 0x0, 0x3, {0x6e6, 0x3f61}, 0x1, 0x0, 0xe}, {0x7, 0xa20, 0x0, {0x5, 0xfff}, 0xb, 0x6, 0x7}, {0xfff, 0xf33, 0x1, {0x4ca, 0xc50}, 0x8, 0x5, 0x6}, {0x3, 0x21, 0x80000001, {0x4, 0x8000000000000001}, 0x4, 0x81, 0xfffffffc}, {0x7, 0xf178, 0x9, {0x800, 0x9}, 0x2, 0x8, 0x1000}, {0x7fffffffffffffff, 0x7, 0x9, {0x2, 0x8}, 0x22, 0x8, 0x7}, {0x2, 0x9, 0x7fff, {0xa5d, 0x8000}, 0xa14, 0x7, 0xc049}, {0xfffffffffffffffb, 0x10, 0x2086, {0x12000000, 0xb}, 0x8, 0x8, 0x7}], 0x9, 0x40, 0xff, 0x9}, {&(0x7f00000005c0)=[{0x400}, {0x5, 0x8}, {0x6, 0x7ff}, {0x4, 0x44dcee74}], 0x4, 0x10, 0x8, 0x9}, {&(0x7f0000000600)=[0x1ff, 0x1, 0x9, 0x3, 0x2], 0x5, 0x8, 0x6, 0x2}, {&(0x7f0000000640)=[{0x410, 0x4076, 0xffffffffffffff00, 0x1, 0x3}, {0xe, 0x6, 0x8, 0x4, 0xffffffff}, {0x6, 0x1, 0x77, 0x30, 0xfffffffd}, {0x7, 0xfffffffffffffffb, 0x5d, 0xe000000000000000, 0x1}, {0x6, 0x5, 0xff, 0x1, 0xf}, {0x9, 0x81, 0xfffffffffffffc01, 0x6, 0x10}, {0x6, 0x1, 0x3ff, 0x7f, 0x6}, {0x7fffffff, 0xffff, 0x9, 0x10, 0xb750}], 0x8, 0x28, 0x1, 0x10}, {&(0x7f0000000780)=[0x26], 0x1, 0x8, 0x2, 0x1530}}) 883.638005ms ago: executing program 1 (id=6345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x404c040) (fail_nth: 10) 815.356275ms ago: executing program 1 (id=6346): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) 764.569113ms ago: executing program 1 (id=6347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="7303000000008000c91000000000000000000000ff887900000104"], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x6000, 0x0, @remote, 0x9}], 0x1c) 623.966459ms ago: executing program 4 (id=6348): ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000540)={r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400faff000000000000004008001700", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="85e1223be94e60e5fbc56c7989db9185d973899ed61a24207e5855fc26bef3d6ebd4d9fec6ab1cfdf30600a3f01b829a3f6a3373318ea26c7d84d83b00a41638454e1ec597c569fff55a3b08358e33d061e9", 0x52, 0x8010, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xd}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4008000) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8fe000000009408000000001700638af0ff00000000bfa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000001000000b703000008000000850000000c00000095"], &(0x7f0000005d80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="000000000000001b908be9b9b087fd008500000086000000853e00007d000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000d0fe60ec7d47ea2922d6e4fd28532fc8cd2987b05ab96dd5ae0583dfb6bab8436ba605e1d52556a2fec0c3391b0932e2a49d27848ee2affd40080f7461abca88f2984f492f58c1f9aeaabfe4a1c6df705cb0fc1bacb304d7382627b150631337d0"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000003c0), 0x4) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r14, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r13, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x408c0) 570.78444ms ago: executing program 5 (id=6349): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x6, 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r4, 0x80404519, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0900000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000001000000000000000000000000000000000a0000000000000000000000804000000000000000000840000000800000000000000044000500ff020000000000000000000000000001000000033c000000000000000000000000000000000000000000000000000300"/173], 0xf8}}, 0x4810) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x6}}, 0x20) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fefff7ff00000000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e0800080ff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000005000110000000000000000000000ffff7f000001fc00000000000000000000000000000164010102000000000000000000000000fc0200000000000000000000000000003c00000000000000020008002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af60, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 214.527352ms ago: executing program 2 (id=6350): r0 = socket(0x11, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x2b, 0x1, 0x70bd26, 0x25dfdbff, {0x5}}, 0x14}}, 0x40010) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) 0s ago: executing program 2 (id=6351): writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)="c65fb59c9da8e48f19a6518ed4f17dc574102f889b4a4a325c7cebc58b96e0e7fc5dd4fbeda67d1d6b6d8a799e7f4b67fc880e1c8108b067f6142bc1d7d672e56c4a3790c47f0c24347b", 0x4a}], 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r3, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000000)=0x200, 0x4) r5 = syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507"], 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003020000000203d442e3edf048a85a967a6349b3eed10234bd30639f7137ec9ed01f868f4548494d04c638b59171ba18c7ce4b8c2689d4ea3e47790bd1e22c3d7958992d5d4fef87d67812d145e1db33a1851f181673b484ee4854f58bfa83aaca95a0a5bbb3da686359bc83ec2f5991e5aee55b424946398555286e715a0c8ac1e4314b2820ecc6147557518ae4d542d0b6866dd67932494ea0a5d4a12a1843d065b14db03afe5c2999c2da3fcec4ed785baded58ecd65b3c7454c65007b427745952fa67277a8bdd87f9fa6b84257043f5e6d94b6dbce574bfbb334822e839d13b7665d397db26607703b2"]}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r6, 0x4, 0x57317caed2f340aa) syz_usb_control_io$lan78xx(r5, &(0x7f0000000380)={0xc, &(0x7f00000001c0)={0x60, 0x4, 0xcd, {0xcd, 0x6, "464c556755793e3395b303597913f0870c0bdcd08d5bb8cf4f74af697d358fdb4ea708a9f88328ed98e70d1cdeefac1b98a934dfcdc374a88c3df7d9d67e7e8078938b95b3c1c6ffbf4f0d7938cb64b1f2f8dccb90cca5c0e4dd3c76c2e348554537feadf67e802f586318f761c5731fa037c1d731b8643723fdf74e6e4d72b401263cfc10dafc6618654c5d06ed3b98415e4bd954e404d4e88db021815ba452fe8194d03eb6594b090329b45576725edcf27090bb5e23a6c08996c14964fb064568565bdf2524fc2dd26a"}}, &(0x7f00000002c0)={0x0, 0x3, 0x93, @string={0x93, 0x3, "4d09b2ddfdeb44764e7b1742dd4785531dfec089da805546d10073722313d668ff474914f7806eab434abf1807abf37680e5beb04056bdd3855486b1944d99bdfdf720f24e22c52be7274f050b163555598273d459b330dbc839933421b287ea288b0a086ae4d3a783398c57dbd5f2dfdd1f8858c6d9a56a8769c0f0e5b30da935922d318c620bf2b759615572d1af770f"}}}, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x0, 0x14, 0x3a, "dac669b0130799f799641a040dd7675abea75505087f5c0efa2fdea05bcad01f2c41169565820a66f2fea2c1c590c4e7d0e262023421d39ac910"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0xee5}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x7fff}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "dc531f4d97010bba0d0c26d75fd4d45d00873ad43924dfc2549352b322eefec82dd64c98f5ee401de834d5ad71b59c"}}) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) futex(0x0, 0x85, 0x2, 0x0, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa17080045000070fffe0000f501907864010100ac1414aa03019078032100004500ffff0000000003010000ac1414bbac14143782090658633d10b5234408480000000005442cee73e000000100000003e00000017fffffffe0000001000000054a0101020000ffff0000000000000001000000fb8b555ef2530afed88fe977357031f89ae7d86bcbf0cf48285647a38780ba76901c1df26563f4247d6c524e34d7e3476e02a6882690d357e436761a4c3a6d0e9f4b0098ace8c1a747c055e5daacab259ce3ec76579b7a4cf9f88ff52232f0750a739ec807021dac454b167d48a570f67dc7f5c0bef09db9b23ef6c1890dc2c0771eef766bf9c16f7db47879c5f15e68686bd87ffbc1b9f35376d9e3abafe83b3e"], 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): pid=23067 comm="syz.1.6142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 953.288162][ T29] audit: type=1326 audit(1783504354.204:10922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23067 comm="syz.1.6142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 953.900320][T15050] usb 2-1: USB disconnect, device number 68 [ 954.352220][T15050] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 954.532176][T15050] usb 5-1: Using ep0 maxpacket: 32 [ 954.544136][T15050] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.559072][T15050] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 954.577556][T15050] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 954.629571][T15050] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 954.656880][T15050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.675020][T15050] usb 5-1: Product: syz [ 954.686594][T15050] usb 5-1: Manufacturer: Э [ 954.704516][T15050] usb 5-1: SerialNumber: syz [ 954.934876][T23119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.952515][T23119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.979941][T23119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.054607][T23119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.204652][T23119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.226866][T23119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.299763][T15050] cdc_ncm 5-1:1.0: bind() failure [ 955.331680][T15050] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 955.340120][T15050] cdc_ncm 5-1:1.1: bind() failure [ 955.357536][T15050] usb 5-1: USB disconnect, device number 114 [ 955.701569][T11545] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 955.853780][T11545] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.900615][T11545] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.960347][T11545] usb 4-1: config 0 interface 0 has no altsetting 0 [ 955.990826][T11545] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 956.033174][T11545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.077857][T11545] usb 4-1: config 0 descriptor?? [ 956.388118][T20476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 956.403274][T20476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 956.413841][T20476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 956.432220][T20476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 956.440313][T20476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 956.560819][T11545] hid_parser_main: 110 callbacks suppressed [ 956.560846][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.587286][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.594832][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.602835][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.611044][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.618457][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.627938][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.635271][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.642626][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.650120][T11545] uclogic 0003:5543:0522.001B: unknown main item tag 0x0 [ 956.667810][T11545] uclogic 0003:5543:0522.001B: hidraw0: USB HID vff.fa Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 956.840934][T17205] usb 4-1: USB disconnect, device number 125 [ 956.868126][T23159] FAULT_INJECTION: forcing a failure. [ 956.868126][T23159] name failslab, interval 1, probability 0, space 0, times 0 [ 956.889811][T23159] CPU: 0 UID: 0 PID: 23159 Comm: syz.4.6160 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.889847][T23159] Tainted: [L]=SOFTLOCKUP [ 956.889854][T23159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 956.889867][T23159] Call Trace: [ 956.889876][T23159] [ 956.889886][T23159] dump_stack_lvl+0xe8/0x150 [ 956.889923][T23159] should_fail_ex+0x40c/0x560 [ 956.889952][T23159] should_failslab+0xa8/0x100 [ 956.889985][T23159] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 956.890009][T23159] ? local_lock_release+0x9c/0x160 [ 956.890037][T23159] ? __alloc_skb+0x1d7/0x7a0 [ 956.890060][T23159] ? __alloc_skb+0x1d7/0x7a0 [ 956.890093][T23159] __alloc_skb+0x1d7/0x7a0 [ 956.890123][T23159] netlink_ack+0x136/0xb30 [ 956.890152][T23159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 956.890178][T23159] ? ref_tracker_free+0x689/0x830 [ 956.890206][T23159] ? __pfx_ref_tracker_free+0x10/0x10 [ 956.890231][T23159] ? __asan_memcpy+0x40/0x70 [ 956.890262][T23159] netlink_rcv_skb+0x2a4/0x4a0 [ 956.890294][T23159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 956.890333][T23159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 956.890383][T23159] ? netlink_deliver_tap+0x2e/0x1b0 [ 956.890414][T23159] ? netlink_deliver_tap+0x2e/0x1b0 [ 956.890448][T23159] netlink_unicast+0x7bb/0x940 [ 956.890488][T23159] netlink_sendmsg+0x813/0xb40 [ 956.890518][T23159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.890543][T23159] ? aa_sock_msg_perm+0xf1/0x1b0 [ 956.890571][T23159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.890589][T23159] sock_sendmsg_nosec+0x13a/0x180 [ 956.890616][T23159] ____sys_sendmsg+0x54e/0x850 [ 956.890653][T23159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.890699][T23159] ___sys_sendmsg+0x2a5/0x360 [ 956.890727][T23159] ? __lock_acquire+0x683/0x2cf0 [ 956.890761][T23159] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.890790][T23159] ? get_pid_task+0x20/0x1f0 [ 956.890818][T23159] ? get_pid_task+0x20/0x1f0 [ 956.890843][T23159] ? get_pid_task+0x20/0x1f0 [ 956.890900][T23159] ? __fget_files+0x2a/0x420 [ 956.890926][T23159] ? __fget_files+0x3a2/0x420 [ 956.890963][T23159] __sys_sendmsg+0x177/0x240 [ 956.891016][T23159] ? __pfx___sys_sendmsg+0x10/0x10 [ 956.891075][T23159] __do_fast_syscall_32+0x23e/0x6f0 [ 956.891107][T23159] ? do_fast_syscall_32+0x33/0x70 [ 956.891133][T23159] ? lockdep_hardirqs_on+0x7a/0x110 [ 956.891159][T23159] ? asm_int80_emulation+0x1a/0x20 [ 956.891177][T23159] ? do_int80_emulation+0x29f/0x550 [ 956.891203][T23159] ? trace_irq_disable+0x3b/0x140 [ 956.891232][T23159] do_fast_syscall_32+0x33/0x70 [ 956.891259][T23159] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 956.891281][T23159] RIP: 0023:0xf703f0ec [ 956.891300][T23159] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 956.891325][T23159] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 956.891348][T23159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 956.891362][T23159] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 956.891374][T23159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 956.891385][T23159] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 956.891397][T23159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 956.891424][T23159] [ 957.436413][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.448911][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 957.532063][T17205] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 957.636012][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.646714][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 957.681595][T17205] usb 2-1: device descriptor read/64, error -71 [ 957.720065][T23170] syzkaller0: entered promiscuous mode [ 957.737001][T23170] syzkaller0: entered allmulticast mode [ 957.815944][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.828955][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 957.864543][T23170] tipc: Started in network mode [ 957.869675][T23170] tipc: Node identity 4a487ae4afcd, cluster identity 4711 [ 957.880251][T23170] tipc: Enabled bearer , priority 0 [ 957.921874][T17205] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 957.937841][T23169] tipc: Resetting bearer [ 957.987642][T23169] tipc: Disabling bearer [ 958.040914][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.051613][T17205] usb 2-1: device descriptor read/64, error -71 [ 958.058440][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 958.172108][T17205] usb usb2-port1: attempt power cycle [ 958.202051][T23152] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.217494][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.227649][T23152] bridge_slave_0: entered allmulticast mode [ 958.240867][T23152] bridge_slave_0: entered promiscuous mode [ 958.266392][T23152] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.283729][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.291337][T23152] bridge_slave_1: entered allmulticast mode [ 958.306229][T23152] bridge_slave_1: entered promiscuous mode [ 958.480303][T23152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.523847][T17205] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 958.533084][ T5637] Bluetooth: hci4: command tx timeout [ 958.552675][T23152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.563488][T17205] usb 2-1: device descriptor read/8, error -71 [ 958.817687][T23152] team0: Port device team_slave_0 added [ 958.834701][T17205] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 958.914129][T17205] usb 2-1: device descriptor