last executing test programs: 14m59.254948097s ago: executing program 2 (id=4543): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x3a) 14m59.187464958s ago: executing program 2 (id=4544): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2}, 0x30, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8000f28, 0x5) landlock_restrict_self(r0, 0xe) 14m59.113927921s ago: executing program 2 (id=4546): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x11, r3, 0x1, 0x10, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008851}, 0x20000014) bind$packet(r2, &(0x7f0000000440)={0x11, 0x1, r3, 0x1, 0x3, 0x6, @random="1e5609001000"}, 0x14) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x20000010) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000c00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x5a, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) syz_emit_ethernet(0x5a, &(0x7f0000002000)=ANY=[@ANYBLOB="ffffffffffffaabbccddee0288ca5bf0004c07ff123400000000010000010000126700000001aabbccddee0200000000000000000000000000000000000000000000000000000000000022222222222222222222222222222222"], 0x0) 14m59.093563186s ago: executing program 2 (id=4547): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @remote}, &(0x7f0000000200)=0xc) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r0, r1, 0x25, 0x9, @val=@uprobe_multi={&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000340)=[0x3], &(0x7f0000000380)=[0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0], 0x200, 0x1, 0x0, r2}}, 0x3c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x81900) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x5d3, 0xfffffffffffffffd, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r10, r11, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000180)={0x50, 0x0, r9, {0x7, 0x26, 0x5, 0x61001838, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r10, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000006380)="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", 0x2000, &(0x7f000000adc0)={0x0, 0x0, 0x0, &(0x7f000000a4c0)={0x18, 0x0, 0x0, {0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x0, 0x8002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) 14m58.201535187s ago: executing program 2 (id=4554): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x3a) 14m57.921539047s ago: executing program 2 (id=4557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) landlock_restrict_self(0xffffffffffffffff, 0xe) 14m57.717016573s ago: executing program 32 (id=4557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) landlock_restrict_self(0xffffffffffffffff, 0xe) 3m4.630686344s ago: executing program 0 (id=8418): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0xfffffff5, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc3ce}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40044}, 0x40800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200004801c"], 0x44}}, 0x0) 3m4.161881464s ago: executing program 0 (id=8423): timer_create(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xa2) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03040000b500000000008aea0000feff6ed048802ff233c104531bcdce"], 0xc8) r1 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="201800030000641fb237d0cc", @ANYRESHEX=0x0, @ANYRES64=r1, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES8=0x0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES8=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB]) 3m2.071406781s ago: executing program 0 (id=8429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x920, 0x12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000180)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0xffff}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x47, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000002c000000030a01020000000000000009000000000900010073797a30080000000a00030091abc12404cf000014000000020a0900000000000000000000000000140000001100010000000000000000000000000ad6b4a38ef69070f08ddad8201fecd1d9db2d7d56f4c241a01b884027f7037d9f79830034274a1e8d90b73cd2aa3311c5e9879b"], 0x88}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = userfaultfd(0x801) r8 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc4) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x102, 0x0) 3m1.677948272s ago: executing program 0 (id=8432): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async, rerun: 32) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) (rerun: 32) symlinkat(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') (async, rerun: 64) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00') (rerun: 64) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) (async) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYRES8=r2], 0xc0}}, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) (async) openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r6, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00F\b', 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000029000000370000006200000000000000100000002900000043000000010000808ce1a74071bac612eb15e6967804a2e97797194dd6651322fd0a9ddacba223be21fe1dd9c2b4033334b00c29fd8d5d5b1676e71926796734b59ebe91859d44f2249ec70a5987881813b1140310dbd4206535b0659e4c"], 0x24}}], 0x2, 0x4404c880) (async) readv(r5, 0x0, 0x0) (async) timer_getoverrun(r1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x44040) ioctl$FE_SET_PROPERTY(r7, 0x40086f52, &(0x7f0000000340)={0x2b, &(0x7f0000000080)=[{0x3c, '\x00', @data=0x6, 0xffffffff}]}) (async) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(0xffffffffffffffff, 0x800a6f2f, &(0x7f0000000200)) (async, rerun: 32) write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13) (async, rerun: 32) lseek(r5, 0xfffffffe, 0x0) (async) read(r0, &(0x7f0000000100), 0x14) 3m0.638335797s ago: executing program 0 (id=8442): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x2) write$evdev(r1, &(0x7f0000000140)=[{{}, 0x11, 0xb, 0x6f}, {{0x0, 0xea60}, 0x4, 0x4, 0x6}, {{0x0, 0x2710}, 0x0, 0x7ff, 0xee4b}, {{}, 0x2, 0xb, 0x2}], 0x60) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140), 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xfd, 0xa, 0x8, &(0x7f0000000080)="3df47a1dd7b9f2ba8413"}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 3m0.11222102s ago: executing program 0 (id=8444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m59.557037277s ago: executing program 33 (id=8444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m33.693725129s ago: executing program 5 (id=8563): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xa, 0x3, 0x0, {0x7ffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x6000, 0x1000000, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000240)='n', 0x1}], 0x1) 2m33.569123372s ago: executing program 5 (id=8564): openat$kvm(0xffffffffffffff9c, 0x0, 0x181403, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe4, 0x0, 0x7, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e6430000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) 2m33.179326292s ago: executing program 5 (id=8566): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8dc9, 0x801, 0x1, 0x7f, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x18) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x26, 0x4004, @fd_index=0x6, 0x7ffffffffffbffff, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x15, '\x00', &(0x7f0000000840)={0x7, 0xffc0, 0x0, 0x0, 0xb7d}, 0x1}}) (async) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = msgget(0x0, 0x19) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000000)=""/162) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x12, 0xffffffffffffffff, 0xe582e000) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) 2m33.072275444s ago: executing program 5 (id=8567): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001", 0x17, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/freeze_filesystems', 0x42, 0xf0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0xfffffc98}]) recvmsg$can_bcm(r2, &(0x7f00000006c0)={&(0x7f00000000c0)=@in, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/242, 0xf2}], 0x1, &(0x7f00000005c0)=""/240, 0xf0}, 0x2140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x61, 0x0, 0x0, 0x57}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000280)={'netdevsim0\x00', @remote}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x1, r5, 0x0) 2m32.839615625s ago: executing program 5 (id=8568): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001980)=""/4123, 0x101b}, {&(0x7f0000002a40)=""/4066, 0xfe2}, {&(0x7f0000000240)=""/256, 0x100}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f0000000040)=""/53, 0x35}], 0x5, 0x0, 0xc3}, 0x120) 2m32.622452874s ago: executing program 5 (id=8569): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000100)=""/186, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040), 0x40000000000002ff, 0x7}) readv(r2, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000100)=""/186, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040), 0x40000000000002ff, 0x7}) (async) readv(r2, &(0x7f0000000040), 0x2000000000000213) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) (async) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) (async) 2m17.531038403s ago: executing program 34 (id=8569): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000100)=""/186, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040), 0x40000000000002ff, 0x7}) readv(r2, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000100)=""/186, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040), 0x40000000000002ff, 0x7}) (async) readv(r2, &(0x7f0000000040), 0x2000000000000213) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) (async) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) (async) 15.466986577s ago: executing program 4 (id=9174): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0xb1, @local, 0xdc}}, 0x7, 0x1, 0xf06, 0xffffffff, 0xb4, 0x7c, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd"], 0xfdef) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000886400050004ee0b00578ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffffb, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0x4c}, 0x9c) 14.550388687s ago: executing program 4 (id=9183): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}}, 0x0) 14.478584816s ago: executing program 4 (id=9184): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000001, 0x810, 0xffffffffffffffff, 0xf6597000) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) listen(r2, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_clone(0x40800100, &(0x7f00000006c0)="8bf6eb866f417d30f79b3bfe1b53517ac92bc25441f0420754e867b75b2244b7e4bb344597bb52978c7c1bd8727dd22dccb5987fbe0a2d25c3bde550c4c105abfd18d2a287a4d1670d131749a2d610f5705301e65d332ae6fb72824a47b9681b1b31a73afd347056477f23a1428a329c05ff7541a8b35c452e96f7b3a269e94d2c37f9ca36cd1363c658d879656c87fa93c014ae6e8d9aa15aa47cf5c151293849a5bef51a826c840523e11b67249048726df7fa6ac2646460843a3e54fbb024c553079ff406dcf5cc19129c342333e909a425f0bd621f5f6bed57651f84", 0xde, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="201402cb5c07f620d27eb50eb9e19843a157d0f5ee307d86272aa5fdbd9005740f4752af56f49af963c624a047e7") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xfffffffffffff6ff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x70335, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(r4, &(0x7f00000029c0)={&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)="ac99ebb5c51c631688ff2fd0e6e091d9c7a069efe00d814cd0b0881b384330b9e5609cd76c5cb53d431a3cb2bbf14a1aee96e0778a884b5ac8022d7bfc4ad9459c86d2bfae8bb5c38a553ab7904977b08e9fadf71da3b40808a9e611cad8194452fa3e", 0x63}, {&(0x7f00000004c0)}, {&(0x7f00000005c0)="9e2c1d4507c25a79d1da508be0e91e5b5018395d0672f9d677caf7199bd7717887d07eb5a739058237203f840e0efc97eacdaa0093d5a38d9859d00d5c8d1bf771ac202525de91a0d6af8890705bea0ec3be2844783d48d4fb6fe82c1a8903f8da4c", 0x62}, {&(0x7f0000000640)="2521fec475260747af9da7c66ef741", 0xf}], 0x4, &(0x7f0000002980)=[@cred={{0x18, 0x1, 0x2, {r5, r7, r8}}}], 0x18, 0x4008000}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x0, 0x9, 0x4}, 0x20) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000000340)={0x80, 0xc89, 0x7, 0x1, 0x27, 0x0, 0x5}) 13.523836897s ago: executing program 4 (id=9189): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x4040001) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 13.469369928s ago: executing program 4 (id=9190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2382420, &(0x7f0000000200)=ANY=[]) io_uring_setup(0x6d1a, &(0x7f00000002c0)={0x0, 0x31cd, 0x10000, 0x2, 0x12c}) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x1cb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x84) 10.457269011s ago: executing program 4 (id=9200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x920, 0x12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000180)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={r1}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0xffff}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000002c000000030a01020000000000000009000000000900010073797a30080000000a00030091abc12404cf000014000000020a0900000000000000000000000000140000001100010000000000000000000000000ad6b4a38ef69070f08ddad8201fecd1d9db2d7d56f4c241a01b884027f7037d9f79830034274a1e8d"], 0x88}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = userfaultfd(0x801) r8 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc4) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x102, 0x0) 8.556425857s ago: executing program 6 (id=9210): r0 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$tcp_congestion(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) read$FUSE(r1, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x3, 0x7fff0000}]}) waitid$P_PIDFD(0x3, r4, 0x0, 0x40000004, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 8.065988245s ago: executing program 6 (id=9212): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000001, 0x810, 0xffffffffffffffff, 0xf6597000) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) listen(r2, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_clone(0x40800100, &(0x7f00000006c0)="8bf6eb866f417d30f79b3bfe1b53517ac92bc25441f0420754e867b75b2244b7e4bb344597bb52978c7c1bd8727dd22dccb5987fbe0a2d25c3bde550c4c105abfd18d2a287a4d1670d131749a2d610f5705301e65d332ae6fb72824a47b9681b1b31a73afd347056477f23a1428a329c05ff7541a8b35c452e96f7b3a269e94d2c37f9ca36cd1363c658d879656c87fa93c014ae6e8d9aa15aa47cf5c151293849a5bef51a826c840523e11b67249048726df7fa6ac2646460843a3e54fbb024c553079ff406dcf5cc19129c342333e909a425f0bd621f5f6bed57651f84", 0xde, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="201402cb5c07f620d27eb50eb9e19843a157d0f5ee307d86272aa5fdbd9005740f4752af56f49af963c624a047e7") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xfffffffffffff6ff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x70335, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(r4, &(0x7f00000029c0)={&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)="ac99ebb5c51c631688ff2fd0e6e091d9c7a069efe00d814cd0b0881b384330b9e5609cd76c5cb53d431a3cb2bbf14a1aee96e0778a884b5ac8022d7bfc4ad9459c86d2bfae8bb5c38a553ab7904977b08e9fadf71da3b40808a9e611cad8194452fa3e", 0x63}, {&(0x7f00000004c0)}, {&(0x7f00000005c0)="9e2c1d4507c25a79d1da508be0e91e5b5018395d0672f9d677caf7199bd7717887d07eb5a739058237203f840e0efc97eacdaa0093d5a38d9859d00d5c8d1bf771ac202525de91a0d6af8890705bea0ec3be2844783d48d4fb6fe82c1a8903f8da4c", 0x62}, {&(0x7f0000000640)="2521fec475260747af9da7c66ef741", 0xf}], 0x4, &(0x7f0000002980)=[@cred={{0x18, 0x1, 0x2, {r5, r7, r8}}}], 0x18, 0x4008000}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x0, 0x9, 0x4}, 0x20) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000000340)={0x80, 0xc89, 0x7, 0x1, 0x27, 0x0, 0x5}) 7.398049545s ago: executing program 1 (id=9213): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d07, 0x0, 0x5}]}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x48052) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.159847617s ago: executing program 1 (id=9216): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001300e99900000000"], 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) syz_usb_connect(0x2, 0x9a, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100163b52e20ce0a0216d08c010203010902880001040a300609040c090306e0ab06052406000105240002000d240f0101000000010000008006241aff030005240101061524120400a317a88b045e4f01a607c0ffcb7e392a0724060001dee00524"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$ublk_ctrl(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f00000002c0)={0x0, 0xffff, 0x8, &(0x7f0000000140)}) ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000340)={r6, 0xffff, 0x0, 0x0, r0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf259600000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@delqdisc={0x118, 0x25, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xa, 0x4}, {0xe, 0xffff}, {0xd, 0x8}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x72, 0x40, 0x6, 0x3, 0x2, 0x2, 0xe01, 0x1}}, {0x6, 0x2, [0x68f3]}}]}, @qdisc_kind_options=@q_cbq={{0x8}, {0xc4, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x54, '\x00', 0x10001, 0xffff6d1f, 0xa48, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x8001, 0x3, 0x9, 0xc33}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x3a, 0xfff, 0x8, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x55, '\x00', 0x49, 0xa, 0x0, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8d, '\x00', 0x4000, 0x8, 0x9, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x0, 0x1000, 0xd16d, 0xf}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x4, 0xb, 0xbae, 0xdc}}, @TCA_CBS_PARMS={0x18, 0x1, {0xac, '\x00', 0x400, 0x0, 0x3dc, 0x88}}]}}]}, 0x118}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@newqdisc={0x178, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x1, 0x81, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7}]}}]}, 0x178}}, 0x0) tkill(r0, 0xf) ptrace(0x4206, r0) ptrace(0x4207, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6.010035658s ago: executing program 3 (id=9217): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2f, 0x0, 0x4, 0x0, 0x0, 0x7e, 0xd0, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x80000045, [0xb, 0x6]}}) 5.960469432s ago: executing program 3 (id=9218): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001032cbd7002000000000c000000e3f271e5774b1e842b94ecf16977a27a39bb3ab3a7d92a2885c48b8aed2d0c2dbcc1049f4a65f1"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="475f99ce6ab9f0164d18380000830604010200000000000000000a0000010800054000000fa60500010001000000060006405ae5736a000500000a000200"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x81}, {0x8, 0xc}]}, 0x14, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(0x0, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a000000000000f3fc010000000000000000000000000000000000000000000005000500000000000a00000000000000ff01000000000000000000000000000100000000000000000800120401000200000000000000000006002b00000000000000000000000000fc010000000000000000000000000000fc01000000000000000000000000000004000400"/192], 0xc0}}, 0x4010) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) dup(r7) ioctl$EVIOCGMASK(r6, 