last executing test programs: 14m22.795669485s ago: executing program 1 (id=6258): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0xc, 0x0, 0x5, 0x1, 0xa, 0x10001, 0xfffffff7}}], 0x30}, 0x0) 14m22.618785122s ago: executing program 1 (id=6261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a00", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 14m22.241338237s ago: executing program 1 (id=6263): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x6, 0x0, 0x0, 0x4, 0xfc, 0xfd, 0x0, 0x0, 0xff}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) (fail_nth: 1) 14m21.996313841s ago: executing program 1 (id=6265): syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000200)=0x7fd, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40) r3 = open_tree(r2, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r3, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002080)='yeah', 0x4) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000004c0)=0x2) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x1000000000007, 0x200000000006b, 0x9, 0x1001, 0xfffffffffffffffe, 0x1000, 0x0, 0x7fff, 0x1, 0xffff, 0xffffffffffffffe3, 0x2, 0x3ff, 0x8, 0xe89, 0x8000000000000000], 0x8000000, 0xa64caa9dc5e57732}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r6, 0x1000002, 0x13, r9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0xa}]}, 0x10) 14m20.792335088s ago: executing program 1 (id=6270): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997", 0x27}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020", 0xe6}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b4", 0x3a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea3822", 0x4e}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05", 0x88}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78", 0x61}, {&(0x7f00000021c0)="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", 0x165}], 0x5}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 14m19.883208256s ago: executing program 1 (id=6271): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)}, {0x0}], 0x3}, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), 0x0}, 0x20) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 14m19.373426688s ago: executing program 32 (id=6271): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)}, {0x0}], 0x3}, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), 0x0}, 0x20) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3m38.265746754s ago: executing program 5 (id=8772): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x183100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket(0xf, 0x3, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r6, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040054) 3m35.417147584s ago: executing program 5 (id=8782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)) timer_create(0xf977d0f4819ec019, &(0x7f0000000000)={0x0, 0x3b, 0x0, @thr={&(0x7f00000000c0)="146346b6de6820a92f037242475a315cee04d5db16a2775de117f8e18808f9231b568894f1c1b8a87192c98c93d17096e8efd00e6ec83528954a420f3f36943b53b0ca77fb3d6fa9f6848b9e0ac0f254dd66b83b79feade164015bef2f1023fdb85e58a0e4f7a0581192763c567406fd75d3dac948083b19c628552146a2bb52fdf8b45019b3141c066a1739ae48a383b9c1ce6198686a394bf1f17b64e0fa717a0ee66aa7907c196b65c2543847b11c492fa1a41e76336a6a48d75acc6eeac0c8184523e61d5b9d93fa006533e252ab3ed565", &(0x7f00000001c0)="b414a961bfe81a48bdee93a62cccf5abe24dccd0df381e2b3406d793ffb34717c94d1536ab1d228fba9f0e4312e395600ad4254f4eef9c8ff2df31efac4f7354e8ba350552322989d9b97e2b3327ad86055aa3ac92a0f60bbaabaacfab2918e4a9fd2fafcba9862ec0f0c15b07578e58caabaca99bb7a920b36e135ecf1b78b8a9f459edfea691e8c5da3ea1b013"}}, &(0x7f0000000040)) 3m35.17887207s ago: executing program 5 (id=8784): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x102, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="af0000", @ANYRES16=r2, @ANYBLOB="e8ff26bd7000fedbdf2511000000180001801400020076657468305f746f5f626f0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0xc000) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f000093d000/0x1000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f00000001c0)=[0x0], 0x0) 3m34.975938791s ago: executing program 5 (id=8785): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) r1 = dup(r0) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, '$', 0x3a, '', 0x3a, './file0'}, 0x28) (fail_nth: 3) 3m33.591183928s ago: executing program 5 (id=8791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xfffffd6c, 0x5, 0x0, 0x4008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) sched_getattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38}, 0x38, 0x0) (async) sched_getattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38}, 0x38, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2032) (async) read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2032) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) eventfd2(0x40, 0x80000) (async) r5 = eventfd2(0x40, 0x80000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x0, r5}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x48, 0x0, 0xe4}) r7 = socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[], 0x0) sendmsg$sock(r7, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) (async) sendmsg$sock(r7, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) 3m32.823974808s ago: executing program 5 (id=8794): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r1, &(0x7f00000001c0), 0x0, 0x611, 0x1) socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) syz_80211_inject_frame(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001c0010002bbd70000100010002000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xffffffffffffff46}, 0x1, 0x0, 0x0, 0x240cc067}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x8c, r10, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @void, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3m17.735870031s ago: executing program 33 (id=8794): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r1, &(0x7f00000001c0), 0x0, 0x611, 0x1) socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) syz_80211_inject_frame(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001c0010002bbd70000100010002000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xffffffffffffff46}, 0x1, 0x0, 0x0, 0x240cc067}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x8c, r10, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @void, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 23.876954909s ago: executing program 4 (id=9471): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2042) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 21.535137782s ago: executing program 4 (id=9485): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/vmallocinfo\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902120001000000000904000000f704"], 0x0) fsopen(&(0x7f0000000180)='hfs\x00', 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd25, 0xffffff81, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0x3}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x40004) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x9, 0x10000}}, './file0\x00'}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88840) ioctl$EVIOCSKEYCODE(r8, 0x40084504, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f00000006c0)="f88e2db5a1bfef2424d26226f80b90b6cc16bfa85b9a3267cb23621bdc85d2d63580f2bd4429594f8d95f5c5ab9c3d72a9a7425ce43d70259f258151361005c9e90982dc1b57e83e5e6afedc1bbccd2f7f41bb5981f250502e2faa1509b3fe198dbbc34702004c44232b88dc4dce89f5531d75bced0ac9d215fafc8ae7014617167f9bb5de7305ebaa05b4728e03951ece42a88dda680533b8425553800b2e15b68da52247df0e7c83", 0xa9}], 0x1}, 0xfc) sendmsg$inet(r9, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000003c00010325bd7000fcffffff05f5ffff56000300"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x18, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) ioctl$XFS_IOC_GETBMAP(r5, 0xc0205826, &(0x7f0000000140)={0xff, 0x4251, 0x3, 0x40000000}) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYRESOCT, @ANYRESOCT=r9, @ANYRESOCT=r1], 0x270}}, 0x8045) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) r11 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 20.871555537s ago: executing program 6 (id=9490): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x1a}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x181000, 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000003c0)={0x538, 0x534, 0x0, 'queue1\x00'}) openat$dsp(0xffffffffffffff9c, 0x0, 0x21a000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xf, 0x3, 0x2) write(r5, &(0x7f0000000380)="02", 0x33fe0) write$rfkill(r1, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f000107000000009b00000003"], 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, 0x0, &(0x7f00000021c0)) r7 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000100), 0x3) 19.831734637s ago: executing program 4 (id=9493): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x40, 0x7, 0x9, 0x19}, {0x9, 0x5, 0x9, 0x2, 0x8, 0xc, 0x1, 0x2}, {0x9, 0x5, 0xc, 0x3, 0x10, 0x8, 0x6b, 0xf7}}}}}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x3, 0x4) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000300)=0xfff) r5 = socket$nl_crypto(0x10, 0x3, 0x15) close_range(r4, r5, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/234, 0xea) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)="10") syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) (async) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x40, 0x7, 0x9, 0x19}, {0x9, 0x5, 0x9, 0x2, 0x8, 0xc, 0x1, 0x2}, {0x9, 0x5, 0xc, 0x3, 0x10, 0x8, 0x6b, 0xf7}}}}}}]}}, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r3, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x3, 0x4) (async) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000300)=0xfff) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) close_range(r4, r5, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/234, 0xea) (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)="10") (async) 19.287795285s ago: executing program 2 (id=9495): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xffe8}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (fail_nth: 4) 18.583338247s ago: executing program 2 (id=9496): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xffe8}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 18.583142813s ago: executing program 6 (id=9497): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1f) 18.484005996s ago: executing program 2 (id=9499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcba6daeb5d6ce23163300"/36}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (fail_nth: 1) 18.188759033s ago: executing program 6 (id=9500): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) dup3(r1, r0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0xa5}]}) close_range(r8, 0xffffffffffffffff, 0x0) 18.035389456s ago: executing program 2 (id=9502): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x80) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB=' \x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8898, @mcast2, 0x7}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket(0x9, 0x80000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) 17.523108602s ago: executing program 4 (id=9504): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80086303, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0xfffffffffffffe00, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x100000001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x22820adc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[], 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05072bbd7000ffdbdf256c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 17.31202055s ago: executing program 4 (id=9505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000087c0)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r3 = shmget$private(0x0, 0x13000, 0x41, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000800000/0x800000)=nil, 0x1000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000040)={0x402, 0x7, 0x1, 0x5}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x18541, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_loaded', 0x301002, 0x150) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r6, 0x7, 0x1, r6}) sendto$inet(r6, &(0x7f0000000100)="ab", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) r9 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0205710, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x3}) capget(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000014c0), 0x200, 0x2) 17.207934526s ago: executing program 3 (id=9506): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x700, &(0x7f0000000340)=[{&(0x7f0000000640)=""/10, 0xa}, {0x0}], 0x2}, 0xf0}], 0x1, 0x2, 0x0) 17.100232061s ago: executing program 2 (id=9508): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=@delqdisc={0x114, 0x25, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xf}, {0xd}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x80}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x4, 0x100, 0x8, 0x2, 0x10001, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0x8, 0x5, 0x401, 0x4, 0x5]}}, {{0x1c, 0x1, {0x0, 0x5, 0x5, 0x3, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x2, [0xfb, 0x8001]}}, {{0x1c, 0x1, {0x9, 0x5, 0x9, 0x10000, 0x0, 0xf, 0x0, 0x6}}, {0x10, 0x2, [0x9, 0x437, 0x9, 0x800, 0x8, 0xc1eb]}}, {{0x1c, 0x1, {0x40, 0x0, 0x2, 0x0, 0x2, 0x3, 0xfffffff7, 0x2}}, {0x8, 0x2, [0x2, 0xa5]}}, {{0x1c, 0x1, {0xa, 0xd, 0x4b0, 0xfffffff2, 0x0, 0x1ff, 0xb, 0x6}}, {0x10, 0x2, [0xfff7, 0x5, 0x1e3, 0x1, 0x101, 0xa2]}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000020}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r10}}) 16.342749027s ago: executing program 0 (id=9510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0x2, 0x20, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_TABLE={0x8, 0xf, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) 16.281835559s ago: executing program 3 (id=9511): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="993f9c1af8c3e77309004bb415ed2244669814a2eb6aaa9a9a562bb761e5516ab245ee774d7249a97bceff217208", 0x2e}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000680)="b6db6051d3a1d1848f67cae7aa98f670fd3a23f9242d7fc58648b9f7ad8d69cd5f82ca086db8138de47f21b1a7edb1a05ce8f2d98752aca87a5100d16f659e74ab11345d1e9c0db28e66aefc201c5d85ffb6569a36bbb7cb374f62d4fd65d4930d9411fad799038dec28996a7235a49e5ee71b9f34e7f7c61a9f3197b06c7aaa015567beca8d3d2b1fd392fa2631c2e28b54e9df466fccc87696795fbb19b1797065aad7bd351a60c6abbe7bd63d357e3a7ab1bb21f92c419b3b85ac4bb8dce30830af19591374e9b1204a23ece56d0cc5afe505819097dbc551322b07c45be8bb8dda86b49c5972f8e1", 0xea}, {&(0x7f0000000000)="576e284ccce6a44a9d3907d5bd90fdbf6c31d0c2b385e8baf03db67513e9d8", 0x1f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c98161e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311cc7b4fb0aee45c1ccb941afd07c76517b7cee360ef44217cf70bfb7f34b8cef568000e6a94f0e3a2a35edbe8739bc4203acd8179229f375ff9c71210818738eabb1988fa217f608427624c073807576e4dfbc6cae39f311d1aacfd5a6ee473edeb0947459", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a80)="c0fc27ec23129a11eb6b42fdbae11ba76778a7b68d4fd5eac6eabb8ae3fb8d929d9efc398d8fb05e07b2b90b7aada90b502e30adda417b88dd96e6eb92b60ae25ba45f67515a08877b69ac930ec6de5fe106b7a58f8e86202b461e90f1f1d1eb0954fcf5327052179f311e", 0x6b}, {&(0x7f00000018c0)="c80308947503af258859e0be5946a385f4b8494e6acd7c90dc2ad0297a4dc8e29392c13b2d8c589e8e7e2bc111c01b6c3e87c59a97e57db614b4be21c101e1c5af685176986b24f636f1a77f75b6005d7c7d2580c19f6ebe3b51226b96113fcb14db1fdc7c100c9f9bf33be9a022f4ba2bfd568f1fb7ec6bc5cca808d9ca36999f4ca6818cd6d6eebe3ea9f4f846d2c548d1bb87931cff150afa35eab1b059636efbfc21dbfd41b8e4c00e28c98c60fe81cf41a4ef6e889002a191e28b09fd4dad0e42fec4e97a64190507d9718b1092eba1fcec6f", 0xd5}, {&(0x7f00000019c0)="46813196e6a84f286f5c34523818c5d6069c3d068f0c57e97d418e3566c8e2bb2b0ca8d3a16e81357c81bb47e2916311615ecdf4da861713becc", 0x3a}, {&(0x7f0000001a80)="cc15fe0530ed7899ffef88a735d3e154c702c6a3fccffda6f61f7523150742c198aaa84e07951efd0078ec28619f6e6d0164cd62383a9fb326471c9a6664dba2315fbfd4861c1753f0c577ab5127fcbdd3545e2eecc9996e4d6de2432a8d2e73ec49702654e72ceb5f2eaf", 0x6b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}, {&(0x7f0000000bc0)="c12ec4171652cc8aae4185157494a3bad6f08750727ad1a8689828ad72c5a1a41c93bdacb7b1dad7d90235b4c5", 0x2d}], 0x2}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000c80)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b83f88797600eaa4911052cee7c5f5f210392fdb3bec0d84d4080000007511ca5efb", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="f3044983dc21ddf8bc9c02815f4b383060906089be92daac8161b70d76a097156c69c454acd5813a511f001ba51633e35df2bcb0f6bfb442842b18cea7fc403429021320034cc723c2450430fa9173e1e67afc6633cd8e25d3cbde1d35febd3aca20a899abb4b415f281bb016099db32c0bbf054e0140c02d7755664d49e1578e604ed38bb4e1bbe997a14430593a09481062694ae44716df0a39d3229bd2ba5afb137eea4afaaba9356a079d16017a9acdb50f9cd41fb07329ff48eff16d8e4a943265f8998955226c6017d83120506a7a4c201dac8", 0xd6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000f80)="d3482c", 0x3}, {&(0x7f0000000fc0)="7137ec13312d8145d8570393fb3050a3c8b059afc4320d5199568662f4ccb9c984998bb98c3eb84dcf5523d914e552e921799cd5dce581c6d9547be9fb108cefd7716a530f2f54ab8a1ec95c624a05bbbd1a457f7a13a004ceaa09547ea7939ee3ec345b8ecf70b94549e447b3f06f13f14cac134165680f21ae1ff441b52c20455ff61470b00af904511ee730fe2f22e765b60854072e8a95f5bd5cd64ce6293c9d78b679bce50fb3a1e69f4e60f12d2b122ba1439c3d", 0xb7}, {&(0x7f0000002080)="4f00f7db0712eedcf0dbddf2aae4ac4455d92d95524672e6b8d5ed45374e129003eb235d8d3891b64c9fcd66013401c68410e6cbcd942a63db26a4bb60e02963b8bb9a412f6f4bb8a7720f4e327e729596f62a6e32dc9813e9bd04637007cbc2d1fd39e6c0c7fb4a397a48704b4221ee4a881d3116486bca48c7b085abc00482844107937efe0a1ef368a36fedb87d17aa0d39408b9017152f7a8d413261ad74a3245cf58fd002f752d222074906591702c9719051c2c928abc13d6088fd75228c50748bebe0f6f0358d4b85629aad11ed947eaf2e5252680e9409", 0xdb}, {&(0x7f0000002180)="e8b4320734", 0x5}, {&(0x7f0000000b40)="fcf26cc32b83a3d1cb29a27662235c644badc5c10131219e3fc2f5b3e3e262e87636763037cc499239292cb8a4974f3a894230b787c726d4697d", 0x3a}, {&(0x7f00000003c0)="6dee53b135f4168052208f12b00a0f6182813c87637a56c0be8c65c08f21d5cdfeb92e0c6a84defbc0c703a6376f3b6b49011e1b6f1114416d279ae9cec821c5ea875570d07787d5468616004fcebeac1778fc6ff072c565508fc427df1c2de34ca5bad76a1e7f66583219", 0x6b}], 0x6}}], 0x7, 0x44008090) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16.155445507s ago: executing program 0 (id=9512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xf79e73b, 0x40}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) (fail_nth: 4) 15.758421158s ago: executing program 0 (id=9513): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f001, 0x1}) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x1, 0xa, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xb56}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x48, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x2, 0x5}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7c, 0x8, 0xb6, 0x20, 0x81}, 0x1c, &(0x7f0000000140)={0x5, 0xf, 0x1c, 0x2, [@generic={0xd, 0x10, 0xa, "b800db6c8f1cfb55d763"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x4, 0x2}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x20, 0x5, 0x49, {0x49, 0x5, "202d54416b9c1b05ea1df7b90f44600f20763c1bc00f8a8c86f9cfdb90cc2d821145bc12f4e4d664fd0e3b112cb75e58fd620a39fb2ebc80c9c0d30d5aa269017f97df71ae8212"}}, &(0x7f00000002c0)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "34f52cad0129f6d838e6050c599f366a0e4f1548e6bcfd6ed21dd9896159dd8e194e4c337a04a9dc1c904d61de5509b06bcc273e006956305ab5a91f24d562635e046f573e2e5e1664ccd6a66e2e0839cfcf191d0d5aa7b8eae553c35e04c2ca6e39c41a7a04533112892f8198a4f33cf58983cc41987bb956317027ead0b144ff6f44bc2932fd03fb37a46482e3f183a2137ffdabcad6302e59e7f19c9ee7e5654fa9a9eb36c99bd6ad20aa29037940a3064a081f8703811e79fb981085655dec055e7f3319c103c232030b951adbb331ff58f03c9ab7100691d0b428853512b3bed24f"}}, &(0x7f00000003c0)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_012={0x1, 