read/8, error -71 [ 958.938061][T23152] team0: Port device team_slave_1 added [ 959.027578][ T48] bridge_slave_1: left allmulticast mode [ 959.041637][ T48] bridge_slave_1: left promiscuous mode [ 959.054176][T17205] usb usb2-port1: unable to enumerate USB device [ 959.064703][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.098773][ T48] bridge_slave_0: left allmulticast mode [ 959.105009][ T48] bridge_slave_0: left promiscuous mode [ 959.112941][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.766834][ T48] bond1 (unregistering): (slave geneve2): Releasing active interface [ 959.976274][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.007616][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.023606][T23211] FAULT_INJECTION: forcing a failure. [ 960.023606][T23211] name failslab, interval 1, probability 0, space 0, times 0 [ 960.038351][T23211] CPU: 1 UID: 0 PID: 23211 Comm: syz.1.6169 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.038379][T23211] Tainted: [L]=SOFTLOCKUP [ 960.038387][T23211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 960.038398][T23211] Call Trace: [ 960.038407][T23211] [ 960.038416][T23211] dump_stack_lvl+0xe8/0x150 [ 960.038451][T23211] should_fail_ex+0x40c/0x560 [ 960.038476][T23211] should_failslab+0xa8/0x100 [ 960.038506][T23211] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 960.038527][T23211] ? skb_clone+0x212/0x3a0 [ 960.038538][T23211] ? skb_clone+0x212/0x3a0 [ 960.038552][T23211] skb_clone+0x212/0x3a0 [ 960.038562][T23211] ? dev_queue_xmit_nit+0x25c/0xac0 [ 960.038580][T23211] dev_queue_xmit_nit+0x28d/0xac0 [ 960.038597][T23211] ? dev_queue_xmit_nit+0x2d/0xac0 [ 960.038617][T23211] dev_hard_start_xmit+0x1c1/0x830 [ 960.038644][T23211] __dev_queue_xmit+0x1435/0x37f0 [ 960.038655][T23211] ? __do_fast_syscall_32+0x23e/0x6f0 [ 960.038673][T23211] ? do_fast_syscall_32+0x33/0x70 [ 960.038695][T23211] ? __dev_queue_xmit+0x29b/0x37f0 [ 960.038712][T23211] ? __pfx___dev_queue_xmit+0x10/0x10 [ 960.038738][T23211] ? __copy_skb_header+0xa3/0x4a0 [ 960.038756][T23211] ? __asan_memcpy+0x40/0x70 [ 960.038769][T23211] ? __skb_clone+0x5c/0x6c0 [ 960.038789][T23211] ? __skb_clone+0x449/0x6c0 [ 960.038809][T23211] ? skb_clone+0x246/0x3a0 [ 960.038821][T23211] __netlink_deliver_tap+0x5b4/0x860 [ 960.038847][T23211] ? netlink_deliver_tap+0x2e/0x1b0 [ 960.038866][T23211] netlink_deliver_tap+0x19c/0x1b0 [ 960.038885][T23211] netlink_unicast+0x77f/0x940 [ 960.038908][T23211] netlink_sendmsg+0x813/0xb40 [ 960.038925][T23211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 960.038939][T23211] ? aa_sock_msg_perm+0xf1/0x1b0 [ 960.038954][T23211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 960.038965][T23211] sock_sendmsg_nosec+0x13a/0x180 [ 960.038981][T23211] ____sys_sendmsg+0x54e/0x850 [ 960.039002][T23211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 960.039028][T23211] ___sys_sendmsg+0x2a5/0x360 [ 960.039045][T23211] ? __lock_acquire+0x683/0x2cf0 [ 960.039064][T23211] ? __pfx____sys_sendmsg+0x10/0x10 [ 960.039081][T23211] ? get_pid_task+0x20/0x1f0 [ 960.039098][T23211] ? get_pid_task+0x20/0x1f0 [ 960.039112][T23211] ? get_pid_task+0x20/0x1f0 [ 960.039144][T23211] ? __fget_files+0x2a/0x420 [ 960.039159][T23211] ? __fget_files+0x3a2/0x420 [ 960.039179][T23211] __sys_sendmsg+0x177/0x240 [ 960.039198][T23211] ? __pfx___sys_sendmsg+0x10/0x10 [ 960.039229][T23211] __do_fast_syscall_32+0x23e/0x6f0 [ 960.039247][T23211] ? do_fast_syscall_32+0x33/0x70 [ 960.039263][T23211] ? lockdep_hardirqs_on+0x7a/0x110 [ 960.039278][T23211] ? asm_int80_emulation+0x1a/0x20 [ 960.039290][T23211] ? do_int80_emulation+0x29f/0x550 [ 960.039305][T23211] ? trace_irq_disable+0x3b/0x140 [ 960.039322][T23211] do_fast_syscall_32+0x33/0x70 [ 960.039339][T23211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 960.039354][T23211] RIP: 0023:0xf707f0ec [ 960.039367][T23211] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 960.039377][T23211] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 960.039392][T23211] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 960.039401][T23211] RDX: 0000000004004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 960.039408][T23211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 960.039415][T23211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 960.039423][T23211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 960.039439][T23211] [ 960.412459][ T48] bond0 (unregistering): Released all slaves [ 960.426404][ T48] bond1 (unregistering): Released all slaves [ 960.515925][T23152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.523402][T23152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.549815][T23152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.561947][T23152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.568907][T23152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.595098][T23152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.621610][ T5637] Bluetooth: hci4: command tx timeout [ 960.642079][T23152] hsr_slave_0: entered promiscuous mode [ 960.648471][T23152] hsr_slave_1: entered promiscuous mode [ 960.654702][T23152] debugfs: 'hsr0' already exists in 'hsr' [ 960.660436][T23152] Cannot create hsr debugfs directory [ 960.866061][T23214] loop5: detected capacity change from 0 to 7 [ 960.875421][ C0] blk_print_req_error: 11 callbacks suppressed [ 960.875443][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 960.890919][ C0] buffer_io_error: 11 callbacks suppressed [ 960.890937][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 960.915964][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 960.925296][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 960.934119][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 960.943359][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 960.953833][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 960.963190][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 960.972437][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 961.004066][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 961.013302][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 961.027358][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 961.036635][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 961.046054][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 961.055361][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 961.087879][T23214] ldm_validate_partition_table(): Disk read failed. [ 961.112863][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 961.122094][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 961.131242][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 961.140484][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 961.150138][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 961.181609][T23214] Dev loop5: unable to read RDB block 0 [ 961.196235][T23214] loop5: unable to read partition table [ 961.208357][T23214] loop5: partition table beyond EOD, truncated [ 961.262522][T23214] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 961.425791][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 961.799528][T17206] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 961.853656][ T48] hsr_slave_0: left promiscuous mode [ 961.862066][ T48] hsr_slave_1: left promiscuous mode [ 961.874642][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.887392][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.896084][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.903708][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.922976][ T48] veth1_macvtap: left promiscuous mode [ 961.928704][T23225] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6174'. [ 961.942627][ T48] veth0_macvtap: left promiscuous mode [ 961.972398][T17206] usb 4-1: Using ep0 maxpacket: 32 [ 961.989887][T17206] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 962.011485][T17206] usb 4-1: config 0 has no interface number 0 [ 962.031518][T17206] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 962.054666][T17206] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 962.080334][T17206] usb 4-1: config 0 interface 49 has no altsetting 0 [ 962.105823][T17206] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 962.126680][T17206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.151546][T17206] usb 4-1: Product: syz [ 962.155812][T17206] usb 4-1: Manufacturer: syz [ 962.160471][T17206] usb 4-1: SerialNumber: syz [ 962.175771][T17206] usb 4-1: config 0 descriptor?? [ 962.386011][ T48] team0 (unregistering): Port device team_slave_0 removed [ 962.401928][T15050] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 962.433460][T17206] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 962.466758][T17206] gspca_ov534_9: reg_w failed -71 [ 962.566969][T15050] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 962.581470][T15050] usb 5-1: config 0 has no interface number 0 [ 962.597093][T15050] usb 5-1: config 0 interface 12 has no altsetting 0 [ 962.614644][T15050] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 962.631517][T15050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.648891][T15050] usb 5-1: Product: syz [ 962.657379][T15050] usb 5-1: Manufacturer: syz [ 962.662361][T15050] usb 5-1: SerialNumber: syz [ 962.679968][T15050] usb 5-1: config 0 descriptor?? [ 962.685182][ T5637] Bluetooth: hci4: command tx timeout [ 962.871994][T17206] gspca_ov534_9: Unknown sensor 0000 [ 962.872097][T17206] ov534_9 4-1:0.49: probe with driver ov534_9 failed with error -22 [ 962.903682][T15050] ch341 5-1:0.12: ch341-uart converter detected [ 962.936043][T17206] usb 4-1: USB disconnect, device number 126 [ 962.969523][T15050] usb 5-1: failed to receive control message: -71 [ 963.035605][T15050] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 963.115783][T15050] usb 5-1: USB disconnect, device number 115 [ 963.157988][T15050] ch341 5-1:0.12: device disconnected [ 963.706268][T23252] netlink: 'syz.0.6180': attribute type 1 has an invalid length. [ 963.924313][T23258] FAULT_INJECTION: forcing a failure. [ 963.924313][T23258] name failslab, interval 1, probability 0, space 0, times 0 [ 963.965971][T23152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 964.004178][T23152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 964.020232][T23258] CPU: 1 UID: 0 PID: 23258 Comm: syz.4.6181 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.020268][T23258] Tainted: [L]=SOFTLOCKUP [ 964.020277][T23258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 964.020288][T23258] Call Trace: [ 964.020296][T23258] [ 964.020315][T23258] dump_stack_lvl+0xe8/0x150 [ 964.020352][T23258] should_fail_ex+0x40c/0x560 [ 964.020382][T23258] should_failslab+0xa8/0x100 [ 964.020412][T23258] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 964.020436][T23258] ? local_lock_release+0x9c/0x160 [ 964.020463][T23258] ? __alloc_skb+0x1d7/0x7a0 [ 964.020486][T23258] ? __alloc_skb+0x1d7/0x7a0 [ 964.020518][T23258] __alloc_skb+0x1d7/0x7a0 [ 964.020549][T23258] netlink_ack+0x136/0xb30 [ 964.020576][T23258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 964.020602][T23258] ? __pfx_nl80211_post_doit+0x10/0x10 [ 964.020728][T23258] ? __pfx_ref_tracker_free+0x10/0x10 [ 964.020754][T23258] ? __asan_memcpy+0x40/0x70 [ 964.020786][T23258] netlink_rcv_skb+0x2a4/0x4a0 [ 964.020816][T23258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 964.020848][T23258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 964.020895][T23258] ? down_read+0x2be/0x330 [ 964.020931][T23258] genl_rcv+0x28/0x40 [ 964.020953][T23258] netlink_unicast+0x7bb/0x940 [ 964.020995][T23258] netlink_sendmsg+0x813/0xb40 [ 964.021026][T23258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.021051][T23258] ? aa_sock_msg_perm+0xf1/0x1b0 [ 964.021079][T23258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.021098][T23258] sock_sendmsg_nosec+0x13a/0x180 [ 964.021125][T23258] ____sys_sendmsg+0x54e/0x850 [ 964.021160][T23258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 964.021209][T23258] ___sys_sendmsg+0x2a5/0x360 [ 964.021238][T23258] ? __lock_acquire+0x683/0x2cf0 [ 964.021269][T23258] ? __pfx____sys_sendmsg+0x10/0x10 [ 964.021297][T23258] ? get_pid_task+0x20/0x1f0 [ 964.021335][T23258] ? get_pid_task+0x20/0x1f0 [ 964.021360][T23258] ? get_pid_task+0x20/0x1f0 [ 964.021416][T23258] ? __fget_files+0x2a/0x420 [ 964.021441][T23258] ? __fget_files+0x3a2/0x420 [ 964.021476][T23258] __sys_sendmsg+0x177/0x240 [ 964.021507][T23258] ? __pfx___sys_sendmsg+0x10/0x10 [ 964.021558][T23258] __do_fast_syscall_32+0x23e/0x6f0 [ 964.021588][T23258] ? do_fast_syscall_32+0x33/0x70 [ 964.021615][T23258] ? lockdep_hardirqs_on+0x7a/0x110 [ 964.021641][T23258] ? asm_int80_emulation+0x1a/0x20 [ 964.021661][T23258] ? do_int80_emulation+0x29f/0x550 [ 964.021689][T23258] ? trace_irq_disable+0x3b/0x140 [ 964.021719][T23258] do_fast_syscall_32+0x33/0x70 [ 964.021748][T23258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 964.021774][T23258] RIP: 0023:0xf703f0ec [ 964.021795][T23258] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 964.021811][T23258] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 964.021833][T23258] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900 [ 964.021848][T23258] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 964.021861][T23258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 964.021873][T23258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 964.021885][T23258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 964.021917][T23258] [ 964.516005][T23265] FAULT_INJECTION: forcing a failure. [ 964.516005][T23265] name failslab, interval 1, probability 0, space 0, times 0 [ 964.597100][T23265] CPU: 0 UID: 0 PID: 23265 Comm: syz.0.6183 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.597136][T23265] Tainted: [L]=SOFTLOCKUP [ 964.597144][T23265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 964.597157][T23265] Call Trace: [ 964.597166][T23265] [ 964.597176][T23265] dump_stack_lvl+0xe8/0x150 [ 964.597214][T23265] should_fail_ex+0x40c/0x560 [ 964.597245][T23265] should_failslab+0xa8/0x100 [ 964.597277][T23265] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 964.597303][T23265] ? skb_clone+0x212/0x3a0 [ 964.597323][T23265] ? skb_clone+0x212/0x3a0 [ 964.597349][T23265] skb_clone+0x212/0x3a0 [ 964.597372][T23265] __netlink_deliver_tap+0x413/0x860 [ 964.597418][T23265] ? netlink_deliver_tap+0x2e/0x1b0 [ 964.597450][T23265] netlink_deliver_tap+0x19c/0x1b0 [ 964.597482][T23265] netlink_unicast+0x77f/0x940 [ 964.597523][T23265] netlink_sendmsg+0x813/0xb40 [ 964.597554][T23265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.597580][T23265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 964.597607][T23265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.597627][T23265] sock_sendmsg_nosec+0x13a/0x180 [ 964.597655][T23265] ____sys_sendmsg+0x54e/0x850 [ 964.597693][T23265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 964.597741][T23265] ___sys_sendmsg+0x2a5/0x360 [ 964.597770][T23265] ? __lock_acquire+0x683/0x2cf0 [ 964.597813][T23265] ? __pfx____sys_sendmsg+0x10/0x10 [ 964.597849][T23265] ? kstrtoull+0x12f/0x1d0 [ 964.597902][T23265] ? __fget_files+0x2a/0x420 [ 964.597928][T23265] ? __fget_files+0x3a2/0x420 [ 964.597966][T23265] __sys_sendmmsg+0x2de/0x4d0 [ 964.598003][T23265] ? __pfx___sys_sendmmsg+0x10/0x10 [ 964.598065][T23265] ? fput+0xa0/0xd0 [ 964.598091][T23265] ? ksys_write+0x242/0x270 [ 964.598135][T23265] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 964.598162][T23265] __do_fast_syscall_32+0x23e/0x6f0 [ 964.598193][T23265] ? do_fast_syscall_32+0x33/0x70 [ 964.598220][T23265] ? lockdep_hardirqs_on+0x7a/0x110 [ 964.598247][T23265] ? asm_int80_emulation+0x1a/0x20 [ 964.598266][T23265] ? do_int80_emulation+0x29f/0x550 [ 964.598292][T23265] ? trace_irq_disable+0x3b/0x140 [ 964.598323][T23265] do_fast_syscall_32+0x33/0x70 [ 964.598352][T23265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 964.598377][T23265] RIP: 0023:0xf7fa80ec [ 964.598395][T23265] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 964.598413][T23265] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 964.598436][T23265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 964.598450][T23265] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 