0x5b02, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000900)={0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="4021b1000000b130b87a9f2c17e8d0359716e2bffe08da20c3088bbe54cb148170d37fced374bb3bc7e4ba2ec29275fe65fe3917f42b5211cdf2ed9135510c585fa207dfda47878c9a5ca77df4266eca6c252c76e19b55908f96d40a4aff4f1146e90f52d88b94e8ab79f4c507e9080f895fea5b16a55233b521099ace8b731c500390a46bb4b6e27ba924f94503eb57428607d9820062c8a665e7155e220b5f58f83d40a507dce292aa6ab5f230586838a86c126e08f2"], &(0x7f0000000800)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "c9d2b3c25078d8da363c151c2d465921a79d137c83216649ee655530680a1e5280ec711ff15acc2dafaa6d599cb395352b1d411469b312a5599360f18c79482b3d4b4b366da2a8787fe4221695f2abd204cc9cd0d825169a55b2ddccbf03931eda540269456459eba2907d3f738677bdda30229af26199c95feccd706fb374df7cc5aed5cda0ba7c837ce858fa74c75117023f36abdee7a249deae7fa045248edaba87be0920a42c451e4178e0372359a88778d8ed1f5a9de8ab607d65693e1be4135759821bf3c63a8c8b33b5a61898"}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="2013ac000000e8e75e067d8291aee78fb7809ec5ace37d1517f7c74e74d3d77621b1da75e34470a283b6ed5fd24a28e9cc8911ecb870bcbe2510bc38050ad6601030e4040f901b4878f14c881247017072fe60b5f6875d3e46926c0af6f9c771f0ae6c760d769f7f088e121002523fda89941bdff52ae15130e510a76f46038251aa38c5bc28a4bcf81fe1d8d16bd8af293535242f853f75365389df74310f502929c8f87e9261c3b87681b7"], &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000ac0)={0xc0, 0x5, 0x2, "992a"}, &(0x7f0000000b00)}) landlock_restrict_self(r1, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x7) landlock_restrict_self(r1, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) 5.575055069s ago: executing program 6 (id=9220): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x207, 0x4) r3 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1df}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', r7, 0x40, 0x10, 0xe, 0x1, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x69, 0x0, 0x9, 0x29, 0x0, @broadcast, @empty}}}}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300000040351213823fe701020301090269000301003003080b0002010020060904000000010120"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 3.981347058s ago: executing program 7 (id=9224): pselect6(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b20", 0x12, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/freeze_filesystems', 0x42, 0xf0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0xfffffc98}]) recvmsg$can_bcm(r2, &(0x7f00000006c0)={&(0x7f00000000c0)=@in, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/242, 0xf2}], 0x1, &(0x7f00000005c0)=""/240, 0xf0}, 0x2140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x61, 0x0, 0x0, 0x57}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000280)={'netdevsim0\x00', @remote}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x1, r5, 0x0) 3.835493688s ago: executing program 3 (id=9225): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d07, 0x0, 0x5}]}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x48052) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.591298031s ago: executing program 7 (id=9226): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x4, 0x200000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x109681, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) read(r4, &(0x7f0000000040)=""/2, 0x2) fchdir(0xffffffffffffffff) exit(0xffff) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x5) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000000)) syz_clone(0x26000, &(0x7f0000000580)="495ed372cd7e3f71edaff3ca179d436e77f15ecdd84ae704261c358e0699f63934", 0x21, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.871586678s ago: executing program 1 (id=9227): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2f, 0x0, 0x4, 0x0, 0x0, 0x7e, 0xd0, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x80000045, [0xb, 0x6]}}) 2.741730255s ago: executing program 1 (id=9228): syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=0x0], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) close(0x3) (async) creat(&(0x7f0000000040)='./file0\x00', 0x85) 2.729477664s ago: executing program 3 (id=9229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1c700000, 0x54}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8df600"}, @NL80211_ATTR_SSID={0x18, 0x34, @random="4820cae94a78cd942de884161ff88b7b669e1e6a"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_PMKID={0x14, 0x55, "8f7e45e3df297153b58f6a0e2a23af6b"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x14) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) 2.588645164s ago: executing program 7 (id=9230): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400000}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) unshare(0x28000600) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) listen(r4, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x0}, &(0x7f00000001c0)="25394b88f20db9e978a2c119054bd1b6c021debd1952aa041d2c600fab0d169ba404d131b315e94b1bcf1784e476b53b5bd6fa933cc730bc9a62ebd0ed4860d08596c0035cbf1968b96cd332795ede968c6f1c8ecc00"/97, 0x61, 0xffffffffffffffff) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 2.443738788s ago: executing program 6 (id=9231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x920, 0x12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000180)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={r1}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0xffff}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x47, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000002c000000030a01020000000000000009000000000900010073797a30080000000a00030091abc12404cf000014000000020a0900000000000000000000000000140000001100010000000000000000000000000ad6b4a38ef69070f08ddad8201fecd1d9db2d7d56f4c241a01b884027f7037d9f79830034274a1e8d90b73cd2aa3311c5e9879b"], 0x88}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = userfaultfd(0x801) r8 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc4) process_vm_readv(r8, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x102, 0x0) 2.397616431s ago: executing program 3 (id=9232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, @remote, 0x1, 0x7f, 0x6, 0x500, 0x3, 0x80200000}) 2.383406071s ago: executing program 3 (id=9233): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) recvmmsg(r1, &(0x7f0000003380)=[{{&(0x7f00000001c0)=@tipc, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000ac0)=""/195, 0xc3}], 0x3, &(0x7f0000000480)=""/89, 0x59}, 0xfffffff8}, {{&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000003280)=[{&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000000780)=""/43, 0x2b}, {&(0x7f00000007c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)}, {&(0x7f0000003180)=""/174, 0xae}, {&(0x7f0000003240)=""/6, 0x6}], 0xa, &(0x7f0000003300)=""/76, 0x4c}, 0x9e9}], 0x2, 0x123, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xa, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = getpgid(0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x25, &(0x7f00000001c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x8) r6 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r6, 0x21, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a140000000b0a010200000000000000c4bd0000021400000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip6_mr_vif\x00') fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) r7 = socket$rds(0x15, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 2.257851679s ago: executing program 6 (id=9234): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 2.193866841s ago: executing program 6 (id=9235): pselect6(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b20", 0x12, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/freeze_filesystems', 0x42, 0xf0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0xfffffc98}]) recvmsg$can_bcm(r2, &(0x7f00000006c0)={&(0x7f00000000c0)=@in, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/242, 0xf2}], 0x1, &(0x7f00000005c0)=""/240, 0xf0}, 0x2140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x61, 0x0, 0x0, 0x57}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000280)={'netdevsim0\x00', @remote}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x1, r5, 0x0) 2.077703519s ago: executing program 1 (id=9236): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00", 0x21}], 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x61, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="69df4c3b02a531d94e08520cdf770fd6f46d55f513694248f63ac26970050306c396d197f331c818298e6342456d4cd0c15119042623b09bc7df27d4f4aaa6290e696a8d93f7e2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRESDEC=r4], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="85000000320000007106d5b80000852000000400000018012c8de996", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001860000002000000000000000300000018200000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff"], 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0f, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x6, 0x9, &(0x7f00000003c0)={{0x11, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x28, 0x3a6, 0x3}, {@remote, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r9, 0x6, 0x9, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.211479947s ago: executing program 7 (id=9237): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2f, 0x0, 0x4, 0x0, 0x0, 0x7e, 0xd0, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x80000045, [0xb, 0x6]}}) 1.06529424s ago: executing program 7 (id=9238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (fail_nth: 12) 622.007416ms ago: executing program 7 (id=9239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fb, &(0x7f0000000500)=0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xffffff4c}]) 0s ago: executing program 1 (id=9240): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39}}) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 16) kernel console output (not intermixed with test programs): 594][ T9188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8793'. [ 1638.807610][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8793'. [ 1638.961593][ T9188] syzkaller0: entered promiscuous mode [ 1638.961650][ T9188] syzkaller0: entered allmulticast mode [ 1639.415718][T10731] usb 4-1: USB disconnect, device number 103 [ 1639.426343][T10731] usblp0: removed [ 1644.707061][ T9256] sock: sock_set_timeout: `syz.4.8800' (pid 9256) tries to set negative timeout [ 1645.050246][T29507] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1645.179888][T29507] usb 4-1: device descriptor read/64, error -71 [ 1645.419892][T29507] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1645.549874][T29507] usb 4-1: device descriptor read/64, error -71 [ 1645.660128][T29507] usb usb4-port1: attempt power cycle [ 1646.009888][T29507] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1646.030936][T29507] usb 4-1: device descriptor read/8, error -71 [ 1646.082074][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8809'. [ 1646.082106][ T9320] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8809'. [ 1646.143699][ T9320] syzkaller0: entered promiscuous mode [ 1646.143735][ T9320] syzkaller0: entered allmulticast mode [ 1646.290513][T29507] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1646.310570][T29507] usb 4-1: device descriptor read/8, error -71 [ 1646.425002][T29507] usb usb4-port1: unable to enumerate USB device [ 1648.004032][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1648.004061][ T30] audit: type=1326 audit(1790483727.986:22617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.3.8810" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe80ec code=0x0 [ 1649.114102][ T9367] vivid-000: ================= START STATUS ================= [ 1649.114123][ T9367] vivid-000: Generate PTS: true [ 1649.114147][ T9367] vivid-000: Generate SCR: true [ 1649.114168][ T9367] tpg source WxH: 720x576 (R'G'B) [ 1649.114180][ T9367] tpg field: 4 [ 1649.114189][ T9367] tpg crop: (0,0)/720x576 [ 1649.114202][ T9367] tpg compose: (0,0)/16x8 [ 1649.114215][ T9367] tpg colorspace: 1 [ 1649.114223][ T9367] tpg transfer function: 0/0 [ 1649.114233][ T9367] tpg quantization: 0/0 [ 1649.114243][ T9367] tpg RGB range: 0/2 [ 1649.114253][ T9367] vivid-000: ================== END STATUS ================== [ 1650.076113][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8818'. [ 1650.081559][ T9377] binder: 9376:9377 ioctl 80206433 80000b40 returned -22 [ 1650.343985][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1650.525836][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1650.582464][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1650.582516][ T9] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1650.622527][ T9] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1650.622554][ T9] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1650.622573][ T9] usb 4-1: config 14 has no interface number 0 [ 1650.622587][ T9] usb 4-1: config 14 has no interface number 1 [ 1650.622654][ T9] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1650.622676][ T9] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1650.622696][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1650.622739][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1650.622764][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1650.622786][ T9] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1650.622807][ T9] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1650.622823][ T9] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1650.674363][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.674389][ T9] usb 4-1: Product: syz [ 1650.674402][ T9] usb 4-1: Manufacturer: syz [ 1650.674416][ T9] usb 4-1: SerialNumber: syz [ 1651.255327][ T9388] FAULT_INJECTION: forcing a failure. [ 1651.255327][ T9388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.255383][ T9388] CPU: 1 UID: 0 PID: 9388 Comm: syz.4.8819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.255407][ T9388] Tainted: [L]=SOFTLOCKUP [ 1651.255415][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1651.255425][ T9388] Call Trace: [ 1651.255433][ T9388] [ 1651.255441][ T9388] dump_stack_lvl+0xe8/0x150 [ 1651.255471][ T9388] should_fail_ex+0x410/0x560 [ 1651.255500][ T9388] strncpy_from_user+0x36/0x2c0 [ 1651.255524][ T9388] do_getname+0x77/0x250 [ 1651.255548][ T9388] __se_sys_mknodat+0x27/0x150 [ 1651.255569][ T9388] __do_fast_syscall_32+0x27a/0x6a0 [ 1651.255595][ T9388] ? do_fast_syscall_32+0x33/0x70 [ 1651.255618][ T9388] ? asm_int80_emulation+0x1a/0x20 [ 1651.255635][ T9388] ? do_int80_emulation+0x299/0x500 [ 1651.255662][ T9388] do_fast_syscall_32+0x33/0x70 [ 1651.255685][ T9388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1651.255706][ T9388] RIP: 0023:0xf704f0ec [ 1651.255723][ T9388] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1651.255737][ T9388] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000129 [ 1651.255757][ T9388] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 1651.255769][ T9388] RDX: 000000000000018c RSI: 0000000000000103 RDI: 0000000000000000 [ 1651.255780][ T9388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1651.255790][ T9388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1651.255801][ T9388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1651.255826][ T9388] [ 1651.534742][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.550358][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.931790][ T9413] syzkaller0: entered promiscuous mode [ 1651.931813][ T9413] syzkaller0: entered allmulticast mode [ 1652.393743][ T9440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8826'. [ 1652.396114][ T9440] fuse: Unknown parameter 'ÿÿÿÿ0x00000000000000060177777777777777777777700000000000000000000ÿÿÿÿÿÿÿÿ00000000000000000003ÿÿÿÿP‰¿6-#°Öãº>+2âr¨F' [ 1652.903947][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8831'. [ 1652.903970][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8831'. [ 1652.979629][ T9460] syzkaller0: entered promiscuous mode [ 1652.979652][ T9460] syzkaller0: entered allmulticast mode [ 1653.082665][ T9] legousbtower 4-1:14.57: interrupt endpoints not found [ 1653.098433][ T9] legousbtower 4-1:14.228: get version request failed: -71 [ 1653.098605][ T9] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 1653.128117][ T9] usb 4-1: USB disconnect, device number 108 [ 1653.295907][ T9477] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1653.361624][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1657.412907][ T9520] netlink: 'syz.1.8836': attribute type 1 has an invalid length. [ 1657.554122][ T9520] bond2: entered promiscuous mode [ 1657.554772][ T9520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1657.607763][ T9538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1657.608099][ T9538] bond2: (slave gre3): The slave device specified does not support setting the MAC address [ 1657.608120][ T9538] bond2: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 1657.644430][ T9538] bond2: (slave gre3): Opening slave failed [ 1658.535761][T12526] usb 5-1: Failed to load image "edgeport/down.fw" err -110 [ 1658.537879][ T9595] bond1: option all_slaves_active: invalid value (8) [ 1658.556128][T12526] usb 5-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 1658.556144][T12526] usb 5-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 1658.585056][ T9595] bond1 (unregistering): Released all slaves [ 1659.466640][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8848'. [ 1659.466656][ T9692] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8848'. [ 1659.575193][ T9692] syzkaller0: entered promiscuous mode [ 1659.575210][ T9692] syzkaller0: entered allmulticast mode [ 1659.676163][ T9698] usb usb4: usbfs: process 9698 (syz.7.8849) did not claim interface 0 before use [ 1660.234354][ T9714] FAULT_INJECTION: forcing a failure. [ 1660.234354][ T9714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1660.234392][ T9714] CPU: 1 UID: 0 PID: 9714 Comm: syz.1.8852 Tainted: G L syzkaller #0 PREEMPT(full) [ 1660.234418][ T9714] Tainted: [L]=SOFTLOCKUP [ 1660.234426][ T9714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1660.234439][ T9714] Call Trace: [ 1660.234448][ T9714] [ 1660.234457][ T9714] dump_stack_lvl+0xe8/0x150 [ 1660.234489][ T9714] should_fail_ex+0x410/0x560 [ 1660.234518][ T9714] _copy_from_user+0x2d/0xb0 [ 1660.234545][ T9714] kstrtouint_from_user+0xd6/0x180 [ 1660.234569][ T9714] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1660.234599][ T9714] ? lock_acquire+0x115/0x350 [ 1660.234624][ T9714] proc_fail_nth_write+0x8e/0x210 [ 1660.234644][ T9714] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1660.234670][ T9714] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1660.234687][ T9714] vfs_write+0x296/0xba0 [ 1660.234723][ T9714] ? __pfx_vfs_write+0x10/0x10 [ 1660.234752][ T9714] ? __fget_files+0x2a/0x420 [ 1660.234786][ T9714] ? __fget_files+0x3a2/0x420 [ 1660.234810][ T9714] ? __fget_files+0x2a/0x420 [ 1660.234845][ T9714] ksys_write+0x150/0x270 [ 1660.234883][ T9714] ? __pfx_ksys_write+0x10/0x10 [ 1660.234916][ T9714] ? asm_int80_emulation+0x1a/0x20 [ 1660.234940][ T9714] do_int80_emulation+0x198/0x500 [ 1660.234967][ T9714] ? trace_irq_disable+0x3b/0x140 [ 1660.234986][ T9714] ? asm_int80_emulation+0x1a/0x20 [ 1660.235004][ T9714] ? clear_bhb_loop+0x70/0xc0 [ 1660.235023][ T9714] ? clear_bhb_loop+0x70/0xc0 [ 1660.235046][ T9714] asm_int80_emulation+0x1a/0x20 [ 1660.235065][ T9714] RIP: 0023:0xf71d75ab [ 1660.235083][ T9714] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1660.235099][ T9714] RSP: 002b:00000000f544b4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1660.235118][ T9714] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f544b5d0 [ 1660.235131][ T9714] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1660.235141][ T9714] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1660.235151][ T9714] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1660.235161][ T9714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1660.235187][ T9714] [ 1667.619509][ T4984] udevd[4984]: worker [6377] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 1667.928954][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.939928][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.783318][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.783373][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.033363][ T9815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8861'. [ 1670.156825][ T9826] openvswitch: netlink: Actions may not be safe on all matching packets [ 1670.346887][ T30] audit: type=1326 audit(1790483750.326:22618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.7.8865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702f0ec code=0x0 [ 1671.016230][ T9853] netlink: 'syz.6.8868': attribute type 2 has an invalid length. [ 1671.016261][ T9853] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8868'. [ 1671.029130][ T9853] : entered promiscuous mode [ 1671.165205][T10730] logitech-hidpp-device 0005:046D:B012.008F: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1671.349194][ T9862] fido_id[9862]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1671.636828][ T9875] bond1: option arp_interval: invalid value (18446744073709551615) [ 1671.636852][ T9875] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1671.660020][ T9875] bond1 (unregistering): Released all slaves [ 1671.884559][ T9960] FAULT_INJECTION: forcing a failure. [ 1671.884559][ T9960] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.884592][ T9960] CPU: 0 UID: 0 PID: 9960 Comm: syz.6.8873 Tainted: G L syzkaller #0 PREEMPT(full) [ 1671.884618][ T9960] Tainted: [L]=SOFTLOCKUP [ 1671.884625][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1671.884636][ T9960] Call Trace: [ 1671.884644][ T9960] [ 1671.884652][ T9960] dump_stack_lvl+0xe8/0x150 [ 1671.884684][ T9960] should_fail_ex+0x410/0x560 [ 1671.884714][ T9960] should_failslab+0xa8/0x100 [ 1671.884741][ T9960] __kmalloc_cache_noprof+0xa3/0x600 [ 1671.884762][ T9960] ? rcu_is_watching+0x16/0xb0 [ 1671.884783][ T9960] ? vhost_task_create+0x123/0x380 [ 1671.884801][ T9960] ? vhost_task_create+0x123/0x380 [ 1671.884828][ T9960] vhost_task_create+0x123/0x380 [ 1671.884848][ T9960] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1671.884871][ T9960] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1671.884896][ T9960] ? __pfx_vhost_task_create+0x10/0x10 [ 1671.884914][ T9960] ? register_lock_class+0x31/0x2e0 [ 1671.884942][ T9960] ? __pfx_vhost_task_fn+0x10/0x10 [ 1671.884976][ T9960] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1671.885004][ T9960] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 1671.885042][ T9960] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1671.885068][ T9960] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1671.885094][ T9960] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1671.885112][ T9960] ? do_vfs_ioctl+0x116f/0x1530 [ 1671.885134][ T9960] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1671.885174][ T9960] ? hook_file_ioctl_compat+0x1f2/0x600 [ 1671.885216][ T9960] kvm_vcpu_compat_ioctl+0x204/0x390 [ 1671.885239][ T9960] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1671.885261][ T9960] ? __fget_files+0x3a2/0x420 [ 1671.885286][ T9960] ? __fget_files+0x2a/0x420 [ 1671.885313][ T9960] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1671.885341][ T9960] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1671.885364][ T9960] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1671.885386][ T9960] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1671.885411][ T9960] ? __fget_files+0x3a2/0x420 [ 1671.885442][ T9960] ? fput+0xa0/0xd0 [ 1671.885464][ T9960] ? ksys_write+0x242/0x270 [ 1671.885504][ T9960] __do_fast_syscall_32+0x27a/0x6a0 [ 1671.885529][ T9960] ? do_fast_syscall_32+0x33/0x70 [ 1671.885552][ T9960] ? asm_int80_emulation+0x1a/0x20 [ 1671.885570][ T9960] ? do_int80_emulation+0x299/0x500 [ 1671.885593][ T9960] ? trace_irq_disable+0x3b/0x140 [ 1671.885615][ T9960] do_fast_syscall_32+0x33/0x70 [ 1671.885639][ T9960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1671.885660][ T9960] RIP: 0023:0xf7fa30ec [ 1671.885677][ T9960] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1671.885691][ T9960] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1671.885710][ T9960] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae80 [ 1671.885723][ T9960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1671.885734][ T9960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1671.885745][ T9960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1671.885756][ T9960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1671.885783][ T9960] [ 1672.481386][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8876'. [ 1672.849233][T10008] bond1: option arp_interval: invalid value (18446744073709551615) [ 1672.849259][T10008] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1672.889100][T10008] bond1 (unregistering): Released all slaves [ 1673.392231][T30765] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1673.397229][T30765] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1673.403545][T30765] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1673.432244][T30765] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1673.436486][T30765] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1674.301421][T10140] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8883'. [ 1675.578432][ T52] Bluetooth: hci6: command tx timeout [ 1676.060968][T10165] binder: 10164:10165 ioctl c0306201 0 returned -14 [ 1677.652278][ T52] Bluetooth: hci6: command tx timeout [ 1679.730433][ T52] Bluetooth: hci6: command tx timeout [ 1680.539229][T10284] sg_write: data in/out 401408/136 bytes for SCSI command 0x0-- guessing data in; [ 1680.539229][T10284] program syz.3.8897 not setting count and/or reply_len properly [ 1680.565075][T18029] team0: Port device netdevsim1 removed [ 1680.833705][T10128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.833909][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.834073][T10128] bridge_slave_0: entered allmulticast mode [ 1680.839457][T10128] bridge_slave_0: entered promiscuous mode [ 1681.001999][T10346] bond5: option arp_interval: invalid value (18446744073709551615) [ 1681.002026][T10346] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1681.004966][T10346] bond5 (unregistering): Released all slaves [ 1681.070647][T10128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.070806][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.070984][T10128] bridge_slave_1: entered allmulticast mode [ 1681.073944][T10128] bridge_slave_1: entered promiscuous mode [ 1681.269411][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.285317][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1681.414316][T10128] team0: Port device team_slave_0 added [ 1681.419569][T10128] team0: Port device team_slave_1 added [ 1681.507554][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.507571][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.507592][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.520790][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.520806][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.520828][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.660389][T10128] hsr_slave_0: entered promiscuous mode [ 1681.661418][T10128] hsr_slave_1: entered promiscuous mode [ 1681.662129][T10128] debugfs: 'hsr0' already exists in 'hsr' [ 1681.662146][T10128] Cannot create hsr debugfs directory [ 1681.695113][T18029] bridge_slave_0: left allmulticast mode [ 1681.695138][T18029] bridge_slave_0: left promiscuous mode [ 1681.695655][T18029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.810174][ T52] Bluetooth: hci6: command tx timeout [ 1682.208107][T18029] veth5: left allmulticast mode [ 1682.208138][T18029] veth5: left promiscuous mode [ 1682.208426][T18029] bridge1: port 1(veth5) entered disabled state [ 1682.208981][T10536] trusted_key: encrypted_key: insufficient parameters specified [ 1682.209227][T10537] trusted_key: encrypted_key: insufficient parameters specified [ 1682.449457][T18029] team0: Port device vxlan0 removed [ 1682.489929][ T6572] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1682.592227][T18029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1682.593776][T18029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.594505][T18029] bond0 (unregistering): Released all slaves [ 1682.599074][T18029] bond1 (unregistering): Released all slaves [ 1682.613995][T18029] bond2 (unregistering): Released all slaves [ 1682.669911][ T6572] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1682.682528][ T6572] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.682553][ T6572] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1682.690757][ T6572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.690779][ T6572] usb 4-1: Product: syz [ 1682.690792][ T6572] usb 4-1: Manufacturer: syz [ 1682.690806][ T6572] usb 4-1: SerialNumber: syz [ 1682.986075][T18029] IPVS: stopping backup sync thread 22444 ... [ 1683.209467][T10537] bridge0: port 3(wlan1) entered blocking state [ 1683.209705][T10537] bridge0: port 3(wlan1) entered disabled state [ 1683.212621][T10537] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode [ 1683.218507][T10537] mac80211_hwsim hwsim54 wlan1: entered promiscuous mode [ 1683.347612][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8906'. [ 1683.737366][ T6572] usb 4-1: USB disconnect, device number 109 [ 1683.844840][ T7749] udevd[7749]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1684.413771][T10708] bond2: option arp_interval: invalid value (18446744073709551615) [ 1684.413796][T10708] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1684.418393][T10708] bond2 (unregistering): Released all slaves [ 1685.169947][T10836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8915'. [ 1685.169970][T10836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8915'. [ 1686.023309][T10867] netlink: 'syz.7.8916': attribute type 8 has an invalid length. [ 1687.594049][T18029] hsr_slave_0: left promiscuous mode [ 1687.597180][T18029] hsr_slave_1: left promiscuous mode [ 1687.645015][T18029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1687.664196][T18029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.093492][T10930] FAULT_INJECTION: forcing a failure. [ 1688.093492][T10930] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.093532][T10930] CPU: 0 UID: 0 PID: 10930 Comm: syz.6.8919 Tainted: G L syzkaller #0 PREEMPT(full) [ 1688.093558][T10930] Tainted: [L]=SOFTLOCKUP [ 1688.093564][T10930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1688.093570][T10930] Call Trace: [ 1688.093575][T10930] [ 1688.093580][T10930] dump_stack_lvl+0xe8/0x150 [ 1688.093601][T10930] should_fail_ex+0x410/0x560 [ 1688.093617][T10930] should_failslab+0xa8/0x100 [ 1688.093642][T10930] __kvmalloc_node_noprof+0x176/0x820 [ 1688.093663][T10930] ? __kmalloc_cache_noprof+0x321/0x600 [ 1688.093685][T10930] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1688.093703][T10930] ? percpu_ref_init+0xc5/0x350 [ 1688.093719][T10930] ? io_alloc_cache_init+0x42/0x140 [ 1688.093736][T10930] ? io_alloc_cache_init+0x42/0x140 [ 1688.093759][T10930] io_alloc_cache_init+0x42/0x140 [ 1688.093780][T10930] io_ring_ctx_alloc+0x508/0xb80 [ 1688.093813][T10930] io_uring_create+0x50/0x990 [ 1688.093843][T10930] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1688.093864][T10930] ? __fget_files+0x2a/0x420 [ 1688.093890][T10930] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1688.093924][T10930] ? ksys_write+0x242/0x270 [ 1688.093960][T10930] __do_fast_syscall_32+0x27a/0x6a0 [ 1688.093987][T10930] ? do_fast_syscall_32+0x33/0x70 [ 1688.094009][T10930] ? asm_int80_emulation+0x1a/0x20 [ 1688.094027][T10930] ? do_int80_emulation+0x299/0x500 [ 1688.094047][T10930] ? trace_irq_disable+0x3b/0x140 [ 1688.094068][T10930] do_fast_syscall_32+0x33/0x70 [ 1688.094092][T10930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1688.094114][T10930] RIP: 0023:0xf7fa30ec [ 1688.094130][T10930] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1688.094145][T10930] RSP: 002b:00000000f546643c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1688.094164][T10930] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000a88 [ 1688.094176][T10930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1688.094188][T10930] RBP: 00000000f54664fc R08: 0000000000000000 R09: 0000000000000000 [ 1688.094199][T10930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1688.094210][T10930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1688.094237][T10930] [ 1688.527896][T18029] team0 (unregistering): Port device 72žÿ removed [ 1688.554128][T18029] team0 (unregistering): Port device team_slave_0 removed [ 1688.688602][T18029] team0 (unregistering): Port device dummy0 removed [ 1688.727886][T10128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1688.731585][T10128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1688.732615][T10128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1688.780733][T10128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1688.787344][T10128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1688.804846][T10128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1688.828534][T10128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1688.899557][T10128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1689.145456][T10128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.189564][T10128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.253344][T10953] bridge4: port 1(erspan0) entered disabled state [ 1689.365274][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.365623][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.503413][ T6572] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1689.529958][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1689.659078][T18029] IPVS: stop unused estimator thread 0... [ 1689.676532][T18023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.677677][T18023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.682969][ T6572] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1689.685649][T18023] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1689.685677][T18023] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.686750][ T6572] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1689.686801][ T6572] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1689.686822][ T6572] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1689.686843][ T6572] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 1689.686864][ T6572] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1689.694473][ T6572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.694495][ T6572] usb 4-1: Product: syz [ 1689.694508][ T6572] usb 4-1: Manufacturer: syz [ 1689.694522][ T6572] usb 4-1: SerialNumber: syz [ 1689.699107][T18023] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1689.699159][T18023] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.699201][T18023] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1689.699223][T18023] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.745705][T10954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1689.745860][T10954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1689.745993][T10954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1689.746129][T10954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1689.787518][ T6572] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1689.789239][ T6572] keyspan 4-1:1.0: unsupported endpoint type 0 [ 1689.833668][ T6572] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1689.894962][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.895080][ T8490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1689.945620][ T6572] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1689.981098][ T6572] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1690.055653][ T6572] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1690.157297][T10991] sg_write: data in/out 401408/136 bytes for SCSI command 0x0-- guessing data in; [ 1690.157297][T10991] program syz.4.8925 not setting count and/or reply_len properly [ 1690.703508][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1690.798608][T10128] veth0_vlan: entered promiscuous mode [ 1690.867407][T10128] veth1_vlan: entered promiscuous mode [ 1691.021928][T10128] veth0_macvtap: entered promiscuous mode [ 1691.028978][T10128] veth1_macvtap: entered promiscuous mode [ 1691.058942][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1691.103259][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1691.433050][T17983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.434680][T17987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.434756][T17987] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.434787][T17987] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.447996][T18029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.448015][T18029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.565511][T18029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.565526][T18029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.737926][ T30] audit: type=1326 audit(1790483771.716:22619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11019 comm="syz.1.8881" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709f0ec code=0x0 [ 1692.199814][T10958] usb 4-1: USB disconnect, device number 110 [ 1692.247850][T10958] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1692.266730][T10958] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1692.282877][T10958] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1692.312707][T10958] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1692.324802][T10958] keyspan 4-1:1.0: device disconnected [ 1692.605592][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8931'. [ 1692.659961][T10958] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1692.660883][T11062] FAULT_INJECTION: forcing a failure. [ 1692.660883][T11062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1692.660912][T11062] CPU: 0 UID: 0 PID: 11062 Comm: syz.7.8933 Tainted: G L syzkaller #0 PREEMPT(full) [ 1692.660938][T11062] Tainted: [L]=SOFTLOCKUP [ 1692.660945][T11062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1692.660956][T11062] Call Trace: [ 1692.660963][T11062] [ 1692.660972][T11062] dump_stack_lvl+0xe8/0x150 [ 1692.661002][T11062] should_fail_ex+0x410/0x560 [ 1692.661029][T11062] _copy_to_user+0x31/0xb0 [ 1692.661055][T11062] simple_read_from_buffer+0xe1/0x170 [ 1692.661088][T11062] proc_fail_nth_read+0x1bb/0x230 [ 1692.661104][T11062] ? common_file_perm+0x20e/0x2b0 [ 1692.661130][T11062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1692.661152][T11062] ? rw_verify_area+0x24a/0x4c0 [ 1692.661180][T11062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1692.661196][T11062] vfs_read+0x213/0xa80 [ 1692.661228][T11062] ? __pfx___mutex_lock+0x10/0x10 [ 1692.661254][T11062] ? __pfx_vfs_read+0x10/0x10 [ 1692.661282][T11062] ? __fget_files+0x2a/0x420 [ 1692.661311][T11062] ? __fget_files+0x3a2/0x420 [ 1692.661334][T11062] ? __fget_files+0x2a/0x420 [ 1692.661368][T11062] ksys_read+0x150/0x270 [ 1692.661397][T11062] ? __pfx_ksys_read+0x10/0x10 [ 1692.661429][T11062] ? asm_int80_emulation+0x1a/0x20 [ 1692.661452][T11062] do_int80_emulation+0x198/0x500 [ 1692.661477][T11062] ? trace_irq_disable+0x3b/0x140 [ 1692.661497][T11062] ? asm_int80_emulation+0x1a/0x20 [ 1692.661514][T11062] ? clear_bhb_loop+0x70/0xc0 [ 1692.661532][T11062] ? clear_bhb_loop+0x70/0xc0 [ 1692.661553][T11062] asm_int80_emulation+0x1a/0x20 [ 1692.661571][T11062] RIP: 0023:0xf71675ab [ 1692.661587][T11062] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1692.661602][T11062] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1692.661631][T11062] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0 [ 