0x2, 0x0, "9a"}, @main=@item_4={0x3, 0x0, 0x8, "ae61de02"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xc, 0x1, {0x22, 0x518}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x20, 0x31, 0x19, "60dd2ceffa7f0dc9bdfae52bff140f9878e8f3f802b463b6a3"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x57}, &(0x7f0000000540)={0x20, 0x1, 0xa2, "1c157a885ec104637a31f88794c38067fc228c6a19044211b960a7f87a957c22fbe13342f2f5b193b3e95f0684fc6e10bea0e8aacef91d38efebef69d296fe49067ec2a4cc808d2bbcbf7a795c8f30131fdda8ecc9cb290b0bb074b700c78f760285d389fd5c3aaebf506acff8a4e2b7973b835859816534d3ad4d4a326671bc7d4460e55010398f5f91f393720eb810a28c3083dda8d75225a188b04efd5fe3990d"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x8}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x58, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x2}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) 15.70550646s ago: executing program 3 (id=9514): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x8]}, 0x8, 0x80000) (async) signalfd4(r0, &(0x7f0000000040)={[0x8]}, 0x8, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x24004810) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r11], 0x68}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0xfffffffffffffe56, r12, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0xfffe, 0x1, @private1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 15.173062493s ago: executing program 6 (id=9515): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80086303, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0xfffffffffffffe00, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x100000001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x22820adc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[], 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05072bbd7000ffdbdf256c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 15.138930294s ago: executing program 4 (id=9516): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "1f3fb179300320d1c99564e21c9f4e1a79a44ecbb09254beb1687ed03a74eee8f912709bb422284d2a274e3b00d2f5105d42bbdfc28338555619efd1a754194b", 0x24}, 0x48, 0xfffffffffffffffc) keyctl$setperm(0x5, r4, 0x2) keyctl$revoke(0x3, r4) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x809f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket(0x10, 0x2, 0x0) socket(0x200000000000011, 0x2, 0x0) 14.787188646s ago: executing program 6 (id=9517): r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r1, 0x8800000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000600)=0x3) sendfile(0xffffffffffffffff, r1, 0x0, 0x558410e9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "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"}, 0x14c) execveat(r4, 0x0, 0x0, 0x0, 0x1000) select(0x406f205456671cf9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fo', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x6a) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/10, 0xa}, {0x0}], 0x2}, 0xf0}], 0x1, 0x2, 0x0) 14.431926633s ago: executing program 3 (id=9518): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x80) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB=' \x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8898, @mcast2, 0x7}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket(0x9, 0x80000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) 10.958400498s ago: executing program 3 (id=9519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xf79e73b, 0x40}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) 10.343903245s ago: executing program 2 (id=9520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x183100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000000c0), &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket(0xf, 0x3, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r6, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040054) 10.275418148s ago: executing program 0 (id=9521): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000003bc0)=0x7ff, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="c437b78cb64c", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, '\x00', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@hopopts], @pkt_toobig={0x2, 0x0, 0x0, 0x8, {0x2, 0x6, "1611be", 0x81, 0x3a, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}, 0x0) (fail_nth: 4) 10.250025493s ago: executing program 3 (id=9522): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "1f3fb179300320d1c99564e21c9f4e1a79a44ecbb09254beb1687ed03a74eee8f912709bb422284d2a274e3b00d2f5105d42bbdfc28338555619efd1a754194b", 0x24}, 0x48, 0xfffffffffffffffc) keyctl$setperm(0x5, r4, 0x2) keyctl$revoke(0x3, r4) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x809f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket(0x10, 0x2, 0x0) socket(0x200000000000011, 0x2, 0x0) 9.77849991s ago: executing program 6 (id=9523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ff", 0x0, 0x6b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x25, &(0x7f0000000000)=r9, 0x20000010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000035000000ad551458f4eb74040000000000000000000a40000000040a01010000000000000000000000060900020073797a31000000000900010073797a310000000008000380100000800c0001800600010012ad0000140000001100010000000000000000000000000a88d6025ff0c8606045"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.639335278s ago: executing program 0 (id=9524): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="993f9c1af8c3e77309004bb415ed2244669814a2eb6aaa9a9a562bb761e5516ab245ee774d7249a97bceff217208", 0x2e}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000680)="b6db6051d3a1d1848f67cae7aa98f670fd3a23f9242d7fc58648b9f7ad8d69cd5f82ca086db8138de47f21b1a7edb1a05ce8f2d98752aca87a5100d16f659e74ab11345d1e9c0db28e66aefc201c5d85ffb6569a36bbb7cb374f62d4fd65d4930d9411fad799038dec28996a7235a49e5ee71b9f34e7f7c61a9f3197b06c7aaa015567beca8d3d2b1fd392fa2631c2e28b54e9df466fccc87696795fbb19b1797065aad7bd351a60c6abbe7bd63d357e3a7ab1bb21f92c419b3b85ac4bb8dce30830af19591374e9b1204a23ece56d0cc5afe505819097dbc551322b07c45be8bb8dda86b49c5972f8e1", 0xea}, {&(0x7f0000000000)="576e284ccce6a44a9d3907d5bd90fdbf6c31d0c2b385e8baf03db67513e9d8", 0x1f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c98161e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311cc7b4fb0aee45c1ccb941afd07c76517b7cee360ef44217cf70bfb7f34b8cef568000e6a94f0e3a2a35edbe8739bc4203acd8179229f375ff9c71210818738eabb1988fa217f608427624c073807576e4dfbc6cae39f311d1aacfd5a6ee473edeb0947459", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a80)="c0fc27ec23129a11eb6b42fdbae11ba76778a7b68d4fd5eac6eabb8ae3fb8d929d9efc398d8fb05e07b2b90b7aada90b502e30adda417b88dd96e6eb92b60ae25ba45f67515a08877b69ac930ec6de5fe106b7a58f8e86202b461e90f1f1d1eb0954fcf5327052179f311e", 0x6b}, {&(0x7f00000018c0)="c80308947503af258859e0be5946a385f4b8494e6acd7c90dc2ad0297a4dc8e29392c13b2d8c589e8e7e2bc111c01b6c3e87c59a97e57db614b4be21c101e1c5af685176986b24f636f1a77f75b6005d7c7d2580c19f6ebe3b51226b96113fcb14db1fdc7c100c9f9bf33be9a022f4ba2bfd568f1fb7ec6bc5cca808d9ca36999f4ca6818cd6d6eebe3ea9f4f846d2c548d1bb87931cff150afa35eab1b059636efbfc21dbfd41b8e4c00e28c98c60fe81cf41a4ef6e889002a191e28b09fd4dad0e42fec4e97a64190507d9718b1092eba1fcec6f", 0xd5}, {&(0x7f00000019c0)="46813196e6a84f286f5c34523818c5d6069c3d068f0c57e97d418e3566c8e2bb2b0ca8d3a16e81357c81bb47e2916311615ecdf4da861713becc", 0x3a}, {&(0x7f0000001a80)="cc15fe0530ed7899ffef88a735d3e154c702c6a3fccffda6f61f7523150742c198aaa84e07951efd0078ec28619f6e6d0164cd62383a9fb326471c9a6664dba2315fbfd4861c1753f0c577ab5127fcbdd3545e2eecc9996e4d6de2432a8d2e73ec49702654e72ceb5f2eaf", 0x6b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}, {&(0x7f0000000bc0)="c12ec4171652cc8aae4185157494a3bad6f08750727ad1a8689828ad72c5a1a41c93bdacb7b1dad7d90235b4c5", 0x2d}], 0x2}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000c80)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b83f88797600eaa4911052cee7c5f5f210392fdb3bec0d84d4080000007511ca5efb", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="f3044983dc21ddf8bc9c02815f4b383060906089be92daac8161b70d76a097156c69c454acd5813a511f001ba51633e35df2bcb0f6bfb442842b18cea7fc403429021320034cc723c2450430fa9173e1e67afc6633cd8e25d3cbde1d35febd3aca20a899abb4b415f281bb016099db32c0bbf054e0140c02d7755664d49e1578e604ed38bb4e1bbe997a14430593a09481062694ae44716df0a39d3229bd2ba5afb137eea4afaaba9356a079d16017a9acdb50f9cd41fb07329ff48eff16d8e4a943265f8998955226c6017d83120506a7a4c201dac8", 0xd6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000f80)="d3482c", 0x3}, {&(0x7f0000000fc0)="7137ec13312d8145d8570393fb3050a3c8b059afc4320d5199568662f4ccb9c984998bb98c3eb84dcf5523d914e552e921799cd5dce581c6d9547be9fb108cefd7716a530f2f54ab8a1ec95c624a05bbbd1a457f7a13a004ceaa09547ea7939ee3ec345b8ecf70b94549e447b3f06f13f14cac134165680f21ae1ff441b52c20455ff61470b00af904511ee730fe2f22e765b60854072e8a95f5bd5cd64ce6293c9d78b679bce50fb3a1e69f4e60f12d2b122ba1439c3d", 0xb7}, {&(0x7f0000002080)="4f00f7db0712eedcf0dbddf2aae4ac4455d92d95524672e6b8d5ed45374e129003eb235d8d3891b64c9fcd66013401c68410e6cbcd942a63db26a4bb60e02963b8bb9a412f6f4bb8a7720f4e327e729596f62a6e32dc9813e9bd04637007cbc2d1fd39e6c0c7fb4a397a48704b4221ee4a881d3116486bca48c7b085abc00482844107937efe0a1ef368a36fedb87d17aa0d39408b9017152f7a8d413261ad74a3245cf58fd002f752d222074906591702c9719051c2c928abc13d6088fd75228c50748bebe0f6f0358d4b85629aad11ed947eaf2e5252680e9409", 0xdb}, {&(0x7f0000002180)="e8b4320734", 0x5}, {&(0x7f0000000b40)="fcf26cc32b83a3d1cb29a27662235c644badc5c10131219e3fc2f5b3e3e262e87636763037cc499239292cb8a4974f3a894230b787c726d4697d", 0x3a}, {&(0x7f00000003c0)="6dee53b135f4168052208f12b00a0f6182813c87637a56c0be8c65c08f21d5cdfeb92e0c6a84defbc0c703a6376f3b6b49011e1b6f1114416d279ae9cec821c5ea875570d07787d5468616004fcebeac1778fc6ff072c565508fc427df1c2de34ca5bad76a1e7f66583219", 0x6b}], 0x6}}], 0x7, 0x44008090) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=9525): ioprio_set$pid(0x2, 0x0, 0x4000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x2000000003c0, 0x88203) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="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", 0x7f0) madvise(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x9) kernel console output (not intermixed with test programs): 6.277982][T15861] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1756.290628][T15861] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1756.303369][T15861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.311859][T15861] usb 4-1: Product: syz [ 1756.316158][T15861] usb 4-1: Manufacturer: syz [ 1756.320796][T15861] usb 4-1: SerialNumber: syz [ 1756.328741][T15861] usb 4-1: config 0 descriptor?? [ 1756.340842][ T1811] ldusb 7-1:0.55: Write buffer overflow, 162 bytes dropped [ 1756.353245][ T1811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.362610][ T1811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.411117][T29197] usb 7-1: USB disconnect, device number 15 [ 1756.429641][ T1796] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.440633][ T1796] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.452189][T29197] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1756.546822][T15861] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1756.579833][T15861] cx231xx 4-1:0.1: Failed to read PCB config [ 1756.586164][T15861] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1756.598260][ T1796] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.605503][T15861] usb 4-1: USB disconnect, device number 17 [ 1756.612528][ T1796] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.699608][ T1796] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.710479][ T1796] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.881751][ T1796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1756.918859][ T1796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1756.933844][ T1796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1756.934697][T15861] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1756.958124][ T1796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1757.123471][ T1796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1757.144191][T15861] usb 4-1: Using ep0 maxpacket: 16 [ 1757.156223][ T1796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1757.156227][T15861] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1757.161729][T15861] usb 4-1: New USB device found, idVendor=2001, idProduct=330d, bcdDevice=94.0b [ 1757.182473][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.189826][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.204250][T15861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.212418][T15861] usb 4-1: Product: syz [ 1757.224251][T15861] usb 4-1: Manufacturer: syz [ 1757.232135][T15861] usb 4-1: SerialNumber: syz [ 1757.238698][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.245974][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1757.264904][T15861] usb 4-1: config 0 descriptor?? [ 1757.341279][ T1796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1757.402974][ T1796] veth0_vlan: entered promiscuous mode [ 1757.421139][ T1796] veth1_vlan: entered promiscuous mode [ 1757.518235][ T1796] veth0_macvtap: entered promiscuous mode [ 1757.537037][ T1796] veth1_macvtap: entered promiscuous mode [ 1757.598171][ T1796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1757.634039][ T1796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.651814][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.674419][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.694208][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.703454][T26885] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.724253][T32350] Bluetooth: hci2: command tx timeout [ 1757.868550][ T6974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.912824][T29197] usb 4-1: USB disconnect, device number 18 [ 1757.919912][ T6974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.114604][T26885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.126920][T32350] Bluetooth: hci0: command 0x0406 tx timeout [ 1758.161168][T26885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.188195][ T1852] syzkaller0: entered promiscuous mode [ 1758.206481][ T1853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9301'. [ 1758.236758][ T1852] syzkaller0: entered allmulticast mode [ 1758.258847][ T1852] FAULT_INJECTION: forcing a failure. [ 1758.258847][ T1852] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.351896][ T1852] CPU: 0 UID: 0 PID: 1852 Comm: syz.6.9303 Tainted: G L syzkaller #0 PREEMPT(full) [ 1758.351932][ T1852] Tainted: [L]=SOFTLOCKUP [ 1758.351941][ T1852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1758.351963][ T1852] Call Trace: [ 1758.351972][ T1852] [ 1758.351982][ T1852] dump_stack_lvl+0xe8/0x150 [ 1758.352016][ T1852] should_fail_ex+0x412/0x560 [ 1758.352051][ T1852] should_failslab+0xa8/0x100 [ 1758.352084][ T1852] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1758.352111][ T1852] ? __alloc_skb+0x193/0x390 [ 1758.352141][ T1852] ? __alloc_skb+0x1d7/0x390 [ 1758.352170][ T1852] ? __local_bh_enable_ip+0xd0/0x130 [ 1758.352195][ T1852] ? __alloc_skb+0x193/0x390 [ 1758.352227][ T1852] __alloc_skb+0x1d7/0x390 [ 1758.352263][ T1852] alloc_skb_with_frags+0xca/0x890 [ 1758.352298][ T1852] ? __lock_acquire+0x6b5/0x2cf0 [ 1758.352323][ T1852] ? process_measurement+0x7ce/0x1c80 [ 1758.352348][ T1852] sock_alloc_send_pskb+0x878/0x990 [ 1758.352378][ T1852] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1758.352418][ T1852] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1758.352445][ T1852] ? dev_get_by_index+0x22/0x2e0 [ 1758.352532][ T1852] ? dev_get_by_index+0x22/0x2e0 [ 1758.352562][ T1852] packet_sendmsg+0x33e5/0x50f0 [ 1758.352602][ T1852] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1758.352632][ T1852] ? __lock_acquire+0x6b5/0x2cf0 [ 1758.352663][ T1852] ? unwind_next_frame+0xa5/0x23c0 [ 1758.352706][ T1852] ? aa_sk_perm+0x15a/0x960 [ 1758.352733][ T1852] ? aa_sk_perm+0x82d/0x960 [ 1758.352759][ T1852] ? __pfx_packet_sendmsg+0x10/0x10 [ 1758.352799][ T1852] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1758.352838][ T1852] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1758.352869][ T1852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1758.352899][ T1852] ? __pfx_packet_sendmsg+0x10/0x10 [ 1758.352936][ T1852] ____sys_sendmsg+0xa68/0xad0 [ 1758.353050][ T1852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1758.353082][ T1852] ? import_iovec+0x73/0xa0 [ 1758.353108][ T1852] ___sys_sendmsg+0x2a5/0x360 [ 1758.353128][ T1852] ? __lock_acquire+0x6b5/0x2cf0 [ 1758.353156][ T1852] ? __pfx____sys_sendmsg+0x10/0x10 [ 1758.353212][ T1852] ? __fget_files+0x2a/0x420 [ 1758.353233][ T1852] ? __fget_files+0x3a0/0x420 [ 1758.353264][ T1852] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1758.353289][ T1852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1758.353321][ T1852] ? __pfx_ksys_write+0x10/0x10 [ 1758.353359][ T1852] do_syscall_64+0x14d/0xf80 [ 1758.353388][ T1852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.353410][ T1852] ? trace_irq_disable+0x37/0x100 [ 1758.353434][ T1852] ? clear_bhb_loop+0x40/0x90 [ 1758.353461][ T1852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.353482][ T1852] RIP: 0033:0x7fe71bf9bf79 [ 1758.353503][ T1852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.353522][ T1852] RSP: 002b:00007fe71a1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1758.353546][ T1852] RAX: ffffffffffffffda RBX: 00007fe71c215fa0 RCX: 00007fe71bf9bf79 [ 1758.353563][ T1852] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1758.353578][ T1852] RBP: 00007fe71a1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.353592][ T1852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.353605][ T1852] R13: 00007fe71c216038 R14: 00007fe71c215fa0 R15: 00007fe71c33fa48 [ 1758.353639][ T1852] [ 1758.912521][T29197] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1759.093213][ T1861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9304'. [ 1759.124249][T29197] usb 4-1: Using ep0 maxpacket: 32 [ 1759.150358][T29197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.206219][T29197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.251483][T29197] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1759.315455][T29197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.412415][T29197] usb 4-1: config 0 descriptor?? [ 1759.463196][T29197] hub 4-1:0.0: USB hub found [ 1759.811811][T29197] hub 4-1:0.0: 1 port detected [ 1759.817817][ T5143] Bluetooth: hci2: command tx timeout [ 1760.088838][ T1868] program syz.4.9305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1760.207586][ T29] audit: type=1326 audit(1770783919.759:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cd39bf79 code=0x7ffc0000 [ 1760.276962][ T29] audit: type=1326 audit(1770783919.759:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cd39bf79 code=0x7ffc0000 [ 1760.301177][ T29] audit: type=1326 audit(1770783919.789:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff6cd39bf79 code=0x7ffc0000 [ 1760.373335][ T29] audit: type=1326 audit(1770783919.789:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cd39bf79 code=0x7ffc0000 [ 1760.455618][ T29] audit: type=1326 audit(1770783919.789:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cd39bf79 code=0x7ffc0000 [ 1760.481818][ T29] audit: type=1326 audit(1770783919.789:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff6cd39bf79 code=0x7ffc0000 [ 1760.482495][ T1848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.521940][ T29] audit: type=1326 audit(1770783919.789:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6cd33d399 