964.598463][T23265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 964.598475][T23265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 964.598487][T23265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 964.598519][T23265] [ 964.950994][ T5637] Bluetooth: hci4: command tx timeout [ 964.974854][T23152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 964.988580][T23152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 965.013333][T23152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 965.025686][T23152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 965.034254][T23152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 965.060470][T23152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 965.360613][T23152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.498922][T23152] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.580098][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.587506][ T3308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.674533][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.681810][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.132500][T23152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.163795][T23242] Set syz1 is full, maxelem 65536 reached [ 966.265168][T23152] veth0_vlan: entered promiscuous mode [ 966.294069][T23152] veth1_vlan: entered promiscuous mode [ 966.439375][T23152] veth0_macvtap: entered promiscuous mode [ 966.451344][T23152] veth1_macvtap: entered promiscuous mode [ 966.476740][T23152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.514115][T23152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.553369][ T6854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.553433][ T6854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.553460][ T6854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.553482][ T6854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.561821][T17206] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 966.712702][T17206] usb 5-1: Using ep0 maxpacket: 32 [ 966.770692][T17206] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 966.770717][T17206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.786161][T17206] usb 5-1: config 0 descriptor?? [ 966.826335][T17206] hub 5-1:0.0: bad descriptor, ignoring hub [ 966.826357][T17206] hub 5-1:0.0: probe with driver hub failed with error -5 [ 966.881572][ T6770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.881644][ T6770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.133429][T17206] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 967.436773][T20476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 967.461096][T20476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 967.465728][T20476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 967.468282][T20476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 967.478516][T20476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 967.480062][T17206] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 967.481095][T17206] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 967.481156][T17206] usb 5-1: media controller created [ 967.538628][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.571026][T17206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.848330][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.011084][ T6854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.011112][ T6854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.083754][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.203776][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.558152][T23312] FAULT_INJECTION: forcing a failure. [ 968.558152][T23312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.631328][T23312] CPU: 1 UID: 0 PID: 23312 Comm: syz.1.6195 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.631363][T23312] Tainted: [L]=SOFTLOCKUP [ 968.631371][T23312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 968.631383][T23312] Call Trace: [ 968.631396][T23312] [ 968.631405][T23312] dump_stack_lvl+0xe8/0x150 [ 968.631442][T23312] should_fail_ex+0x40c/0x560 [ 968.631472][T23312] _copy_to_user+0x31/0xb0 [ 968.631502][T23312] simple_read_from_buffer+0xe1/0x170 [ 968.631536][T23312] proc_fail_nth_read+0x1bb/0x230 [ 968.631570][T23312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.631600][T23312] ? rw_verify_area+0x24a/0x4c0 [ 968.631631][T23312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.631657][T23312] vfs_read+0x213/0xa80 [ 968.631693][T23312] ? __pfx___mutex_lock+0x10/0x10 [ 968.631723][T23312] ? __pfx_vfs_read+0x10/0x10 [ 968.631763][T23312] ? __fget_files+0x2a/0x420 [ 968.631792][T23312] ? __fget_files+0x3a2/0x420 [ 968.631815][T23312] ? __fget_files+0x2a/0x420 [ 968.631849][T23312] ksys_read+0x150/0x270 [ 968.631882][T23312] ? __pfx_ksys_read+0x10/0x10 [ 968.631916][T23312] ? asm_int80_emulation+0x1a/0x20 [ 968.631942][T23312] do_int80_emulation+0x19a/0x550 [ 968.631970][T23312] ? trace_irq_disable+0x3b/0x140 [ 968.631995][T23312] ? asm_int80_emulation+0x1a/0x20 [ 968.632013][T23312] ? clear_bhb_loop+0x40/0x90 [ 968.632033][T23312] ? clear_bhb_loop+0x40/0x90 [ 968.632055][T23312] asm_int80_emulation+0x1a/0x20 [ 968.632074][T23312] RIP: 0023:0xf71b71eb [ 968.632092][T23312] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 968.632109][T23312] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 968.632131][T23312] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d5d0 [ 968.632144][T23312] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 968.632155][T23312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 968.632167][T23312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 968.632179][T23312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.632210][T23312] [ 969.481874][T17205] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 969.567539][ T5637] Bluetooth: hci0: command tx timeout [ 969.644995][T17206] az6027: usb out operation failed. (-110) [ 969.652800][T17205] usb 2-1: Using ep0 maxpacket: 32 [ 969.668535][T17206] az6027: usb out operation failed. (-32) [ 969.679174][T17205] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 969.691135][T17206] stb0899_attach: Driver disabled by Kconfig [ 969.701721][T17205] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 969.720556][T17206] az6027: no front-end attached [ 969.720556][T17206] [ 969.738068][T17205] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 969.754248][T17206] az6027: usb out operation failed. (-32) [ 969.769672][T17205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 969.779615][T17206] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 969.828401][T17205] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 969.857537][T17206] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input113 [ 969.869223][T17205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 969.945697][T17205] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 969.971971][T17206] dvb-usb: schedule remote query interval to 400 msecs. [ 970.008509][T17206] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 970.017513][T17205] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 970.126280][T17205] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 970.214934][ T35] bridge_slave_1: left allmulticast mode [ 970.222951][T17205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.231044][ T35] bridge_slave_1: left promiscuous mode [ 970.235774][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.256014][T17205] usb 2-1: config 0 descriptor?? [ 970.342586][ T35] bridge_slave_0: left allmulticast mode [ 970.362837][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.477643][T17205] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 970.508426][T15050] usb 5-1: USB disconnect, device number 116 [ 970.608896][T17205] usb 2-1: USB disconnect, device number 73 [ 970.716217][T17205] usblp0: removed [ 970.864968][T15050] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 971.121525][T17205] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 971.291570][T17205] usb 2-1: Using ep0 maxpacket: 16 [ 971.306676][T17205] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 971.331529][T17205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 971.343911][T17205] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 971.360691][T17205] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 971.380192][T17205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.394001][T17205] usb 2-1: Product: syz [ 971.401242][T17205] usb 2-1: Manufacturer: syz [ 971.410813][T17205] usb 2-1: SerialNumber: syz [ 971.426973][T17205] usb 2-1: config 0 descriptor?? [ 971.442711][T17205] port100 2-1:0.0: NFC: Could not get supported command types [ 971.473992][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.497189][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.507227][ T35] bond0 (unregistering): Released all slaves [ 971.566693][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 971.644748][ T5637] Bluetooth: hci0: command tx timeout [ 971.708773][ T5702] usb 2-1: USB disconnect, device number 74 [ 971.754493][T23302] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.763154][T23302] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.770551][T23302] bridge_slave_0: entered allmulticast mode [ 971.780247][T23302] bridge_slave_0: entered promiscuous mode [ 971.788745][ T35] tipc: Left network mode [ 971.789785][T23302] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.800670][T23302] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.809459][T23302] bridge_slave_1: entered allmulticast mode [ 971.817999][T23302] bridge_slave_1: entered promiscuous mode [ 971.873431][T23302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.924143][T23302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.961625][ T11] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 972.038537][T23302] team0: Port device team_slave_0 added [ 972.097620][T23302] team0: Port device team_slave_1 added [ 972.121383][ T35] hsr_slave_0: left promiscuous mode [ 972.138368][ T35] hsr_slave_1: left promiscuous mode [ 972.151815][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 972.160407][ T11] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 972.162561][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.178878][ T11] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 972.188852][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.196217][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 972.208657][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.218233][ T11] usb 3-1: config 1 has no interface number 0 [ 972.224988][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.246851][ T11] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.288637][ T35] veth1_macvtap: left promiscuous mode [ 972.290047][ T11] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 972.301555][ T35] veth0_macvtap: left promiscuous mode [ 972.331857][ T35] veth1_vlan: left promiscuous mode [ 972.337259][ T35] veth0_vlan: left promiscuous mode [ 972.338792][ T11] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 972.376620][ T11] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 972.394644][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.433888][ T11] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 972.519783][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 972.519803][ T29] audit: type=1326 audit(1783504374.584:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 972.586868][ T29] audit: type=1326 audit(1783504374.624:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 972.622629][ T29] audit: type=1326 audit(1783504374.694:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 972.701271][T23363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.727983][T23363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.761795][ T5688] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 972.770678][ T29] audit: type=1326 audit(1783504374.814:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 972.822910][ T11] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 972.833870][ T11] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 972.840767][ T29] audit: type=1326 audit(1783504374.814:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 972.841868][ T11] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 972.916055][ T29] audit: type=1326 audit(1783504374.944:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 972.978247][ T29] audit: type=1326 audit(1783504374.974:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 973.015046][ T5688] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.060799][ T5688] usb 5-1: config 0 has no interfaces? [ 973.081081][ T5688] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 973.098904][ T11] usb 3-1: USB disconnect, device number 123 [ 973.104049][ T29] audit: type=1326 audit(1783504374.974:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 973.122680][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.194010][ T5688] usb 5-1: config 0 descriptor?? [ 973.306670][ T29] audit: type=1326 audit(1783504374.984:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 973.333503][ T29] audit: type=1326 audit(1783504374.984:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.6204" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 973.524773][ T35] team0 (unregistering): Port device team_slave_1 removed [ 973.553046][ T35] team0 (unregistering): Port device team_slave_0 removed [ 973.721564][ T5637] Bluetooth: hci0: command tx timeout [ 973.841465][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 973.885315][T23366] bridge0: port 3(vxlan0) entered blocking state [ 973.892819][T23366] bridge0: port 3(vxlan0) entered disabled state [ 973.904853][T23366] vxlan0: entered allmulticast mode [ 973.921952][T23366] vxlan0: entered promiscuous mode [ 974.019359][T23302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.090184][T23302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.178679][T23302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.205018][T23302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.212166][T23302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.238753][T23302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.509282][T23302] hsr_slave_0: entered promiscuous mode [ 974.538177][T23302] hsr_slave_1: entered promiscuous mode [ 974.581212][T23302] debugfs: 'hsr0' already exists in 'hsr' [ 974.595950][T23302] Cannot create hsr debugfs directory [ 975.079490][T15050] usb 5-1: USB disconnect, device number 117 [ 975.162454][T23402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6207'. [ 975.546560][T23416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6212'. [ 975.648700][T23416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6212'. [ 975.770320][T17205] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 975.801923][ T5637] Bluetooth: hci0: command tx timeout [ 975.967344][T17205] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 975.980451][T17205] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 975.990641][T17205] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 976.035049][T17205] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 976.110890][T17205] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 976.125397][T23432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6213'. [ 976.167030][T17205] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 976.217680][T17205] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 976.235318][T17205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.238251][T23435] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.256644][T23432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6213'. [ 976.272982][T17205] usb 3-1: Product: syz [ 976.294879][T17205] usb 3-1: Manufacturer: syz [ 976.303883][T23435] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 976.330782][T17205] usb 3-1: SerialNumber: syz [ 976.366972][T17205] usb 3-1: ucan: probing device on interface #0 [ 976.386906][T17205] usb 3-1: ucan: invalid endpoint configuration [ 976.401627][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 976.410264][T17205] usb 3-1: ucan: probe failed; try to update the device firmware [ 976.589832][T23412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6211'. [ 