1692.661645][T11062] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1692.661656][T11062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1692.661667][T11062] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1692.661678][T11062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1692.661708][T11062] [ 1692.820484][T10958] usb 4-1: Using ep0 maxpacket: 8 [ 1692.823220][T10958] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1692.824551][T10958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1692.835342][T10958] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1692.835363][T10958] usb 4-1: Product: syz [ 1692.835401][T10958] usb 4-1: Manufacturer: syz [ 1692.835414][T10958] usb 4-1: SerialNumber: syz [ 1692.998120][T11083] sg_write: data in/out 204800/136 bytes for SCSI command 0x0-- guessing data in; [ 1692.998120][T11083] program syz.1.8936 not setting count and/or reply_len properly [ 1693.117370][T10958] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 1693.117497][T10958] visor 4-1:1.0: probe with driver visor failed with error -71 [ 1693.155896][T10958] usb 4-1: USB disconnect, device number 111 [ 1693.418279][T11107] bond5: option arp_interval: invalid value (18446744073709551615) [ 1693.418304][T11107] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1693.424982][T11107] bond5 (unregistering): Released all slaves [ 1693.466938][T11144] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8940'. [ 1693.569490][T11099] bond1: option arp_interval: invalid value (18446744073709551615) [ 1693.569516][T11099] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1693.575034][T11099] bond1 (unregistering): Released all slaves [ 1694.304609][ T30] audit: type=1326 audit(1790483774.276:22620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.6.8944" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa30ec code=0x0 [ 1695.192132][T11334] sg_write: data in/out 204800/136 bytes for SCSI command 0x0-- guessing data in; [ 1695.192132][T11334] program syz.3.8950 not setting count and/or reply_len properly [ 1695.450748][T11349] bond1: option arp_interval: invalid value (18446744073709551615) [ 1695.450773][T11349] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1695.454766][T11349] bond1 (unregistering): Released all slaves [ 1695.677145][T11383] bond2: option arp_interval: invalid value (18446744073709551615) [ 1695.677170][T11383] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1695.698512][T11383] bond2 (unregistering): Released all slaves [ 1695.818082][T11430] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1695.875577][T11430] bond1: entered allmulticast mode [ 1695.876131][T11430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1696.450863][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1696.885575][ T30] audit: type=1326 audit(1790483776.866:22621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.3.8961" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe80ec code=0x0 [ 1697.720613][T10958] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1697.871684][T10958] usb 2-1: Using ep0 maxpacket: 32 [ 1697.875467][T10958] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.6e [ 1697.878689][T10958] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1697.878733][T10958] usb 2-1: config 0 has no interface number 0 [ 1697.878773][T10958] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1697.925964][T10958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.925989][T10958] usb 2-1: Product: syz [ 1697.926002][T10958] usb 2-1: Manufacturer: syz [ 1697.926015][T10958] usb 2-1: SerialNumber: syz [ 1697.954096][T10958] usb 2-1: config 0 descriptor?? [ 1698.378693][T11671] program syz.1.8965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1698.592541][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.594798][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.623388][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.624114][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.860000][T10958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1698.860028][T10958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1698.860561][T10958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1698.860583][T10958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1698.860601][T10958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1698.860637][T10958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1698.860959][T10958] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1698.941918][T10958] usb 2-1: USB disconnect, device number 62 [ 1699.183816][T11730] bond1: option arp_interval: invalid value (18446744073709551615) [ 1699.183840][T11730] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1699.185227][T11730] bond1 (unregistering): Released all slaves [ 1700.487777][ T30] audit: type=1326 audit(1790483780.466:22622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.1.8979" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709f0ec code=0x0 [ 1700.742930][T11865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8983'. [ 1700.974749][T11881] bond5: option arp_interval: invalid value (18446744073709551615) [ 1700.974796][T11881] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1700.976572][T11881] bond5 (unregistering): Released all slaves [ 1701.106990][T11961] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1701.138415][ T30] audit: type=1326 audit(1790483781.116:22623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.3.8987" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 1701.138490][ T30] audit: type=1326 audit(1790483781.116:22624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.3.8987" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 1701.139958][ T30] audit: type=1326 audit(1790483781.116:22625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.3.8987" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 1701.140228][ T30] audit: type=1326 audit(1790483781.126:22626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.3.8987" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 1701.140512][ T30] audit: type=1326 audit(1790483781.126:22627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.3.8987" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 1701.141998][ T30] audit: type=1326 audit(1790483781.126:22628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.3.8987" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 1701.142060][ T30] audit: type=1326 audit(1790483781.126:22629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.3.8987" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 1701.457949][T11980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8988'. [ 1701.457999][T11980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8988'. [ 1701.672148][T14970] hid_parser_main: 24 callbacks suppressed [ 1701.672169][T14970] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1701.678161][T14970] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1703.064816][ T30] audit: type=1326 audit(1790483783.046:22630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.7.8998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702f0ec code=0x0 [ 1703.149977][T14970] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1703.205640][ T30] audit: type=1326 audit(1790483783.186:22631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.6.8999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa30ec code=0x0 [ 1703.311061][T14970] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1703.312281][T14970] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1703.312307][T14970] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1703.312328][T14970] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1703.312350][T14970] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 1703.312370][T14970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1703.315715][T14970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.315737][T14970] usb 2-1: Product: syz [ 1703.315751][T14970] usb 2-1: Manufacturer: syz [ 1703.315764][T14970] usb 2-1: SerialNumber: syz [ 1703.330370][T12031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1703.330500][T12031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1703.330626][T12031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1703.330767][T12031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1703.439029][T14970] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 1703.447534][T14970] keyspan 2-1:1.0: unsupported endpoint type 0 [ 1703.472847][T14970] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1703.490669][T12070] bond2: option arp_interval: invalid value (18446744073709551615) [ 1703.490692][T12070] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1703.513732][T14970] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1703.528892][T14970] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1703.538812][T12070] bond2 (unregistering): Released all slaves [ 1703.558434][T14970] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1704.389174][T12202] sg_write: data in/out 204800/136 bytes for SCSI command 0x0-- guessing data in; [ 1704.389174][T12202] program syz.6.9003 not setting count and/or reply_len properly [ 1704.486291][T12207] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1704.560317][T20094] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1704.668024][T12211] hub 1-0:1.0: USB hub found [ 1704.668314][T12211] hub 1-0:1.0: 1 port detected [ 1704.731110][T20094] usb 4-1: New USB device found, idVendor=056a, idProduct=0117, bcdDevice= 0.00 [ 1704.732589][T20094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.732626][T20094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.736842][T20094] usb 4-1: config 0 descriptor?? [ 1705.194263][T20094] wacom 0003:056A:0117.0091: Unknown device_type for 'HID 056a:0117'. Ignoring. [ 1705.383596][T20094] usb 4-1: USB disconnect, device number 112 [ 1705.629929][ T30] audit: type=1326 audit(1790483785.606:22632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.7.9011" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702f0ec code=0x0 [ 1705.899601][T10958] usb 2-1: USB disconnect, device number 63 [ 1705.962947][T10958] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1705.989533][T10958] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1706.037936][T10958] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1706.122850][T10958] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1706.124393][T10958] keyspan 2-1:1.0: device disconnected [ 1706.514628][T12309] bond2: option arp_interval: invalid value (18446744073709551615) [ 1706.514652][T12309] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1706.530156][T12309] bond2 (unregistering): Released all slaves [ 1706.993175][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9021'. [ 1707.043936][T12413] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1707.106712][T12413] bond1: entered allmulticast mode [ 1707.107149][T12413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1707.802386][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1707.812317][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1707.819334][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1707.832732][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1707.833428][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1708.176110][ T30] audit: type=1326 audit(1790483788.156:22633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.4.9030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704f0ec code=0x0 [ 1708.405955][T12598] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1708.405977][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1709.177228][T12624] bond2: option arp_interval: invalid value (18446744073709551615) [ 1709.177245][T12624] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1709.179543][T12624] bond2 (unregistering): Released all slaves [ 1709.680581][T12536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.680734][T12536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.680860][T12536] bridge_slave_0: entered allmulticast mode [ 1709.682282][T12536] bridge_slave_0: entered promiscuous mode [ 1709.714058][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.714191][T12536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.714292][T12536] bridge_slave_1: entered allmulticast mode [ 1709.715704][T12536] bridge_slave_1: entered promiscuous mode [ 1709.921093][T12536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.923335][T12536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.973050][T30765] Bluetooth: hci5: command tx timeout [ 1710.044638][T12536] team0: Port device team_slave_0 added [ 1710.069019][T12536] team0: Port device team_slave_1 added [ 1710.161013][T12536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1710.161030][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.161087][T12536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.166086][T12536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1710.166096][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.166109][T12536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.340358][T14970] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1710.489966][T14970] usb 2-1: Using ep0 maxpacket: 8 [ 1710.490655][T14970] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1710.493474][T14970] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1710.493522][T14970] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1710.493540][T14970] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1710.493560][T14970] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1710.493579][T14970] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1710.493619][T14970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.675031][T12536] hsr_slave_0: entered promiscuous mode [ 1710.676546][T12536] hsr_slave_1: entered promiscuous mode [ 1710.692818][T12536] debugfs: 'hsr0' already exists in 'hsr' [ 1710.692839][T12536] Cannot create hsr debugfs directory [ 1710.717010][T12879] FAULT_INJECTION: forcing a failure. [ 1710.717010][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.717041][T12879] CPU: 0 UID: 0 PID: 12879 Comm: syz.6.9041 Tainted: G L syzkaller #0 PREEMPT(full) [ 1710.717067][T12879] Tainted: [L]=SOFTLOCKUP [ 1710.717075][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1710.717086][T12879] Call Trace: [ 1710.717096][T12879] [ 1710.717104][T12879] dump_stack_lvl+0xe8/0x150 [ 1710.717135][T12879] should_fail_ex+0x410/0x560 [ 1710.717164][T12879] should_failslab+0xa8/0x100 [ 1710.717187][T12879] __kmalloc_cache_noprof+0xa3/0x600 [ 1710.717209][T12879] ? __mmu_notifier_register+0x33e/0x5f0 [ 1710.717226][T12879] ? __mmu_notifier_register+0x33e/0x5f0 [ 1710.717253][T12879] __mmu_notifier_register+0x33e/0x5f0 [ 1710.717281][T12879] mmu_notifier_register+0x70/0x1d0 [ 1710.717305][T12879] kvm_dev_ioctl+0x12fe/0x1770 [ 1710.717332][T12879] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1710.717354][T12879] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1710.717384][T12879] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1710.717409][T12879] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1710.717430][T12879] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1710.717458][T12879] ? __fget_files+0x3a2/0x420 [ 1710.717490][T12879] ? fput+0xa0/0xd0 [ 1710.717512][T12879] ? ksys_write+0x242/0x270 [ 1710.717550][T12879] __do_fast_syscall_32+0x27a/0x6a0 [ 1710.717576][T12879] ? do_fast_syscall_32+0x33/0x70 [ 1710.717601][T12879] ? asm_int80_emulation+0x1a/0x20 [ 1710.717619][T12879] ? do_int80_emulation+0x299/0x500 [ 1710.717641][T12879] ? trace_irq_disable+0x3b/0x140 [ 1710.717665][T12879] do_fast_syscall_32+0x33/0x70 [ 1710.717688][T12879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1710.717710][T12879] RIP: 0023:0xf7fa30ec [ 1710.717728][T12879] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1710.717743][T12879] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1710.717763][T12879] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 1710.717776][T12879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1710.717794][T12879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1710.717804][T12879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1710.717816][T12879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1710.717843][T12879] [ 1710.810121][T14970] usb 2-1: usb_control_msg returned -32 [ 1710.810165][T14970] usbtmc 2-1:16.0: can't read capabilities [ 1711.008936][T18029] mac80211_hwsim hwsim54 wlan1: left allmulticast mode [ 1711.008965][T18029] mac80211_hwsim hwsim54 wlan1: left promiscuous mode [ 1711.011764][T18029] bridge0: port 3(wlan1) entered disabled state [ 1711.069435][T18029] bridge_slave_1: left allmulticast mode [ 1711.069462][T18029] bridge_slave_1: left promiscuous mode [ 1711.069663][T18029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.101705][T18029] bridge_slave_0: left allmulticast mode [ 1711.101751][T18029] bridge_slave_0: left promiscuous mode [ 1711.102210][T18029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.185593][T12908] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1711.317582][T12912] netlink: 56 bytes leftover after parsing attributes in process `syz.7.9043'. [ 1711.317625][T12912] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9043'. [ 1711.665727][T18029] erspan0: left allmulticast mode [ 1711.665754][T18029] erspan0: left promiscuous mode [ 1711.665948][T18029] bridge4: port 1(erspan0) entered disabled state [ 1712.034410][T18029] team0: Port device vxlan0 removed [ 1712.060059][T30765] Bluetooth: hci5: command tx timeout [ 1712.234637][T18029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.236316][T18029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.237144][T18029] bond0 (unregistering): Released all slaves [ 1712.269694][T18029] bond1 (unregistering): Released all slaves [ 1712.429177][T18029] tipc: Disabling bearer [ 1712.429297][T18029] tipc: Disabling bearer [ 1712.429411][T18029] tipc: Left network mode [ 1713.077774][T10958] usb 2-1: USB disconnect, device number 64 [ 1713.187882][T13003] bond5: option arp_interval: invalid value (18446744073709551615) [ 1713.187902][T13003] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1713.193114][T13003] bond5 (unregistering): Released all slaves [ 1713.332957][T18029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.537003][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9049'. [ 1713.785570][T18029] team0 (unregistering): Port device team_slave_1 removed [ 1713.815661][T18029] team0 (unregistering): Port device team_slave_0 removed [ 1714.017614][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9051'. [ 1714.118587][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1714.129954][T30765] Bluetooth: hci5: command tx timeout [ 1714.620385][T18029] IPVS: stop unused estimator thread 0... [ 1714.886852][T13185] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9055'. [ 1714.886875][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9055'. [ 1715.137525][T13199] FAULT_INJECTION: forcing a failure. [ 1715.137525][T13199] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.137582][T13199] CPU: 1 UID: 0 PID: 13199 Comm: syz.6.9056 Tainted: G L syzkaller #0 PREEMPT(full) [ 1715.137607][T13199] Tainted: [L]=SOFTLOCKUP [ 1715.137614][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1715.137626][T13199] Call Trace: [ 1715.137634][T13199] [ 1715.137649][T13199] dump_stack_lvl+0xe8/0x150 [ 1715.137681][T13199] should_fail_ex+0x410/0x560 [ 1715.137711][T13199] should_failslab+0xa8/0x100 [ 1715.137734][T13199] __kmalloc_noprof+0xfe/0x720 [ 1715.137753][T13199] ? __list_lru_init+0xba/0x5d0 [ 1715.137770][T13199] ? __list_lru_init+0xba/0x5d0 [ 1715.137794][T13199] __list_lru_init+0xba/0x5d0 [ 1715.137812][T13199] ? __raw_spin_lock_init+0x45/0x100 [ 