code=0x7ffc0000 [ 1760.547011][ T1876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9309'. [ 1760.580588][ T29] audit: type=1326 audit(1770783919.789:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cd39bf79 code=0x7ffc0000 [ 1760.585775][ T1848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.643911][ T29] audit: type=1326 audit(1770783919.789:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cd39bf79 code=0x7ffc0000 [ 1760.671531][ T1879] binder: binder_mmap: 1878 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 1760.746716][ T1881] tun0: tun_chr_ioctl cmd 1074025677 [ 1760.752242][ T1881] tun0: linktype set to 6 [ 1760.781276][ T1881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9311'. [ 1760.795306][ T1881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9311'. [ 1760.813073][T29212] hub 4-1:0.0: activate --> -90 [ 1761.034285][T15871] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1761.124652][ T1019] usb 4-1: USB disconnect, device number 19 [ 1761.135241][ T1900] FAULT_INJECTION: forcing a failure. [ 1761.135241][ T1900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.173179][ T1900] CPU: 0 UID: 0 PID: 1900 Comm: syz.0.9317 Tainted: G L syzkaller #0 PREEMPT(full) [ 1761.173204][ T1900] Tainted: [L]=SOFTLOCKUP [ 1761.173211][ T1900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1761.173221][ T1900] Call Trace: [ 1761.173227][ T1900] [ 1761.173234][ T1900] dump_stack_lvl+0xe8/0x150 [ 1761.173263][ T1900] should_fail_ex+0x412/0x560 [ 1761.173289][ T1900] _copy_from_iter+0x1d3/0x1670 [ 1761.173317][ T1900] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1761.173338][ T1900] ? __pfx__copy_from_iter+0x10/0x10 [ 1761.173361][ T1900] ? __build_skb_around+0x22d/0x3c0 [ 1761.173386][ T1900] ? __alloc_skb+0x193/0x390 [ 1761.173408][ T1900] ? netlink_sendmsg+0x650/0xb40 [ 1761.173428][ T1900] ? skb_put+0x11b/0x210 [ 1761.173453][ T1900] netlink_sendmsg+0x6c0/0xb40 [ 1761.173480][ T1900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.173506][ T1900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1761.173534][ T1900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1761.173559][ T1900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.173579][ T1900] ____sys_sendmsg+0xa68/0xad0 [ 1761.173594][ T1900] ? __might_fault+0xaf/0x130 [ 1761.173616][ T1900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1761.173638][ T1900] ? import_iovec+0x73/0xa0 [ 1761.173655][ T1900] ___sys_sendmsg+0x2a5/0x360 [ 1761.173670][ T1900] ? __lock_acquire+0x6b5/0x2cf0 [ 1761.173689][ T1900] ? __pfx____sys_sendmsg+0x10/0x10 [ 1761.173736][ T1900] ? __fget_files+0x2a/0x420 [ 1761.173757][ T1900] ? __fget_files+0x3a0/0x420 [ 1761.173784][ T1900] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1761.173801][ T1900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1761.173823][ T1900] ? __pfx_ksys_write+0x10/0x10 [ 1761.173849][ T1900] do_syscall_64+0x14d/0xf80 [ 1761.173871][ T1900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.173886][ T1900] ? trace_irq_disable+0x37/0x100 [ 1761.173904][ T1900] ? clear_bhb_loop+0x40/0x90 [ 1761.173922][ T1900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.173937][ T1900] RIP: 0033:0x7fb4b699bf79 [ 1761.173951][ T1900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.173965][ T1900] RSP: 002b:00007fb4b7816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1761.173982][ T1900] RAX: ffffffffffffffda RBX: 00007fb4b6c15fa0 RCX: 00007fb4b699bf79 [ 1761.173994][ T1900] RDX: 0000000000044000 RSI: 0000200000001640 RDI: 0000000000000004 [ 1761.174004][ T1900] RBP: 00007fb4b7816090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.174014][ T1900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.174023][ T1900] R13: 00007fb4b6c16038 R14: 00007fb4b6c15fa0 R15: 00007fb4b6d3fa48 [ 1761.174046][ T1900] [ 1761.824572][T15871] usb 7-1: Using ep0 maxpacket: 16 [ 1761.837125][T15871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.879083][T15871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1761.885601][ T5143] Bluetooth: hci2: command tx timeout [ 1761.909820][T15871] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1761.929319][T15871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.002918][T15871] usb 7-1: config 0 descriptor?? [ 1762.022565][T15871] xbox_remote_probe: endpoint_in message size==0? [ 1762.235138][ T1916] netlink: 620 bytes leftover after parsing attributes in process `syz.2.9321'. [ 1762.275648][ T1919] program syz.3.9322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1762.338615][ T1920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1763.942039][T15871] usbhid 7-1:0.0: can't add hid device: -71 [ 1763.988824][T15871] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1764.072667][T15871] usb 7-1: USB disconnect, device number 16 [ 1764.399252][ T1930] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.9323'. [ 1765.064987][ T1955] FAULT_INJECTION: forcing a failure. [ 1765.064987][ T1955] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.100746][ T1955] CPU: 0 UID: 0 PID: 1955 Comm: syz.4.9334 Tainted: G L syzkaller #0 PREEMPT(full) [ 1765.100782][ T1955] Tainted: [L]=SOFTLOCKUP [ 1765.100788][ T1955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1765.100799][ T1955] Call Trace: [ 1765.100805][ T1955] [ 1765.100813][ T1955] dump_stack_lvl+0xe8/0x150 [ 1765.100838][ T1955] should_fail_ex+0x412/0x560 [ 1765.100864][ T1955] should_failslab+0xa8/0x100 [ 1765.100889][ T1955] __kmalloc_noprof+0xde/0x7e0 [ 1765.100908][ T1955] ? sctp_send_reset_streams+0x370/0xd60 [ 1765.100927][ T1955] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1765.100951][ T1955] sctp_send_reset_streams+0x370/0xd60 [ 1765.100973][ T1955] ? __local_bh_enable_ip+0xd0/0x130 [ 1765.100994][ T1955] sctp_setsockopt+0x9d4/0x12c0 [ 1765.101017][ T1955] ? sock_common_setsockopt+0x36/0xc0 [ 1765.101038][ T1955] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1765.101059][ T1955] do_sock_setsockopt+0x17c/0x1b0 [ 1765.101086][ T1955] __x64_sys_setsockopt+0x13d/0x1b0 [ 1765.101114][ T1955] do_syscall_64+0x14d/0xf80 [ 1765.101136][ T1955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.101151][ T1955] ? trace_irq_disable+0x37/0x100 [ 1765.101169][ T1955] ? clear_bhb_loop+0x40/0x90 [ 1765.101187][ T1955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.101208][ T1955] RIP: 0033:0x7f777639bf79 [ 1765.101223][ T1955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.101237][ T1955] RSP: 002b:00007f777725a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1765.101254][ T1955] RAX: ffffffffffffffda RBX: 00007f7776615fa0 RCX: 00007f777639bf79 [ 1765.101266][ T1955] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 1765.101276][ T1955] RBP: 00007f777725a090 R08: 0000000000000018 R09: 0000000000000000 [ 1765.101286][ T1955] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1765.101296][ T1955] R13: 00007f7776616038 R14: 00007f7776615fa0 R15: 00007f777673fa48 [ 1765.101320][ T1955] [ 1765.688219][ T1962] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9337'. [ 1765.747941][ T1964] netlink: 'syz.4.9338': attribute type 1 has an invalid length. [ 1765.836203][ T1969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9338'. [ 1766.008272][ T1976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9342'. [ 1767.117320][ T2001] xt_connbytes: Forcing CT accounting to be enabled [ 1767.360898][ T2009] openvswitch: netlink: IP tunnel dst address not specified [ 1767.468140][ T2009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9351'. [ 1767.536518][ T2015] FAULT_INJECTION: forcing a failure. [ 1767.536518][ T2015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.567217][ T2015] CPU: 1 UID: 0 PID: 2015 Comm: syz.2.9353 Tainted: G L syzkaller #0 PREEMPT(full) [ 1767.567252][ T2015] Tainted: [L]=SOFTLOCKUP [ 1767.567261][ T2015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1767.567274][ T2015] Call Trace: [ 1767.567283][ T2015] [ 1767.567293][ T2015] dump_stack_lvl+0xe8/0x150 [ 1767.567335][ T2015] should_fail_ex+0x412/0x560 [ 1767.567369][ T2015] _copy_from_user+0x2d/0xb0 [ 1767.567392][ T2015] csum_and_copy_from_iter_full+0x491/0x1f00 [ 1767.567415][ T2015] ? rcu_is_watching+0x15/0xb0 [ 1767.567463][ T2015] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1767.567485][ T2015] ? ip6_pol_route+0x160/0x13d0 [ 1767.567514][ T2015] ? ip6_pol_route+0x103f/0x13d0 [ 1767.567540][ T2015] ? ip6_pol_route+0x160/0x13d0 [ 1767.567580][ T2015] ip_generic_getfrag+0x149/0x2d0 [ 1767.567618][ T2015] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1767.567649][ T2015] ? skb_page_frag_refill+0x199/0x310 [ 1767.567682][ T2015] __ip6_append_data+0x2241/0x3f50 [ 1767.567738][ T2015] ? __pfx_raw6_getfrag+0x10/0x10 [ 1767.567781][ T2015] ? __pfx___ip6_append_data+0x10/0x10 [ 1767.567815][ T2015] ? do_raw_spin_lock+0x12b/0x2f0 [ 1767.567854][ T2015] ip6_append_data+0x1c0/0x380 [ 1767.567891][ T2015] ? __pfx_raw6_getfrag+0x10/0x10 [ 1767.567915][ T2015] rawv6_sendmsg+0x12fc/0x18f0 [ 1767.567955][ T2015] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1767.567998][ T2015] ? aa_sk_perm+0x82d/0x960 [ 1767.568034][ T2015] ? __pfx_aa_sk_perm+0x10/0x10 [ 1767.568065][ T2015] ? sock_rps_record_flow+0x19/0x400 [ 1767.568090][ T2015] ? inet_sendmsg+0x2f4/0x370 [ 1767.568110][ T2015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1767.568143][ T2015] ____sys_sendmsg+0x894/0xad0 [ 1767.568165][ T2015] ? __might_fault+0xaf/0x130 [ 1767.568196][ T2015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1767.568227][ T2015] ? import_iovec+0x73/0xa0 [ 1767.568253][ T2015] ___sys_sendmsg+0x2a5/0x360 [ 1767.568272][ T2015] ? __lock_acquire+0x6b5/0x2cf0 [ 1767.568298][ T2015] ? __pfx____sys_sendmsg+0x10/0x10 [ 1767.568356][ T2015] ? __fget_files+0x2a/0x420 [ 1767.568375][ T2015] ? __fget_files+0x3a0/0x420 [ 1767.568407][ T2015] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1767.568432][ T2015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1767.568472][ T2015] ? __pfx_ksys_write+0x10/0x10 [ 1767.568510][ T2015] do_syscall_64+0x14d/0xf80 [ 1767.568540][ T2015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.568561][ T2015] ? trace_irq_disable+0x37/0x100 [ 1767.568585][ T2015] ? clear_bhb_loop+0x40/0x90 [ 1767.568611][ T2015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.568633][ T2015] RIP: 0033:0x7f211c79bf79 [ 1767.568652][ T2015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1767.568672][ T2015] RSP: 002b:00007f211d672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1767.568696][ T2015] RAX: ffffffffffffffda RBX: 00007f211ca16090 RCX: 00007f211c79bf79 [ 1767.568713][ T2015] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1767.568728][ T2015] RBP: 00007f211d672090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.568743][ T2015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.568756][ T2015] R13: 00007f211ca16128 R14: 00007f211ca16090 R15: 00007f211cb3fa48 [ 1767.568791][ T2015] [ 1767.904869][ T2017] FAULT_INJECTION: forcing a failure. [ 1767.904869][ T2017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.918086][ T2017] CPU: 1 UID: 0 PID: 2017 Comm: syz.3.9354 Tainted: G L syzkaller #0 PREEMPT(full) [ 1767.918111][ T2017] Tainted: [L]=SOFTLOCKUP [ 1767.918117][ T2017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1767.918127][ T2017] Call Trace: [ 1767.918135][ T2017] [ 1767.918142][ T2017] dump_stack_lvl+0xe8/0x150 [ 1767.918168][ T2017] should_fail_ex+0x412/0x560 [ 1767.918203][ T2017] _copy_from_iter+0x3b0/0x1670 [ 1767.918235][ T2017] ? __pfx__copy_from_iter+0x10/0x10 [ 1767.918259][ T2017] ? __build_skb_around+0x22d/0x3c0 [ 1767.918284][ T2017] ? __alloc_skb+0x193/0x390 [ 1767.918306][ T2017] ? netlink_sendmsg+0x650/0xb40 [ 1767.918326][ T2017] ? skb_put+0x11b/0x210 [ 1767.918352][ T2017] netlink_sendmsg+0x6c0/0xb40 [ 1767.918379][ T2017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1767.918401][ T2017] ? aa_file_perm+0x12d/0x1630 [ 1767.918424][ T2017] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1767.918446][ T2017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1767.918470][ T2017] sock_write_iter+0x503/0x550 [ 1767.918490][ T2017] ? __pfx_sock_write_iter+0x10/0x10 [ 1767.918524][ T2017] do_iter_readv_writev+0x619/0x8c0 [ 1767.918547][ T2017] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1767.918571][ T2017] ? bpf_lsm_file_permission+0x9/0x20 [ 1767.918593][ T2017] ? security_file_permission+0x75/0x260 [ 1767.918612][ T2017] ? rw_verify_area+0x255/0x4d0 [ 1767.918632][ T2017] vfs_writev+0x33c/0x990 [ 1767.918662][ T2017] ? __pfx_vfs_writev+0x10/0x10 [ 1767.918694][ T2017] ? __fget_files+0x2a/0x420 [ 1767.918712][ T2017] ? __fget_files+0x3a0/0x420 [ 1767.918726][ T2017] ? __fget_files+0x2a/0x420 [ 1767.918747][ T2017] do_writev+0x154/0x2e0 [ 1767.918771][ T2017] ? __pfx_do_writev+0x10/0x10 [ 1767.918802][ T2017] do_syscall_64+0x14d/0xf80 [ 1767.918824][ T2017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.918839][ T2017] ? trace_irq_disable+0x37/0x100 [ 1767.918857][ T2017] ? clear_bhb_loop+0x40/0x90 [ 1767.918875][ T2017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.918891][ T2017] RIP: 0033:0x7ff6cd39bf79 [ 1767.918906][ T2017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1767.918920][ T2017] RSP: 002b:00007ff6ce21c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1767.918937][ T2017] RAX: ffffffffffffffda RBX: 00007ff6cd615fa0 RCX: 00007ff6cd39bf79 [ 1767.918949][ T2017] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 1767.918959][ T2017] RBP: 00007ff6ce21c090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.918969][ T2017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.918979][ T2017] R13: 00007ff6cd616038 R14: 00007ff6cd615fa0 R15: 00007ff6cd73fa48 [ 1767.919002][ T2017] [ 1768.201312][T15891] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 1768.350682][ T2024] FAULT_INJECTION: forcing a failure. [ 1768.350682][ T2024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.365060][ T2024] CPU: 0 UID: 0 PID: 2024 Comm: syz.4.9357 Tainted: G L syzkaller #0 PREEMPT(full) [ 1768.365094][ T2024] Tainted: [L]=SOFTLOCKUP [ 1768.365102][ T2024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1768.365116][ T2024] Call Trace: [ 1768.365125][ T2024] [ 1768.365135][ T2024] dump_stack_lvl+0xe8/0x150 [ 1768.365173][ T2024] should_fail_ex+0x412/0x560 [ 1768.365198][ T2024] _copy_to_user+0x31/0xb0 [ 1768.365215][ T2024] simple_read_from_buffer+0xe1/0x170 [ 1768.365250][ T2024] proc_fail_nth_read+0x1bb/0x230 [ 1768.365274][ T2024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.365296][ T2024] ? rw_verify_area+0x2a6/0x4d0 [ 1768.365314][ T2024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.365335][ T2024] vfs_read+0x20c/0xa70 [ 1768.365352][ T2024] ? fdget_pos+0x246/0x320 [ 1768.365371][ T2024] ? __pfx___mutex_lock+0x10/0x10 [ 1768.365394][ T2024] ? __pfx_vfs_read+0x10/0x10 [ 1768.365413][ T2024] ? __fget_files+0x2a/0x420 [ 1768.365430][ T2024] ? __fget_files+0x3a0/0x420 [ 1768.365444][ T2024] ? __fget_files+0x2a/0x420 [ 1768.365465][ T2024] ksys_read+0x150/0x270 [ 1768.365484][ T2024] ? __pfx_ksys_read+0x10/0x10 [ 1768.365511][ T2024] do_syscall_64+0x14d/0xf80 [ 1768.365536][ T2024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.365552][ T2024] ? trace_irq_disable+0x37/0x100 [ 1768.365580][ T2024] ? clear_bhb_loop+0x40/0x90 [ 1768.365602][ T2024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.365618][ T2024] RIP: 0033:0x7f777635c84e [ 1768.365633][ T2024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1768.365650][ T2024] RSP: 002b:00007f7777259fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1768.365673][ T2024] RAX: ffffffffffffffda RBX: 00007f777725a6c0 RCX: 00007f777635c84e [ 1768.365685][ T2024] RDX: 000000000000000f RSI: 00007f777725a0a0 RDI: 0000000000000004 [ 1768.365695][ T2024] RBP: 00007f777725a090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.365705][ T2024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.365715][ T2024] R13: 00007f7776616038 R14: 00007f7776615fa0 R15: 00007f777673fa48 [ 1768.365765][ T2024] [ 1768.432551][T15891] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1768.614493][T15891] usb 7-1: config 0 has no interface number 0 [ 1768.620820][T15891] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1768.632404][T15891] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1768.643939][T15891] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1768.653921][T15891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.654662][T29212] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1768.687478][T15891] usb 7-1: config 0 descriptor?? [ 1768.698497][ T2011] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1768.711479][T15891] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1768.763772][ T2028] FAULT_INJECTION: forcing a failure. [ 1768.763772][ T2028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.781557][ T2028] CPU: 0 UID: 0 PID: 2028 Comm: syz.4.9359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1768.781582][ T2028] Tainted: [L]=SOFTLOCKUP [ 1768.781587][ T2028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1768.781597][ T2028] Call Trace: [ 1768.781604][ T2028] [ 1768.781610][ T2028] dump_stack_lvl+0xe8/0x150 [ 1768.781635][ T2028] should_fail_ex+0x412/0x560 [ 1768.781666][ T2028] _copy_from_user+0x2d/0xb0 [ 1768.781705][ T2028] kstrtouint_from_user+0xd6/0x180 [ 1768.781729][ T2028] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1768.781757][ T2028] ? proc_loginuid_write+0xf4/0x510 [ 1768.781778][ T2028] ? proc_loginuid_write+0xf4/0x510 [ 1768.781798][ T2028] proc_loginuid_write+0x3e7/0x510 [ 1768.781820][ T2028] ? __pfx_proc_loginuid_write+0x10/0x10 [ 1768.781849][ T2028] vfs_writev+0x4bd/0x990 [ 1768.781873][ T2028] ? __pfx_proc_loginuid_write+0x10/0x10 [ 1768.781897][ T2028] ? __pfx_vfs_writev+0x10/0x10 [ 1768.781930][ T2028] ? __fget_files+0x2a/0x420 [ 1768.781948][ T2028] ? __fget_files+0x3a0/0x420 [ 1768.781961][ T2028] ? __fget_files+0x2a/0x420 [ 1768.781981][ T2028] __x64_sys_pwritev+0x19f/0x2a0 [ 1768.782030][ T2028] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1768.782071][ T2028] do_syscall_64+0x14d/0xf80 [ 1768.782110][ T2028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.782126][ T2028] ? trace_irq_disable+0x37/0x100 [ 1768.782143][ T2028] ? clear_bhb_loop+0x40/0x90 [ 1768.782161][ T2028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.782177][ T2028] RIP: 0033:0x7f777639bf79 [ 1768.782191][ T2028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.782205][ T2028] RSP: 002b:00007f777725a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1768.782222][ T2028] RAX: ffffffffffffffda RBX: 00007f7776615fa0 RCX: 00007f777639bf79 [ 1768.782234][ T2028] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 1768.782244][ T2028] RBP: 00007f777725a090 R08: 0000000000006c7b R09: 0000000000000000 [ 1768.782254][ T2028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.782264][ T2028] R13: 00007f7776616038 R14: 00007f7776615fa0 R15: 00007f777673fa48 [ 1768.782288][ T2028] [ 1769.011698][ T2030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.020627][ T2030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.052617][ T2011] bond1: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 1769.063917][ T2011] bond1 (unregistering): Released all slaves [ 1769.127122][T29212] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 1769.137527][T29212] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 1769.146083][T29212] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1769.155261][T29212] usb 4-1: config 0 has no interface number 0 [ 1769.161480][T29212] usb 4-1: config 0 has no interface number 1 [ 1769.167742][T29212] usb 4-1: config 0 interface 182 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1769.179612][T29212] usb 4-1: config 0 interface 182 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 