976.618865][T23438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6215'. [ 976.666239][T17209] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 976.700534][T23302] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 976.728902][T17205] usb 3-1: USB disconnect, device number 124 [ 976.812146][T23302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 976.837624][T23302] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 976.861769][T17209] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 976.883279][T17209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.923902][T17209] usb 2-1: config 0 has no interfaces? [ 976.939535][T23302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.968618][T17209] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 976.992174][T23302] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 977.018086][T17209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.053691][T23302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 977.090152][T23302] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 977.090778][T17209] usb 2-1: config 0 descriptor?? [ 977.169787][T23302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 977.314287][T23453] Invalid argument reading file caps for ./file0 [ 977.467081][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6217'. [ 977.598313][T23456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6217'. [ 978.230511][T23453] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 978.292742][T23466] FAULT_INJECTION: forcing a failure. [ 978.292742][T23466] name failslab, interval 1, probability 0, space 0, times 0 [ 978.330910][T17205] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 978.371685][T23466] CPU: 1 UID: 0 PID: 23466 Comm: syz.4.6219 Tainted: G L syzkaller #0 PREEMPT(full) [ 978.371708][T23466] Tainted: [L]=SOFTLOCKUP [ 978.371713][T23466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 978.371721][T23466] Call Trace: [ 978.371726][T23466] [ 978.371732][T23466] dump_stack_lvl+0xe8/0x150 [ 978.371757][T23466] should_fail_ex+0x40c/0x560 [ 978.371774][T23466] should_failslab+0xa8/0x100 [ 978.371794][T23466] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 978.371808][T23466] ? local_lock_release+0x9c/0x160 [ 978.371825][T23466] ? __alloc_skb+0x1d7/0x7a0 [ 978.371839][T23466] ? __alloc_skb+0x1d7/0x7a0 [ 978.371858][T23466] __alloc_skb+0x1d7/0x7a0 [ 978.371876][T23466] netlink_ack+0x136/0xb30 [ 978.371893][T23466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 978.371909][T23466] ? ref_tracker_free+0x689/0x830 [ 978.371925][T23466] ? __pfx_ref_tracker_free+0x10/0x10 [ 978.371939][T23466] ? __asan_memcpy+0x40/0x70 [ 978.371957][T23466] netlink_rcv_skb+0x2a4/0x4a0 [ 978.371975][T23466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 978.371992][T23466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 978.372020][T23466] ? netlink_deliver_tap+0x2e/0x1b0 [ 978.372038][T23466] ? netlink_deliver_tap+0x2e/0x1b0 [ 978.372061][T23466] netlink_unicast+0x7bb/0x940 [ 978.372084][T23466] netlink_sendmsg+0x813/0xb40 [ 978.372100][T23466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.372114][T23466] ? aa_sock_msg_perm+0xf1/0x1b0 [ 978.372129][T23466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.372140][T23466] sock_sendmsg_nosec+0x13a/0x180 [ 978.372156][T23466] ____sys_sendmsg+0x54e/0x850 [ 978.372177][T23466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 978.372203][T23466] ___sys_sendmsg+0x2a5/0x360 [ 978.372220][T23466] ? __lock_acquire+0x683/0x2cf0 [ 978.372240][T23466] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.372257][T23466] ? get_pid_task+0x20/0x1f0 [ 978.372273][T23466] ? get_pid_task+0x20/0x1f0 [ 978.372288][T23466] ? get_pid_task+0x20/0x1f0 [ 978.372319][T23466] ? __fget_files+0x2a/0x420 [ 978.372334][T23466] ? __fget_files+0x3a2/0x420 [ 978.372354][T23466] __sys_sendmsg+0x177/0x240 [ 978.372373][T23466] ? __pfx___sys_sendmsg+0x10/0x10 [ 978.372400][T23466] __do_fast_syscall_32+0x23e/0x6f0 [ 978.372418][T23466] ? do_fast_syscall_32+0x33/0x70 [ 978.372433][T23466] ? lockdep_hardirqs_on+0x7a/0x110 [ 978.372449][T23466] ? asm_int80_emulation+0x1a/0x20 [ 978.372460][T23466] ? do_int80_emulation+0x29f/0x550 [ 978.372476][T23466] ? trace_irq_disable+0x3b/0x140 [ 978.372493][T23466] do_fast_syscall_32+0x33/0x70 [ 978.372517][T23466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 978.372532][T23466] RIP: 0023:0xf703f0ec [ 978.372545][T23466] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 978.372555][T23466] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 978.372570][T23466] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 978.372579][T23466] RDX: 0000000004004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 978.372586][T23466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 978.372593][T23466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 978.372601][T23466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 978.372617][T23466] [ 978.713829][T23302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.735085][T23302] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.767409][T23302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 978.777806][T23302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 978.802771][T23302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.813686][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.820865][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.900504][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.907655][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.015018][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 979.114428][T23302] veth0_vlan: entered promiscuous mode [ 979.250162][T23302] veth1_vlan: entered promiscuous mode [ 979.413656][T23302] veth0_macvtap: entered promiscuous mode [ 979.462842][T23302] veth1_macvtap: entered promiscuous mode [ 979.588449][T23302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.645318][T23302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.718572][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.745396][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.775770][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.817497][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.889779][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 980.227657][ T11] usb 2-1: USB disconnect, device number 75 [ 980.233443][ T9836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.269339][ T9836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.368972][ T394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.399902][ T394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.470999][T23492] geneve2: entered promiscuous mode [ 980.485346][T23492] geneve2: entered allmulticast mode [ 980.867490][T23509] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6229'. [ 980.957427][T23505] syzkaller0: entered promiscuous mode [ 981.009855][T23505] syzkaller0: entered allmulticast mode [ 982.082716][T23530] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6235'. [ 982.603942][T23539] FAULT_INJECTION: forcing a failure. [ 982.603942][T23539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.722259][T23539] CPU: 0 UID: 0 PID: 23539 Comm: syz.4.6236 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.722290][T23539] Tainted: [L]=SOFTLOCKUP [ 982.722298][T23539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 982.722310][T23539] Call Trace: [ 982.722318][T23539] [ 982.722329][T23539] dump_stack_lvl+0xe8/0x150 [ 982.722371][T23539] should_fail_ex+0x40c/0x560 [ 982.722400][T23539] _copy_to_user+0x31/0xb0 [ 982.722431][T23539] simple_read_from_buffer+0xe1/0x170 [ 982.722463][T23539] proc_fail_nth_read+0x1bb/0x230 [ 982.722495][T23539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 982.722540][T23539] ? rw_verify_area+0x24a/0x4c0 [ 982.722573][T23539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 982.722600][T23539] vfs_read+0x213/0xa80 [ 982.722636][T23539] ? __pfx___mutex_lock+0x10/0x10 [ 982.722666][T23539] ? __pfx_vfs_read+0x10/0x10 [ 982.722699][T23539] ? __fget_files+0x2a/0x420 [ 982.722731][T23539] ? __fget_files+0x3a2/0x420 [ 982.722757][T23539] ? __fget_files+0x2a/0x420 [ 982.722793][T23539] ksys_read+0x150/0x270 [ 982.722826][T23539] ? __pfx_ksys_read+0x10/0x10 [ 982.722862][T23539] ? asm_int80_emulation+0x1a/0x20 [ 982.722889][T23539] do_int80_emulation+0x19a/0x550 [ 982.722918][T23539] ? trace_irq_disable+0x3b/0x140 [ 982.722942][T23539] ? asm_int80_emulation+0x1a/0x20 [ 982.722959][T23539] ? clear_bhb_loop+0x40/0x90 [ 982.722973][T23539] ? clear_bhb_loop+0x40/0x90 [ 982.722987][T23539] asm_int80_emulation+0x1a/0x20 [ 982.723000][T23539] RIP: 0023:0xf71771eb [ 982.723015][T23539] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 982.723025][T23539] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 982.723040][T23539] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f542d5d0 [ 982.723049][T23539] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 982.723056][T23539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 982.723063][T23539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 982.723070][T23539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 982.723088][T23539] [ 983.268300][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6239'. [ 983.317094][T23547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6240'. [ 983.329261][T23548] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6239'. [ 983.337624][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 983.337644][ T29] audit: type=1326 audit(1783504385.404:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.0.6238" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa80ec code=0x0 [ 983.383582][T23548] 0·: renamed from hsr0 (while UP) [ 983.457154][T23548] 0·: entered allmulticast mode [ 983.477202][T23548] hsr_slave_0: entered allmulticast mode [ 983.498060][T23548] hsr_slave_1: entered allmulticast mode [ 983.518439][T23548] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 983.702770][T23558] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6244'. [ 983.861181][T23564] FAULT_INJECTION: forcing a failure. [ 983.861181][T23564] name failslab, interval 1, probability 0, space 0, times 0 [ 983.876400][T23564] CPU: 0 UID: 0 PID: 23564 Comm: syz.4.6245 Tainted: G L syzkaller #0 PREEMPT(full) [ 983.876435][T23564] Tainted: [L]=SOFTLOCKUP [ 983.876445][T23564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 983.876458][T23564] Call Trace: [ 983.876467][T23564] [ 983.876477][T23564] dump_stack_lvl+0xe8/0x150 [ 983.876516][T23564] should_fail_ex+0x40c/0x560 [ 983.876546][T23564] should_failslab+0xa8/0x100 [ 983.876579][T23564] __kmalloc_cache_noprof+0xa8/0x660 [ 983.876610][T23564] ? nsim_fib_event_nb+0x185/0x11d0 [ 983.876731][T23564] ? nsim_fib_event_nb+0x185/0x11d0 [ 983.876762][T23564] nsim_fib_event_nb+0x185/0x11d0 [ 983.876789][T23564] ? atomic_notifier_call_chain+0x26/0x180 [ 983.876814][T23564] ? lock_acquire+0x106/0x350 [ 983.876847][T23564] notifier_call_chain+0x1a5/0x3d0 [ 983.876879][T23564] ? atomic_notifier_call_chain+0x26/0x180 [ 983.876908][T23564] atomic_notifier_call_chain+0xda/0x180 [ 983.876937][T23564] call_fib_notifiers+0x31/0x60 [ 983.877012][T23564] fib6_del+0x1009/0x15f0 [ 983.877066][T23564] ? fib6_del+0x661/0x15f0 [ 983.877108][T23564] ? __pfx_fib6_del+0x10/0x10 [ 983.877145][T23564] ? fib6_ifdown+0x112/0x4c0 [ 983.877194][T23564] fib6_clean_node+0x295/0x580 [ 983.877218][T23564] ? kernel_text_address+0xa5/0xe0 [ 983.877253][T23564] ? __pfx_fib6_clean_node+0x10/0x10 [ 983.877293][T23564] fib6_walk_continue+0x688/0x8e0 [ 983.877341][T23564] __fib6_clean_all+0x34c/0x580 [ 983.877368][T23564] ? __fib6_clean_all+0xac/0x580 [ 983.877392][T23564] ? __pfx_fib6_ifdown+0x10/0x10 [ 983.877418][T23564] ? __pfx___fib6_clean_all+0x10/0x10 [ 983.877447][T23564] ? __pfx_fib6_clean_node+0x10/0x10 [ 983.877471][T23564] ? __pfx_fib6_ifdown+0x10/0x10 [ 983.877505][T23564] ? __mutex_trylock_common+0x15f/0x270 [ 983.877530][T23564] rt6_disable_ip+0x128/0x740 [ 983.877559][T23564] ? rcu_is_watching+0x15/0xb0 [ 983.877592][T23564] ? trace_contention_end+0x3d/0x140 [ 983.877622][T23564] ? __pfx_rt6_disable_ip+0x10/0x10 [ 983.877666][T23564] addrconf_ifdown+0x155/0x1a30 [ 983.877689][T23564] ? __mutex_unlock_slowpath+0x731/0x900 [ 983.877723][T23564] ? net_generic+0x1e/0x240 [ 983.877816][T23564] ? __pfx_addrconf_ifdown+0x10/0x10 [ 983.877841][T23564] ? net_generic+0x1e/0x240 [ 983.877883][T23564] addrconf_notify+0x1bc/0x1050 [ 983.877916][T23564] notifier_call_chain+0x1a5/0x3d0 [ 983.877954][T23564] netif_set_mtu_ext+0x5ac/0x830 [ 983.877991][T23564] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 983.878037][T23564] ? nla_strscpy+0x10f/0x170 [ 983.878069][T23564] do_setlink+0xa81/0x4670 [ 983.878099][T23564] ? unwind_get_return_address+0x4d/0x90 [ 983.878148][T23564] ? __pfx_do_setlink+0x10/0x10 [ 983.878178][T23564] ? __lock_acquire+0x683/0x2cf0 [ 983.878210][T23564] ? stack_depot_save_flags+0x33/0x800 [ 983.878242][T23564] ? kasan_save_track+0x4f/0x80 [ 983.878267][T23564] ? kasan_save_track+0x3e/0x80 [ 983.878291][T23564] ? __kasan_kmalloc+0x93/0xb0 [ 983.878325][T23564] ? __kmalloc_cache_noprof+0x32d/0x660 [ 983.878363][T23564] ? __mutex_trylock_common+0x15f/0x270 [ 983.878388][T23564] ? __pfx___mutex_trylock_common+0x10/0x10 [ 983.878413][T23564] ? rcu_is_watching+0x15/0xb0 [ 983.878443][T23564] ? trace_contention_end+0x3d/0x140 [ 983.878466][T23564] ? __mutex_lock+0x30d/0x1550 [ 983.878507][T23564] ? rtnl_newlink+0x8a3/0x1bd0 [ 983.878537][T23564] ? __pfx___mutex_lock+0x10/0x10 [ 983.878576][T23564] ? full_name_hash+0x92/0xe0 [ 983.878612][T23564] rtnl_newlink+0x15c2/0x1bd0 [ 983.878656][T23564] ? __pfx_rtnl_newlink+0x10/0x10 [ 983.878681][T23564] ? __do_fast_syscall_32+0x23e/0x6f0 [ 983.878753][T23564] ? kasan_quarantine_put+0xbb/0x1f0 [ 983.878778][T23564] ? lockdep_hardirqs_on+0x7a/0x110 [ 983.878810][T23564] ? nlmon_xmit+0xb0/0x100 [ 983.878835][T23564] ? kmem_cache_free+0x182/0x650 [ 983.878875][T23564] ? __lock_acquire+0x683/0x2cf0 [ 983.878908][T23564] ? __dev_queue_xmit+0x29b/0x37f0 [ 983.878933][T23564] ? __local_bh_enable_ip+0xd0/0x130 [ 983.878957][T23564] ? lockdep_hardirqs_on+0x7a/0x110 [ 983.878983][T23564] ? __dev_queue_xmit+0x29b/0x37f0 [ 983.879002][T23564] ? __local_bh_enable_ip+0xd0/0x130 [ 983.879023][T23564] ? __dev_queue_xmit+0x29b/0x37f0 [ 983.879050][T23564] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 983.879078][T23564] ? __pfx_rtnl_newlink+0x10/0x10 [ 983.879118][T23564] ? __pfx_rtnl_newlink+0x10/0x10 [ 983.879145][T23564] rtnetlink_rcv_msg+0x802/0xc00 [ 983.879177][T23564] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 983.879205][T23564] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 983.879231][T23564] ? ref_tracker_free+0x689/0x830 [ 983.879259][T23564] ? __pfx_ref_tracker_free+0x10/0x10 [ 983.879283][T23564] ? __asan_memcpy+0x40/0x70 [ 983.879305][T23564] ? __skb_clone+0x5c/0x6c0 [ 983.879352][T23564] netlink_rcv_skb+0x226/0x4a0 [ 983.879387][T23564] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 983.879417][T23564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 983.879464][T23564] ? netlink_deliver_tap+0x2e/0x1b0 [ 983.879494][T23564] ? netlink_deliver_tap+0x2e/0x1b0 [ 983.879531][T23564] netlink_unicast+0x7bb/0x940 [ 983.879573][T23564] netlink_sendmsg+0x813/0xb40 [ 983.879602][T23564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.879627][T23564] ? aa_sock_msg_perm+0xf1/0x1b0 [ 983.879656][T23564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.879675][T23564] sock_sendmsg_nosec+0x13a/0x180 [ 983.879703][T23564] ____sys_sendmsg+0x54e/0x850 [ 983.879742][T23564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.879792][T23564] ___sys_sendmsg+0x2a5/0x360 [ 983.879821][T23564] ? __lock_acquire+0x683/0x2cf0 [ 983.879854][T23564] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.879884][T23564] ? get_pid_task+0x20/0x1f0 [ 983.879912][T23564] ? get_pid_task+0x20/0x1f0 [ 983.879938][T23564] ? get_pid_task+0x20/0x1f0 [ 983.880001][T23564] ? __fget_files+0x2a/0x420 [ 983.880027][T23564] ? __fget_files+0x3a2/0x420 [ 983.880067][T23564] __sys_sendmsg+0x177/0x240 [ 983.880099][T23564] ? __pfx___sys_sendmsg+0x10/0x10 [ 983.880149][T23564] __do_fast_syscall_32+0x23e/0x6f0 [ 