1715.137844][T13199] sget_fc+0xf56/0x1a60 [ 1715.137879][T13199] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1715.137908][T13199] ? __pfx_sget_fc+0x10/0x10 [ 1715.137931][T13199] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 1715.137955][T13199] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1715.137979][T13199] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1715.138002][T13199] get_tree_nodev+0x2a/0x150 [ 1715.138030][T13199] vfs_get_tree+0x92/0x2a0 [ 1715.138051][T13199] fc_mount_longterm+0x1c/0x100 [ 1715.138073][T13199] mq_init_ns+0x508/0x770 [ 1715.138093][T13199] copy_ipcs+0x45c/0x6c0 [ 1715.138117][T13199] create_new_namespaces+0x210/0x6b0 [ 1715.138141][T13199] ? security_capable+0x7e/0x2c0 [ 1715.138164][T13199] unshare_nsproxy_namespaces+0x149/0x190 [ 1715.138185][T13199] ksys_unshare+0x5a7/0x950 [ 1715.138212][T13199] ? __pfx_ksys_unshare+0x10/0x10 [ 1715.138235][T13199] ? ksys_write+0x242/0x270 [ 1715.138265][T13199] __ia32_sys_unshare+0x37/0x40 [ 1715.138288][T13199] __do_fast_syscall_32+0x27a/0x6a0 [ 1715.138324][T13199] ? do_fast_syscall_32+0x33/0x70 [ 1715.138347][T13199] ? asm_int80_emulation+0x1a/0x20 [ 1715.138364][T13199] ? do_int80_emulation+0x299/0x500 [ 1715.138381][T13199] ? trace_irq_disable+0x3b/0x140 [ 1715.138398][T13199] do_fast_syscall_32+0x33/0x70 [ 1715.138417][T13199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1715.138434][T13199] RIP: 0023:0xf7fa30ec [ 1715.138448][T13199] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1715.138460][T13199] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1715.138477][T13199] RAX: ffffffffffffffda RBX: 0000000008040480 RCX: 0000000000000000 [ 1715.138487][T13199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1715.138497][T13199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1715.138506][T13199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1715.138515][T13199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1715.138538][T13199] [ 1715.542045][T13189] bond5: option arp_interval: invalid value (18446744073709551615) [ 1715.542071][T13189] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1715.543574][T13189] bond5 (unregistering): Released all slaves [ 1715.738723][T13291] sg_write: data in/out 335872/136 bytes for SCSI command 0x0-- guessing data in; [ 1715.738723][T13291] program syz.1.9059 not setting count and/or reply_len properly [ 1716.074954][T12536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1716.101497][T12536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1716.103278][T12536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1716.105248][T13318] FAULT_INJECTION: forcing a failure. [ 1716.105248][T13318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.105277][T13318] CPU: 1 UID: 0 PID: 13318 Comm: syz.1.9062 Tainted: G L syzkaller #0 PREEMPT(full) [ 1716.105302][T13318] Tainted: [L]=SOFTLOCKUP [ 1716.105309][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1716.105319][T13318] Call Trace: [ 1716.105327][T13318] [ 1716.105336][T13318] dump_stack_lvl+0xe8/0x150 [ 1716.105368][T13318] should_fail_ex+0x410/0x560 [ 1716.105395][T13318] _copy_from_user+0x2d/0xb0 [ 1716.105420][T13318] get_compat_msghdr+0xb3/0x4c0 [ 1716.105442][T13318] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1716.105474][T13318] ___sys_sendmsg+0x201/0x360 [ 1716.105497][T13318] ? __lock_acquire+0x747/0x2de0 [ 1716.105519][T13318] ? __pfx____sys_sendmsg+0x10/0x10 [ 1716.105542][T13318] ? get_pid_task+0x20/0x1f0 [ 1716.105560][T13318] ? get_pid_task+0x20/0x1f0 [ 1716.105576][T13318] ? get_pid_task+0x20/0x1f0 [ 1716.105622][T13318] ? __fget_files+0x2a/0x420 [ 1716.105647][T13318] ? __fget_files+0x3a2/0x420 [ 1716.105679][T13318] __sys_sendmsg+0x177/0x240 [ 1716.105708][T13318] ? __pfx___sys_sendmsg+0x10/0x10 [ 1716.105750][T13318] __do_fast_syscall_32+0x27a/0x6a0 [ 1716.105776][T13318] ? do_fast_syscall_32+0x33/0x70 [ 1716.105801][T13318] ? asm_int80_emulation+0x1a/0x20 [ 1716.105819][T13318] ? do_int80_emulation+0x299/0x500 [ 1716.105842][T13318] ? trace_irq_disable+0x3b/0x140 [ 1716.105865][T13318] do_fast_syscall_32+0x33/0x70 [ 1716.105891][T13318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1716.105914][T13318] RIP: 0023:0xf709f0ec [ 1716.105931][T13318] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1716.105945][T13318] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1716.105965][T13318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1716.105978][T13318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.105989][T13318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1716.105999][T13318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1716.106008][T13318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1716.106035][T13318] [ 1716.109255][T12536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1716.226981][T30765] Bluetooth: hci5: command tx timeout [ 1716.229100][T12536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1716.243022][T12536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1716.248493][T12536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1716.268194][T12536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1716.684856][T13337] bond2: option arp_interval: invalid value (18446744073709551615) [ 1716.684882][T13337] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1716.687099][T13337] bond2 (unregistering): Released all slaves [ 1717.076782][T12536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.266075][T12536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1717.322679][T17983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.322811][T17983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1717.357080][T17983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.357169][T17983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1717.635950][T17983] IPVS: starting estimator thread 0... [ 1717.668617][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9068'. [ 1717.741651][T13459] IPVS: using max 32 ests per chain, 76800 per kthread [ 1717.776171][T12536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.056658][T12536] veth0_vlan: entered promiscuous mode [ 1718.082171][T12536] veth1_vlan: entered promiscuous mode [ 1718.215900][T12536] veth0_macvtap: entered promiscuous mode [ 1718.235540][T12536] veth1_macvtap: entered promiscuous mode [ 1718.270550][T12536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.274429][T12536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.321844][T13473] FAULT_INJECTION: forcing a failure. [ 1718.321844][T13473] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.321875][T13473] CPU: 0 UID: 0 PID: 13473 Comm: syz.1.9069 Tainted: G L syzkaller #0 PREEMPT(full) [ 1718.321901][T13473] Tainted: [L]=SOFTLOCKUP [ 1718.321908][T13473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1718.321920][T13473] Call Trace: [ 1718.321927][T13473] [ 1718.321936][T13473] dump_stack_lvl+0xe8/0x150 [ 1718.321979][T13473] should_fail_ex+0x410/0x560 [ 1718.322005][T13473] should_failslab+0xa8/0x100 [ 1718.322029][T13473] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1718.322050][T13473] ? kasan_save_track+0x4f/0x80 [ 1718.322068][T13473] ? kasan_save_track+0x3e/0x80 [ 1718.322086][T13473] ? __kasan_kmalloc+0x93/0xb0 [ 1718.322105][T13473] ? __get_vm_area_node+0x155/0x2f0 [ 1718.322129][T13473] ? __get_vm_area_node+0x155/0x2f0 [ 1718.322155][T13473] ? __ia32_sys_bpf+0xba/0xd0 [ 1718.322178][T13473] __get_vm_area_node+0x155/0x2f0 [ 1718.322210][T13473] __vmalloc_node_range_noprof+0x343/0x1540 [ 1718.322239][T13473] ? bpf_check+0x115d/0x2ef0 [ 1718.322261][T13473] ? rcu_is_watching+0x16/0xb0 [ 1718.322302][T13473] ? bpf_check+0x10e4/0x2ef0 [ 1718.322324][T13473] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1718.322358][T13473] ? bpf_diag_init+0x87/0x140 [ 1718.322379][T13473] ? bpf_diag_init+0x87/0x140 [ 1718.322403][T13473] ? bpf_check+0x115d/0x2ef0 [ 1718.322420][T13473] __vmalloc_noprof+0xd2/0x120 [ 1718.322447][T13473] ? bpf_check+0x115d/0x2ef0 [ 1718.322469][T13473] bpf_check+0x115d/0x2ef0 [ 1718.322507][T13473] ? __pfx_bpf_check+0x10/0x10 [ 1718.322531][T13473] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1718.322561][T13473] bpf_prog_load+0x14d6/0x1c20 [ 1718.322595][T13473] ? __pfx_bpf_prog_load+0x10/0x10 [ 1718.322642][T13473] __sys_bpf+0xd0d/0xd90 [ 1718.322672][T13473] ? __pfx___sys_bpf+0x10/0x10 [ 1718.322699][T13473] ? ksys_write+0x1e6/0x270 [ 1718.322730][T13473] ? __mutex_unlock_slowpath+0x731/0x900 [ 1718.322773][T13473] ? fput+0xa0/0xd0 [ 1718.322796][T13473] ? ksys_write+0x242/0x270 [ 1718.322829][T13473] __ia32_sys_bpf+0xba/0xd0 [ 1718.322852][T13473] __do_fast_syscall_32+0x27a/0x6a0 [ 1718.322879][T13473] ? do_fast_syscall_32+0x33/0x70 [ 1718.322904][T13473] ? asm_int80_emulation+0x1a/0x20 [ 1718.322921][T13473] ? do_int80_emulation+0x299/0x500 [ 1718.322944][T13473] ? trace_irq_disable+0x3b/0x140 [ 1718.322975][T13473] do_fast_syscall_32+0x33/0x70 [ 1718.323000][T13473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1718.323024][T13473] RIP: 0023:0xf709f0ec [ 1718.323040][T13473] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1718.323055][T13473] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1718.323076][T13473] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 1718.323088][T13473] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1718.323100][T13473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1718.323111][T13473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1718.323122][T13473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1718.323150][T13473] [ 1718.323184][T13473] syz.1.9069: vmalloc error: size 2040, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1718.323240][T13473] CPU: 0 UID: 0 PID: 13473 Comm: syz.1.9069 Tainted: G L syzkaller #0 PREEMPT(full) [ 1718.323265][T13473] Tainted: [L]=SOFTLOCKUP [ 1718.323271][T13473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1718.323282][T13473] Call Trace: [ 1718.323289][T13473] [ 1718.323297][T13473] dump_stack_lvl+0xe8/0x150 [ 1718.323324][T13473] warn_alloc+0x24d/0x270 [ 1718.323343][T13473] ? __kasan_kmalloc+0x22/0xb0 [ 1718.323369][T13473] ? __pfx_warn_alloc+0x10/0x10 [ 1718.323385][T13473] ? __kasan_kmalloc+0x93/0xb0 [ 1718.323405][T13473] ? __get_vm_area_node+0x155/0x2f0 [ 1718.323430][T13473] ? __ia32_sys_bpf+0xba/0xd0 [ 1718.323453][T13473] ? __get_vm_area_node+0x2a9/0x2f0 [ 1718.323485][T13473] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1718.323515][T13473] ? rcu_is_watching+0x16/0xb0 [ 1718.323554][T13473] ? bpf_check+0x10e4/0x2ef0 [ 1718.323576][T13473] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1718.323609][T13473] ? bpf_diag_init+0x87/0x140 [ 1718.323630][T13473] ? bpf_diag_init+0x87/0x140 [ 1718.323653][T13473] ? bpf_check+0x115d/0x2ef0 [ 1718.323670][T13473] __vmalloc_noprof+0xd2/0x120 [ 1718.323697][T13473] ? bpf_check+0x115d/0x2ef0 [ 1718.323719][T13473] bpf_check+0x115d/0x2ef0 [ 1718.323757][T13473] ? __pfx_bpf_check+0x10/0x10 [ 1718.323780][T13473] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1718.323810][T13473] bpf_prog_load+0x14d6/0x1c20 [ 1718.323844][T13473] ? __pfx_bpf_prog_load+0x10/0x10 [ 1718.323889][T13473] __sys_bpf+0xd0d/0xd90 [ 1718.323918][T13473] ? __pfx___sys_bpf+0x10/0x10 [ 1718.323941][T13473] ? ksys_write+0x1e6/0x270 [ 1718.323980][T13473] ? __mutex_unlock_slowpath+0x731/0x900 [ 1718.324023][T13473] ? fput+0xa0/0xd0 [ 1718.324045][T13473] ? ksys_write+0x242/0x270 [ 1718.324078][T13473] __ia32_sys_bpf+0xba/0xd0 [ 1718.324101][T13473] __do_fast_syscall_32+0x27a/0x6a0 [ 1718.324127][T13473] ? do_fast_syscall_32+0x33/0x70 [ 1718.324151][T13473] ? asm_int80_emulation+0x1a/0x20 [ 1718.324169][T13473] ? do_int80_emulation+0x299/0x500 [ 1718.324193][T13473] ? trace_irq_disable+0x3b/0x140 [ 1718.324215][T13473] do_fast_syscall_32+0x33/0x70 [ 1718.324241][T13473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1718.324264][T13473] RIP: 0023:0xf709f0ec [ 1718.324280][T13473] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1718.324295][T13473] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1718.324314][T13473] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 1718.324327][T13473] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1718.324338][T13473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1718.324350][T13473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1718.324361][T13473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1718.324390][T13473] [ 1718.324398][T13473] Mem-Info: [ 1718.324407][T13473] active_anon:8908 inactive_anon:1030 isolated_anon:11 [ 1718.324407][T13473] active_file:70 inactive_file:22607 isolated_file:0 [ 1718.324407][T13473] unevictable:12 dirty:380 writeback:0 [ 1718.324407][T13473] slab_reclaimable:7601 slab_unreclaimable:117514 [ 1718.324407][T13473] mapped:37483 shmem:3598 pagetables:1842 [ 1718.324407][T13473] sec_pagetables:0 bounce:0 [ 1718.324407][T13473] kernel_misc_reclaimable:0 [ 1718.324407][T13473] free:1277752 free_pcp:15096 free_cma:0 [ 1718.324454][T13473] Node 0 active_anon:35632kB inactive_anon:4120kB active_file:280kB inactive_file:90248kB unevictable:48kB isolated(anon):44kB isolated(file):0kB mapped:149888kB dirty:1520kB writeback:0kB shmem:14392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14768kB pagetables:7220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1718.324503][T13473] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1718.324548][T13473] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1718.324599][T13473] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1718.324633][T13473] Node 0 DMA32 free:1162340kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35632kB inactive_anon:4120kB active_file:280kB inactive_file:90248kB unevictable:48kB writepending:1520kB zspages:344kB present:3129332kB managed:2546884kB mlocked:100kB bounce:0kB free_pcp:38048kB local_pcp:21896kB free_cma:0kB [ 1718.324687][T13473] lowmem_reserve[]: 0 0 0 0 0 [ 1718.324869][T13473] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1718.324920][T13473] lowmem_reserve[]: 0 0 0 0 0 [ 1718.324977][T13473] Node 1 Normal free:3933312kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:180kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:22336kB local_pcp:22176kB free_cma:0kB [ 1718.325030][T13473] lowmem_reserve[]: 0 0 0 0 0 [ 1718.325063][T13473] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1718.325199][T13473] Node 0 DMA32: 1755*4kB (UME) 1359*8kB (ME) 1076*16kB (UME) 1737*32kB (UME) 621*64kB (UME) 243*128kB (UME) 119*256kB (UME) 41*512kB (UME) 13*1024kB (UME) 7*2048kB (UME) 225*4096kB (UM) = 1162244kB [ 1718.325346][T13473] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1718.325438][T13473] Node 1 Normal: 8*4kB (UM) 8*8kB (UM) 20*16kB (UM) 19*32kB (UM) 14*64kB (UM) 8*128kB (UM) 9*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 5*2048kB (UM) 955*4096kB (UM) = 3933312kB [ 1718.325583][T13473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1718.325599][T13473] Node 0 hugepages_total=6 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 1718.325614][T13473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1718.325629][T13473] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1718.325644][T13473] 26283 total pagecache pages [ 1718.325652][T13473] 12 pages in swap cache [ 1718.325659][T13473] Free swap = 124820kB [ 1718.325666][T13473] Total swap = 124996kB [ 1718.325675][T13473] 2097051 pages RAM [ 1718.325681][T13473] 0 pages HighMem/MovableOnly [ 1718.325688][T13473] 428714 pages reserved [ 1718.325695][T13473] 0 pages cma reserved [ 1718.494781][T17988] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.494823][T17988] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.494881][T17988] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.494913][T17988] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.877336][T17989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.877355][T17989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.085931][T17989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.085952][T17989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.474084][T13499] syzkaller0: entered promiscuous mode [ 1719.474104][T13499] syzkaller0: entered allmulticast mode [ 1719.936704][T13522] bond2: option arp_interval: invalid value (18446744073709551615) [ 1719.936729][T13522] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1719.982167][T12526] usb 5-1: Failed to load image "edgeport/boot.fw" err -110 [ 1719.988277][T13522] bond2 (unregistering): Released all slaves [ 1720.003038][T12526] usb 5-1: Edgeport 4 port adapter converter now attached to ttyUSB0 [ 1720.093380][T12526] usb 5-1: Edgeport 4 port adapter converter now attached to ttyUSB1 [ 1720.151667][T12526] usb 5-1: Edgeport 4 port adapter converter now attached to ttyUSB2 [ 1720.278697][T12526] usb 5-1: Edgeport 4 port adapter converter now attached to ttyUSB3 [ 1720.304424][ T30] audit: type=1326 audit(1790483800.286:22634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13603 comm="syz.4.9080" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704f0ec code=0x0 [ 1720.307581][T13614] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.307595][T13614] binder: 13610:13614 ioctl 4018620d 800002c0 returned -16 [ 1720.347318][T12526] usb 5-1: USB disconnect, device number 24 [ 1720.413664][T12526] edgeport_4 ttyUSB0: Edgeport 4 port adapter converter now disconnected from ttyUSB0 [ 1720.442482][T13635] netlink: 196 bytes leftover after parsing attributes in process `syz.6.9083'. [ 1720.443385][T12526] edgeport_4 ttyUSB1: Edgeport 4 port adapter converter now disconnected from ttyUSB1 [ 1720.487782][T12526] edgeport_4 ttyUSB2: Edgeport 4 port adapter converter now disconnected from ttyUSB2 [ 1720.517696][T12526] edgeport_4 ttyUSB3: Edgeport 4 port adapter converter now disconnected from ttyUSB3 [ 1720.524582][T12526] io_edgeport 5-1:1.0: device disconnected [ 1720.564830][T13659] bridge: RTM_NEWNEIGH with invalid ether address [ 1720.627718][T13668] program syz.7.9087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1720.842697][T13683] geneve0: entered promiscuous mode [ 1721.522784][T13720] bond2: option arp_interval: invalid value (18446744073709551615) [ 1721.522809][T13720] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1721.535124][T13720] bond2 (unregistering): Released all slaves [ 1722.082359][T13818] sg_write: data in/out 335872/136 bytes for SCSI command 0x0-- guessing data in; [ 1722.082359][T13818] program syz.7.9097 not setting count and/or reply_len properly [ 1722.244861][T13711] netlink: 'syz.1.9092': attribute type 1 has an invalid length. [ 1722.288386][T13711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1722.400514][T13711] bond2: (slave gretap1): making interface the new active one [ 1722.408349][T13711] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1722.555573][T13871] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1722.567980][T18015] IPVS: starting estimator thread 0... [ 1722.599186][T13871] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1722.599210][T13871] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1722.599289][T13871] vhci_hcd vhci_hcd.0: Device attached [ 1722.661104][T13872] IPVS: using max 30 ests per chain, 72000 per kthread [ 1722.874890][T29507] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 1722.939960][ T9] usb 40-1: SetAddress Request (6) to port 0 [ 1722.940033][ T9] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1723.031679][T29507] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1723.032946][T29507] usb 4-1: config 0 has no interfaces? [ 1723.032978][T29507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.036840][T29507] usb 4-1: config 0 descriptor?? [ 1723.096580][T13885] bond3: option