1769.192949][T29212] usb 4-1: too many endpoints for config 0 interface 247 altsetting 68: 178, using maximum allowed: 30 [ 1769.204239][T29212] usb 4-1: config 0 interface 247 altsetting 68 has a duplicate endpoint with address 0x8, skipping [ 1769.215225][T29212] usb 4-1: config 0 interface 247 altsetting 68 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1769.226754][T29212] usb 4-1: config 0 interface 247 altsetting 68 has an invalid descriptor for endpoint zero, skipping [ 1769.238060][T29212] usb 4-1: config 0 interface 247 altsetting 68 has an invalid descriptor for endpoint zero, skipping [ 1769.249266][T29212] usb 4-1: config 0 interface 247 altsetting 68 has a duplicate endpoint with address 0x8, skipping [ 1769.260316][T29212] usb 4-1: config 0 interface 247 altsetting 68 has a duplicate endpoint with address 0x5, skipping [ 1769.274630][T29212] usb 4-1: config 0 interface 247 altsetting 68 has a duplicate endpoint with address 0x3, skipping [ 1769.314382][T29212] usb 4-1: config 0 interface 247 altsetting 68 has 10 endpoint descriptors, different from the interface descriptor's value: 178 [ 1769.365662][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1769.393428][T29212] usb 4-1: config 0 interface 247 has no altsetting 0 [ 1769.407011][T15883] usb 7-1: USB disconnect, device number 17 [ 1769.420196][T29212] usb 4-1: New USB device found, idVendor=050d, idProduct=711b, bcdDevice= b.1d [ 1769.430555][T29212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.463990][T29212] usb 4-1: Product: syz [ 1769.475646][T29212] usb 4-1: Manufacturer: syz [ 1769.483750][T29212] usb 4-1: SerialNumber: syz [ 1769.501374][T29212] usb 4-1: config 0 descriptor?? [ 1769.520089][ T2021] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1769.772295][ T2021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.780944][T15883] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1769.798803][ T2021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.850313][T29212] usb 4-1: USB disconnect, device number 20 [ 1769.934177][T15883] usb 5-1: device descriptor read/64, error -71 [ 1770.194354][T15883] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1770.278268][ T2065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1770.334235][T15883] usb 5-1: device descriptor read/64, error -71 [ 1770.474562][T15883] usb usb5-port1: attempt power cycle [ 1770.834307][T15883] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1770.864909][T15883] usb 5-1: device descriptor read/8, error -71 [ 1771.124185][T15883] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1771.211908][T15883] usb 5-1: device descriptor read/8, error -71 [ 1771.344528][T15883] usb usb5-port1: unable to enumerate USB device [ 1771.395704][ T2072] geneve2: entered promiscuous mode [ 1771.432443][ T2072] geneve2: entered allmulticast mode [ 1771.583340][ T2065] could not allocate digest TFM handle cbcmac-aes-neon [ 1771.734977][ T2077] syzkaller0: entered promiscuous mode [ 1771.740728][ T2077] syzkaller0: entered allmulticast mode [ 1771.903652][ T2077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.911229][ T2077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.155912][ T2077] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1772.189553][ T2077] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1772.209283][ T2077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1772.228906][ T2077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1772.282238][ T2090] FAULT_INJECTION: forcing a failure. [ 1772.282238][ T2090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.307138][ T2090] CPU: 0 UID: 0 PID: 2090 Comm: syz.6.9376 Tainted: G L syzkaller #0 PREEMPT(full) [ 1772.307176][ T2090] Tainted: [L]=SOFTLOCKUP [ 1772.307183][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1772.307195][ T2090] Call Trace: [ 1772.307203][ T2090] [ 1772.307212][ T2090] dump_stack_lvl+0xe8/0x150 [ 1772.307246][ T2090] should_fail_ex+0x412/0x560 [ 1772.307280][ T2090] _copy_from_user+0x2d/0xb0 [ 1772.307302][ T2090] ___sys_sendmsg+0x1c6/0x360 [ 1772.307320][ T2090] ? __lock_acquire+0x6b5/0x2cf0 [ 1772.307345][ T2090] ? __pfx____sys_sendmsg+0x10/0x10 [ 1772.307396][ T2090] ? __fget_files+0x2a/0x420 [ 1772.307415][ T2090] ? __fget_files+0x3a0/0x420 [ 1772.307445][ T2090] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1772.307469][ T2090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1772.307500][ T2090] ? __pfx_ksys_write+0x10/0x10 [ 1772.307563][ T2090] do_syscall_64+0x14d/0xf80 [ 1772.307592][ T2090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.307613][ T2090] ? trace_irq_disable+0x37/0x100 [ 1772.307638][ T2090] ? clear_bhb_loop+0x40/0x90 [ 1772.307664][ T2090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.307685][ T2090] RIP: 0033:0x7fe71bf9bf79 [ 1772.307705][ T2090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1772.307723][ T2090] RSP: 002b:00007fe71a1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1772.307746][ T2090] RAX: ffffffffffffffda RBX: 00007fe71c215fa0 RCX: 00007fe71bf9bf79 [ 1772.307763][ T2090] RDX: 0000000004004010 RSI: 0000200000000380 RDI: 0000000000000003 [ 1772.307777][ T2090] RBP: 00007fe71a1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.307791][ T2090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1772.307804][ T2090] R13: 00007fe71c216038 R14: 00007fe71c215fa0 R15: 00007fe71c33fa48 [ 1772.307838][ T2090] [ 1773.134737][ T2110] xt_policy: output policy not valid in PREROUTING and INPUT [ 1773.394223][T29212] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1773.555078][T29212] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1773.574581][T29212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.600020][T29212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.640639][T29212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1773.649299][T29212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.658515][T29212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.671365][T29212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1773.681491][T29212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.690715][T29212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.701844][T29212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1773.709931][T29212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.719942][T29212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.743380][T29212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1773.751687][T29212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.761360][T29212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.772584][T29212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1773.781521][T29212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.790689][T29212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.802310][T29212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1773.811322][ T2117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.818877][T29212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.821977][ T2117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.842942][T29212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.856329][T29212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1773.866971][T29212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.876490][T29212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.888993][T29212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1773.900023][T29212] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1773.910093][T29212] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1773.918947][T29212] usb 5-1: Product: syz [ 1773.923241][T29212] usb 5-1: Manufacturer: syz [ 1773.929400][T29212] usb 5-1: SerialNumber: syz [ 1773.954317][T29212] usb 5-1: config 0 descriptor?? [ 1773.979822][T29212] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1774.054368][T15872] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1774.224251][T15872] usb 7-1: Using ep0 maxpacket: 32 [ 1774.240421][T15872] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1774.249398][ T2120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.266654][T15872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.293264][T15872] usb 7-1: config 0 descriptor?? [ 1774.300905][ T2120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.529029][T15872] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1774.548471][T15872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1774.567891][T15872] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1774.575918][T15872] usb 7-1: media controller created [ 1774.600145][T15872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1774.778572][T15872] az6027: usb out operation failed. (-71) [ 1774.804701][T15872] az6027: usb out operation failed. (-71) [ 1774.812194][T15872] stb0899_attach: Driver disabled by Kconfig [ 1774.818802][T15872] az6027: no front-end attached [ 1774.818802][T15872] [ 1774.833704][T15872] az6027: usb out operation failed. (-71) [ 1774.841121][T15872] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1774.854362][T15872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input147 [ 1774.885288][T15872] dvb-usb: schedule remote query interval to 400 msecs. [ 1774.908622][T15872] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1774.939498][T15872] usb 7-1: USB disconnect, device number 18 [ 1775.005892][T15872] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1776.109643][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 1776.141022][T30883] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.184197][T30883] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.205955][T15872] usb 5-1: USB disconnect, device number 41 [ 1776.230708][T30883] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.236583][T15872] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1776.265240][T30883] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.529553][ T2144] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1776.824214][T15883] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1776.989986][T15883] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1776.999544][T15883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.008524][T15883] usb 5-1: Product: syz [ 1777.013068][T15883] usb 5-1: Manufacturer: syz [ 1777.018277][T15883] usb 5-1: SerialNumber: syz [ 1777.030750][T15883] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1777.063168][T30826] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1777.494500][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 1777.494521][ T29] audit: type=1326 audit(1770783937.049:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2157 comm="syz.2.9402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f211c79bf79 code=0x0 [ 1777.736359][ T2143] random: crng reseeded on system resumption [ 1777.817096][T15891] usb 5-1: USB disconnect, device number 42 [ 1777.829587][T15883] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1777.901503][ T2163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1777.974871][T15883] usb 4-1: device descriptor read/64, error -71 [ 1778.124402][T30826] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1778.132031][T30826] ath9k_htc: Failed to initialize the device [ 1778.139934][T15891] usb 5-1: ath9k_htc: USB layer deinitialized [ 1778.214195][T15883] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1778.344985][T15883] usb 4-1: device descriptor read/64, error -71 [ 1778.359069][ T2166] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1778.369355][ T2166] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1778.377053][ T2166] veth0_to_bridge: entered allmulticast mode [ 1778.393486][ T2166] veth0_to_bridge: entered promiscuous mode [ 1778.409132][ T2166] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1778.428167][ T2166] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1778.435874][ T2166] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1778.461166][T15883] usb usb4-port1: attempt power cycle [ 1778.498823][ T2171] FAULT_INJECTION: forcing a failure. [ 1778.498823][ T2171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.512339][ T2171] CPU: 0 UID: 0 PID: 2171 Comm: syz.4.9405 Tainted: G L syzkaller #0 PREEMPT(full) [ 1778.512380][ T2171] Tainted: [L]=SOFTLOCKUP [ 1778.512387][ T2171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1778.512397][ T2171] Call Trace: [ 1778.512406][ T2171] [ 1778.512413][ T2171] dump_stack_lvl+0xe8/0x150 [ 1778.512439][ T2171] should_fail_ex+0x412/0x560 [ 1778.512465][ T2171] _copy_from_iter+0x1d3/0x1670 [ 1778.512492][ T2171] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1778.512514][ T2171] ? __pfx__copy_from_iter+0x10/0x10 [ 1778.512537][ T2171] ? __build_skb_around+0x22d/0x3c0 [ 1778.512563][ T2171] ? __alloc_skb+0x193/0x390 [ 1778.512584][ T2171] ? netlink_sendmsg+0x650/0xb40 [ 1778.512605][ T2171] ? skb_put+0x11b/0x210 [ 1778.512630][ T2171] netlink_sendmsg+0x6c0/0xb40 [ 1778.512657][ T2171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1778.512680][ T2171] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1778.512703][ T2171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1778.512726][ T2171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1778.512746][ T2171] ____sys_sendmsg+0xa68/0xad0 [ 1778.512762][ T2171] ? __might_fault+0xaf/0x130 [ 1778.512784][ T2171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1778.512805][ T2171] ? import_iovec+0x73/0xa0 [ 1778.512822][ T2171] ___sys_sendmsg+0x2a5/0x360 [ 1778.512836][ T2171] ? __lock_acquire+0x6b5/0x2cf0 [ 1778.512855][ T2171] ? __pfx____sys_sendmsg+0x10/0x10 [ 1778.512894][ T2171] ? __fget_files+0x2a/0x420 [ 1778.512909][ T2171] ? __fget_files+0x3a0/0x420 [ 1778.512931][ T2171] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1778.512948][ T2171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1778.512970][ T2171] ? __pfx_ksys_write+0x10/0x10 [ 1778.512996][ T2171] do_syscall_64+0x14d/0xf80 [ 1778.513018][ T2171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.513038][ T2171] ? trace_irq_disable+0x37/0x100 [ 1778.513056][ T2171] ? clear_bhb_loop+0x40/0x90 [ 1778.513075][ T2171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.513091][ T2171] RIP: 0033:0x7f777639bf79 [ 1778.513105][ T2171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.513118][ T2171] RSP: 002b:00007f777725a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1778.513135][ T2171] RAX: ffffffffffffffda RBX: 00007f7776615fa0 RCX: 00007f777639bf79 [ 1778.513147][ T2171] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 1778.513156][ T2171] RBP: 00007f777725a090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.513166][ T2171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.513175][ T2171] R13: 00007f7776616038 R14: 00007f7776615fa0 R15: 00007f777673fa48 [ 1778.513199][ T2171] [ 1778.846949][T15883] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1778.924278][T15883] usb 4-1: device descriptor read/8, error -71 [ 1778.944300][ T2173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9408'. [ 1779.078046][ T2179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1779.125314][ T2182] FAULT_INJECTION: forcing a failure. [ 1779.125314][ T2182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.164511][T15883] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1779.172211][ T2182] CPU: 0 UID: 0 PID: 2182 Comm: syz.4.9410 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.172246][ T2182] Tainted: [L]=SOFTLOCKUP [ 1779.172254][ T2182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1779.172268][ T2182] Call Trace: [ 1779.172276][ T2182] [ 1779.172285][ T2182] dump_stack_lvl+0xe8/0x150 [ 1779.172320][ T2182] should_fail_ex+0x412/0x560 [ 1779.172355][ T2182] _copy_from_iter+0x1d3/0x1670 [ 1779.172392][ T2182] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1779.172414][ T2182] ? __pfx__copy_from_iter+0x10/0x10 [ 1779.172437][ T2182] ? __build_skb_around+0x22d/0x3c0 [ 1779.172462][ T2182] ? __alloc_skb+0x193/0x390 [ 1779.172484][ T2182] ? netlink_sendmsg+0x650/0xb40 [ 1779.172504][ T2182] ? skb_put+0x11b/0x210 [ 1779.172529][ T2182] netlink_sendmsg+0x6c0/0xb40 [ 1779.172556][ T2182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1779.172580][ T2182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1779.172602][ T2182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1779.172625][ T2182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1779.172644][ T2182] ____sys_sendmsg+0xa68/0xad0 [ 1779.172660][ T2182] ? __might_fault+0xaf/0x130 [ 1779.172682][ T2182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1779.172704][ T2182] ? import_iovec+0x73/0xa0 [ 1779.172721][ T2182] ___sys_sendmsg+0x2a5/0x360 [ 1779.172735][ T2182] ? __lock_acquire+0x6b5/0x2cf0 [ 1779.172755][ T2182] ? __pfx____sys_sendmsg+0x10/0x10 [ 1779.172794][ T2182] ? __fget_files+0x2a/0x420 [ 1779.172808][ T2182] ? __fget_files+0x3a0/0x420 [ 1779.172829][ T2182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1779.172846][ T2182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1779.172868][ T2182] ? __pfx_ksys_write+0x10/0x10 [ 1779.172895][ T2182] do_syscall_64+0x14d/0xf80 [ 1779.172921][ T2182] ? rcu_is_watching+0x15/0xb0 [ 1779.172938][ T2182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.172953][ T2182] ? clear_bhb_loop+0x40/0x90 [ 1779.172971][ T2182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.172987][ T2182] RIP: 0033:0x7f777639bf79 [ 1779.173001][ T2182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.173016][ T2182] RSP: 002b:00007f777725a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1779.173033][ T2182] RAX: ffffffffffffffda RBX: 00007f7776615fa0 RCX: 00007f777639bf79 [ 1779.173045][ T2182] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 1779.173055][ T2182] RBP: 00007f777725a090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.173075][ T2182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.173084][ T2182] R13: 00007f7776616038 R14: 00007f7776615fa0 R15: 00007f777673fa48 [ 1779.173108][ T2182] [ 1779.555710][T15883] usb 4-1: device descriptor read/8, error -71 [ 1779.706765][T15883] usb usb4-port1: unable to enumerate USB device [ 1780.153908][ T2194] bridge2: entered promiscuous mode [ 1780.172383][ T2194] bridge2: entered allmulticast mode [ 1780.192998][ T2194] team0: Port device bridge2 added [ 1780.206474][ T2199] bridge0: port 3(team0) entered blocking state [ 1780.274957][ T2199] bridge0: port 3(team0) entered disabled state [ 1780.294771][ T2199] team0: entered allmulticast mode [ 1780.314225][ T2199] team_slave_0: entered allmulticast mode [ 1780.320250][ T2199] team_slave_1: entered allmulticast mode [ 1780.337748][ T2199] team0: entered promiscuous mode [ 1780.353396][ T2199] team_slave_0: entered promiscuous mode [ 1780.363526][ T2199] team_slave_1: entered promiscuous mode [ 1780.408187][ T2199] bridge0: port 3(team0) entered blocking state [ 1780.414597][ T2199] bridge0: port 3(team0) entered forwarding state [ 1780.918288][ T2219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1781.085444][ T2226] veth0_to_team: entered promiscuous mode [ 1781.474986][ T2237] binder: 2236:2237 ioctl c0306201 0 returned -14 [ 1781.633278][ T2213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1781.790073][ T2243] FAULT_INJECTION: forcing a failure. [ 1781.790073][ T2243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.833806][ T2243] CPU: 1 UID: 0 PID: 2243 Comm: syz.6.9431 Tainted: G L syzkaller #0 PREEMPT(full) [ 1781.833844][ T2243] Tainted: [L]=SOFTLOCKUP [ 1781.833851][ T2243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1781.833861][ T2243] Call Trace: [ 1781.833868][ T2243] [ 1781.833875][ T2243] dump_stack_lvl+0xe8/0x150 [ 1781.833902][ T2243] should_fail_ex+0x412/0x560 [ 1781.833928][ T2243] _copy_from_user+0x2d/0xb0 [ 1781.833945][ T2243] generic_map_update_batch+0x69a/0x990 [ 1781.833976][ T2243] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1781.834000][ T2243] ? __fget_files+0x2a/0x420 [ 1781.834022][ T2243] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1781.834046][ T2243] bpf_map_do_batch+0x39b/0x630 [ 1781.834099][ T2243] __sys_bpf+0x7c1/0x950 [ 1781.834132][ T2243] ? __pfx___sys_bpf+0x10/0x10 [ 1781.834161][ T2243] ? ksys_write+0x242/0x270 [ 1781.834181][ T2243] ? __pfx_ksys_write+0x10/0x10 [ 1781.834205][ T2243] __x64_sys_bpf+0x7c/0x90 [ 1781.834220][ T2243] do_syscall_64+0x14d/0xf80 [ 1781.834242][ T2243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.834257][ T2243] ? trace_irq_disable+0x37/0x100 [ 1781.834275][ T2243] ? clear_bhb_loop+0x40/0x90 [ 1781.834293][ T2243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.834309][ T2243] RIP: 0033:0x7fe71bf9bf79 [ 1781.834323][ T2243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.834337][ T2243] RSP: 002b:00007fe71a1ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1781.834354][ T2243] RAX: ffffffffffffffda RBX: 00007fe71c215fa0 RCX: 00007fe71bf9bf79 [ 1781.834365][ T2243] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1781.834376][ T2243] RBP: 00007fe71a1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.834386][ T2243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1781.834395][ T2243] R13: 00007fe71c216038 R14: 00007fe71c215fa0 R15: 00007fe71c33fa48 [ 1781.834419][ T2243] [ 1782.354214][T15861] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1782.484348][T15861] usb 5-1: device descriptor read/64, error -71 [ 1782.597374][ T2245] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9432'. [ 1782.724481][T15861] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1782.854642][T15861] usb 5-1: device descriptor read/64, error -71 [ 1782.985197][T15861] usb usb5-port1: attempt power cycle [ 1783.124733][T15883] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1783.286424][T15883] usb 3-1: Using ep0 maxpacket: 16 [ 1783.300835][T15883] usb 3-1: config 0 has no interfaces? [ 1783.318334][T15883] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1783.331107][T15883] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1783.349321][T15883] usb 3-1: Manufacturer: syz [ 1783.364312][T15861] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1783.378338][T15883] usb 3-1: config 0 descriptor?? [ 1783.405851][T15861] usb 5-1: device descriptor read/8, error -71 [ 1783.635286][ T2255] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9433'. [ 1783.644838][T15861] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1783.684683][T15861] usb 5-1: device descriptor read/8, error -71 [ 1783.794792][T15861] usb usb5-port1: unable to enumerate USB device [ 1783.985813][ T2274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1784.705649][ T2288] sctp: [Deprecated]: syz.6.9442 (pid 2288) Use of int in max_burst socket option. [ 1784.705649][ T2288] Use struct sctp_assoc_value instead [ 1784.970468][ T2299] loop2: detected capacity change from 0 to 7 [ 1784.995146][ T2299] Dev loop2: unable to read RDB block 7 [ 1784.995193][ T2299] loop2: unable to read partition table [ 1784.995339][ T2299] loop2: partition table beyond EOD, truncated [ 1784.995385][ T2299] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1785.008745][ T2299] netlink: 'syz.6.9442': attribute type 21 has an invalid length. [ 1785.008772][ T2299] IPv6: NLM_F_CREATE should be specified when creating new route [ 1785.057255][ T2300] tipc: Started in network mode [ 1785.057283][ T2300] tipc: Node identity 8a5a7a484755, cluster identity 4711 [ 1785.057394][ T2300] tipc: Enabled bearer , priority 0 [ 1785.279843][ T2297] tipc: Disabling bearer [ 1785.649450][ T2309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9448'. [ 1785.725212][T15872] psmouse serio189: Failed to reset mouse on : -5 [ 1785.742771][ T2306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9447'. [ 1785.883999][ T2314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9449'. [ 1785.931783][ T2314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9449'. [ 1785.990438][ T2312] ip6gre1: entered promiscuous mode [ 1786.012454][ T2312] ip6gre1: entered allmulticast mode [ 1786.054650][T26885] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1786.080339][T26885] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1786.088094][T15891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1786.255631][T15883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1786.361248][ T2316] netlink: 92 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1786.377365][ T2316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1786.440413][ T2316] netlink: 'syz.6.9451': attribute type 9 has an invalid length. [ 1786.508055][ T2316] netlink: 'syz.6.9451': attribute type 11 has an invalid length. [ 1786.540275][ T2321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9450'. [ 1786.563167][ T2316] netlink: 'syz.6.9451': attribute type 12 has an invalid length. [ 1786.615429][ T2316] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1786.653228][T29212] usb 3-1: USB disconnect, device number 16 [ 1786.675095][ T2316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1786.685252][T15883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1786.894208][T15861] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1787.129291][T15883] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1787.134360][T15861] usb 5-1: device descriptor read/64, error -71 [ 1787.216469][ T2332] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 1787.264352][T15883] usb 4-1: device descriptor read/64, error -71 [ 1787.394199][T15861] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1787.504217][T15883] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1787.544161][T15861] usb 5-1: device descriptor read/64, error -71 [ 1787.666408][T15883] usb 4-1: device descriptor read/64, error -71 [ 1787.675265][T15861] usb usb5-port1: attempt power cycle [ 1787.814714][T15883] usb usb4-port1: attempt power cycle [ 1788.074661][T15861] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1788.104979][T15861] usb 5-1: device descriptor read/8, error -71 [ 1788.204203][T15883] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1788.261621][ T2339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.277114][T15883] usb 4-1: device descriptor read/8, error -71 [ 1788.354371][T15861] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1788.395427][T15861] usb 5-1: device descriptor read/8, error -71 [ 1788.514053][T15861] usb usb5-port1: unable to enumerate USB device [ 1788.533121][T15883] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1788.607017][T15883] usb 4-1: device descriptor read/8, error -71 [ 1788.744610][T15883] usb usb4-port1: unable to enumerate USB device [ 1789.365017][ T2354] random: crng reseeded on system resumption [ 1789.425535][ T2354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9460'. [ 1789.624266][T15872] misc userio: Buffer overflowed, userio client isn't keeping up [ 1790.343363][ T2368] FAULT_INJECTION: forcing a failure. [ 1790.343363][ T2368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1790.423854][ T2368] CPU: 1 UID: 0 PID: 2368 Comm: syz.2.9464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1790.423890][ T2368] Tainted: [L]=SOFTLOCKUP [ 1790.423898][ T2368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1790.423911][ T2368] Call Trace: [ 1790.423921][ T2368] [ 1790.423930][ T2368] dump_stack_lvl+0xe8/0x150 [ 1790.423963][ T2368] should_fail_ex+0x412/0x560 [ 1790.423997][ T2368] prepare_alloc_pages+0x22a/0x650 [ 1790.424035][ T2368] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1790.424075][ T2368] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1790.424119][ T2368] ? __pfx_policy_nodemask+0x10/0x10 [ 1790.424152][ T2368] ? pfn_valid+0xba/0x480 [ 1790.424180][ T2368] alloc_pages_mpol+0x232/0x4a0 [ 1790.424216][ T2368] vma_alloc_folio_noprof+0xea/0x210 [ 1790.424249][ T2368] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1790.424290][ T2368] do_wp_page+0x127b/0x5990 [ 1790.424320][ T2368] ? __pte_offset_map+0x29/0x240 [ 1790.424362][ T2368] ? __pte_offset_map+0x29/0x240 [ 1790.424391][ T2368] ? __pfx_do_wp_page+0x10/0x10 [ 1790.424418][ T2368] ? do_raw_spin_lock+0x12b/0x2f0 [ 1790.424452][ T2368] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1790.424492][ T2368] handle_mm_fault+0x1520/0x32a0 [ 1790.424531][ T2368] ? handle_mm_fault+0xee/0x32a0 [ 1790.424563][ T2368] ? __pfx_handle_mm_fault+0x10/0x10 [ 1790.424604][ T2368] ? lock_mm_and_find_vma+0xa7/0x340 [ 1790.424635][ T2368] do_user_addr_fault+0x75b/0x1360 [ 1790.424674][ T2368] exc_page_fault+0x6a/0xc0 [ 1790.424704][ T2368] asm_exc_page_fault+0x26/0x30 [ 1790.424726][ T2368] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1790.424747][ T2368] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1790.424766][ T2368] RSP: 0018:ffffc9000385fa48 EFLAGS: 00050206 [ 1790.424786][ T2368] RAX: ffffffff84a4f801 RBX: 0000000000001400 RCX: 0000000000001000 [ 1790.424802][ T2368] RDX: 0000000000000000 RSI: ffff88807b868400 RDI: 0000200000004000 [ 1790.424817][ T2368] RBP: ffffc9000385fcc0 R08: ffff88807b8693ff R09: 1ffff1100f70d27f [ 1790.424834][ T2368] R10: dffffc0000000000 R11: ffffed100f70d280 R12: 0000200000005000 [ 1790.424850][ T2368] R13: 00007ffffffff000 R14: ffff88807b868000 R15: 0000200000003c00 [ 1790.424875][ T2368] ? _copy_to_user+0x11/0xb0 [ 1790.424905][ T2368] _copy_to_user+0x8a/0xb0 [ 1790.424928][ T2368] __htab_map_lookup_and_delete_batch+0x159e/0x1a20 [ 1790.424993][ T2368] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 1790.425025][ T2368] ? __pfx_htab_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 1790.425060][ T2368] bpf_map_do_batch+0x44f/0x630 [ 1790.425103][ T2368] __sys_bpf+0x594/0x950 [ 1790.425131][ T2368] ? __pfx___sys_bpf+0x10/0x10 [ 1790.425170][ T2368] ? ksys_write+0x242/0x270 [ 1790.425197][ T2368] ? __pfx_ksys_write+0x10/0x10 [ 1790.425229][ T2368] __x64_sys_bpf+0x7c/0x90 [ 1790.425252][ T2368] do_syscall_64+0x14d/0xf80 [ 1790.425281][ T2368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.425302][ T2368] ? trace_irq_disable+0x37/0x100 [ 1790.425325][ T2368] ? clear_bhb_loop+0x40/0x90 [ 1790.425351][ T2368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.425372][ T2368] RIP: 0033:0x7f211c79bf79 [ 1790.425391][ T2368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.425409][ T2368] RSP: 002b:00007f211d672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1790.425431][ T2368] RAX: ffffffffffffffda RBX: 00007f211ca16090 RCX: 00007f211c79bf79 [ 1790.425447][ T2368] RDX: 0000000000000038 RSI: 0000200000000100 RDI: 0000000000000019 [ 1790.425461][ T2368] RBP: 00007f211d672090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.425475][ T2368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1790.425488][ T2368] R13: 00007f211ca16128 R14: 00007f211ca16090 R15: 00007f211cb3fa48 [ 1790.425521][ T2368] [ 1790.805639][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1790.845079][T15872] input: PS/2 Generic Mouse as /devices/serio189/input/input148 [ 1791.474209][T15872] psmouse serio189: Failed to enable mouse on [ 1791.696187][ T2375] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9466'. [ 1791.736429][ T2375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9466'. [ 1791.807175][ T2375] netlink: 'syz.2.9466': attribute type 9 has an invalid length. [ 1791.817767][ T2375] netlink: 'syz.2.9466': attribute type 11 has an invalid length. [ 1791.896577][ T2375] netlink: 'syz.2.9466': attribute type 12 has an invalid length. [ 1791.927199][ T2375] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.9466'. [ 1791.985852][ T2375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9466'. [ 1792.012862][ T2383] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 1792.994194][T15872] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1793.011111][ T2402] openvswitch: netlink: IP tunnel dst address not specified [ 1793.149321][T15872] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1793.179507][T15872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1793.204218][T15872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.246574][T15872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.296875][T15872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1793.409969][T15872] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1793.501273][T15872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.571308][ T2411] vcan0: tx drop: invalid sa for name 0x0000000000000006 [ 1793.587937][T15872] usb 5-1: config 0 descriptor?? [ 1793.891975][T15872] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0052/input/input149 [ 1793.968543][T32350] Bluetooth: hci5: command 0x0406 tx timeout [ 1793.998953][ T2423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9477'. [ 1794.023199][ T2423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9477'. [ 1794.071562][T15872] uclogic 0003:28BD:0909.0052: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 1794.142188][T15872] usb 5-1: USB disconnect, device number 51 [ 1794.256121][ T2436] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9479'. [ 1794.290949][ T2436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9479'. [ 1794.340114][ T2434] fido_id[2434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1794.388468][ T2436] netlink: 'syz.0.9479': attribute type 9 has an invalid length. [ 1794.412828][ T2436] netlink: 'syz.0.9479': attribute type 11 has an invalid length. [ 1794.434195][ T2436] netlink: 'syz.0.9479': attribute type 12 has an invalid length. [ 1794.467302][ T2436] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.9479'. [ 1794.489925][ T2436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9479'. [ 1794.574744][ T2442] FAULT_INJECTION: forcing a failure. [ 1794.574744][ T2442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1794.619055][ T2442] CPU: 0 UID: 0 PID: 2442 Comm: syz.2.9481 Tainted: G L syzkaller #0 PREEMPT(full) [ 1794.619092][ T2442] Tainted: [L]=SOFTLOCKUP [ 1794.619100][ T2442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1794.619113][ T2442] Call Trace: [ 1794.619122][ T2442] [ 1794.619132][ T2442] dump_stack_lvl+0xe8/0x150 [ 1794.619167][ T2442] should_fail_ex+0x412/0x560 [ 1794.619202][ T2442] _copy_from_user+0x2d/0xb0 [ 1794.619225][ T2442] udmabuf_ioctl+0xfa/0x300 [ 1794.619259][ T2442] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1794.619298][ T2442] ? __fget_files+0x2a/0x420 [ 1794.619318][ T2442] ? __fget_files+0x3a0/0x420 [ 1794.619336][ T2442] ? __fget_files+0x2a/0x420 [ 1794.619359][ T2442] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1794.619391][ T2442] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1794.619425][ T2442] __se_sys_ioctl+0xfc/0x170 [ 1794.619453][ T2442] do_syscall_64+0x14d/0xf80 [ 1794.619482][ T2442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.619503][ T2442] ? trace_irq_disable+0x37/0x100 [ 1794.619526][ T2442] ? clear_bhb_loop+0x40/0x90 [ 1794.619553][ T2442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.619573][ T2442] RIP: 0033:0x7f211c79bf79 [ 1794.619592][ T2442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1794.619612][ T2442] RSP: 002b:00007f211d693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1794.619637][ T2442] RAX: ffffffffffffffda RBX: 00007f211ca15fa0 RCX: 00007f211c79bf79 [ 1794.619653][ T2442] RDX: 0000200000000100 RSI: 0000000040187542 RDI: 0000000000000003 [ 1794.619668][ T2442] RBP: 00007f211d693090 R08: 0000000000000000 R09: 0000000000000000 [ 1794.619682][ T2442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1794.619694][ T2442] R13: 00007f211ca16038 R14: 00007f211ca15fa0 R15: 00007f211cb3fa48 [ 1794.619729][ T2442] [ 1794.952948][ T2450] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 1795.228730][T15891] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1795.384153][T15891] usb 5-1: Using ep0 maxpacket: 16 [ 1795.397909][T15891] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1795.436575][T15891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.514699][T15891] usb 5-1: Product: syz [ 1795.553723][T15891] usb 5-1: Manufacturer: syz [ 1795.564663][T15891] usb 5-1: SerialNumber: syz [ 1795.611016][T15891] usb 5-1: config 0 descriptor?? [ 1795.652707][T15891] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1795.717628][T15891] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1795.735951][T15891] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1795.735951][T15891] Please send a copy of this message to and [ 1795.979839][ T2470] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9487'. [ 1796.012164][T15883] usb 5-1: USB disconnect, device number 52 [ 1796.194182][T15861] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1796.328484][ T2490] netlink: 'syz.3.9492': attribute type 9 has an invalid length. [ 1796.366904][ T2490] netlink: 'syz.3.9492': attribute type 11 has an invalid length. [ 1796.388531][T15861] usb 3-1: Using ep0 maxpacket: 8 [ 1796.401666][ T2490] netlink: 'syz.3.9492': attribute type 12 has an invalid length. [ 1796.431058][T15861] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1796.456317][ T2490] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.9492'. [ 1796.488625][T15861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.506664][ T2490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9492'. [ 1796.590622][T15861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.697992][T15861] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1796.759162][T15861] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1796.805778][T15861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.849906][T15861] usb 3-1: config 0 descriptor?? [ 1796.904229][T15891] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1797.008701][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.015113][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.074148][T15891] usb 5-1: Using ep0 maxpacket: 16 [ 1797.090991][T15891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.140959][T15891] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1797.181846][T15861] usbhid 3-1:0.0: can't add hid device: -71 [ 1797.191120][T15891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.251947][T15891] usb 5-1: config 0 descriptor?? [ 1797.307945][T15861] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1797.352888][ T2505] FAULT_INJECTION: forcing a failure. [ 1797.352888][ T2505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.381034][T15861] usb 3-1: USB disconnect, device number 17 [ 1797.390721][ T2505] CPU: 0 UID: 0 PID: 2505 Comm: syz.2.9495 Tainted: G L syzkaller #0 PREEMPT(full) [ 1797.390755][ T2505] Tainted: [L]=SOFTLOCKUP [ 1797.390764][ T2505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1797.390777][ T2505] Call Trace: [ 1797.390786][ T2505] [ 1797.390795][ T2505] dump_stack_lvl+0xe8/0x150 [ 1797.390830][ T2505] should_fail_ex+0x412/0x560 [ 1797.390865][ T2505] _copy_from_iter+0x1d3/0x1670 [ 1797.390903][ T2505] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1797.390933][ T2505] ? __pfx__copy_from_iter+0x10/0x10 [ 1797.390966][ T2505] ? __build_skb_around+0x22d/0x3c0 [ 1797.391001][ T2505] ? __alloc_skb+0x193/0x390 [ 1797.391031][ T2505] ? netlink_sendmsg+0x650/0xb40 [ 1797.391059][ T2505] ? skb_put+0x11b/0x210 [ 1797.391096][ T2505] netlink_sendmsg+0x6c0/0xb40 [ 1797.391137][ T2505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.391171][ T2505] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1797.391205][ T2505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1797.391247][ T2505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.391275][ T2505] ____sys_sendmsg+0xa68/0xad0 [ 1797.391297][ T2505] ? __might_fault+0xaf/0x130 [ 1797.391330][ T2505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1797.391362][ T2505] ? import_iovec+0x73/0xa0 [ 1797.391388][ T2505] ___sys_sendmsg+0x2a5/0x360 [ 