983.880179][T23564] ? do_fast_syscall_32+0x33/0x70 [ 983.880206][T23564] ? lockdep_hardirqs_on+0x7a/0x110 [ 983.880232][T23564] ? asm_int80_emulation+0x1a/0x20 [ 983.880253][T23564] ? do_int80_emulation+0x29f/0x550 [ 983.880280][T23564] ? trace_irq_disable+0x3b/0x140 [ 983.880310][T23564] do_fast_syscall_32+0x33/0x70 [ 983.880349][T23564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.880374][T23564] RIP: 0023:0xf703f0ec [ 983.880395][T23564] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 983.880414][T23564] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 983.880437][T23564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 983.880452][T23564] RDX: 0000000004000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.880465][T23564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.880478][T23564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 983.880490][T23564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.880523][T23564] [ 984.627472][T23564] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.642314][T23564] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 984.691621][T17206] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 984.725864][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6247'. [ 984.817882][T23569] syzkaller0: entered promiscuous mode [ 984.823702][T23569] syzkaller0: entered allmulticast mode [ 984.892411][T17206] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 984.900734][T17206] usb 3-1: config 0 has no interface number 0 [ 984.949710][T17206] usb 3-1: config 0 interface 12 has no altsetting 0 [ 984.968603][T17206] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 984.968629][T17206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.968641][T17206] usb 3-1: Product: syz [ 984.968652][T17206] usb 3-1: Manufacturer: syz [ 984.968661][T17206] usb 3-1: SerialNumber: syz [ 984.970788][T17206] usb 3-1: config 0 descriptor?? [ 984.996339][T23578] fuse: Invalid uid '00000000000000000004' [ 985.069996][T23578] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 985.176766][T17206] ch341 3-1:0.12: ch341-uart converter detected [ 985.177878][T17206] usb 3-1: failed to receive control message: -71 [ 985.177918][T17206] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 985.180740][T17206] usb 3-1: USB disconnect, device number 125 [ 985.182112][T17206] ch341 3-1:0.12: device disconnected [ 985.531547][T17204] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 985.682503][T17204] usb 6-1: too many configurations: 70, using maximum allowed: 8 [ 985.691732][T17204] usb 6-1: config index 0 descriptor too short (expected 65505, got 72) [ 985.702527][T17204] usb 6-1: config index 1 descriptor too short (expected 65505, got 72) [ 985.712808][T17204] usb 6-1: config index 2 descriptor too short (expected 65505, got 72) [ 985.723428][T17204] usb 6-1: config index 3 descriptor too short (expected 65505, got 72) [ 985.747747][T17204] usb 6-1: config index 4 descriptor too short (expected 65505, got 72) [ 985.760968][T17204] usb 6-1: config index 5 descriptor too short (expected 65505, got 72) [ 985.771248][T17204] usb 6-1: config index 6 descriptor too short (expected 65505, got 72) [ 985.782380][T17204] usb 6-1: config index 7 descriptor too short (expected 65505, got 72) [ 985.797725][T17204] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 985.807522][T17204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.825358][T17204] usb 6-1: Product: syz [ 985.836743][T17204] usb 6-1: Manufacturer: syz [ 985.852143][T17204] usb 6-1: SerialNumber: syz [ 985.895812][T17206] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 985.911796][T17204] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 986.097634][T23589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6252'. [ 986.180905][T17205] usb 6-1: USB disconnect, device number 2 [ 986.928214][T23611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6259'. [ 986.936173][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6260'. [ 986.986974][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6260'. [ 987.004774][T17206] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 987.041068][T17206] ath9k_htc: Failed to initialize the device [ 987.056851][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6260'. [ 987.097952][T17205] usb 6-1: ath9k_htc: USB layer deinitialized [ 987.192332][T23625] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6263'. [ 987.400886][T23632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6266'. [ 987.471839][T17207] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 987.551574][T11545] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 987.641696][T17207] usb 5-1: Using ep0 maxpacket: 8 [ 987.649000][T17207] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 987.659315][T17207] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 987.670877][T17207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 987.681868][T17207] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.697168][T17207] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 987.706424][T17207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.714516][T17207] usb 5-1: Product: syz [ 987.718697][T17207] usb 5-1: Manufacturer: syz [ 987.730604][T17207] usb 5-1: SerialNumber: syz [ 987.740089][T11545] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 987.753781][T23627] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 987.762030][T11545] usb 2-1: config 0 has no interface number 0 [ 987.766958][T17207] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 987.768368][T11545] usb 2-1: config 0 interface 12 has no altsetting 0 [ 987.778807][T17207] usbtest 5-1:1.0: Linux user mode ISO test driver [ 987.802856][T11545] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 987.811537][T17207] usbtest 5-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 987.815284][T11545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.859168][T11545] usb 2-1: Product: syz [ 987.876986][T11545] usb 2-1: Manufacturer: syz [ 987.893707][T11545] usb 2-1: SerialNumber: syz [ 987.918569][T11545] usb 2-1: config 0 descriptor?? [ 988.006714][T17204] usb 5-1: USB disconnect, device number 118 [ 988.139492][T11545] ch341 2-1:0.12: ch341-uart converter detected [ 988.168950][T11545] usb 2-1: failed to receive control message: -71 [ 988.185552][T17207] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 988.196757][T11545] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 988.212720][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 988.237033][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 988.241767][T11545] usb 2-1: USB disconnect, device number 76 [ 988.250262][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 988.265755][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 988.274299][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 988.276628][T11545] ch341 2-1:0.12: device disconnected [ 988.353878][T17207] usb 6-1: Invalid ep0 maxpacket: 64 [ 988.483152][T17207] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 988.632526][T17205] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 988.649318][T17207] usb 6-1: Invalid ep0 maxpacket: 64 [ 988.667429][T17207] usb usb6-port1: attempt power cycle [ 988.824886][T17205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 988.839535][T17205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.851867][T17205] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 988.886365][T17205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.913452][T17205] usb 3-1: config 0 descriptor?? [ 988.965214][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.978525][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 989.013043][T17207] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 989.056499][T17207] usb 6-1: Invalid ep0 maxpacket: 64 [ 989.111776][T17204] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 989.146545][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.158021][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 989.199084][T17207] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 989.212915][T23641] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.230584][T23641] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.240539][T23641] bridge_slave_0: entered allmulticast mode [ 989.251688][T17204] usb 5-1: device descriptor read/64, error -71 [ 989.261516][T17207] usb 6-1: Invalid ep0 maxpacket: 64 [ 989.267441][T17207] usb usb6-port1: unable to enumerate USB device [ 989.276938][T23641] bridge_slave_0: entered promiscuous mode [ 989.349416][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.360546][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 989.392970][T23641] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.419564][T23641] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.431120][T17205] kye 0003:0458:5016.001C: control desc unexpectedly large [ 989.451752][T23641] bridge_slave_1: entered allmulticast mode [ 989.459511][T23641] bridge_slave_1: entered promiscuous mode [ 989.480165][T17205] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.001C/input/input114 [ 989.511548][T17204] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 989.633602][T17205] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.001C/input/input115 [ 989.662710][T17204] usb 5-1: device descriptor read/64, error -71 [ 989.727181][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.740875][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 989.784705][T17204] usb usb5-port1: attempt power cycle [ 989.815906][T17205] kye 0003:0458:5016.001C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 989.869090][T23641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.897558][T23641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.026915][T23641] team0: Port device team_slave_0 added [ 990.050046][T23641] team0: Port device team_slave_1 added [ 990.112726][T23641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.125589][T23641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.157049][T23641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.157626][T23668] FAULT_INJECTION: forcing a failure. [ 990.157626][T23668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 990.170582][T23641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.190751][T23641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.217207][T17204] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 990.220500][T23668] CPU: 0 UID: 0 PID: 23668 Comm: syz.1.6273 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.220532][T23668] Tainted: [L]=SOFTLOCKUP [ 990.220540][T23668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 990.220552][T23668] Call Trace: [ 990.220560][T23668] [ 990.220569][T23668] dump_stack_lvl+0xe8/0x150 [ 990.220602][T23668] should_fail_ex+0x40c/0x560 [ 990.220630][T23668] prepare_alloc_pages+0x230/0x650 [ 990.220662][T23668] __alloc_frozen_pages_noprof+0x12f/0x380 [ 990.220691][T23668] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 990.220720][T23668] ? __pfx_policy_nodemask+0x10/0x10 [ 990.220755][T23668] alloc_pages_mpol+0x212/0x380 [ 990.220787][T23668] alloc_pages_noprof+0xac/0x2a0 [ 990.220815][T23668] anon_pipe_write+0x1f0/0x1c30 [ 990.220836][T23668] ? aa_file_perm+0x18b/0x15f0 [ 990.220872][T23668] ? aa_file_perm+0x4ed/0x15f0 [ 990.220891][T23668] ? aa_file_perm+0x18b/0x15f0 [ 990.220911][T23668] ? __pfx_anon_pipe_write+0x10/0x10 [ 990.220936][T23668] ? __lock_acquire+0x683/0x2cf0 [ 990.220965][T23668] ? __pfx_aa_file_perm+0x10/0x10 [ 990.220989][T23668] ? kstrtoull+0x12f/0x1d0 [ 990.221012][T23668] fifo_pipe_write+0x25/0x470 [ 990.221035][T23668] do_iter_readv_writev+0x612/0x8c0 [ 990.221058][T23668] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 990.221081][T23668] ? bpf_lsm_file_permission+0x9/0x20 [ 990.221101][T23668] ? security_file_permission+0x75/0x260 [ 990.221127][T23668] ? rw_verify_area+0x203/0x4c0 [ 990.221157][T23668] vfs_writev+0x343/0x990 [ 990.221186][T23668] ? __pfx_vfs_writev+0x10/0x10 [ 990.221221][T23668] ? __fget_files+0x2a/0x420 [ 990.221264][T23668] ? __fget_files+0x3a2/0x420 [ 990.221286][T23668] ? __fget_files+0x2a/0x420 [ 990.221317][T23668] do_writev+0x154/0x2e0 [ 990.221340][T23668] ? __pfx_do_writev+0x10/0x10 [ 990.221371][T23668] __do_fast_syscall_32+0x23e/0x6f0 [ 990.221403][T23668] ? do_fast_syscall_32+0x33/0x70 [ 990.221426][T23668] ? lockdep_hardirqs_on+0x7a/0x110 [ 990.221449][T23668] ? asm_int80_emulation+0x1a/0x20 [ 990.221466][T23668] ? do_int80_emulation+0x29f/0x550 [ 990.221490][T23668] ? trace_irq_disable+0x3b/0x140 [ 990.221515][T23668] do_fast_syscall_32+0x33/0x70 [ 990.221540][T23668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 990.221562][T23668] RIP: 0023:0xf707f0ec [ 990.221580][T23668] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 990.221595][T23668] RSP: 002b:00000000f542b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 990.221617][T23668] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 990.221630][T23668] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 990.221640][T23668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 990.221651][T23668] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 990.221662][T23668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 990.221688][T23668] [ 990.229004][T23641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.272655][T17204] usb 5-1: device descriptor read/8, error -71 [ 990.372608][ T5637] Bluetooth: hci2: command tx timeout [ 990.621909][T17204] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 990.650141][T17204] usb 5-1: device descriptor read/8, error -71 [ 990.691603][T17206] usb 3-1: reset full-speed USB device number 127 using dummy_hcd [ 990.774431][T17204] usb usb5-port1: unable to enumerate USB device [ 990.786811][ T35] bridge_slave_1: left allmulticast mode [ 990.794327][ T35] bridge_slave_1: left promiscuous mode [ 990.800257][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.812852][ T35] bridge_slave_0: left allmulticast mode [ 990.818980][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.096538][T23684] netlink: 'syz.5.6275': attribute type 1 has an invalid length. [ 991.147768][T23685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6275'. [ 991.162603][ T35] bond1 (unregistering): (slave geneve2): Releasing active interface [ 991.197725][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.214296][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.259847][ T35] bond0 (unregistering): Released all slaves [ 991.278558][ T35] bond1 (unregistering): Released all slaves [ 991.313840][ T35] bond2 (unregistering): Released all slaves [ 991.374982][T23641] hsr_slave_0: entered promiscuous mode [ 991.384198][T23641] hsr_slave_1: entered promiscuous mode [ 991.391051][T23641] debugfs: 'hsr0' already exists in 'hsr' [ 991.402279][T23641] Cannot create hsr debugfs directory [ 991.426689][T23691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.487782][T23691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.567038][ T35] : left promiscuous mode [ 991.753475][ T35] tipc: Left network mode [ 991.851522][T11545] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 991.943406][T15050] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 992.024373][T11545] usb 2-1: config 246 has an invalid interface number: 166 but max is 0 [ 992.047128][T11545] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 992.090619][T11545] usb 2-1: config 246 has no interface number 0 [ 992.099668][T11545] usb 2-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 992.126345][T11545] usb 2-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.140244][T11545] usb 2-1: config 246 interface 166 has no altsetting 0 [ 992.148438][T15050] usb 6-1: Using ep0 maxpacket: 32 [ 992.164639][T11545] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 992.175635][T11545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.184172][T15050] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 992.194875][T15050] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.209146][T11545] usb 2-1: Product: syz [ 992.214211][T11545] usb 2-1: Manufacturer: syz [ 992.234824][T11545] usb 2-1: SerialNumber: syz [ 992.291952][T17205] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 992.310093][ T35] hsr_slave_0: left promiscuous mode [ 992.335419][T15050] usb 6-1: selecting invalid altsetting 3 [ 992.341742][T15050] comedi comedi5: could not set alternate setting 3 in high speed [ 992.350334][ T35] hsr_slave_1: left promiscuous mode [ 992.358363][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.367031][T15050] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 992.376939][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.397970][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.411668][T15050] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 992.421135][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.434699][T23697] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6279'. [ 992.464262][T17205] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 992.481616][T17205] usb 5-1: can't read configurations, error -61 [ 992.510340][ T35] veth1_macvtap: left promiscuous mode [ 992.528633][ T35] veth0_macvtap: left promiscuous mode [ 992.544333][ T35] veth1_vlan: left promiscuous mode [ 992.562456][ T35] veth0_vlan: left promiscuous mode [ 992.601672][ T5637] Bluetooth: hci2: command tx timeout [ 992.632984][T17205] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 992.829422][T17205] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 992.859355][T17205] usb 5-1: can't read configurations, error -61 [ 992.885207][T17205] usb usb5-port1: attempt power cycle [ 992.993501][T11545] usb 2-1: Limiting number of CPorts to U8_MAX [ 993.055588][T11545] usb 2-1: Not enough endpoints found in device, aborting! [ 993.187984][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.197058][ T5688] usb 6-1: USB disconnect, device number 7 [ 993.202966][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.261578][T17205] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 993.297853][T17205] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 993.326552][T17205] usb 5-1: can't read configurations, error -61 [ 993.471635][T17205] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 993.498499][T17205] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 993.515834][T17205] usb 5-1: can't read configurations, error -61 [ 993.535116][T17205] usb usb5-port1: unable to enumerate USB device [ 993.620753][ T35] team0 (unregistering): Port device team_slave_0 removed [ 994.249569][T11545] usb 2-1: USB disconnect, device number 77 [ 994.691950][ T5637] Bluetooth: hci2: command tx timeout [ 995.125410][T23738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.185032][T23738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.255528][T23738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.299456][T23738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.466508][ T35] IPVS: stop unused estimator thread 0... [ 995.865330][T17206] usb 3-1: device descriptor read/64, error -110 [ 995.951295][T23760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6285'. [ 996.022272][T23760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6285'. [ 996.172234][T17206] usb 3-1: reset full-speed USB device number 127 using dummy_hcd [ 996.328028][T17206] usb 3-1: device descriptor read/64, error -32 [ 996.641587][T17206] usb 3-1: reset full-speed USB device number 127 using dummy_hcd [ 996.741152][T17206] usb 3-1: device descriptor read/8, error -32 [ 996.761554][ T5637] Bluetooth: hci2: command tx timeout [ 996.857488][T11545] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 997.004607][T17206] usb 3-1: reset full-speed USB device number 127 using dummy_hcd [ 997.065598][T17206] usb 3-1: device descriptor read/8, error -32 [ 997.072481][T11545] usb 2-1: Using ep0 maxpacket: 16 [ 997.118937][T23787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6290'. [ 997.186785][T11545] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 997.187103][T23789] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 997.203368][T23789] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 997.232736][T17203] usb 3-1: USB disconnect, device number 127 [ 997.316901][T11545] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 997.344974][T11545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.362202][T11545] usb 2-1: Product: syz [ 997.370073][T11545] usb 2-1: Manufacturer: syz [ 997.377026][T23789] loop9: detected capacity change from 0 to 2640 [ 997.386694][T11545] usb 2-1: SerialNumber: syz [ 997.410321][T23789] buffer_io_error: 10 callbacks suppressed [ 997.410335][T23789] Buffer I/O error on dev loop9, logical block 0, async page read [ 997.428974][T23770] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 997.445345][T23789] Buffer I/O error on dev loop9, logical block 0, async page read [ 997.502723][T23789] Buffer I/O error on dev loop9, logical block 0, async page read [ 997.602506][T23789] loop9: unable to read partition table [ 997.639672][T23791] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 997.680196][T23789] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 997.728088][T23791] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 997.823000][T17203] raw-gadget.0 gadget.2: failed to queue reset event [ 997.870928][T23791] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 997.911758][T17203] raw-gadget.0 gadget.2: failed to queue resume event [ 997.930168][T23791] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 997.973983][T23791] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 998.007803][T23791] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 998.026455][T17203] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 998.041745][T23791] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 998.059398][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 998.066944][T17203] raw-gadget.0 gadget.2: failed to queue reset event [ 998.097997][T23641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 998.138105][T23796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.147122][T17203] raw-gadget.0 gadget.2: failed to queue resume event [ 998.156629][T23641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 998.168998][T23641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 998.221609][T17203] usb 3-1: device descriptor read/64, error -32 [ 998.228502][T23641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 998.237819][T23796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.361642][T17203] raw-gadget.0 gadget.2: failed to queue suspend event [ 998.387979][T17203] raw-gadget.0 gadget.2: failed to queue reset event [ 998.502323][T17203] raw-gadget.0 gadget.2: failed to queue resume event [ 998.520670][T23641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 998.581739][T17203] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 998.598216][T23641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 998.606213][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 998.613612][T17203] raw-gadget.0 gadget.2: failed to queue reset event [ 998.681562][T17203] raw-gadget.0 gadget.2: failed to queue resume event [ 998.761726][T17203] usb 3-1: device descriptor read/64, error -32 [ 998.864657][T23641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 998.911646][T17203] raw-gadget.0 gadget.2: failed to queue suspend event [ 998.937808][T23641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 998.949051][T17203] usb usb3-port1: attempt power cycle [ 998.964712][T17203] raw-gadget.0 gadget.2: failed to queue disconnect event [ 999.010430][T17203] raw-gadget.0 gadget.2: failed to queue reset event [ 999.123001][T17203] raw-gadget.0 gadget.2: failed to queue resume event [ 999.178513][T17203] raw-gadget.0 gadget.2: failed to queue reset event [ 999.421643][T17203] raw-gadget.0 gadget.2: failed to queue resume event [ 999.480940][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.524911][T17203] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 999.591958][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 999.599237][T17203] usb 3-1: device descriptor read/8, error -32 [ 999.720450][T17203] raw-gadget.0 gadget.2: failed to queue suspend event [ 999.745577][T17203] raw-gadget.0 gadget.2: failed to queue reset event [ 999.831644][T17203] raw-gadget.0 gadget.2: failed to queue resume event [ 999.900249][T20476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 999.912181][T17203] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 999.931742][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 999.938952][T17203] usb 3-1: device descriptor read/8, error -32 [ 999.946217][T20476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 999.959046][T20476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 999.969381][T20476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 999.980268][T20476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1000.051591][T17203] raw-gadget.0 gadget.2: failed to queue suspend event [ 1000.076923][T17203] usb usb3-port1: unable to enumerate USB device [ 1000.221041][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.438520][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.618995][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.830779][T11545] usb 2-1: selecting invalid altsetting 1 [ 1001.000991][T23817] loop5: detected capacity change from 0 to 2640 [ 1001.009781][T23817] ldm_validate_partition_table(): Disk read failed. [ 1001.019335][T23817] Dev loop5: unable to read RDB block 0 [ 1001.028969][T23817] loop5: unable to read partition table [ 1001.054169][T23817] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1001.063924][T11545] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1001.096400][T11545] usb 2-1: USB disconnect, device number 78 [ 1001.131860][T23641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.137317][T20665] udevd[20665]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.152953][T23641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.659549][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.666855][ T9833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.899820][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.907029][ T8786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.997325][ T35] bridge_slave_1: left allmulticast mode [ 1002.009822][ T35] bridge_slave_1: left promiscuous mode [ 1002.024689][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.041046][ T35] bridge_slave_0: left allmulticast mode [ 1002.041609][ T5637] Bluetooth: hci0: command tx timeout [ 1002.053236][ T35] bridge_slave_0: left promiscuous mode [ 1002.068991][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.848458][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.895044][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.931960][ T35] bond0 (unregistering): Released all slaves [ 1002.962149][T23831] syzkaller0: entered promiscuous mode [ 1002.971764][T23831] syzkaller0: entered allmulticast mode [ 1003.059035][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1003.335952][T23808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.380452][T23808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.388862][T23808] bridge_slave_0: entered allmulticast mode [ 1003.398820][T23808] bridge_slave_0: entered promiscuous mode [ 1003.410487][T23808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.417786][T23808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.425749][T23808] bridge_slave_1: entered allmulticast mode [ 1003.449644][T23808] bridge_slave_1: entered promiscuous mode [ 1003.553281][ T29] audit: type=1326 audit(1783504405.624:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23857 comm="syz.1.6303" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707f0ec code=0x0 [ 1003.668088][T23862] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1003.706372][ T35] hsr_slave_0: left promiscuous mode [ 1003.717338][T23862] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1003.728918][ T35] hsr_slave_1: left promiscuous mode [ 1003.735698][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.748454][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.798077][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.829447][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.895162][ T35] veth1_macvtap: left promiscuous mode [ 1003.914110][ T35] veth0_macvtap: left promiscuous mode [ 1003.933455][ T35] veth1_vlan: left promiscuous mode [ 1003.954927][ T35] veth0_vlan: left promiscuous mode [ 1004.122952][ T5637] Bluetooth: hci0: command tx timeout [ 1004.701893][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1004.730435][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1004.939525][T23808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.973506][T23808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.017872][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1005.142458][T23808] team0: Port device team_slave_0 added [ 1005.177102][T23808] team0: Port device team_slave_1 added [ 1005.250618][T23808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.269188][T23808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.328154][T23808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.364659][T23808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.398394][T23808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.435515][T17203] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1005.509954][T23808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.602745][T17203] usb 5-1: device descriptor read/64, error -71 [ 1005.704713][T23912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6312'. [ 1005.758695][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6312'. [ 1005.782121][T23914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.808123][T23914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.823938][T23641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.842623][T17203] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1005.860243][T23912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.888493][T23913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.907435][T23808] hsr_slave_0: entered promiscuous mode [ 1005.926967][T23808] hsr_slave_1: entered promiscuous mode [ 1005.934579][T23912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.953324][T23808] debugfs: 'hsr0' already exists in 'hsr' [ 1005.960089][T23913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.983122][T23808] Cannot create hsr debugfs directory [ 1006.032016][T17203] usb 5-1: device descriptor read/64, error -71 [ 1006.143141][T17203] usb usb5-port1: attempt power cycle [ 1006.202794][ T5637] Bluetooth: hci0: command tx timeout [ 1006.491056][T23641] veth0_vlan: entered promiscuous mode [ 1006.496841][T17203] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1006.544294][T17203] usb 5-1: device descriptor read/8, error -71 [ 1006.814073][T17203] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1006.831023][T23641] veth1_vlan: entered promiscuous mode [ 1006.852304][T17203] usb 5-1: device descriptor read/8, error -71 [ 1006.899798][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1006.966547][T23641] veth0_macvtap: entered promiscuous mode [ 1006.973862][T17203] usb usb5-port1: unable to enumerate USB device [ 1007.133344][T23641] veth1_macvtap: entered promiscuous mode [ 1007.296882][T23641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.317433][T23641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.498599][ T9827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.523560][ T9827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.549960][ T9827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.559884][ T5688] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1007.579494][ T9827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.732191][ T5688] usb 2-1: Using ep0 maxpacket: 16 [ 1007.857834][ T5688] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1007.894017][ T5688] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1007.913515][ T5688] usb 2-1: can't read configurations, error -71 [ 1007.943801][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6315'. [ 1007.947104][ T9827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.992794][ T9827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.001575][T23945] FAULT_INJECTION: forcing a failure. [ 1008.001575][T23945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.001618][T23945] CPU: 0 UID: 0 PID: 23945 Comm: syz.2.6315 