arp_interval: invalid value (18446744073709551615) [ 1723.096602][T13885] bond3: option arp_interval: allowed values 0 - 2147483647 [ 1723.166107][T13885] bond3 (unregistering): Released all slaves [ 1723.249070][T13873] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1723.262198][T18015] vhci_hcd vhci_hcd.3: stop threads [ 1723.262218][T18015] vhci_hcd vhci_hcd.3: release socket [ 1723.262368][T18015] vhci_hcd vhci_hcd.3: disconnect device [ 1723.268851][T29507] usb 4-1: USB disconnect, device number 113 [ 1723.708351][T13985] netlink: 'syz.1.9104': attribute type 6 has an invalid length. [ 1723.808213][ T30] audit: type=1326 audit(1790483803.786:22635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.7.9105" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702f0ec code=0x0 [ 1724.136334][T13992] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9106'. [ 1724.136371][T13992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9106'. [ 1724.163792][T13992] IPVS: length: 21 != 1672 [ 1724.297147][T14010] sg_write: data in/out 335872/136 bytes for SCSI command 0x0-- guessing data in; [ 1724.297147][T14010] program syz.6.9108 not setting count and/or reply_len properly [ 1724.411264][T14969] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1724.561978][T14969] usb 2-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 1724.563238][T14969] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.563260][T14969] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1724.566415][T14969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.566429][T14969] usb 2-1: Product: syz [ 1724.566437][T14969] usb 2-1: Manufacturer: syz [ 1724.566445][T14969] usb 2-1: SerialNumber: syz [ 1725.088757][T14969] usb 2-1: USB disconnect, device number 65 [ 1725.246228][ T7749] udevd[7749]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1725.338491][T14067] netlink: 'syz.4.9117': attribute type 3 has an invalid length. [ 1725.420739][ T30] audit: type=1326 audit(1790483805.406:22636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.426256][ T30] audit: type=1326 audit(1790483805.406:22637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.426421][ T30] audit: type=1326 audit(1790483805.406:22638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.426785][ T30] audit: type=1326 audit(1790483805.406:22640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.426880][ T30] audit: type=1326 audit(1790483805.406:22639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.455091][ T30] audit: type=1326 audit(1790483805.436:22641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.458654][T14071] bridge: RTM_NEWNEIGH with invalid ether address [ 1725.479938][ T30] audit: type=1326 audit(1790483805.456:22642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.479987][ T30] audit: type=1326 audit(1790483805.456:22643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.505752][ T30] audit: type=1326 audit(1790483805.486:22645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.505799][ T30] audit: type=1326 audit(1790483805.486:22644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.9117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1725.763575][T14085] netlink: 'syz.3.9118': attribute type 1 has an invalid length. [ 1725.863353][T14085] gretap1: entered promiscuous mode [ 1726.113390][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9119'. [ 1726.158650][T14109] sg_write: data in/out 335872/136 bytes for SCSI command 0x0-- guessing data in; [ 1726.158650][T14109] program syz.1.9121 not setting count and/or reply_len properly [ 1726.902250][T14136] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1726.920058][T14136] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1727.119971][T14969] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1727.271152][T14969] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1727.277659][T14969] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1727.277684][T14969] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.277701][T14969] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1727.277743][T14969] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.315550][T14969] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1727.315577][T14969] usb 2-1: Product: syz [ 1727.315590][T14969] usb 2-1: Manufacturer: syz [ 1727.377406][T14969] cdc_wdm 2-1:1.0: skipping garbage [ 1727.377426][T14969] cdc_wdm 2-1:1.0: skipping garbage [ 1727.393542][T29507] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 1727.396089][T14969] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1727.396121][T14969] cdc_wdm 2-1:1.0: Unknown control protocol [ 1727.521400][T29507] usb 5-1: device descriptor read/64, error -71 [ 1727.760103][T29507] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 1727.894759][T29507] usb 5-1: device descriptor read/64, error -71 [ 1727.970646][ T9] usb 40-1: device descriptor read/8, error -110 [ 1728.004633][T29507] usb usb5-port1: attempt power cycle [ 1728.106318][T14167] sg_write: data in/out 335872/136 bytes for SCSI command 0x0-- guessing data in; [ 1728.106318][T14167] program syz.7.9133 not setting count and/or reply_len properly [ 1728.180075][ T5688] usb 2-1: USB disconnect, device number 66 [ 1728.350052][T29507] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 1728.361906][ T9] usb usb40-port1: attempt power cycle [ 1728.373290][T29507] usb 5-1: device descriptor read/8, error -71 [ 1728.574891][T14191] netlink: 'syz.6.9136': attribute type 16 has an invalid length. [ 1728.574930][T14191] netlink: 'syz.6.9136': attribute type 17 has an invalid length. [ 1728.630149][T29507] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1728.656129][T29507] usb 5-1: device descriptor read/8, error -71 [ 1728.679156][T14191] xfrm0: left promiscuous mode [ 1728.679176][T14191] xfrm0: left allmulticast mode [ 1728.680055][ T5688] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1728.760703][T29507] usb usb5-port1: unable to enumerate USB device [ 1728.773233][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9137'. [ 1728.841895][ T5688] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1728.842388][ T5688] usb 2-1: not running at top speed; connect to a high speed hub [ 1728.842418][ T5688] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1728.843340][ T5688] usb 2-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 1728.843405][ T5688] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1728.843442][ T5688] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1728.846549][ T5688] usb 2-1: string descriptor 0 read error: -22 [ 1728.846678][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.898820][ T5688] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1728.898843][ T5688] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 1728.898971][ T5688] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1728.898989][ T5688] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 1728.922371][ T9] usb usb40-port1: unable to enumerate USB device [ 1729.194098][T14220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1729.257553][T14228] sg_write: data in/out 335872/136 bytes for SCSI command 0x0-- guessing data in; [ 1729.257553][T14228] program syz.7.9144 not setting count and/or reply_len properly [ 1729.317591][T14181] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1729.355999][T14181] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1729.358330][T14181] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1729.358457][T14181] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1729.360104][T14181] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1729.360138][T14181] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1729.360165][T14181] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1729.360732][T14181] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1729.363701][T14181] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1729.363731][T14181] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1729.710126][ T5688] usb 2-1: USB disconnect, device number 67 [ 1730.053675][T14283] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 1730.223537][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.223593][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.409923][ T9] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1730.484179][T14331] FAULT_INJECTION: forcing a failure. [ 1730.484179][T14331] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.484203][T14331] CPU: 0 UID: 0 PID: 14331 Comm: syz.1.9155 Tainted: G L syzkaller #0 PREEMPT(full) [ 1730.484227][T14331] Tainted: [L]=SOFTLOCKUP [ 1730.484235][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1730.484246][T14331] Call Trace: [ 1730.484253][T14331] [ 1730.484262][T14331] dump_stack_lvl+0xe8/0x150 [ 1730.484293][T14331] should_fail_ex+0x410/0x560 [ 1730.484311][T14331] should_failslab+0xa8/0x100 [ 1730.484324][T14331] ? skb_clone+0x212/0x3a0 [ 1730.484340][T14331] kmem_cache_alloc_noprof+0xa1/0x600 [ 1730.484357][T14331] ? skb_clone+0x212/0x3a0 [ 1730.484388][T14331] skb_clone+0x212/0x3a0 [ 1730.484418][T14331] __netlink_deliver_tap+0x413/0x860 [ 1730.484448][T14331] ? netlink_deliver_tap+0x2e/0x1b0 [ 1730.484461][T14331] netlink_deliver_tap+0x19c/0x1b0 [ 1730.484471][T14331] netlink_unicast+0x781/0x940 [ 1730.484492][T14331] netlink_sendmsg+0x813/0xb40 [ 1730.484506][T14331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1730.484529][T14331] ? apparmor_socket_sendmsg+0x98/0x360 [ 1730.484554][T14331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1730.484571][T14331] sock_sendmsg_nosec+0x13a/0x180 [ 1730.484595][T14331] ____sys_sendmsg+0x54e/0x850 [ 1730.484615][T14331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1730.484637][T14331] ___sys_sendmsg+0x2a5/0x360 [ 1730.484649][T14331] ? __lock_acquire+0x747/0x2de0 [ 1730.484665][T14331] ? __pfx____sys_sendmsg+0x10/0x10 [ 1730.484690][T14331] ? get_pid_task+0x20/0x1f0 [ 1730.484708][T14331] ? get_pid_task+0x20/0x1f0 [ 1730.484733][T14331] ? get_pid_task+0x20/0x1f0 [ 1730.484782][T14331] ? __fget_files+0x2a/0x420 [ 1730.484800][T14331] ? __fget_files+0x3a2/0x420 [ 1730.484826][T14331] __sys_sendmsg+0x177/0x240 [ 1730.484854][T14331] ? __pfx___sys_sendmsg+0x10/0x10 [ 1730.484898][T14331] __do_fast_syscall_32+0x27a/0x6a0 [ 1730.484915][T14331] ? do_fast_syscall_32+0x33/0x70 [ 1730.484928][T14331] ? asm_int80_emulation+0x1a/0x20 [ 1730.484938][T14331] ? do_int80_emulation+0x299/0x500 [ 1730.484951][T14331] ? trace_irq_disable+0x3b/0x140 [ 1730.484965][T14331] do_fast_syscall_32+0x33/0x70 [ 1730.484991][T14331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1730.485014][T14331] RIP: 0023:0xf709f0ec [ 1730.485030][T14331] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1730.485045][T14331] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1730.485061][T14331] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006000 [ 1730.485068][T14331] RDX: 0000000000028000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1730.485074][T14331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.485080][T14331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1730.485086][T14331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.485101][T14331] [ 1730.551142][ T5688] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1730.563569][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1730.566103][T14333] ptrace attach of ""[14334] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[14333] [ 1730.579127][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1730.579153][ T9] usb 4-1: config 0 has no interface number 0 [ 1730.579194][ T9] usb 4-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1730.579215][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1730.637680][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.637711][ T9] usb 4-1: Product: syz [ 1730.637725][ T9] usb 4-1: Manufacturer: syz [ 1730.637738][ T9] usb 4-1: SerialNumber: syz [ 1730.651167][ T9] usb 4-1: config 0 descriptor?? [ 1730.682130][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 1730.705562][ T5688] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1730.706814][ T5688] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1730.706842][ T5688] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1730.706871][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.743662][ T5688] usb 5-1: config 0 descriptor?? [ 1731.157953][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.158820][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.679908][T29507] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1732.841664][T29507] usb 2-1: Using ep0 maxpacket: 32 [ 1732.842397][T29507] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1732.846630][T29507] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1732.846653][T29507] usb 2-1: config 0 has no interface number 0 [ 1732.846694][T29507] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1732.893737][T29507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.893760][T29507] usb 2-1: Product: syz [ 1732.893798][T29507] usb 2-1: Manufacturer: syz [ 1732.893812][T29507] usb 2-1: SerialNumber: syz [ 1732.934084][T29507] usb 2-1: config 0 descriptor?? [ 1733.328430][ T5711] usb 4-1: USB disconnect, device number 114 [ 1733.475855][T14397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.476492][T14397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.535878][ T5688] usbhid 5-1:0.0: can't add hid device: -71 [ 1733.535987][ T5688] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1733.567028][ T5688] usb 5-1: USB disconnect, device number 29 [ 1733.640839][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9162'. [ 1733.640862][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9162'. [ 1733.685003][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1733.685021][ T30] audit: type=1326 audit(1790483813.666:22688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.3.9161" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700f0ec code=0x0 [ 1733.712959][T14422] netlink: 112 bytes leftover after parsing attributes in process `syz.6.9162'. [ 1734.236154][ T30] audit: type=1800 audit(1790483814.216:22689): pid=14433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.9167" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1734.522538][T14457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1735.047374][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9179'. [ 1735.195528][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9181'. [ 1735.254997][T29507] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1735.255063][T29507] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 1735.255072][T29507] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1735.255129][T29507] f81534 2-1:0.12: probe with driver f81534 failed with error -32 [ 1735.286336][ T30] audit: type=1326 audit(1790483815.266:22690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.9182" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700f0ec code=0x0 [ 1735.513979][ T5688] usb 2-1: USB disconnect, device number 68 [ 1735.737200][T14527] bond5: option arp_interval: invalid value (18446744073709551615) [ 1735.737224][T14527] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1735.738878][T14527] bond5 (unregistering): Released all slaves [ 1736.267591][T14630] bond3: option arp_interval: invalid value (18446744073709551615) [ 1736.267615][T14630] bond3: option arp_interval: allowed values 0 - 2147483647 [ 1736.271645][T14630] bond3 (unregistering): Released all slaves [ 1736.905652][T14737] FAULT_INJECTION: forcing a failure. [ 1736.905652][T14737] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.905684][T14737] CPU: 0 UID: 0 PID: 14737 Comm: syz.1.9193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1736.905710][T14737] Tainted: [L]=SOFTLOCKUP [ 1736.905717][T14737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1736.905728][T14737] Call Trace: [ 1736.905736][T14737] [ 1736.905745][T14737] dump_stack_lvl+0xe8/0x150 [ 1736.905776][T14737] should_fail_ex+0x410/0x560 [ 1736.905798][T14737] should_failslab+0xa8/0x100 [ 1736.905817][T14737] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1736.905856][T14737] ? kasan_save_track+0x4f/0x80 [ 1736.905875][T14737] ? kasan_save_track+0x3e/0x80 [ 1736.905893][T14737] ? __kasan_kmalloc+0x93/0xb0 [ 1736.905904][T14737] ? __get_vm_area_node+0x155/0x2f0 [ 1736.905918][T14737] ? __get_vm_area_node+0x155/0x2f0 [ 1736.905932][T14737] ? __ia32_sys_bpf+0xba/0xd0 [ 1736.905944][T14737] __get_vm_area_node+0x155/0x2f0 [ 1736.905966][T14737] __vmalloc_node_range_noprof+0x343/0x1540 [ 1736.905995][T14737] ? bpf_check+0x115d/0x2ef0 [ 1736.906018][T14737] ? rcu_is_watching+0x16/0xb0 [ 1736.906052][T14737] ? bpf_check+0x10e4/0x2ef0 [ 1736.906064][T14737] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1736.906082][T14737] ? bpf_diag_init+0x87/0x140 [ 1736.906093][T14737] ? bpf_diag_init+0x87/0x140 [ 1736.906111][T14737] ? bpf_check+0x115d/0x2ef0 [ 1736.906129][T14737] __vmalloc_noprof+0xd2/0x120 [ 1736.906156][T14737] ? bpf_check+0x115d/0x2ef0 [ 1736.906178][T14737] bpf_check+0x115d/0x2ef0 [ 1736.906205][T14737] ? __pfx_bpf_check+0x10/0x10 [ 1736.906218][T14737] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1736.906235][T14737] bpf_prog_load+0x14d6/0x1c20 [ 1736.906253][T14737] ? __pfx_bpf_prog_load+0x10/0x10 [ 1736.906299][T14737] __sys_bpf+0xd0d/0xd90 [ 1736.906329][T14737] ? __pfx___sys_bpf+0x10/0x10 [ 1736.906348][T14737] ? ksys_write+0x1e6/0x270 [ 1736.906365][T14737] ? __mutex_unlock_slowpath+0x731/0x900 [ 1736.906389][T14737] ? fput+0xa0/0xd0 [ 1736.906401][T14737] ? ksys_write+0x242/0x270 [ 1736.906433][T14737] __ia32_sys_bpf+0xba/0xd0 [ 1736.906456][T14737] __do_fast_syscall_32+0x27a/0x6a0 [ 1736.906483][T14737] ? do_fast_syscall_32+0x33/0x70 [ 1736.906500][T14737] ? asm_int80_emulation+0x1a/0x20 [ 1736.906510][T14737] ? do_int80_emulation+0x299/0x500 [ 1736.906523][T14737] ? trace_irq_disable+0x3b/0x140 [ 1736.906536][T14737] do_fast_syscall_32+0x33/0x70 [ 1736.906550][T14737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1736.906571][T14737] RIP: 0023:0xf709f0ec [ 1736.906588][T14737] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1736.906610][T14737] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1736.906629][T14737] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 1736.906642][T14737] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1736.906648][T14737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1736.906654][T14737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1736.906660][T14737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1736.906676][T14737] [ 1736.906681][T14737] syz.1.9193: vmalloc error: size 544, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1736.906725][T14737] CPU: 0 UID: 0 PID: 14737 Comm: syz.1.9193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1736.906750][T14737] Tainted: [L]=SOFTLOCKUP [ 1736.906757][T14737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1736.906768][T14737] Call Trace: [ 1736.906775][T14737] [ 1736.906783][T14737] dump_stack_lvl+0xe8/0x150 [ 1736.906806][T14737] warn_alloc+0x24d/0x270 [ 1736.906817][T14737] ? __kasan_kmalloc+0x22/0xb0 [ 1736.906830][T14737] ? __pfx_warn_alloc+0x10/0x10 [ 1736.906839][T14737] ? __kasan_kmalloc+0x93/0xb0 [ 1736.906850][T14737] ? __get_vm_area_node+0x155/0x2f0 [ 1736.906867][T14737] ? __ia32_sys_bpf+0xba/0xd0 [ 1736.906890][T14737] ? __get_vm_area_node+0x2a9/0x2f0 [ 1736.906924][T14737] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1736.906953][T14737] ? rcu_is_watching+0x16/0xb0 [ 1736.906974][T14737] ? bpf_check+0x10e4/0x2ef0 [ 1736.906986][T14737] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1736.907007][T14737] ? bpf_diag_init+0x87/0x140 [ 