1797.391409][ T2505] ? __lock_acquire+0x6b5/0x2cf0 [ 1797.391437][ T2505] ? __pfx____sys_sendmsg+0x10/0x10 [ 1797.391503][ T2505] ? __fget_files+0x2a/0x420 [ 1797.391524][ T2505] ? __fget_files+0x3a0/0x420 [ 1797.391556][ T2505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1797.391582][ T2505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1797.391615][ T2505] ? __pfx_ksys_write+0x10/0x10 [ 1797.391654][ T2505] do_syscall_64+0x14d/0xf80 [ 1797.391684][ T2505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.391706][ T2505] ? trace_irq_disable+0x37/0x100 [ 1797.391731][ T2505] ? clear_bhb_loop+0x40/0x90 [ 1797.391759][ T2505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.391781][ T2505] RIP: 0033:0x7f211c79bf79 [ 1797.391802][ T2505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.391822][ T2505] RSP: 002b:00007f211d693028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1797.391847][ T2505] RAX: ffffffffffffffda RBX: 00007f211ca15fa0 RCX: 00007f211c79bf79 [ 1797.391864][ T2505] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000003 [ 1797.391879][ T2505] RBP: 00007f211d693090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.391895][ T2505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.391907][ T2505] R13: 00007f211ca16038 R14: 00007f211ca15fa0 R15: 00007f211cb3fa48 [ 1797.391943][ T2505] [ 1797.841299][ T2496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.894879][ T2496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.996101][ T2512] FAULT_INJECTION: forcing a failure. [ 1797.996101][ T2512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.054147][ T2512] CPU: 0 UID: 0 PID: 2512 Comm: syz.2.9499 Tainted: G L syzkaller #0 PREEMPT(full) [ 1798.054183][ T2512] Tainted: [L]=SOFTLOCKUP [ 1798.054192][ T2512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1798.054206][ T2512] Call Trace: [ 1798.054216][ T2512] [ 1798.054226][ T2512] dump_stack_lvl+0xe8/0x150 [ 1798.054260][ T2512] should_fail_ex+0x412/0x560 [ 1798.054294][ T2512] _copy_from_user+0x2d/0xb0 [ 1798.054317][ T2512] ___sys_sendmsg+0x1c6/0x360 [ 1798.054338][ T2512] ? __lock_acquire+0x6b5/0x2cf0 [ 1798.054367][ T2512] ? __pfx____sys_sendmsg+0x10/0x10 [ 1798.054423][ T2512] ? __fget_files+0x2a/0x420 [ 1798.054443][ T2512] ? __fget_files+0x3a0/0x420 [ 1798.054474][ T2512] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1798.054499][ T2512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1798.054538][ T2512] ? __pfx_ksys_write+0x10/0x10 [ 1798.054576][ T2512] do_syscall_64+0x14d/0xf80 [ 1798.054618][ T2512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.054638][ T2512] ? trace_irq_disable+0x37/0x100 [ 1798.054662][ T2512] ? clear_bhb_loop+0x40/0x90 [ 1798.054688][ T2512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.054709][ T2512] RIP: 0033:0x7f211c79bf79 [ 1798.054728][ T2512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.054746][ T2512] RSP: 002b:00007f211d693028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.054773][ T2512] RAX: ffffffffffffffda RBX: 00007f211ca15fa0 RCX: 00007f211c79bf79 [ 1798.054789][ T2512] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1798.054804][ T2512] RBP: 00007f211d693090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.054817][ T2512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.054830][ T2512] R13: 00007f211ca16038 R14: 00007f211ca15fa0 R15: 00007f211cb3fa48 [ 1798.054862][ T2512] [ 1798.621627][ T2528] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 1798.666820][ T2496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.695560][ T2496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.708326][ T2517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.741726][ T2517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.894635][T15891] usbhid 5-1:0.0: can't add hid device: -71 [ 1798.901139][T15891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1798.991880][T15891] usb 5-1: USB disconnect, device number 53 [ 1799.058158][ T2536] netlink: 'syz.4.9504': attribute type 9 has an invalid length. [ 1799.066669][ T2536] netlink: 'syz.4.9504': attribute type 11 has an invalid length. [ 1799.076344][ T2536] netlink: 'syz.4.9504': attribute type 12 has an invalid length. [ 1799.085805][ T2536] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.9504'. [ 1799.097574][ T2536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9504'. [ 1799.470475][ T2552] FAULT_INJECTION: forcing a failure. [ 1799.470475][ T2552] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.509978][ T2553] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 1799.532584][ T2552] CPU: 0 UID: 0 PID: 2552 Comm: syz.0.9509 Tainted: G L syzkaller #0 PREEMPT(full) [ 1799.532618][ T2552] Tainted: [L]=SOFTLOCKUP [ 1799.532624][ T2552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1799.532633][ T2552] Call Trace: [ 1799.532640][ T2552] [ 1799.532652][ T2552] dump_stack_lvl+0xe8/0x150 [ 1799.532677][ T2552] should_fail_ex+0x412/0x560 [ 1799.532703][ T2552] should_failslab+0xa8/0x100 [ 1799.532727][ T2552] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1799.532745][ T2552] ? __netlink_lookup+0xc6/0x8b0 [ 1799.532767][ T2552] ? skb_clone+0x212/0x3a0 [ 1799.532787][ T2552] skb_clone+0x212/0x3a0 [ 1799.532805][ T2552] __netlink_deliver_tap+0x404/0x850 [ 1799.532834][ T2552] ? netlink_deliver_tap+0x2e/0x1b0 [ 1799.532856][ T2552] netlink_deliver_tap+0x19c/0x1b0 [ 1799.532876][ T2552] netlink_unicast+0x7e3/0x9b0 [ 1799.532900][ T2552] ? __pfx_netlink_unicast+0x10/0x10 [ 1799.532917][ T2552] ? __alloc_skb+0x193/0x390 [ 1799.532940][ T2552] ? netlink_sendmsg+0x650/0xb40 [ 1799.532959][ T2552] ? skb_put+0x11b/0x210 [ 1799.532985][ T2552] netlink_sendmsg+0x813/0xb40 [ 1799.533011][ T2552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1799.533035][ T2552] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1799.533057][ T2552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1799.533079][ T2552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1799.533099][ T2552] ____sys_sendmsg+0xa68/0xad0 [ 1799.533114][ T2552] ? __might_fault+0xaf/0x130 [ 1799.533136][ T2552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1799.533158][ T2552] ? import_iovec+0x73/0xa0 [ 1799.533176][ T2552] ___sys_sendmsg+0x2a5/0x360 [ 1799.533190][ T2552] ? __lock_acquire+0x6b5/0x2cf0 [ 1799.533209][ T2552] ? __pfx____sys_sendmsg+0x10/0x10 [ 1799.533249][ T2552] ? __fget_files+0x2a/0x420 [ 1799.533263][ T2552] ? __fget_files+0x3a0/0x420 [ 1799.533285][ T2552] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1799.533314][ T2552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1799.533336][ T2552] ? __pfx_ksys_write+0x10/0x10 [ 1799.533363][ T2552] do_syscall_64+0x14d/0xf80 [ 1799.533389][ T2552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.533405][ T2552] ? trace_irq_disable+0x37/0x100 [ 1799.533423][ T2552] ? clear_bhb_loop+0x40/0x90 [ 1799.533442][ T2552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.533458][ T2552] RIP: 0033:0x7fb4b699bf79 [ 1799.533472][ T2552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.533502][ T2552] RSP: 002b:00007fb4b7816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.533526][ T2552] RAX: ffffffffffffffda RBX: 00007fb4b6c15fa0 RCX: 00007fb4b699bf79 [ 1799.533543][ T2552] RDX: 0000000060000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 1799.533558][ T2552] RBP: 00007fb4b7816090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.533571][ T2552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.533584][ T2552] R13: 00007fb4b6c16038 R14: 00007fb4b6c15fa0 R15: 00007fb4b6d3fa48 [ 1799.533616][ T2552] [ 1799.564819][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1799.569245][ T29] audit: type=1326 audit(1770783959.079:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2522 comm="syz.6.9500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71bf9bf79 code=0x0 [ 1799.702291][ T2552] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1800.004182][T30826] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1800.185739][T30826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.207951][T30826] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1800.237284][T30826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.282655][T30826] usb 3-1: config 0 descriptor?? [ 1800.308824][ T2563] FAULT_INJECTION: forcing a failure. [ 1800.308824][ T2563] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.349496][T30826] pwc: Askey VC010 type 2 USB webcam detected. [ 1800.360522][ T2563] CPU: 0 UID: 0 PID: 2563 Comm: syz.0.9512 Tainted: G L syzkaller #0 PREEMPT(full) [ 1800.360557][ T2563] Tainted: [L]=SOFTLOCKUP [ 1800.360566][ T2563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1800.360586][ T2563] Call Trace: [ 1800.360596][ T2563] [ 1800.360607][ T2563] dump_stack_lvl+0xe8/0x150 [ 1800.360643][ T2563] should_fail_ex+0x412/0x560 [ 1800.360679][ T2563] should_failslab+0xa8/0x100 [ 1800.360712][ T2563] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1800.360738][ T2563] ? __netlink_lookup+0xc6/0x8b0 [ 1800.360769][ T2563] ? skb_clone+0x212/0x3a0 [ 1800.360797][ T2563] skb_clone+0x212/0x3a0 [ 1800.360824][ T2563] __netlink_deliver_tap+0x404/0x850 [ 1800.360866][ T2563] ? netlink_deliver_tap+0x2e/0x1b0 [ 1800.360897][ T2563] netlink_deliver_tap+0x19c/0x1b0 [ 1800.360927][ T2563] netlink_unicast+0x7e3/0x9b0 [ 1800.360961][ T2563] ? __pfx_netlink_unicast+0x10/0x10 [ 1800.360986][ T2563] ? __alloc_skb+0x193/0x390 [ 1800.361017][ T2563] ? netlink_sendmsg+0x650/0xb40 [ 1800.361044][ T2563] ? skb_put+0x11b/0x210 [ 1800.361081][ T2563] netlink_sendmsg+0x813/0xb40 [ 1800.361121][ T2563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1800.361154][ T2563] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1800.361187][ T2563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1800.361220][ T2563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1800.361248][ T2563] ____sys_sendmsg+0xa68/0xad0 [ 1800.361270][ T2563] ? __might_fault+0xaf/0x130 [ 1800.361302][ T2563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1800.361332][ T2563] ? import_iovec+0x73/0xa0 [ 1800.361358][ T2563] ___sys_sendmsg+0x2a5/0x360 [ 1800.361379][ T2563] ? __lock_acquire+0x6b5/0x2cf0 [ 1800.361406][ T2563] ? __pfx____sys_sendmsg+0x10/0x10 [ 1800.361465][ T2563] ? __fget_files+0x2a/0x420 [ 1800.361485][ T2563] ? __fget_files+0x3a0/0x420 [ 1800.361518][ T2563] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1800.361543][ T2563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1800.361575][ T2563] ? __pfx_ksys_write+0x10/0x10 [ 1800.361620][ T2563] do_syscall_64+0x14d/0xf80 [ 1800.361651][ T2563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.361671][ T2563] ? trace_irq_disable+0x37/0x100 [ 1800.361696][ T2563] ? clear_bhb_loop+0x40/0x90 [ 1800.361722][ T2563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.361744][ T2563] RIP: 0033:0x7fb4b699bf79 [ 1800.361764][ T2563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1800.361783][ T2563] RSP: 002b:00007fb4b7816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1800.361807][ T2563] RAX: ffffffffffffffda RBX: 00007fb4b6c15fa0 RCX: 00007fb4b699bf79 [ 1800.361823][ T2563] RDX: 0000000060000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 1800.361839][ T2563] RBP: 00007fb4b7816090 R08: 0000000000000000 R09: 0000000000000000 [ 1800.361852][ T2563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1800.361865][ T2563] R13: 00007fb4b6c16038 R14: 00007fb4b6c15fa0 R15: 00007fb4b6d3fa48 [ 1800.361900][ T2563] [ 1800.874421][T30826] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1800.902659][T30826] pwc: recv_control_msg error -32 req 02 val 2700 [ 1800.927630][T30826] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1800.972376][T30826] pwc: recv_control_msg error -32 req 04 val 1000 [ 1801.024883][T30826] pwc: recv_control_msg error -32 req 04 val 1300 [ 1801.044899][T30826] pwc: recv_control_msg error -32 req 04 val 1400 [ 1801.054876][T30826] pwc: recv_control_msg error -32 req 02 val 2000 [ 1801.077052][T30826] pwc: recv_control_msg error -32 req 02 val 2100 [ 1801.086651][T30826] pwc: recv_control_msg error -32 req 04 val 1500 [ 1801.147718][T30826] pwc: recv_control_msg error -32 req 02 val 2500 [ 1801.178580][T30826] pwc: recv_control_msg error -32 req 02 val 2400 [ 1801.197954][T30826] pwc: recv_control_msg error -32 req 02 val 2600 [ 1801.429083][ T2576] netlink: 'syz.6.9515': attribute type 9 has an invalid length. [ 1801.437388][ T2576] netlink: 'syz.6.9515': attribute type 11 has an invalid length. [ 1801.447213][ T2576] netlink: 'syz.6.9515': attribute type 12 has an invalid length. [ 1801.466527][ T2576] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.9515'. [ 1801.500175][ T2576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9515'. [ 1801.557389][ T2580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9516'. [ 1801.929823][ T2583] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 1802.127336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.139944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.152454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.164809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.177130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.189589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.201930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.214431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.226777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.704364][ C1] net_ratelimit: 9396 callbacks suppressed [ 1804.704382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.722567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.734879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.747306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.759618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.771900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.784335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.796653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.808971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.821379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1806.076147][T30826] pwc: recv_control_msg error -71 req 02 val 2900 [ 1806.158309][T30826] pwc: recv_control_msg error -71 req 02 val 2800 [ 1806.224316][T30826] pwc: recv_control_msg error -71 req 04 val 1100 [ 1806.243045][T30826] pwc: recv_control_msg error -71 req 04 val 1200 [ 1806.288149][T30826] pwc: Registered as video103. [ 1806.400689][T30826] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input151 [ 1806.596129][T30826] usb 3-1: USB disconnect, device number 18 [ 1806.972876][ T2600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9522'. [ 1809.714347][ C1] net_ratelimit: 13217 callbacks suppressed [ 1809.714373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.732841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.745455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.757912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.770426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.782866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.795406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.807831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.820324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.833484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.724420][ C1] net_ratelimit: 11817 callbacks suppressed [ 1814.724446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1814.742853][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.755259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.767622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1814.780034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.792448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.804834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1814.817309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.829703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.842063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1814.854080][ C0] sched: DL replenish lagged too much [ 1816.206639][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1819.734268][ C1] net_ratelimit: 11759 callbacks suppressed [ 1819.734292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1819.752749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.765124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.777489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1819.789908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.802275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.814611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1819.827046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.839427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.851805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1821.248339][T32350] Bluetooth: hci1: command 0x0406 tx timeout [ 1824.744428][ C1] net_ratelimit: 13384 callbacks suppressed [ 1824.744452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1824.762795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1824.775131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1824.787477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1824.799924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1824.812267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1824.824659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1824.837021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1824.849434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1824.861779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1829.754430][ C1] net_ratelimit: 14213 callbacks suppressed [ 1829.754455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1829.772868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1829.785312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1829.797672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1829.810007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1829.822275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1829.834695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1829.847058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1829.859422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1829.871704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1834.764767][ C1] net_ratelimit: 14319 callbacks suppressed [ 1834.764791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1834.783172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1834.795568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1834.807913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1834.820348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1834.832793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1834.845225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1834.857507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1834.870047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1834.882519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1839.774383][ C1] net_ratelimit: 14343 callbacks suppressed [ 1839.774409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1839.792772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1839.805142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1839.817430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1839.829831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1839.842258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1839.854613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1839.866918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1839.879374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1839.891755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1844.784128][ C1] net_ratelimit: 14211 callbacks suppressed [ 