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.001644][T23945] Tainted: [L]=SOFTLOCKUP [ 1008.001651][T23945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1008.001663][T23945] Call Trace: [ 1008.001671][T23945] [ 1008.001679][T23945] dump_stack_lvl+0xe8/0x150 [ 1008.001711][T23945] should_fail_ex+0x40c/0x560 [ 1008.001738][T23945] _copy_to_user+0x31/0xb0 [ 1008.001767][T23945] simple_read_from_buffer+0xe1/0x170 [ 1008.001797][T23945] proc_fail_nth_read+0x1bb/0x230 [ 1008.001826][T23945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1008.001853][T23945] ? rw_verify_area+0x24a/0x4c0 [ 1008.001881][T23945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1008.001905][T23945] vfs_read+0x213/0xa80 [ 1008.001937][T23945] ? __pfx___mutex_lock+0x10/0x10 [ 1008.001963][T23945] ? __pfx_vfs_read+0x10/0x10 [ 1008.001991][T23945] ? __fget_files+0x2a/0x420 [ 1008.002019][T23945] ? __fget_files+0x3a2/0x420 [ 1008.002040][T23945] ? __fget_files+0x2a/0x420 [ 1008.002072][T23945] ksys_read+0x150/0x270 [ 1008.002101][T23945] ? __pfx_ksys_read+0x10/0x10 [ 1008.002132][T23945] ? asm_int80_emulation+0x1a/0x20 [ 1008.002156][T23945] do_int80_emulation+0x19a/0x550 [ 1008.002181][T23945] ? trace_irq_disable+0x3b/0x140 [ 1008.002202][T23945] ? asm_int80_emulation+0x1a/0x20 [ 1008.002219][T23945] ? clear_bhb_loop+0x40/0x90 [ 1008.002238][T23945] ? clear_bhb_loop+0x40/0x90 [ 1008.002260][T23945] asm_int80_emulation+0x1a/0x20 [ 1008.002278][T23945] RIP: 0023:0xf71c71eb [ 1008.002295][T23945] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1008.002310][T23945] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1008.002331][T23945] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f547d5d0 [ 1008.002344][T23945] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1008.002355][T23945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1008.002365][T23945] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1008.002376][T23945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1008.002403][T23945] [ 1008.297258][ T5637] Bluetooth: hci0: command tx timeout [ 1008.345623][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6317'. [ 1008.360119][T23952] : entered promiscuous mode [ 1008.380538][T23950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6317'. [ 1008.483187][ T394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.486681][T23961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6317'. [ 1008.513847][ T394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.561165][T23950] trusted_key: encrypted_key: insufficient parameters specified [ 1008.769207][T23967] FAULT_INJECTION: forcing a failure. [ 1008.769207][T23967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.801605][T23967] CPU: 1 UID: 0 PID: 23967 Comm: syz.0.6269 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.801641][T23967] Tainted: [L]=SOFTLOCKUP [ 1008.801649][T23967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1008.801661][T23967] Call Trace: [ 1008.801670][T23967] [ 1008.801680][T23967] dump_stack_lvl+0xe8/0x150 [ 1008.801717][T23967] should_fail_ex+0x40c/0x560 [ 1008.801747][T23967] _copy_from_user+0x2d/0xb0 [ 1008.801779][T23967] __se_sys_io_uring_register+0x1bc/0x1ab0 [ 1008.801896][T23967] ? __fget_files+0x3a2/0x420 [ 1008.801929][T23967] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1008.801954][T23967] ? fput+0xa0/0xd0 [ 1008.801995][T23967] __do_fast_syscall_32+0x23e/0x6f0 [ 1008.802026][T23967] ? do_fast_syscall_32+0x33/0x70 [ 1008.802063][T23967] ? lockdep_hardirqs_on+0x7a/0x110 [ 1008.802088][T23967] ? asm_int80_emulation+0x1a/0x20 [ 1008.802109][T23967] ? do_int80_emulation+0x29f/0x550 [ 1008.802137][T23967] ? trace_irq_disable+0x3b/0x140 [ 1008.802167][T23967] do_fast_syscall_32+0x33/0x70 [ 1008.802196][T23967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1008.802222][T23967] RIP: 0023:0xf7f240ec [ 1008.802242][T23967] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1008.802260][T23967] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 1008.802283][T23967] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 000000000000001f [ 1008.802302][T23967] RDX: 0000000080000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1008.802316][T23967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1008.802328][T23967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1008.802341][T23967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1008.802373][T23967] [ 1009.179188][T23808] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1009.239625][T23808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1009.321874][T23808] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1009.385311][T23808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1009.405297][T23808] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1009.468435][T23808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1009.489028][T23808] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1009.537134][T23808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1009.664442][T23991] FAULT_INJECTION: forcing a failure. [ 1009.664442][T23991] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.702767][T23991] CPU: 1 UID: 0 PID: 23991 Comm: syz.4.6324 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.702804][T23991] Tainted: [L]=SOFTLOCKUP [ 1009.702812][T23991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1009.702824][T23991] Call Trace: [ 1009.702834][T23991] [ 1009.702843][T23991] dump_stack_lvl+0xe8/0x150 [ 1009.702882][T23991] should_fail_ex+0x40c/0x560 [ 1009.702917][T23991] should_failslab+0xa8/0x100 [ 1009.702951][T23991] __kmalloc_noprof+0xfe/0x720 [ 1009.702977][T23991] ? __asan_memcpy+0x40/0x70 [ 1009.703001][T23991] ? ethnl_default_notify+0x1ab/0xb00 [ 1009.703098][T23991] ? ethnl_default_notify+0x1ab/0xb00 [ 1009.703130][T23991] ethnl_default_notify+0x1ab/0xb00 [ 1009.703160][T23991] ? __pfx_ethnl_set_linkmodes+0x10/0x10 [ 1009.703184][T23991] ? rcu_is_watching+0x15/0xb0 [ 1009.703214][T23991] ? __pfx_ethnl_default_notify+0x10/0x10 [ 1009.703234][T23991] ? trace_kmalloc+0x2a/0xf0 [ 1009.703273][T23991] ? mutex_is_locked+0x17/0x50 [ 1009.703304][T23991] ? rtnl_is_locked+0x15/0x20 [ 1009.703323][T23991] ? ethnl_notify+0x1a3/0x300 [ 1009.703348][T23991] ethnl_default_set_doit+0xae0/0x1080 [ 1009.703385][T23991] genl_family_rcv_msg_doit+0x233/0x340 [ 1009.703419][T23991] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1009.703458][T23991] ? bpf_lsm_capable+0x9/0x20 [ 1009.703485][T23991] ? security_capable+0x7e/0x2c0 [ 1009.703523][T23991] genl_rcv_msg+0x614/0x7a0 [ 1009.703555][T23991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.703580][T23991] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1009.703606][T23991] ? __pfx_ref_tracker_free+0x10/0x10 [ 1009.703631][T23991] ? __asan_memcpy+0x40/0x70 [ 1009.703662][T23991] ? __skb_clone+0x5c/0x6c0 [ 1009.703700][T23991] netlink_rcv_skb+0x226/0x4a0 [ 1009.703733][T23991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.703760][T23991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1009.703808][T23991] ? down_read+0x2be/0x330 [ 1009.703842][T23991] genl_rcv+0x28/0x40 [ 1009.703865][T23991] netlink_unicast+0x7bb/0x940 [ 1009.703906][T23991] netlink_sendmsg+0x813/0xb40 [ 1009.703938][T23991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.703963][T23991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1009.703991][T23991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.704009][T23991] sock_sendmsg_nosec+0x13a/0x180 [ 1009.704037][T23991] ____sys_sendmsg+0x54e/0x850 [ 1009.704073][T23991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.704121][T23991] ___sys_sendmsg+0x2a5/0x360 [ 1009.704150][T23991] ? __lock_acquire+0x683/0x2cf0 [ 1009.704183][T23991] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.704213][T23991] ? get_pid_task+0x20/0x1f0 [ 1009.704240][T23991] ? get_pid_task+0x20/0x1f0 [ 1009.704266][T23991] ? get_pid_task+0x20/0x1f0 [ 1009.704327][T23991] ? __fget_files+0x2a/0x420 [ 1009.704353][T23991] ? __fget_files+0x3a2/0x420 [ 1009.704392][T23991] __sys_sendmsg+0x177/0x240 [ 1009.704425][T23991] ? __pfx___sys_sendmsg+0x10/0x10 [ 1009.704477][T23991] __do_fast_syscall_32+0x23e/0x6f0 [ 1009.704505][T23991] ? do_fast_syscall_32+0x33/0x70 [ 1009.704530][T23991] ? lockdep_hardirqs_on+0x7a/0x110 [ 1009.704553][T23991] ? asm_int80_emulation+0x1a/0x20 [ 1009.704571][T23991] ? do_int80_emulation+0x29f/0x550 [ 1009.704597][T23991] ? trace_irq_disable+0x3b/0x140 [ 1009.704626][T23991] do_fast_syscall_32+0x33/0x70 [ 1009.704666][T23991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1009.704691][T23991] RIP: 0023:0xf703f0ec [ 1009.704711][T23991] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1009.704728][T23991] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1009.704752][T23991] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1009.704767][T23991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1009.704779][T23991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1009.704791][T23991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1009.704804][T23991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1009.704837][T23991] [ 1010.421295][T23979] bridge0: port 3(erspan0) entered blocking state [ 1010.440029][T23979] bridge0: port 3(erspan0) entered disabled state [ 1010.483237][T23979] erspan0: entered allmulticast mode [ 1010.547628][T23979] erspan0: entered promiscuous mode [ 1010.577061][T23979] bridge0: port 3(erspan0) entered blocking state [ 1010.583753][T23979] bridge0: port 3(erspan0) entered forwarding state [ 1010.721644][T23082] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1010.842921][T23808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.947130][T23808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.987755][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.995048][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.109053][T24010] netlink: 'syz.4.6327': attribute type 3 has an invalid length. [ 1011.146991][T24010] netlink: 'syz.4.6327': attribute type 4 has an invalid length. [ 1011.189901][T24010] netlink: 'syz.4.6327': attribute type 3 has an invalid length. [ 1011.252491][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.259647][ T9833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.549047][T24019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.570195][T24019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.701298][T23808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.861653][T17207] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1011.868467][T24031] sg_write: data in/out 8188/120 bytes for SCSI command 0x0-- guessing data in; [ 1011.868467][T24031] program syz.0.6328 not setting count and/or reply_len properly [ 1011.960016][T23808] veth0_vlan: entered promiscuous mode [ 1011.989306][T23808] veth1_vlan: entered promiscuous mode [ 1012.033730][T17207] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1012.064423][T17207] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1012.109964][T17207] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1012.134618][T23808] veth0_macvtap: entered promiscuous mode [ 1012.148645][T17207] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1012.176362][T23808] veth1_macvtap: entered promiscuous mode [ 1012.184053][T17207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.206825][T17207] usb 5-1: Product: syz [ 1012.220932][T17207] usb 5-1: Manufacturer: syz [ 1012.248066][T17207] usb 5-1: SerialNumber: syz [ 1012.263496][T23808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.314556][T24024] sg_write: data in/out 467331426/58 bytes for SCSI command 0xb4-- guessing data in; [ 1012.314556][T24024] program syz.0.6328 not setting count and/or reply_len properly [ 1012.319913][T23808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.362391][T17207] usb 5-1: config 0 descriptor?? [ 1012.379946][T24022] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1012.407547][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6328'. [ 1012.412591][T24022] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1012.441208][T17207] usb 5-1: ucan: probing device on interface #0 [ 1012.456526][ T394] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.494751][ T394] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.500849][T24044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.514272][T24044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.528338][ T394] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.545335][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6333'. [ 1012.565719][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6333'. [ 1012.580619][ T394] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.907553][ T9827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.946795][ T9827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.033042][T17207] usb 5-1: ucan: device reported invalid tx-fifo size [ 1013.038528][ T9827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.052072][T17207] usb 5-1: ucan: probe failed; try to update the device firmware [ 1013.069985][ T9827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.267196][T17207] usb 5-1: USB disconnect, device number 5 [ 1013.348844][T24064] loop7: detected capacity change from 0 to 16384 [ 1013.593229][T24070] loop8: detected capacity change from 0 to 7 [ 1013.612224][T23082] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1013.620354][T24070] loop8: [POWERTEC] [ 1013.796004][T23082] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1013.836367][T23082] usb 6-1: config 1 has an invalid interface number: 66 but max is 2 [ 1013.857608][T23082] usb 6-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1013.871040][T24073] loop5: detected capacity change from 0 to 7 [ 1013.890583][ C0] blk_print_req_error: 11 callbacks suppressed [ 1013.890604][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.906374][ C0] buffer_io_error: 344 callbacks suppressed [ 1013.906394][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1013.921526][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.930851][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1013.943736][T23082] usb 6-1: config 1 has no interface number 3 [ 1013.950283][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.959601][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1013.968602][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.969948][T23082] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 1013.977986][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1013.998894][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.008205][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1014.020811][T24077] FAULT_INJECTION: forcing a failure. [ 1014.020811][T24077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.021020][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.043260][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1014.052799][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.054719][T23082] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1014.062168][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1014.073018][T23082] usb 6-1: string descriptor 0 read error: -22 [ 1014.084268][T24073] ldm_validate_partition_table(): Disk read failed. [ 1014.091317][T23082] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1014.093066][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.100806][T23082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.109820][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1014.125935][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.135260][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1014.155574][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.159918][T24077] CPU: 0 UID: 0 PID: 24077 Comm: syz.4.6339 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.159950][T24077] Tainted: [L]=SOFTLOCKUP [ 1014.159957][T24077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.159976][T24077] Call Trace: [ 1014.159984][T24077] [ 1014.159992][T24077] dump_stack_lvl+0xe8/0x150 [ 1014.160027][T24077] should_fail_ex+0x40c/0x560 [ 1014.160055][T24077] _copy_to_user+0x31/0xb0 [ 1014.160083][T24077] simple_read_from_buffer+0xe1/0x170 [ 1014.160113][T24077] proc_fail_nth_read+0x1bb/0x230 [ 