1736.907024][T14737] ? bpf_diag_init+0x87/0x140 [ 1736.907048][T14737] ? bpf_check+0x115d/0x2ef0 [ 1736.907066][T14737] __vmalloc_noprof+0xd2/0x120 [ 1736.907092][T14737] ? bpf_check+0x115d/0x2ef0 [ 1736.907108][T14737] bpf_check+0x115d/0x2ef0 [ 1736.907128][T14737] ? __pfx_bpf_check+0x10/0x10 [ 1736.907140][T14737] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1736.907156][T14737] bpf_prog_load+0x14d6/0x1c20 [ 1736.907187][T14737] ? __pfx_bpf_prog_load+0x10/0x10 [ 1736.907235][T14737] __sys_bpf+0xd0d/0xd90 [ 1736.907257][T14737] ? __pfx___sys_bpf+0x10/0x10 [ 1736.907269][T14737] ? ksys_write+0x1e6/0x270 [ 1736.907286][T14737] ? __mutex_unlock_slowpath+0x731/0x900 [ 1736.907309][T14737] ? fput+0xa0/0xd0 [ 1736.907331][T14737] ? ksys_write+0x242/0x270 [ 1736.907364][T14737] __ia32_sys_bpf+0xba/0xd0 [ 1736.907387][T14737] __do_fast_syscall_32+0x27a/0x6a0 [ 1736.907406][T14737] ? do_fast_syscall_32+0x33/0x70 [ 1736.907419][T14737] ? asm_int80_emulation+0x1a/0x20 [ 1736.907429][T14737] ? do_int80_emulation+0x299/0x500 [ 1736.907441][T14737] ? trace_irq_disable+0x3b/0x140 [ 1736.907453][T14737] do_fast_syscall_32+0x33/0x70 [ 1736.907476][T14737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1736.907498][T14737] RIP: 0023:0xf709f0ec [ 1736.907513][T14737] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1736.907528][T14737] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1736.907546][T14737] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 1736.907553][T14737] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1736.907559][T14737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1736.907565][T14737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1736.907571][T14737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1736.907586][T14737] [ 1736.974758][T14737] Mem-Info: [ 1736.974771][T14737] active_anon:28375 inactive_anon:1030 isolated_anon:0 [ 1736.974771][T14737] active_file:70 inactive_file:22616 isolated_file:0 [ 1736.974771][T14737] unevictable:857 dirty:250 writeback:0 [ 1736.974771][T14737] slab_reclaimable:7601 slab_unreclaimable:121170 [ 1736.974771][T14737] mapped:38773 shmem:22874 pagetables:1916 [ 1736.974771][T14737] sec_pagetables:0 bounce:0 [ 1736.974771][T14737] kernel_misc_reclaimable:0 [ 1736.974771][T14737] free:1256399 free_pcp:15787 free_cma:0 [ 1736.974817][T14737] Node 0 active_anon:113500kB inactive_anon:4120kB active_file:280kB inactive_file:90284kB unevictable:3428kB isolated(anon):0kB isolated(file):0kB mapped:155048kB dirty:1000kB writeback:0kB shmem:91496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:15056kB pagetables:7516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1736.974891][T14737] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1736.974938][T14737] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1736.974989][T14737] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1736.975043][T14737] Node 0 DMA32 free:1076768kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:113500kB inactive_anon:4120kB active_file:280kB inactive_file:90284kB unevictable:3428kB writepending:1000kB zspages:344kB present:3129332kB managed:2546884kB mlocked:3568kB bounce:0kB free_pcp:40972kB local_pcp:19880kB free_cma:0kB [ 1736.975102][T14737] lowmem_reserve[]: 0 0 0 0 0 [ 1736.975133][T14737] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1736.975201][T14737] lowmem_reserve[]: 0 0 0 0 0 [ 1736.975232][T14737] Node 1 Normal free:3933472kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:180kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:22176kB local_pcp:0kB free_cma:0kB [ 1736.975282][T14737] lowmem_reserve[]: 0 0 0 0 0 [ 1736.975313][T14737] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1736.975487][T14737] Node 0 DMA32: 583*4kB (UME) 176*8kB (UME) 197*16kB (UE) 886*32kB (UME) 229*64kB (UE) 204*128kB (UME) 119*256kB (UME) 37*512kB (UME) 11*1024kB (UME) 3*2048kB (UME) 228*4096kB (UM) = 1076716kB [ 1736.975645][T14737] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1736.975771][T14737] Node 1 Normal: 8*4kB (UM) 6*8kB (M) 9*16kB (UM) 16*32kB (UM) 15*64kB (UM) 7*128kB (UM) 9*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 955*4096kB (UM) = 3933472kB [ 1736.975930][T14737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.975945][T14737] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 1736.975959][T14737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.975973][T14737] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1736.975987][T14737] 45568 total pagecache pages [ 1736.975994][T14737] 12 pages in swap cache [ 1736.976002][T14737] Free swap = 124820kB [ 1736.976009][T14737] Total swap = 124996kB [ 1736.976016][T14737] 2097051 pages RAM [ 1736.976043][T14737] 0 pages HighMem/MovableOnly [ 1736.976050][T14737] 428714 pages reserved [ 1736.976057][T14737] 0 pages cma reserved [ 1737.420991][T14508] Bluetooth: hci2: command 0x0406 tx timeout [ 1738.147478][T14752] FAULT_INJECTION: forcing a failure. [ 1738.147478][T14752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1738.147521][T14752] CPU: 1 UID: 0 PID: 14752 Comm: syz.6.9195 Tainted: G L syzkaller #0 PREEMPT(full) [ 1738.147536][T14752] Tainted: [L]=SOFTLOCKUP [ 1738.147540][T14752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1738.147546][T14752] Call Trace: [ 1738.147551][T14752] [ 1738.147556][T14752] dump_stack_lvl+0xe8/0x150 [ 1738.147577][T14752] should_fail_ex+0x410/0x560 [ 1738.147592][T14752] _copy_from_iter+0x1d3/0x1660 [ 1738.147605][T14752] ? __alloc_skb+0x27a/0x7a0 [ 1738.147619][T14752] ? __alloc_skb+0x27a/0x7a0 [ 1738.147632][T14752] ? __alloc_skb+0x27a/0x7a0 [ 1738.147646][T14752] ? __pfx__copy_from_iter+0x10/0x10 [ 1738.147657][T14752] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1738.147672][T14752] ? __alloc_skb+0x27a/0x7a0 [ 1738.147683][T14752] ? __alloc_skb+0x27a/0x7a0 [ 1738.147697][T14752] ? netlink_sendmsg+0x650/0xb40 [ 1738.147707][T14752] ? skb_put+0x112/0x210 [ 1738.147721][T14752] netlink_sendmsg+0x6c0/0xb40 [ 1738.147736][T14752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1738.147749][T14752] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1738.147762][T14752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1738.147772][T14752] sock_sendmsg_nosec+0x13a/0x180 [ 1738.147785][T14752] ____sys_sendmsg+0x54e/0x850 [ 1738.147801][T14752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1738.147823][T14752] ___sys_sendmsg+0x2a5/0x360 [ 1738.147835][T14752] ? __lock_acquire+0x747/0x2de0 [ 1738.147848][T14752] ? __pfx____sys_sendmsg+0x10/0x10 [ 1738.147861][T14752] ? get_pid_task+0x20/0x1f0 [ 1738.147871][T14752] ? get_pid_task+0x20/0x1f0 [ 1738.147880][T14752] ? get_pid_task+0x20/0x1f0 [ 1738.147903][T14752] ? __fget_files+0x2a/0x420 [ 1738.147917][T14752] ? __fget_files+0x3a2/0x420 [ 1738.147934][T14752] __sys_sendmsg+0x177/0x240 [ 1738.147949][T14752] ? __pfx___sys_sendmsg+0x10/0x10 [ 1738.147972][T14752] __do_fast_syscall_32+0x27a/0x6a0 [ 1738.147986][T14752] ? do_fast_syscall_32+0x33/0x70 [ 1738.147999][T14752] ? asm_int80_emulation+0x1a/0x20 [ 1738.148012][T14752] ? do_int80_emulation+0x299/0x500 [ 1738.148025][T14752] ? trace_irq_disable+0x3b/0x140 [ 1738.148039][T14752] do_fast_syscall_32+0x33/0x70 [ 1738.148052][T14752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1738.148064][T14752] RIP: 0023:0xf7fa30ec [ 1738.148074][T14752] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1738.148083][T14752] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1738.148095][T14752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001340 [ 1738.148102][T14752] RDX: 00000000200000d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1738.148109][T14752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1738.148114][T14752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1738.148120][T14752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1738.148134][T14752] [ 1738.510654][ T6572] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1738.660593][ T6572] usb 4-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0 [ 1738.661994][ T6572] usb 4-1: config 4 has an invalid interface number: 12 but max is 0 [ 1738.662018][ T6572] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.662034][ T6572] usb 4-1: config 4 has no interface number 0 [ 1738.662094][ T6572] usb 4-1: config 4 interface 12 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1738.662118][ T6572] usb 4-1: config 4 interface 12 has no altsetting 0 [ 1738.676593][ T6572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.676616][ T6572] usb 4-1: Product: syz [ 1738.676629][ T6572] usb 4-1: Manufacturer: syz [ 1738.676642][ T6572] usb 4-1: SerialNumber: syz [ 1739.246264][ T30] audit: type=1326 audit(1790483819.226:22691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.7.9198" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702f0ec code=0x0 [ 1739.305559][T14779] fuse: Unknown parameter 'fd50x0000000000000000' [ 1739.569081][T14798] bond1: option arp_interval: invalid value (18446744073709551615) [ 1739.569112][T14798] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1739.587292][T14798] bond1 (unregistering): Released all slaves [ 1740.698525][ T6572] cdc_acm 4-1:4.12: More than one union descriptor, skipping ... [ 1740.731447][ T6572] usb 4-1: USB disconnect, device number 115 [ 1741.167548][T14508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1741.177956][T14508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1741.198470][T14508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1741.224556][T14508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1741.225288][T14508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1741.503573][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9206'. [ 1741.769364][ T30] audit: type=1800 audit(1790483821.746:22692): pid=14945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9210" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1742.067840][T10076] tipc: Disabling bearer [ 1742.289224][T14987] bond1: option arp_interval: invalid value (18446744073709551615) [ 1742.289249][T14987] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1742.299202][T14987] bond1 (unregistering): Released all slaves [ 1742.740452][ T30] audit: type=1326 audit(1790483822.726:22693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.1.9213" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709f0ec code=0x0 [ 1743.330144][T30765] Bluetooth: hci3: command tx timeout [ 1743.546203][T15105] create_pit_timer: 73 callbacks suppressed [ 1743.546220][T15105] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1743.594188][T15105] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1743.596621][T15105] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1743.596711][T15105] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1743.596805][T15105] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1743.596838][T15105] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1743.596870][T15105] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1743.597158][T15105] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1743.597259][T15105] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1743.597293][T15105] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1744.065049][T15121] syzkaller0: entered promiscuous mode [ 1744.065072][T15121] syzkaller0: entered allmulticast mode [ 1744.172891][T18015] batman_adv: batadv0: Removing interface: macsec1 [ 1744.284961][T14939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.285129][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.285253][T14939] bridge_slave_0: entered allmulticast mode [ 1744.286769][T14939] bridge_slave_0: entered promiscuous mode [ 1744.294096][T14939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.294214][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.294360][T14939] bridge_slave_1: entered allmulticast mode [ 1744.297695][T14939] bridge_slave_1: entered promiscuous mode [ 1744.349872][T12526] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1744.396925][T14939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.411552][T14939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.480332][ T5711] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1744.511387][T12526] usb 2-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0 [ 1744.512733][T12526] usb 2-1: config 4 has an invalid interface number: 12 but max is 0 [ 1744.512755][T12526] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.512772][T12526] usb 2-1: config 4 has no interface number 0 [ 1744.512829][T12526] usb 2-1: config 4 interface 12 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1744.512853][T12526] usb 2-1: config 4 interface 12 has no altsetting 0 [ 1744.518678][T12526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.518699][T12526] usb 2-1: Product: syz [ 1744.518734][T12526] usb 2-1: Manufacturer: syz [ 1744.518747][T12526] usb 2-1: SerialNumber: syz [ 1744.630806][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 1744.631731][ T5711] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1744.633116][ T5711] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1744.633165][ T5711] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1744.633213][ T5711] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1744.633235][ T5711] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1744.633255][ T5711] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1744.633301][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.718376][T14939] team0: Port device team_slave_0 added [ 1744.729623][T14939] team0: Port device team_slave_1 added [ 1744.861319][ T5711] usb 4-1: usb_control_msg returned -32 [ 1744.861369][ T5711] usbtmc 4-1:16.0: can't read capabilities [ 1744.893634][T14939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1744.893661][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1744.893674][T14939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.957061][T14939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.957077][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1744.957099][T14939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1745.006216][T18015] macvlan0: left allmulticast mode [ 1745.006440][T18015] bridge0: port 3(macvlan0) entered disabled state [ 1745.024003][T18015] bridge_slave_1: left allmulticast mode [ 1745.024216][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.027785][T18015] bridge_slave_0: left allmulticast mode [ 1745.028020][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.266216][T15184] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned b1 [ 1745.406392][T18015] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 1745.406420][T18015] bridge1 (unregistering): left promiscuous mode [ 1745.406438][T18015] bridge1 (unregistering): left allmulticast mode [ 1745.418988][T30765] Bluetooth: hci3: command tx timeout [ 1745.444653][T18015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1745.448180][T18015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1745.449251][T18015] bond0 (unregistering): Released all slaves [ 1745.478007][ T5711] usb 4-1: USB disconnect, device number 116 [ 1745.559525][T18015] bond1 (unregistering): Released all slaves [ 1745.635184][T18015] bond2 (unregistering): Released all slaves [ 1745.692297][T18015] bond3 (unregistering): Released all slaves [ 1745.724797][T18015] bond4 (unregistering): Released all slaves [ 1745.768741][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1745.805908][T15317] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9223'. [ 1745.844955][T14939] hsr_slave_0: entered promiscuous mode [ 1745.845851][T14939] hsr_slave_1: entered promiscuous mode [ 1745.846532][T14939] debugfs: 'hsr0' already exists in 'hsr' [ 1745.846548][T14939] Cannot create hsr debugfs directory [ 1746.027473][T18015] tipc: Left network mode [ 1746.358583][ T30] audit: type=1326 audit(1790483826.336:22694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700f0ec code=0x0 [ 1747.102638][T12526] cdc_acm 2-1:4.12: More than one union descriptor, skipping ... [ 1747.112004][T12526] usb 2-1: USB disconnect, device number 69 [ 1747.304673][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1747.492888][T30765] Bluetooth: hci3: command tx timeout [ 1748.184110][T18015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.187303][T18015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.208360][ T30] audit: type=1326 audit(1790483828.086:22695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15507 comm="syz.3.9233" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 1748.317342][ T30] audit: type=1326 audit(1790483828.276:22696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15507 comm="syz.3.9233" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 1748.648921][ T30] audit: type=1326 audit(1790483828.626:22697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15507 comm="syz.3.9233" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 1748.649214][ T30] audit: type=1326 audit(1790483828.626:22698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15507 comm="syz.3.9233" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 1748.986635][T15558] FAULT_INJECTION: forcing a failure. [ 1748.986635][T15558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.986667][T15558] CPU: 0 UID: 0 PID: 15558 Comm: syz.7.9238 Tainted: G L syzkaller #0 PREEMPT(full) [ 1748.986682][T15558] Tainted: [L]=SOFTLOCKUP [ 1748.986686][T15558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1748.986692][T15558] Call Trace: [ 1748.986697][T15558] [ 1748.986702][T15558] dump_stack_lvl+0xe8/0x150 [ 1748.986729][T15558] should_fail_ex+0x410/0x560 [ 1748.986757][T15558] _copy_to_user+0x31/0xb0 [ 1748.986785][T15558] simple_read_from_buffer+0xe1/0x170 [ 1748.986816][T15558] proc_fail_nth_read+0x1bb/0x230 [ 1748.986826][T15558] ? common_file_perm+0x20e/0x2b0 [ 1748.986841][T15558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1748.986856][T15558] ? rw_verify_area+0x24a/0x4c0 [ 1748.986873][T15558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1748.986890][T15558] vfs_read+0x213/0xa80 [ 1748.986923][T15558] ? __pfx___mutex_lock+0x10/0x10 [ 1748.986949][T15558] ? __pfx_vfs_read+0x10/0x10 [ 1748.986975][T15558] ? __fget_files+0x2a/0x420 [ 1748.986991][T15558] ? __fget_files+0x3a2/0x420 [ 1748.987004][T15558] ? __fget_files+0x2a/0x420 [ 1748.987022][T15558] ksys_read+0x150/0x270 [ 1748.987045][T15558] ? __pfx_ksys_read+0x10/0x10 [ 1748.987073][T15558] ? asm_int80_emulation+0x1a/0x20 [ 1748.987097][T15558] do_int80_emulation+0x198/0x500 [ 1748.987122][T15558] ? trace_irq_disable+0x3b/0x140 [ 1748.987142][T15558] ? asm_int80_emulation+0x1a/0x20 [ 1748.987158][T15558] ? clear_bhb_loop+0x70/0xc0 [ 1748.987168][T15558] ? clear_bhb_loop+0x70/0xc0 [ 1748.987180][T15558] asm_int80_emulation+0x1a/0x20 [ 1748.987190][T15558] RIP: 0023:0xf71675ab [ 1748.987200][T15558] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1748.987209][T15558] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1748.987225][T15558] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0 [ 1748.987238][T15558] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1748.987250][T15558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1748.987261][T15558] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1748.987273][T15558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1748.987302][T15558] [ 1749.570105][T30765] Bluetooth: hci3: command tx timeout [ 1750.000831][T15565] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1750.055849][ T31] INFO: task kworker/1:15:10732 blocked for more than 143 seconds. [ 1750.055876][ T31] Tainted: G L syzkaller #0 [ 1750.055887][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1750.055897][ T31] task:kworker/1:15 state:D stack:20200 