1844.784151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1844.802444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1844.814834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1844.827298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1844.839679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1844.851958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1844.864386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1844.876829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1844.889220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1844.901454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1849.484366][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1849.794224][ C1] net_ratelimit: 14118 callbacks suppressed [ 1849.794248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1849.812560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1849.824994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1849.837349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1849.849744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1849.862148][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1849.874578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1849.886902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1849.899351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1849.911708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1854.804318][ C1] net_ratelimit: 14200 callbacks suppressed [ 1854.804344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1854.822609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1854.835010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1854.847397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1854.859961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1854.872310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1854.884654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1854.897052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1854.909495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1854.921838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1859.814127][ C1] net_ratelimit: 14351 callbacks suppressed [ 1859.814151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1859.832400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1859.844754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1859.857219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1859.869675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1859.882016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1859.894408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1859.907107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1859.919574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1859.932067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1864.824367][ C1] net_ratelimit: 14383 callbacks suppressed [ 1864.824390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1864.842638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1864.855014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1864.867461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1864.879848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1864.892107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1864.904575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1864.917041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1864.929422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1864.941790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1869.834117][ C1] net_ratelimit: 14174 callbacks suppressed [ 1869.834140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1869.852413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1869.864870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1869.877329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1869.889742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1869.902014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1869.914458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1869.926955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1869.939405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1869.951683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1874.844235][ C1] net_ratelimit: 14117 callbacks suppressed [ 1874.844259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1874.862674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1874.875202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1874.887544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1874.900067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1874.912470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1874.924949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1874.937247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1874.949971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1874.962449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1879.854162][ C1] net_ratelimit: 14246 callbacks suppressed [ 1879.854187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1879.872421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1879.884871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1879.897315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1879.909760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1879.922064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1879.934417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1879.946955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1879.959442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1879.971861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1884.864319][ C1] net_ratelimit: 14362 callbacks suppressed [ 1884.864345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1884.882686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1884.895043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1884.907398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1884.919876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1884.932250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1884.944603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1884.956873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1884.969358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1884.981780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1889.874258][ C1] net_ratelimit: 14365 callbacks suppressed [ 1889.874280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1889.892655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1889.905174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1889.917447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1889.929836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1889.942271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1889.954641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1889.966975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1889.979506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1889.991968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1894.884286][ C1] net_ratelimit: 14122 callbacks suppressed [ 1894.884309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1894.902632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1894.915005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1894.927419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1894.939886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1894.952279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1894.964627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1894.976990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1894.989428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1895.001906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1899.894116][ C1] net_ratelimit: 14141 callbacks suppressed [ 1899.894141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.912575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1899.925136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1899.937646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1899.950007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.962322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1899.974763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1899.987162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1899.999530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1900.011842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1904.904359][ C1] net_ratelimit: 14320 callbacks suppressed [ 1904.904381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1904.922764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1904.935146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.947417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1904.959938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1904.972331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1904.984744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.997250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1905.009670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1905.022047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1909.914175][ C1] net_ratelimit: 14382 callbacks suppressed [ 1909.914199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1909.932498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1909.944833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.957249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1909.969749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1909.982041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1909.994420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1910.006838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1910.019304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1910.031724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1914.924092][ C1] net_ratelimit: 14274 callbacks suppressed [ 1914.924115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1914.942462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1914.954841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.967217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1914.979630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1914.992018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1915.004403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1915.016791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1915.029305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1915.041770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1919.889555][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1919.934147][ C1] net_ratelimit: 14103 callbacks suppressed [ 1919.934172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1919.952460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.964960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1919.977281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1919.989674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1920.002031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1920.014550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1920.026906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1920.039301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1920.051700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.944348][ C1] net_ratelimit: 14135 callbacks suppressed [ 1924.944372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.962632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1924.976094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1924.988558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1925.000928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1925.013224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1925.025685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1925.038082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1925.050452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1925.062752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1926.414060][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1926.421083][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2635/1:b..l P2632/3:b..l P15883/1:b..l P2633/1:b..l P2600/1:b..l P2578/1:b..l [ 1926.435585][ C0] rcu: (detected by 0, t=10504 jiffies, g=265953, q=1804 ncpus=2) [ 1926.443522][ C0] task:syz.4.9516 state:R running task stack:25568 pid:2578 tgid:2575 ppid:1796 task_flags:0x400040 flags:0x00080002 [ 1926.458612][ C0] Call Trace: [ 1926.461945][ C0] [ 1926.464928][ C0] __schedule+0x1568/0x5260 [ 1926.469513][ C0] ? __pfx___schedule+0x10/0x10 [ 1926.474425][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1926.479496][ C0] irqentry_exit+0x599/0x620 [ 1926.484140][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1926.490168][ C0] RIP: 0010:lock_acquire+0x221/0x330 [ 1926.495498][ C0] Code: ff ff ff e8 31 d5 fa 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 ab e2 54 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 90 b9 fd 09 cc 48 8d 3d f8 de 52 [ 1926.515145][ C0] RSP: 0018:ffffc90004a6ea98 EFLAGS: 00000282 [ 1926.521296][ C0] RAX: 7535c8ea418d0c00 RBX: 0000000000000000 RCX: 0000000000000046 [ 1926.529509][ C0] RDX: 000000005c512dbc RSI: ffffffff8df40ba9 RDI: ffffffff8c076800 [ 1926.537523][ C0] RBP: ffffffff8175b355 R08: ffffffff8175b355 R09: ffffffff8e55dd60 [ 1926.545535][ C0] R10: ffffc90004a6ebf8 R11: ffffffff81af9120 R12: 0000000000000002 [ 1926.553553][ C0] R13: ffffffff8e55dd60 R14: 0000000000000000 R15: 0000000000000246 [ 1926.561566][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1926.566733][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1926.572950][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1926.578126][ C0] ? __put_user_nocheck_4+0x3/0x10 [ 1926.583288][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1926.588450][ C0] unwind_next_frame+0xc2/0x23c0 [ 1926.593430][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1926.598593][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1926.603751][ C0] ? asm_exc_page_fault+0x26/0x30 [ 1926.608821][ C0] ? __put_user_nocheck_4+0x3/0x10 [ 1926.613990][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1926.620189][ C0] arch_stack_walk+0x11b/0x150 [ 1926.625035][ C0] ? __put_user_nocheck_4+0x3/0x10 [ 1926.630202][ C0] stack_trace_save+0xa9/0x100 [ 1926.635017][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1926.640456][ C0] save_stack+0x122/0x230 [ 1926.644835][ C0] ? __pfx_save_stack+0x10/0x10 [ 1926.649747][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1926.654734][ C0] ? post_alloc_hook+0x228/0x280 [ 1926.659716][ C0] ? get_page_from_freelist+0x24dc/0x2580 [ 1926.665492][ C0] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 1926.671531][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 1926.676596][ C0] ? vma_alloc_folio_noprof+0xea/0x210 [ 1926.682099][ C0] ? do_wp_page+0x127b/0x5990 [ 1926.686813][ C0] ? handle_mm_fault+0x1520/0x32a0 [ 1926.691964][ C0] ? do_user_addr_fault+0x75b/0x1360 [ 1926.697289][ C0] ? exc_page_fault+0x6a/0xc0 [ 1926.702017][ C0] ? asm_exc_page_fault+0x26/0x30 [ 1926.707090][ C0] ? __put_user_nocheck_4+0x3/0x10 [ 1926.712258][ C0] __set_page_owner+0x8d/0x4c0 [ 1926.717075][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1926.722491][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1926.728598][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1926.733839][ C0] ? bad_range+0x8b/0x2c0 [ 1926.738217][ C0] post_alloc_hook+0x228/0x280 [ 1926.743035][ C0] get_page_from_freelist+0x24dc/0x2580 [ 1926.748644][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 1926.753830][ C0] ? prepare_alloc_pages+0x22a/0x650 [ 1926.759176][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1926.765056][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1926.771480][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 1926.776818][ C0] ? pfn_valid+0xba/0x480 [ 1926.781198][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1926.786197][ C0] vma_alloc_folio_noprof+0xea/0x210 [ 1926.791540][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1926.797492][ C0] do_wp_page+0x127b/0x5990 [ 1926.802066][ C0] ? __pte_offset_map+0x29/0x240 [ 1926.807044][ C0] ? __pte_offset_map+0x29/0x240 [ 1926.812038][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1926.816943][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1926.822023][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1926.827458][ C0] handle_mm_fault+0x1520/0x32a0 [ 1926.832464][ C0] ? handle_mm_fault+0xee/0x32a0 [ 1926.837451][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1926.842802][ C0] ? lock_mm_and_find_vma+0xa7/0x340 [ 1926.848199][ C0] do_user_addr_fault+0x75b/0x1360 [ 1926.853374][ C0] exc_page_fault+0x6a/0xc0 [ 1926.857925][ C0] asm_exc_page_fault+0x26/0x30 [ 1926.862813][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1926.868612][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d1 75 03 00 90 90 90 90 90 90 90 90 90 90 [ 1926.888265][ C0] RSP: 0018:ffffc90004a6f8b8 EFLAGS: 00050202 [ 1926.894382][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000346030 [ 1926.902560][ C0] RDX: ffff888067bd1e40 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1926.910571][ C0] RBP: ffffc90004a6fa30 R08: ffffc90004a6f687 R09: 1ffff9200094ded0 [ 1926.918586][ C0] R10: dffffc0000000000 R11: fffff5200094ded1 R12: 1ffff9200094df24 [ 1926.926600][ C0] R13: 0000000000000002 R14: 0000200000346000 R15: dffffc0000000000 [ 1926.934632][ C0] ____sys_recvmsg+0x2be/0x4a0 [ 1926.939457][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1926.944796][ C0] ? import_iovec+0x73/0xa0 [ 1926.949347][ C0] ___sys_recvmsg+0x215/0x590 [ 1926.954068][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1926.959305][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1926.964551][ C0] ? irqentry_exit+0x59e/0x620 [ 1926.969389][ C0] do_recvmmsg+0x334/0x800 [ 1926.973850][ C0] ? __sys_recvfrom+0x293/0x3c0 [ 1926.978762][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1926.983756][ C0] ? __pfx_do_futex+0x10/0x10 [ 1926.988490][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1926.993563][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1926.999165][ C0] do_syscall_64+0x14d/0xf80 [ 1927.003808][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.009920][ C0] ? trace_irq_disable+0x37/0x100 [ 1927.014990][ C0] ? clear_bhb_loop+0x40/0x90 [ 1927.019718][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.025646][ C0] RIP: 0033:0x7f777639bf79 [ 1927.030095][ C0] RSP: 002b:00007f7777239028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1927.038549][ C0] RAX: ffffffffffffffda RBX: 00007f7776616090 RCX: 00007f777639bf79 [ 1927.046552][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1927.054649][ C0] RBP: 00007f77764327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1927.062656][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1927.070667][ C0] R13: 00007f7776616128 R14: 00007f7776616090 R15: 00007f777673fa48 [ 1927.078697][ C0] [ 1927.081752][ C0] task:syz.3.9522 state:R running task stack:26184 pid:2600 tgid:2595 ppid:32494 task_flags:0x40054c flags:0x00080002 [ 1927.095311][ C0] Call Trace: [ 1927.098632][ C0] [ 1927.101600][ C0] __schedule+0x1568/0x5260 [ 1927.106182][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1927.111259][ C0] ? __pfx___schedule+0x10/0x10 [ 1927.116157][ C0] ? folio_remove_rmap_ptes+0x906/0x1050 [ 1927.121841][ C0] ? get_flush_tlb_info+0x171/0x260 [ 1927.127094][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1927.132513][ C0] preempt_schedule_common+0x82/0xd0 [ 1927.137847][ C0] preempt_schedule_thunk+0x16/0x30 [ 1927.143103][ C0] _raw_spin_unlock+0x3f/0x50 [ 1927.147826][ C0] unmap_page_range+0x38fd/0x4030 [ 1927.153051][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1927.158492][ C0] ? mas_find+0xb0e/0xd30 [ 1927.162874][ C0] ? unmap_vmas+0x157/0x5c0 [ 1927.167426][ C0] unmap_vmas+0x3c0/0x5c0 [ 1927.171812][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1927.176750][ C0] exit_mmap+0x251/0xb30 [ 