1014.160141][T24077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1014.160169][T24077] ? rw_verify_area+0x24a/0x4c0 [ 1014.160197][T24077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1014.160220][T24077] vfs_read+0x213/0xa80 [ 1014.160256][T24077] ? __pfx___mutex_lock+0x10/0x10 [ 1014.160283][T24077] ? __pfx_vfs_read+0x10/0x10 [ 1014.160311][T24077] ? __fget_files+0x2a/0x420 [ 1014.160338][T24077] ? __fget_files+0x3a2/0x420 [ 1014.160360][T24077] ? __fget_files+0x2a/0x420 [ 1014.160391][T24077] ksys_read+0x150/0x270 [ 1014.160420][T24077] ? __pfx_ksys_read+0x10/0x10 [ 1014.160450][T24077] ? asm_int80_emulation+0x1a/0x20 [ 1014.160475][T24077] do_int80_emulation+0x19a/0x550 [ 1014.160499][T24077] ? trace_irq_disable+0x3b/0x140 [ 1014.160522][T24077] ? asm_int80_emulation+0x1a/0x20 [ 1014.160539][T24077] ? clear_bhb_loop+0x40/0x90 [ 1014.160557][T24077] ? clear_bhb_loop+0x40/0x90 [ 1014.160579][T24077] asm_int80_emulation+0x1a/0x20 [ 1014.160598][T24077] RIP: 0023:0xf71771eb [ 1014.160615][T24077] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1014.160630][T24077] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1014.160652][T24077] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542d5d0 [ 1014.160665][T24077] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1014.160675][T24077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1014.160686][T24077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1014.160698][T24077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1014.160725][T24077] [ 1014.384851][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1014.387940][T23082] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1014.417174][T24073] Dev loop5: unable to read RDB block 0 [ 1014.437150][T24073] loop5: unable to read partition table [ 1014.445736][T23082] usb 6-1: selecting invalid altsetting 0 [ 1014.452077][T24073] loop5: partition table beyond EOD, truncated [ 1014.452122][T24073] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 1014.482695][T23082] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1014.489861][T23082] usb 6-1: selecting invalid altsetting 0 [ 1014.741693][T24091] netlink: 'syz.2.6343': attribute type 4 has an invalid length. [ 1014.747533][T23082] usb 6-1: USB disconnect, device number 8 [ 1014.813613][T24093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.871132][T24093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.905748][T24091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.924472][T24094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6343'. [ 1014.935391][T24091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.448327][T24106] syzkaller0: entered promiscuous mode [ 1015.462675][T24106] syzkaller0: entered allmulticast mode [ 1015.565694][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6349'. [ 1015.804458][T24114] team0: Port device team_slave_1 removed [ 1016.004251][T24118] ------------[ cut here ]------------ [ 1016.012170][T24118] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 1016.012192][T24118] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.2.6351/24118 [ 1016.032044][T24118] Modules linked in: [ 1016.038143][T24118] CPU: 0 UID: 0 PID: 24118 Comm: syz.2.6351 Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.049267][T24118] Tainted: [L]=SOFTLOCKUP [ 1016.053698][T24118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.064148][T24118] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 1016.070122][T24118] Code: c6 05 3b 0f 00 0f 01 48 c7 c7 0e fc 20 8e be 3c 04 00 00 48 c7 c2 80 3f e2 8b e8 8b ac 61 00 e9 81 ee ff ff e8 b1 b0 85 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 1016.090578][T24118] RSP: 0018:ffffc90003d56f00 EFLAGS: 00010287 [ 1016.097098][T24118] RAX: ffffffff8140c18f RBX: ffff888000000000 RCX: 0000000000080000 [ 1016.105129][T24118] RDX: ffffc90014f1a000 RSI: 0000000000000521 RDI: 0000000000000522 [ 1016.113452][T24118] RBP: ffffc90003d57090 R08: ffffffff90576ff7 R09: 1ffffffff20aedfe [ 1016.121754][T24118] R10: dffffc0000000000 R11: fffffbfff20aedff R12: 1ffff920007aadf4 [ 1016.130010][T24118] R13: ffff8880790c9320 R14: ffff888000000000 R15: ffffffffffffff01 [ 1016.138115][T24118] FS: 0000000000000000(0000) GS:ffff888124f59000(0063) knlGS:00000000f547db40 [ 1016.147102][T24118] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1016.153745][T24118] CR2: 0000000080045018 CR3: 000000006899c000 CR4: 00000000003526f0 [ 1016.161767][T24118] Call Trace: [ 1016.165093][T24118] [ 1016.168083][T24118] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 1016.173883][T24118] ? lock_acquire+0x106/0x350 [ 1016.175364][T24119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.178610][T24118] ? kvm_gpc_refresh+0x31/0x110 [ 1016.193166][T24118] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1016.198701][T24118] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1016.204500][T24118] kvm_gpc_refresh+0xe1/0x110 [ 1016.209202][T24118] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1016.214709][T24118] kvm_xen_set_evtchn+0x14f/0x220 [ 1016.219859][T24118] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 1016.225366][T24118] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 1016.230424][T24118] ? kasan_save_track+0x4f/0x80 [ 1016.235414][T24118] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1016.240889][T24118] ? security_inode_alloc+0x39/0x310 [ 1016.246256][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.251296][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.256328][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.261294][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.266378][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.271479][T24118] ? unwind_next_frame+0x8f/0x2550 [ 1016.276651][T24118] ? is_bpf_text_address+0x26/0x2b0 [ 1016.282036][T24118] ? is_bpf_text_address+0x26/0x2b0 [ 1016.287254][T24118] ? is_bpf_text_address+0x292/0x2b0 [ 1016.292908][T24118] ? is_bpf_text_address+0x26/0x2b0 [ 1016.298143][T24118] ? kernel_text_address+0xa5/0xe0 [ 1016.303632][T24118] ? __kernel_text_address+0xd/0x30 [ 1016.308856][T24118] ? unwind_get_return_address+0x4d/0x90 [ 1016.314568][T24118] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1016.320783][T24118] ? arch_stack_walk+0xfb/0x150 [ 1016.325833][T24118] ? stack_trace_save+0xa9/0x100 [ 1016.330798][T24118] ? __pfx_stack_trace_save+0x10/0x10 [ 1016.336210][T24118] ? kasan_save_track+0x4f/0x80 [ 1016.341068][T24118] kvm_vm_ioctl+0x8f7/0xd30 [ 1016.345650][T24118] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1016.350701][T24118] ? kasan_save_free_info+0x40/0x50 [ 1016.355938][T24118] ? __kasan_slab_free+0x5c/0x80 [ 1016.360894][T24118] ? kfree+0x1c5/0x640 [ 1016.365343][T24118] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1016.370989][T24118] ? security_file_ioctl_compat+0xc3/0x2a0 [ 1016.376908][T24118] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 1016.382654][T24118] ? __do_fast_syscall_32+0x23e/0x6f0 [ 1016.388072][T24118] ? do_fast_syscall_32+0x33/0x70 [ 1016.393545][T24118] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1016.400088][T24118] ? kvm_arch_vm_compat_ioctl+0x169/0x2b0 [ 1016.406202][T24118] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 1016.412339][T24118] ? kasan_quarantine_put+0xbb/0x1f0 [ 1016.417644][T24118] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1016.423346][T24118] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1016.429002][T24118] ? do_vfs_ioctl+0x116f/0x1530 [ 1016.433901][T24118] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1016.438967][T24118] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 1016.445109][T24118] kvm_vm_compat_ioctl+0x2b1/0x3a0 [ 1016.450245][T24118] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1016.456200][T24118] ? __fget_files+0x3a2/0x420 [ 1016.460907][T24118] ? __fget_files+0x2a/0x420 [ 1016.465530][T24118] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1016.471085][T24118] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1016.476579][T24118] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1016.482595][T24118] ? __se_sys_futex_time32+0x3ab/0x440 [ 1016.488110][T24118] ? rcu_is_watching+0x15/0xb0 [ 1016.492931][T24118] __do_fast_syscall_32+0x23e/0x6f0 [ 1016.498527][T24118] ? do_fast_syscall_32+0x33/0x70 [ 1016.503875][T24118] ? lockdep_hardirqs_on+0x7a/0x110 [ 1016.509108][T24118] ? irqentry_exit+0x10f/0x8f0 [ 1016.513909][T24118] ? trace_irq_disable+0x3b/0x140 [ 1016.518979][T24118] do_fast_syscall_32+0x33/0x70 [ 1016.523914][T24118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1016.530268][T24118] RIP: 0023:0xf708f0ec [ 1016.534397][T24118] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1016.554058][T24118] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1016.562595][T24118] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400caed0 [ 1016.570567][T24118] RDX: 0000000080000980 RSI: 0000000000000000 RDI: 0000000000000000 [ 1016.578586][T24118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1016.586614][T24118] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1016.594617][T24118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1016.603307][T24118] [ 1016.606359][T24118] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1016.613649][T24118] CPU: 0 UID: 0 PID: 24118 Comm: syz.2.6351 Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.624681][T24118] Tainted: [L]=SOFTLOCKUP [ 1016.629011][T24118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.639083][T24118] Call Trace: [ 1016.642366][T24118] [ 1016.645294][T24118] vpanic+0x56c/0xa60 [ 1016.649321][T24118] ? __pfx__printk+0x10/0x10 [ 1016.653939][T24118] ? __pfx_vpanic+0x10/0x10 [ 1016.658445][T24118] ? is_bpf_text_address+0x292/0x2b0 [ 1016.663729][T24118] ? is_bpf_text_address+0x26/0x2b0 [ 1016.668932][T24118] panic+0xc5/0xd0 [ 1016.672671][T24118] ? __pfx_panic+0x10/0x10 [ 1016.677116][T24118] __warn+0x315/0x4c0 [ 1016.681206][T24118] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1016.686520][T24118] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1016.691823][T24118] __report_bug+0x331/0x530 [ 1016.696402][T24118] ? check_path+0x21/0x40 [ 1016.700732][T24118] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1016.706023][T24118] ? __pfx___report_bug+0x10/0x10 [ 1016.711048][T24118] ? lockdep_unlock+0x5d/0xd0 [ 1016.715746][T24118] ? __lock_acquire+0x13e8/0x2cf0 [ 1016.720782][T24118] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1016.726162][T24118] report_bug+0x16a/0x220 [ 1016.730519][T24118] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1016.735809][T24118] ? __kvm_gpc_refresh+0x1512/0x1710 [ 1016.741115][T24118] handle_bug+0x9c/0x200 [ 1016.745364][T24118] exc_invalid_op+0x1a/0x50 [ 1016.749888][T24118] asm_exc_invalid_op+0x1a/0x20 [ 1016.754747][T24118] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 1016.760644][T24118] Code: c6 05 3b 0f 00 0f 01 48 c7 c7 0e fc 20 8e be 3c 04 00 00 48 c7 c2 80 3f e2 8b e8 8b ac 61 00 e9 81 ee ff ff e8 b1 b0 85 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 1016.780326][T24118] RSP: 0018:ffffc90003d56f00 EFLAGS: 00010287 [ 1016.786457][T24118] RAX: ffffffff8140c18f RBX: ffff888000000000 RCX: 0000000000080000 [ 1016.794447][T24118] RDX: ffffc90014f1a000 RSI: 0000000000000521 RDI: 0000000000000522 [ 1016.802423][T24118] RBP: ffffc90003d57090 R08: ffffffff90576ff7 R09: 1ffffffff20aedfe [ 1016.810401][T24118] R10: dffffc0000000000 R11: fffffbfff20aedff R12: 1ffff920007aadf4 [ 1016.818378][T24118] R13: ffff8880790c9320 R14: ffff888000000000 R15: ffffffffffffff01 [ 1016.826388][T24118] ? __kvm_gpc_refresh+0x150f/0x1710 [ 1016.831731][T24118] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 1016.837460][T24118] ? lock_acquire+0x106/0x350 [ 1016.842152][T24118] ? kvm_gpc_refresh+0x31/0x110 [ 1016.847055][T24118] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1016.852548][T24118] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1016.857755][T24118] kvm_gpc_refresh+0xe1/0x110 [ 1016.862444][T24118] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1016.867661][T24118] kvm_xen_set_evtchn+0x14f/0x220 [ 1016.872690][T24118] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 1016.878202][T24118] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 1016.883251][T24118] ? kasan_save_track+0x4f/0x80 [ 1016.888104][T24118] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1016.893589][T24118] ? security_inode_alloc+0x39/0x310 [ 1016.898880][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.903850][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.908807][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.913757][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.918718][T24118] ? __lock_acquire+0x683/0x2cf0 [ 1016.923700][T24118] ? unwind_next_frame+0x8f/0x2550 [ 1016.928841][T24118] ? is_bpf_text_address+0x26/0x2b0 [ 1016.934084][T24118] ? is_bpf_text_address+0x26/0x2b0 [ 1016.939296][T24118] ? is_bpf_text_address+0x292/0x2b0 [ 1016.944600][T24118] ? is_bpf_text_address+0x26/0x2b0 [ 1016.949832][T24118] ? kernel_text_address+0xa5/0xe0 [ 1016.954948][T24118] ? __kernel_text_address+0xd/0x30 [ 1016.960148][T24118] ? unwind_get_return_address+0x4d/0x90 [ 1016.965795][T24118] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1016.971952][T24118] ? arch_stack_walk+0xfb/0x150 [ 1016.976826][T24118] ? stack_trace_save+0xa9/0x100 [ 1016.981776][T24118] ? __pfx_stack_trace_save+0x10/0x10 [ 1016.987155][T24118] ? kasan_save_track+0x4f/0x80 [ 1016.992028][T24118] kvm_vm_ioctl+0x8f7/0xd30 [ 1016.996560][T24118] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1017.001616][T24118] ? kasan_save_free_info+0x40/0x50 [ 1017.006888][T24118] ? __kasan_slab_free+0x5c/0x80 [ 1017.011883][T24118] ? kfree+0x1c5/0x640 [ 1017.015976][T24118] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1017.021731][T24118] ? security_file_ioctl_compat+0xc3/0x2a0 [ 1017.027631][T24118] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 1017.033274][T24118] ? __do_fast_syscall_32+0x23e/0x6f0 [ 1017.038658][T24118] ? do_fast_syscall_32+0x33/0x70 [ 1017.043684][T24118] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1017.050213][T24118] ? kvm_arch_vm_compat_ioctl+0x169/0x2b0 [ 1017.055939][T24118] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 1017.062557][T24118] ? kasan_quarantine_put+0xbb/0x1f0 [ 1017.067850][T24118] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1017.073489][T24118] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1017.079301][T24118] ? do_vfs_ioctl+0x116f/0x1530 [ 1017.084154][T24118] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1017.089202][T24118] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 1017.094763][T24118] kvm_vm_compat_ioctl+0x2b1/0x3a0 [ 1017.099919][T24118] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1017.105583][T24118] ? __fget_files+0x3a2/0x420 [ 1017.110271][T24118] ? __fget_files+0x2a/0x420 [ 1017.114870][T24118] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1017.120423][T24118] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1017.125883][T24118] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1017.131864][T24118] ? __se_sys_futex_time32+0x3ab/0x440 [ 1017.137339][T24118] ? rcu_is_watching+0x15/0xb0 [ 1017.142150][T24118] __do_fast_syscall_32+0x23e/0x6f0 [ 1017.147530][T24118] ? do_fast_syscall_32+0x33/0x70 [ 1017.152567][T24118] ? lockdep_hardirqs_on+0x7a/0x110 [ 1017.157764][T24118] ? irqentry_exit+0x10f/0x8f0 [ 1017.162528][T24118] ? trace_irq_disable+0x3b/0x140 [ 1017.167572][T24118] do_fast_syscall_32+0x33/0x70 [ 1017.172424][T24118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1017.178767][T24118] RIP: 0023:0xf708f0ec [ 1017.182928][T24118] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1017.202553][T24118] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1017.211015][T24118] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400caed0 [ 1017.219002][T24118] RDX: 0000000080000980 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.226982][T24118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1017.235052][T24118] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1017.243208][T24118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1017.251402][T24118] [ 1017.254610][T24118] Kernel Offset: disabled [ 1017.258961][T24118] Rebooting in 86400 seconds..