pid:10732 tgid:10732 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1750.055945][ T31] Workqueue: events_freezable usb_stor_scan_dwork [ 1750.056043][ T31] Call Trace: [ 1750.056051][ T31] [ 1750.056064][ T31] __schedule+0x17db/0x58f0 [ 1750.056108][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1750.056142][ T31] ? __pfx___schedule+0x10/0x10 [ 1750.056175][ T31] ? schedule+0x90/0x2b0 ** replaying previous printk message ** [ 1750.056175][ T31] ? schedule+0x90/0x2b0 [ 1750.056201][ T31] schedule+0x164/0x2b0 [ 1750.056226][ T31] schedule_preempt_disabled+0x13/0x30 [ 1750.056253][ T31] __mutex_lock+0x7c1/0x1550 [ 1750.056289][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1750.056317][ T31] ? usb_stor_scan_dwork+0xec/0x2c0 [ 1750.056342][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1750.056372][ T31] ? lock_acquire+0x115/0x350 [ 1750.056404][ T31] usb_stor_scan_dwork+0xec/0x2c0 [ 1750.056425][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1750.056455][ T31] process_scheduled_works+0xc3d/0x1630 [ 1750.056535][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1750.056567][ T31] ? assign_work+0x3cf/0x5d0 [ 1750.056598][ T31] worker_thread+0xa47/0xfb0 [ 1750.056652][ T31] kthread+0x38b/0x480 [ 1750.056672][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1750.056694][ T31] ? __pfx_kthread+0x10/0x10 [ 1750.056714][ T31] ret_from_fork+0x514/0xb70 [ 1750.056744][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1750.056764][ T31] ? __switch_to+0xc89/0x1420 [ 1750.056793][ T31] ? __pfx_kthread+0x10/0x10 [ 1750.056814][ T31] ret_from_fork_asm+0x1a/0x30 [ 1750.056860][ T31] [ 1750.056921][ T31] INFO: task syz.5.8569:6565 blocked for more than 143 seconds. [ 1750.056944][ T31] Tainted: G L syzkaller #0 [ 1750.056955][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1750.056964][ T31] task:syz.5.8569 state:D stack:28272 pid:6565 tgid:6561 ppid:28684 task_flags:0x400040 flags:0x08080002 [ 1750.057015][ T31] Call Trace: [ 1750.057022][ T31] [ 1750.057033][ T31] __schedule+0x17db/0x58f0 [ 1750.057081][ T31] ? __pfx___schedule+0x10/0x10 [ 1750.057112][ T31] ? schedule+0x90/0x2b0 [ 1750.057137][ T31] schedule+0x164/0x2b0 [ 1750.057160][ T31] schedule_preempt_disabled+0x13/0x30 [ 1750.057182][ T31] __mutex_lock+0x7c1/0x1550 [ 1750.057211][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1750.057237][ T31] ? usbdev_open+0x151/0x770 [ 1750.057359][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1750.057386][ T31] ? bus_find_device+0x27d/0x2d0 [ 1750.057416][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1750.057444][ T31] ? usbdev_open+0xa7/0x770 [ 1750.057469][ T31] ? usbdev_open+0xa7/0x770 [ 1750.057503][ T31] usbdev_open+0x151/0x770 [ 1750.057536][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1750.057567][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 1750.057598][ T31] chrdev_open+0x4d9/0x600 [ 1750.057624][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1750.057647][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1750.057675][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1750.057696][ T31] do_dentry_open+0x816/0x1380 [ 1750.057739][ T31] vfs_open+0x3b/0x340 [ 1750.057760][ T31] ? path_openat+0x1428/0x1d60 [ 1750.057783][ T31] path_openat+0x1443/0x1d60 [ 1750.057822][ T31] do_file_open+0x23e/0x4a0 [ 1750.057849][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1750.057892][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1750.057912][ T31] ? alloc_fd+0x651/0x6c0 [ 1750.057947][ T31] do_sys_openat2+0x115/0x200 [ 1750.057974][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1750.058000][ T31] ? __irq_exit_rcu+0xcb/0x220 [ 1750.058026][ T31] ? handle_softirqs+0x720/0x860 [ 1750.058053][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1750.058082][ T31] do_int80_emulation+0x198/0x500 [ 1750.058107][ T31] ? asm_int80_emulation+0x1a/0x20 [ 1750.058125][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1750.058143][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1750.058164][ T31] asm_int80_emulation+0x1a/0x20 [ 1750.058181][ T31] RIP: 0023:0xf71475ab [ 1750.058198][ T31] RSP: 002b:00000000f53dc03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1750.058217][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53dc100 [ 1750.058230][ T31] RDX: 0000000000080100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1750.058242][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1750.058253][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1750.058265][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.058291][ T31] [ 1750.058364][ T31] [ 1750.058364][ T31] Showing all locks held in the system: [ 1750.058374][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1750.058387][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1750.058468][ T31] locks held by dhcpcd/5279: 1, on CPU#0: [ 1750.058481][ T31] #0: ffffffff90254e00 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x249/0x390 [ 1750.058531][ T31] locks held by getty/5378: 2, on CPU#1: [ 1750.058544][ T31] #0: ffff888034a730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1750.058593][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1750.058640][ T31] locks held by kworker/1:7/6317: 6, on CPU#1: [ 1750.058652][ T31] #0: ffff888022aa9940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1750.058700][ T31] #1: ffffc90003797c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1750.058757][ T31] #2: ffff888029f441d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1750.058846][ T31] #3: ffff8880377671d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1750.058892][ T31] #4: ffff88807b4f01a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1750.058935][ T31] #5: ffff8880757a4ef0 (&us_interface_key[i]){+.+.}-{4:4}, at: ene_ub6250_probe+0x34e/0x5f0 [ 1750.058986][ T31] locks held by kworker/1:15/10732: 3, on CPU#1: [ 1750.058999][ T31] #0: ffff88801b06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1750.059050][ T31] #1: ffffc9000929fc40 ((work_completion)(&(&us->scan_dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1750.059101][ T31] #2: ffff8880757a4ef0 (&us_interface_key[i]){+.+.}-{4:4}, at: usb_stor_scan_dwork+0xec/0x2c0 [ 1750.059553][ T31] locks held by kworker/u8:24/17989: 3, on CPU#0: [ 1750.059568][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1750.059616][ T31] #1: ffffc90003907c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1750.059662][ T31] #2: ffffffff90254e00 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1750.059705][ T31] locks held by kworker/u8:26/18015: 4, on CPU#1: [ 1750.059718][ T31] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1750.059870][ T31] #1: ffffc90010197c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1750.059918][ T31] #2: ffffffff90246588 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1750.059965][ T31] #3: ffffffff8ed62bb8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1750.060019][ T31] locks held by udevd/6377: 4, on CPU#1: [ 1750.060031][ T31] #0: ffff88805320f098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1750.060078][ T31] #1: ffff8880571b2c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1750.060134][ T31] #2: ffff8880216a0878 (kn->active#23){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1750.060188][ T31] #3: ffff8880377671d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1750.060238][ T31] locks held by syz.5.8569/6565: 1, on CPU#1: [ 1750.060254][ T31] #0: ffff888029f441d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 1750.060317][ T31] locks held by syz-executor/14939: 7, on CPU#1: [ 1750.060332][ T31] #0: ffff88803693a460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1750.060392][ T31] #1: ffff88807e7d8080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1750.060439][ T31] #2: ffff888029216b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1750.060520][ T31] #3: ffffffff8facc2c0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 1750.060567][ T31] #4: ffff888053b5d128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1750.060616][ T31] #5: ffff888053b5f258 (&devlink->lock_key#21){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbb0 [ 1750.060716][ T31] #6: ffffffff90254e00 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x8b/0x290 [ 1750.060870][ T31] locks held by syz.3.9233/15514: 1, last CPU#1: [ 1750.060890][ T31] #0: ffff8880223e69b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1750.060940][ T31] locks held by syz.6.9235/15523: 3, last CPU#0: [ 1750.060954][ T31] #0: ffffffff8f9bbbe8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1750.061007][ T31] #1: ffffffff90254e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1750.061052][ T31] #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1750.061096][ T31] locks held by syz.6.9235/15530: 1, on CPU#0: [ 1750.061110][ T31] #0: ffffffff90254e00 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1750.076014][ T30] audit: type=1326 audit(1790483830.046:22699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.1.9240" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1750.076077][ T30] audit: type=1326 audit(1790483830.046:22700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.1.9240" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1750.076130][ T30] audit: type=1326 audit(1790483830.046:22701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.1.9240" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1750.076171][ T30] audit: type=1326 audit(1790483830.046:22702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.1.9240" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1750.076212][ T30] audit: type=1326 audit(1790483830.046:22703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.1.9240" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1750.076481][T15565] FAULT_INJECTION: forcing a failure. [ 1750.076481][T15565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1750.076509][T15565] CPU: 1 UID: 0 PID: 15565 Comm: syz.1.9240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1750.076533][T15565] Tainted: [L]=SOFTLOCKUP [ 1750.076540][T15565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1750.076550][T15565] Call Trace: [ 1750.076559][T15565] [ 1750.076568][T15565] dump_stack_lvl+0xe8/0x150 [ 1750.076601][T15565] should_fail_ex+0x410/0x560 [ 1750.076629][T15565] prepare_alloc_pages+0x223/0x600 [ 1750.076655][T15565] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1750.076680][T15565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1750.076705][T15565] ? __pfx_policy_nodemask+0x10/0x10 [ 1750.076732][T15565] ? __lock_acquire+0x747/0x2de0 [ 1750.076753][T15565] alloc_pages_mpol+0x21e/0x390 [ 1750.076783][T15565] folio_alloc_mpol_noprof+0x39/0x160 [ 1750.076809][T15565] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1750.076836][T15565] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1750.076860][T15565] ? lock_acquire+0x115/0x350 [ 1750.076886][T15565] do_pte_missing+0x173a/0x34b0 [ 1750.076924][T15565] handle_mm_fault+0x1a53/0x3750 [ 1750.076960][T15565] ? handle_mm_fault+0xf1/0x3750 [ 1750.076996][T15565] ? __pfx_handle_mm_fault+0x10/0x10 [ 1750.077020][T15565] ? follow_page_pte+0x748/0xf10 [ 1750.077052][T15565] ? __pfx_follow_page_pte+0x10/0x10 [ 1750.077089][T15565] __get_user_pages+0x1675/0x2750 [ 1750.077145][T15565] get_user_pages_unlocked+0x1ee/0x6f0 [ 1750.077180][T15565] hva_to_pfn+0x365/0xf10 [ 1750.077211][T15565] ? __pfx_hva_to_pfn+0x10/0x10 [ 1750.077246][T15565] ? xa_load+0x60/0x210 [ 1750.077280][T15565] ? kvm_follow_pfn+0x21a/0x3c0 [ 1750.077302][T15565] __kvm_faultin_pfn+0xaa/0x100 [ 1750.077329][T15565] kvm_mmu_faultin_pfn+0x73b/0x1610 [ 1750.077372][T15565] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 1750.077403][T15565] ? __kvm_memslots+0x127/0x210 [ 1750.077429][T15565] kvm_tdp_page_fault+0x273/0x370 [ 1750.077458][T15565] kvm_mmu_do_page_fault+0x31d/0x640 [ 1750.077477][T15565] ? trace_rcu_utilization+0x4a/0x1f0 [ 1750.077504][T15565] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1750.077531][T15565] ? vmx_vcpu_run+0xfbf/0x2d20 [ 1750.077557][T15565] ? rcu_is_watching+0x16/0xb0 [ 1750.077579][T15565] ? __vmx_complete_interrupts+0xe7/0x640 [ 1750.077612][T15565] kvm_mmu_page_fault+0x1f2/0xa40 [ 1750.077635][T15565] ? __pfx_handle_ept_violation+0x10/0x10 [ 1750.077657][T15565] vmx_handle_exit+0xfa4/0x16e0 [ 1750.077696][T15565] vcpu_run+0x4ead/0x7aa0 [ 1750.077754][T15565] ? vcpu_run+0x3616/0x7aa0 [ 1750.077817][T15565] ? __pfx_vcpu_run+0x10/0x10 [ 1750.077843][T15565] ? lock_acquire+0x115/0x350 [ 1750.077867][T15565] ? __local_bh_enable_ip+0xd6/0x140 [ 1750.077901][T15565] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1750.077933][T15565] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1750.077971][T15565] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1750.077997][T15565] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1750.078014][T15565] ? do_vfs_ioctl+0x116f/0x1530 [ 1750.078036][T15565] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1750.078069][T15565] ? hook_file_ioctl_compat+0x1f2/0x600 [ 1750.078112][T15565] kvm_vcpu_compat_ioctl+0x204/0x390 [ 1750.078135][T15565] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1750.078156][T15565] ? __fget_files+0x3a2/0x420 [ 1750.078180][T15565] ? __fget_files+0x2a/0x420 [ 1750.078208][T15565] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1750.078243][T15565] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1750.078267][T15565] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1750.078288][T15565] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1750.078313][T15565] ? __fget_files+0x3a2/0x420 [ 1750.078357][T15565] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1750.078384][T15565] __do_fast_syscall_32+0x27a/0x6a0 [ 1750.078410][T15565] ? do_fast_syscall_32+0x33/0x70 [ 1750.078434][T15565] ? asm_int80_emulation+0x1a/0x20 [ 1750.078451][T15565] ? do_int80_emulation+0x299/0x500 [ 1750.078480][T15565] do_fast_syscall_32+0x33/0x70 [ 1750.078505][T15565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1750.078526][T15565] RIP: 0023:0xf709f0ec [ 1750.078544][T15565] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1750.078558][T15565] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1750.078577][T15565] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000ae80 [ 1750.078589][T15565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1750.078600][T15565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1750.078610][T15565] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1750.078621][T15565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.078650][T15565] [ 1750.129988][ T31] locks held by syz.1.9240/15564: 1, on CPU#1: [ 1750.130007][ T31] #0: ffffffff8ed62bb8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1750.130090][ T31] [ 1750.130095][ T31] ============================================= [ 1750.130095][ T31] [ 1750.130103][ T31] NMI backtrace for cpu 1 [ 1750.130118][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1750.130142][ T31] Tainted: [L]=SOFTLOCKUP [ 1750.130149][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1750.130167][ T31] Call Trace: [ 1750.130175][ T31] [ 1750.130184][ T31] dump_stack_lvl+0xe8/0x150 [ 1750.130214][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1750.130235][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1750.130265][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1750.130288][ T31] sys_info+0x135/0x170 [ 1750.130304][ T31] watchdog+0xfd7/0x1030 [ 1750.130331][ T31] ? watchdog+0x1c7/0x1030 [ 1750.130355][ T31] kthread+0x38b/0x480 [ 1750.130374][ T31] ? __pfx_watchdog+0x10/0x10 [ 1750.130390][ T31] ? __pfx_kthread+0x10/0x10 [ 1750.130409][ T31] ret_from_fork+0x514/0xb70 [ 1750.130429][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1750.130447][ T31] ? __switch_to+0xc89/0x1420 [ 1750.130474][ T31] ? __pfx_kthread+0x10/0x10 [ 1750.130493][ T31] ret_from_fork_asm+0x1a/0x30 [ 1750.130534][ T31] [ 1750.130562][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1750.130595][ C0] NMI backtrace for cpu 0 [ 1750.130611][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1750.130636][ C0] Tainted: [L]=SOFTLOCKUP [ 1750.130644][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1750.130656][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1750.130682][ C0] Code: e8 6e 82 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 9a 3f 76 06 cc 44 89 f9 80 e1 07 [ 1750.130700][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1750.130717][ C0] RAX: 1ffffffff35a8600 RBX: 00000000000003fd RCX: 0000000000000000 [ 1750.130731][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1750.130743][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1750.130757][ C0] R10: dffffc0000000000 R11: ffffffff85735940 R12: dffffc0000000000 [ 1750.130772][ C0] R13: 0000000000000000 R14: ffffffff9ad43300 R15: 0000000000000000 [ 1750.130786][ C0] FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 1750.130802][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1750.130816][ C0] CR2: 00000000f50fa2c1 CR3: 000000007f416000 CR4: 00000000003526f0 [ 1750.130834][ C0] Call Trace: [ 1750.130842][ C0] [ 1750.130850][ C0] wait_for_lsr+0x184/0x2f0 [ 1750.130875][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1750.130907][ C0] serial8250_console_write+0xaa1/0x1200 [ 1750.130936][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1750.130965][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1750.130988][ C0] ? __schedule+0x17f1/0x58f0 [ 1750.131018][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1750.131047][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1750.131071][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1750.131098][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1750.131124][ C0] nbcon_kthread_func+0x679/0x880 [ 1750.131146][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1750.131166][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1750.131189][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1750.131217][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1750.131252][ C0] kthread+0x38b/0x480 [ 1750.131271][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1750.131290][ C0] ? __pfx_kthread+0x10/0x10 [ 1750.131309][ C0] ret_from_fork+0x514/0xb70 [ 1750.131327][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1750.131345][ C0] ? __switch_to+0xc89/0x1420 [ 1750.131371][ C0] ? __pfx_kthread+0x10/0x10 [ 1750.131391][ C0] ret_from_fork_asm+0x1a/0x30 [ 1750.131428][ C0] [ 1750.131598][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1751.951067][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1751.961730][ T31] Tainted: [L]=SOFTLOCKUP [ 1751.966036][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1751.976085][ T31] Call Trace: [ 1751.979355][ T31] [ 1751.982273][ T31] vpanic+0x56d/0xa60 [ 1751.986257][ T31] ? __pfx_vpanic+0x10/0x10 [ 1751.990753][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 1751.996291][ T31] panic+0xc5/0xd0 [ 1752.000002][ T31] ? __pfx_panic+0x10/0x10 [ 1752.004414][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 1752.009428][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1752.015569][ T31] watchdog+0x1030/0x1030 [ 1752.019894][ T31] ? watchdog+0x1c7/0x1030 [ 1752.024308][ T31] kthread+0x38b/0x480 [ 1752.028362][ T31] ? __pfx_watchdog+0x10/0x10 [ 1752.033023][ T31] ? __pfx_kthread+0x10/0x10 [ 1752.037601][ T31] ret_from_fork+0x514/0xb70 [ 1752.042182][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1752.047277][ T31] ? __switch_to+0xc89/0x1420 [ 1752.051946][ T31] ? __pfx_kthread+0x10/0x10 [ 1752.056522][ T31] ret_from_fork_asm+0x1a/0x30 [ 1752.061288][ T31] [ 1752.064562][ T31] Kernel Offset: disabled [ 1752.068877][ T31] Rebooting in 86400 seconds..