1927.181037][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1927.186294][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1927.191122][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1927.196840][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1927.201585][ C0] ? uprobe_clear_state+0x27c/0x290 [ 1927.206849][ C0] __mmput+0x118/0x430 [ 1927.210966][ C0] exit_mm+0x168/0x220 [ 1927.215098][ C0] do_exit+0x62e/0x2310 [ 1927.219318][ C0] ? futex_hash+0x40/0x2d0 [ 1927.223872][ C0] ? __pfx_do_exit+0x10/0x10 [ 1927.228513][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1927.233599][ C0] do_group_exit+0x21b/0x2d0 [ 1927.238237][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1927.243490][ C0] get_signal+0x1284/0x1330 [ 1927.248069][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 1927.253662][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1927.259861][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 1927.265112][ C0] exit_to_user_mode_loop+0x86/0x480 [ 1927.270459][ C0] ? rcu_is_watching+0x15/0xb0 [ 1927.275275][ C0] do_syscall_64+0x32d/0xf80 [ 1927.279910][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.286011][ C0] ? trace_irq_disable+0x37/0x100 [ 1927.291083][ C0] ? clear_bhb_loop+0x40/0x90 [ 1927.295808][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.301739][ C0] RIP: 0033:0x7ff6cd39bf79 [ 1927.306195][ C0] RSP: 002b:00007ff6ce1da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1927.314665][ C0] RAX: fffffffffffffe00 RBX: 00007ff6cd616188 RCX: 00007ff6cd39bf79 [ 1927.322675][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff6cd616188 [ 1927.330682][ C0] RBP: 00007ff6cd616180 R08: 0000000000000000 R09: 0000000000000000 [ 1927.338698][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1927.346712][ C0] R13: 00007ff6cd616218 R14: 00007ff6cd73f960 R15: 00007ff6cd73fa48 [ 1927.354791][ C0] [ 1927.357861][ C0] task:modprobe state:R running task stack:25240 pid:2633 tgid:2633 ppid:12 task_flags:0x400000 flags:0x00080000 [ 1927.371416][ C0] Call Trace: [ 1927.374739][ C0] [ 1927.377740][ C0] __schedule+0x1568/0x5260 [ 1927.382370][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1927.387384][ C0] ? __pfx___schedule+0x10/0x10 [ 1927.392292][ C0] ? irqentry_exit+0x59e/0x620 [ 1927.397133][ C0] preempt_schedule_notrace+0x57/0x90 [ 1927.402556][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 1927.408496][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1927.414706][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1927.419867][ C0] rcu_is_watching+0x7f/0xb0 [ 1927.424499][ C0] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1927.430171][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1927.435334][ C0] unwind_next_frame+0xd4/0x23c0 [ 1927.440336][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1927.445505][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1927.450579][ C0] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1927.456259][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1927.462460][ C0] arch_stack_walk+0x11b/0x150 [ 1927.467277][ C0] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1927.472973][ C0] stack_trace_save+0xa9/0x100 [ 1927.477792][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1927.483223][ C0] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 1927.489343][ C0] kasan_save_track+0x3e/0x80 [ 1927.494064][ C0] ? kasan_save_track+0x3e/0x80 [ 1927.498952][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1927.504016][ C0] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1927.509751][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1927.514644][ C0] ? kmem_cache_alloc_noprof+0x223/0x6e0 [ 1927.520316][ C0] kmem_cache_alloc_noprof+0x370/0x6e0 [ 1927.525825][ C0] ? vm_area_alloc+0x24/0x140 [ 1927.530594][ C0] vm_area_alloc+0x24/0x140 [ 1927.535150][ C0] mmap_region+0xf85/0x1f40 [ 1927.539742][ C0] ? trace_contention_end+0x39/0x100 [ 1927.545069][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1927.550145][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1927.555049][ C0] ? security_mmap_addr+0x71/0x240 [ 1927.560466][ C0] ? shmem_mapping+0xd/0x50 [ 1927.565017][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 1927.570528][ C0] do_mmap+0xc39/0x10c0 [ 1927.574744][ C0] ? __pfx_do_mmap+0x10/0x10 [ 1927.579366][ C0] ? down_write_killable+0x180/0x240 [ 1927.584704][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 1927.590442][ C0] ? apparmor_mmap_file+0x23e/0x2b0 [ 1927.595687][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 1927.600325][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1927.605508][ C0] ? __fget_files+0x2a/0x420 [ 1927.610155][ C0] ? __fget_files+0x3a0/0x420 [ 1927.614877][ C0] ? __fget_files+0x2a/0x420 [ 1927.619513][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 1927.624328][ C0] do_syscall_64+0x14d/0xf80 [ 1927.628968][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.635070][ C0] ? trace_irq_disable+0x37/0x100 [ 1927.640136][ C0] ? clear_bhb_loop+0x40/0x90 [ 1927.644862][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.650802][ C0] RIP: 0033:0x7fd21d2cc242 [ 1927.655354][ C0] RSP: 002b:00007ffd551a2878 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1927.663820][ C0] RAX: ffffffffffffffda RBX: 00007fd21d1ee000 RCX: 00007fd21d2cc242 [ 1927.671848][ C0] RDX: 0000000000000005 RSI: 0000000000086000 RDI: 00007fd21d1ee000 [ 1927.679861][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000010000 [ 1927.687871][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffd551a28c8 [ 1927.695883][ C0] R13: 00007fd21d2a00c0 R14: 00007ffd551a2c80 R15: 00000fffaaa34512 [ 1927.703919][ C0] [ 1927.706992][ C0] task:kworker/1:5 state:R running task stack:21496 pid:15883 tgid:15883 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1927.720712][ C0] Workqueue: events_power_efficient gc_worker [ 1927.726915][ C0] Call Trace: [ 1927.730235][ C0] [ 1927.733210][ C0] __schedule+0x1568/0x5260 [ 1927.737791][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1927.742795][ C0] ? __pfx___schedule+0x10/0x10 [ 1927.747688][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1927.752931][ C0] ? irqentry_exit+0x59e/0x620 [ 1927.757753][ C0] ? trace_irq_disable+0x37/0x100 [ 1927.762849][ C0] preempt_schedule_notrace+0x57/0x90 [ 1927.768355][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 1927.774291][ C0] ? gc_worker+0x25d/0x1290 [ 1927.778840][ C0] rcu_is_watching+0x7f/0xb0 [ 1927.783474][ C0] gc_worker+0x29e/0x1290 [ 1927.787861][ C0] ? gc_worker+0x25d/0x1290 [ 1927.792413][ C0] ? __pfx_gc_worker+0x10/0x10 [ 1927.797222][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1927.802985][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1927.808749][ C0] process_scheduled_works+0xaec/0x17a0 [ 1927.814380][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1927.820474][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1927.825560][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1927.831002][ C0] worker_thread+0xda6/0x1360 [ 1927.835759][ C0] kthread+0x388/0x470 [ 1927.839890][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1927.845039][ C0] ? __pfx_kthread+0x10/0x10 [ 1927.849674][ C0] ret_from_fork+0x51e/0xb90 [ 1927.854313][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1927.859464][ C0] ? __switch_to+0xc82/0x1410 [ 1927.864196][ C0] ? __pfx_kthread+0x10/0x10 [ 1927.868833][ C0] ret_from_fork_asm+0x1a/0x30 [ 1927.873661][ C0] [ 1927.876715][ C0] task:modprobe state:R running task stack:24088 pid:2632 tgid:2632 ppid:1153 task_flags:0x400000 flags:0x00080000 [ 1927.890444][ C0] Call Trace: [ 1927.893758][ C0] [ 1927.896738][ C0] __schedule+0x1568/0x5260 [ 1927.901406][ C0] ? pfn_valid+0xba/0x480 [ 1927.905787][ C0] ? lock_acquire+0x106/0x330 [ 1927.910516][ C0] ? __pfx___schedule+0x10/0x10 [ 1927.915420][ C0] ? page_table_check_set+0x148/0x610 [ 1927.920850][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1927.926260][ C0] preempt_schedule_common+0x82/0xd0 [ 1927.931588][ C0] preempt_schedule_thunk+0x16/0x30 [ 1927.936829][ C0] _raw_spin_unlock+0x3f/0x50 [ 1927.941565][ C0] filemap_map_pages+0x1952/0x2000 [ 1927.946748][ C0] ? filemap_map_pages+0x185/0x2000 [ 1927.952025][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1927.957544][ C0] ? __pte_offset_map+0x29/0x240 [ 1927.962535][ C0] ? __pte_offset_map+0x29/0x240 [ 1927.967510][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1927.973017][ C0] do_pte_missing+0x2036/0x37a0 [ 1927.977919][ C0] ? do_pte_missing+0x1258/0x37a0 [ 1927.983033][ C0] ? handle_mm_fault+0xee/0x32a0 [ 1927.988015][ C0] handle_mm_fault+0x1b8c/0x32a0 [ 1927.993015][ C0] ? handle_mm_fault+0xee/0x32a0 [ 1927.998018][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1928.003345][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 1928.008621][ C0] do_user_addr_fault+0xa73/0x1360 [ 1928.013789][ C0] ? rcu_is_watching+0x15/0xb0 [ 1928.018601][ C0] ? trace_page_fault_user+0x84/0x1c0 [ 1928.024015][ C0] exc_page_fault+0x6a/0xc0 [ 1928.028562][ C0] asm_exc_page_fault+0x26/0x30 [ 1928.033454][ C0] RIP: 0033:0x7f394b9278f4 [ 1928.037909][ C0] RSP: 002b:00007ffe9eb5c618 EFLAGS: 00010283 [ 1928.044027][ C0] RAX: 00007f394b5ae190 RBX: 00007f394b5ae190 RCX: 000000000000000a [ 1928.052122][ C0] RDX: 00007f394b60d878 RSI: 00007f394b61a6b0 RDI: ffff80c6b49f2794 [ 1928.060135][ C0] RBP: 00007ffe9eb5c770 R08: 0000000000000030 R09: 00000000effffef5 [ 1928.068140][ C0] R10: 0000000070000029 R11: 00007ffe9eb5c858 R12: 0000000000000000 [ 1928.076151][ C0] R13: 00007f394b61a6b0 R14: 00007ffe9eb5c810 R15: 00007f394b60f018 [ 1928.084179][ C0] [ 1928.087240][ C0] task:modprobe state:R running task stack:23512 pid:2635 tgid:2635 ppid:31745 task_flags:0x400000 flags:0x00080000 [ 1928.100784][ C0] Call Trace: [ 1928.104103][ C0] [ 1928.107075][ C0] __schedule+0x1568/0x5260 [ 1928.111658][ C0] ? __pfx___schedule+0x10/0x10 [ 1928.116558][ C0] ? stack_trace_save+0xa9/0x100 [ 1928.121904][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1928.126976][ C0] irqentry_exit+0x599/0x620 [ 1928.131621][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1928.137641][ C0] RIP: 0010:unwind_next_frame+0xc8d/0x23c0 [ 1928.143490][ C0] Code: 15 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 b0 15 00 00 48 0f bf 02 49 01 c4 48 8d 5e 01 48 8b 44 24 40 0f b6 04 28 <84> c0 0f 85 68 11 00 00 49 89 df 49 c1 ef 03 41 0f b6 04 2f 84 c0 [ 1928.163139][ C0] RSP: 0018:ffffc9000398f098 EFLAGS: 00000286 [ 1928.169357][ C0] RAX: 0000000000000000 RBX: ffffffff9090576d RCX: ffffffff9010a2f8 [ 1928.177365][ C0] RDX: ffffffff90905768 RSI: ffffffff9090576c RDI: ffffffff8c0767a0 [ 1928.185395][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: ffffffff8e55dd60 [ 1928.193416][ C0] R10: ffffc9000398f1b8 R11: ffffffff81af9120 R12: ffffc9000398fc00 [ 1928.201425][ C0] R13: ffffc9000398f1b8 R14: ffffc9000398f168 R15: ffffc9000398f1a0 [ 1928.209447][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1928.215678][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 1928.220857][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1928.226022][ C0] ? mmap_region+0x141b/0x1f40 [ 1928.230825][ C0] ? mmap_region+0x141b/0x1f40 [ 1928.235631][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1928.241832][ C0] arch_stack_walk+0x11b/0x150 [ 1928.246653][ C0] ? mmap_region+0x141b/0x1f40 [ 1928.251468][ C0] stack_trace_save+0xa9/0x100 [ 1928.256283][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1928.261714][ C0] ? trace_ma_write+0x87/0x1c0 [ 1928.266521][ C0] kasan_save_track+0x3e/0x80 [ 1928.271237][ C0] ? kasan_save_track+0x3e/0x80 [ 1928.276130][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1928.280936][ C0] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1928.286533][ C0] ? kmem_cache_free+0x169/0x610 [ 1928.291516][ C0] ? vms_complete_munmap_vmas+0x625/0x890 [ 1928.297284][ C0] ? __mmap_complete+0x7b/0x610 [ 1928.302174][ C0] ? mmap_region+0x141b/0x1f40 [ 1928.307029][ C0] __kasan_kmalloc+0x93/0xb0 [ 1928.311676][ C0] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1928.317100][ C0] ? kmem_cache_free+0x169/0x610 [ 1928.322085][ C0] ? __phys_addr+0xd3/0x180 [ 1928.326648][ C0] kmem_cache_free+0x169/0x610 [ 1928.331460][ C0] ? vms_complete_munmap_vmas+0x625/0x890 [ 1928.337239][ C0] vms_complete_munmap_vmas+0x625/0x890 [ 1928.342861][ C0] __mmap_complete+0x7b/0x610 [ 1928.347643][ C0] mmap_region+0x141b/0x1f40 [ 1928.352293][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1928.357367][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1928.362267][ C0] ? security_mmap_addr+0x71/0x240 [ 1928.367444][ C0] ? shmem_mapping+0xd/0x50 [ 1928.372003][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 1928.377504][ C0] do_mmap+0xc39/0x10c0 [ 1928.381710][ C0] ? __pfx_do_mmap+0x10/0x10 [ 1928.386341][ C0] ? down_write_killable+0x180/0x240 [ 1928.391683][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 1928.397365][ C0] ? apparmor_mmap_file+0x23e/0x2b0 [ 1928.402613][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 1928.407383][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1928.412545][ C0] ? __fget_files+0x2a/0x420 [ 1928.417182][ C0] ? __fget_files+0x3a0/0x420 [ 1928.421940][ C0] ? __fget_files+0x2a/0x420 [ 1928.426576][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 1928.431404][ C0] do_syscall_64+0x14d/0xf80 [ 1928.436051][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.442160][ C0] ? trace_irq_disable+0x37/0x100 [ 1928.447316][ C0] ? clear_bhb_loop+0x40/0x90 [ 1928.452044][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.457987][ C0] RIP: 0033:0x7f4db19a5242 [ 1928.462446][ C0] RSP: 002b:00007ffc51322d28 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1928.470903][ C0] RAX: ffffffffffffffda RBX: 00007f4db16c3000 RCX: 00007f4db19a5242 [ 1928.478919][ C0] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f4db16c3000 [ 1928.486933][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000004000 [ 1928.494955][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffc51322db0 [ 1928.502964][ C0] R13: 00007f4db197a050 R14: 00007ffc51323160 R15: 00000fff8a2645a8 [ 1928.511014][ C0] [ 1928.514092][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 210 jiffies! g265953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1928.526369][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=139249 [ 1928.534375][ C0] rcu: rcu_preempt kthread starved for 213 jiffies! g265953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1928.545690][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1928.555690][ C0] rcu: RCU grace-period kthread stack dump: [ 1928.561617][ C0] task:rcu_preempt state:I stack:27624 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1928.573590][ C0] Call Trace: [ 1928.576910][ C0] [ 1928.579881][ C0] __schedule+0x1568/0x5260 [ 1928.584469][ C0] ? __pfx___schedule+0x10/0x10 [ 1928.589374][ C0] ? schedule+0x90/0x360 [ 1928.593670][ C0] schedule+0x164/0x360 [ 1928.597883][ C0] schedule_timeout+0x158/0x2c0 [ 1928.602877][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1928.608296][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1928.613638][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1928.619494][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1928.625104][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1928.630012][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1928.636215][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1928.641544][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1928.646808][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1928.652660][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1928.657372][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1928.662604][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1928.668468][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1928.673452][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1928.678535][ C0] kthread+0x388/0x470 [ 1928.682667][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1928.687940][ C0] ? __pfx_kthread+0x10/0x10 [ 1928.692596][ C0] ret_from_fork+0x51e/0xb90 [ 1928.697252][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1928.702445][ C0] ? __switch_to+0xc82/0x1410 [ 1928.707222][ C0] ? __pfx_kthread+0x10/0x10 [ 1928.711868][ C0] ret_from_fork_asm+0x1a/0x30 [ 1928.716789][ C0] [ 1928.719846][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1928.726205][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1928.736837][ C0] Tainted: [L]=SOFTLOCKUP [ 1928.741201][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1928.751289][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1928.756977][ C0] Code: 24 5d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 28 0e 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1928.776631][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 1928.782754][ C0] RAX: 00000000027597a5 RBX: ffffffff819986ad RCX: 0000000080000001 [ 1928.790778][ C0] RDX: 0000000000000001 RSI: ffffffff8dcd29cf RDI: ffffffff8c076800 [ 1928.798794][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 1928.806811][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff8ff01270 [ 1928.814820][ C0] R13: 1ffffffff1c529d8 R14: 0000000000000000 R15: 0000000000000000 [ 1928.822846][ C0] FS: 0000000000000000(0000) GS:ffff8881256ca000(0000) knlGS:0000000000000000 [ 1928.831815][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1928.838443][ C0] CR2: 00007fa5c8a7c048 CR3: 000000007f5b8000 CR4: 00000000003526f0 [ 1928.846462][ C0] DR0: 0000000000000000 DR1: 00000000000f007a DR2: 0000000000000000 [ 1928.854476][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1928.862487][ C0] Call Trace: [ 1928.865811][ C0] [ 1928.868780][ C0] default_idle+0x9/0x20 [ 1928.873071][ C0] default_idle_call+0x72/0xb0 [ 1928.877886][ C0] do_idle+0x1bd/0x500 [ 1928.882003][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1928.887254][ C0] ? __pfx_do_idle+0x10/0x10 [ 1928.891896][ C0] cpu_startup_entry+0x43/0x60 [ 1928.896707][ C0] rest_init+0x2de/0x300 [ 1928.901073][ C0] start_kernel+0x380/0x3d0 [ 1928.905622][ C0] x86_64_start_reservations+0x24/0x30 [ 1928.911161][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1928.916321][ C0] common_startup_64+0x13e/0x147 [ 1928.921371][ C0] [ 1929.660505][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1929.954219][ C1] net_ratelimit: 9158 callbacks suppressed [ 1929.954242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1929.972487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1929.984903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.997316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1930.009783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1930.022438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1930.034916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1930.047507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1930.059911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1930.072369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1930.549538][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1933.075567][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1933.093337][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1933.111138][ T2640] Bluetooth: hci2: command 0x0406 tx timeout [ 1934.964241][ C1] net_ratelimit: 10928 callbacks suppressed [ 1934.964274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1934.982697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1934.995062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1935.007456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1935.019919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1935.032401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:13:57:d0:94:a4, vlan:0) [ 1935.044854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1935.057252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1935.069760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1935.082204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)