last executing test programs: 7m41.350557535s ago: executing program 32 (id=1657): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x10001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x8f}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a574"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1b, 0x2a, [@ibss={0x6, 0x2, 0x8804}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @cf={0x4, 0x6, {0x29, 0x5, 0x7, 0xd}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x20000000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x1}, {0x5, 0x1f}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000700)="80", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) sendmsg$key(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="020a061b02"], 0x10}}, 0x2008840) 4m33.113025327s ago: executing program 33 (id=2433): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) getpid() ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f00000003c0)="c0aa38ba7a2e4d04b3d5094feaf60c121fb3c2ffab2ae1be32f1b8d33fa25af61e8ba8dddadfe2c6d1cd1856432afe3b71ce138c2f8a9d80ce5a034f7275e5d3ece8d4650dd6da78e7290a13ec4eaa7fcce86141ab4c2a0909fa5e2816654ce34ac763cb28798609148524d88683b92ef344a4aeabb99c1b5122727a1513c73c903949e706d0f8f0c5e52c92f0af337685f8de6fd57cae2ca59fb9fbfbd105ace0cc8673093833f556d7c0f23a139a8345828cd94ddb50a30d3b65e061c8beb740168cfb148e44d6b94a4823ee9f2133df07459e9405b772856ce58445b6cb3fda11ba3d3ae57218d9aa2b371c91a4c9c00ce9", 0xf3, 0x20000001, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000380)={0xf, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x47425247}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 4m32.304846086s ago: executing program 34 (id=2435): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) write$usbip_server(r1, &(0x7f0000000140)=@ret_unlink={{0x4, 0x39b7, 0x0, 0x0, 0x3}, {0x1}}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x2, {0x2, 0x0, 0x2}}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) move_pages(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x6, 0x8000000000000001) syz_emit_ethernet(0x8c, &(0x7f0000000080)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x56, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "001777fbd560c45d00000000000000c65619a80f452bcad96c6ca2b30c157ec307e598211a51709a4c2e91dbf260976871c577e0143c4ae8ea8b10e262aa0fb25f410cb4bff9ba3f30563fad613702d95b994142ae1d"}}}}}, 0x0) 2m8.944658715s ago: executing program 1 (id=2942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') socket$unix(0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000100)) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m8.690604877s ago: executing program 1 (id=2945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x1edafb906ac4f4a0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x395, 0xd, 0xa, 0x5317, 0x28000000, 0x401, 0x1, 0x8001}, &(0x7f0000000040)=0x20) r3 = accept(r1, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000006300)=ANY=[], 0x4f8}], 0x1, 0x0, 0x0, 0x80}, 0x80) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x5) 2m8.68715061s ago: executing program 5 (id=2946): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50fec0001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2m8.163428581s ago: executing program 6 (id=2950): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xd8, 0x2c, 0x5f, 0x10, 0x5c6, 0x900c, 0x2714, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x70, 0x7b, "", [{{0x9, 0x4, 0x5, 0x9, 0x0, 0x79, 0xc1, 0x81, 0xf3}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xd8, 0x2c, 0x5f, 0x10, 0x5c6, 0x900c, 0x2714, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x70, 0x7b, "", [{{0x9, 0x4, 0x5, 0x9, 0x0, 0x79, 0xc1, 0x81, 0xf3}}]}}]}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) (async) 2m7.718534034s ago: executing program 1 (id=2954): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x4000) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7f62edac751478af9c62f000000000000", 0x40, r3) socket$nl_generic(0x10, 0x3, 0x10) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x2011, 0x3, 0xb, 0x6, 0x1, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 2m7.717941339s ago: executing program 7 (id=2955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000}, {0x0, 0x7ffffffffffffffd, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x2b}, 0x2, @in6=@private2, 0x3503, 0x4, 0x3, 0x0, 0x0, 0x0, 0x113b}]}]}, 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) (fail_nth: 48) 2m7.263864146s ago: executing program 7 (id=2956): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r2], 0x108}}], 0x1, 0xc040) 2m6.951305744s ago: executing program 7 (id=2957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES64=r0, @ANYBLOB="810200000000000014001a80100004800c"], 0x34}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m6.84678255s ago: executing program 5 (id=2958): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xdddd0000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x206000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000, 0x0, 0x7000000}) 2m6.550489764s ago: executing program 5 (id=2959): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600030000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2m6.44334525s ago: executing program 7 (id=2960): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0, 0x20}, {&(0x7f0000000500)=""/84, 0x54}], 0x2, 0x4, 0x8008) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000040), 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x4000000) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) 2m6.361977248s ago: executing program 5 (id=2961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0xf5, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 2m6.204759624s ago: executing program 5 (id=2963): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) socket$inet(0x2, 0xa, 0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x1, 0x8001, 0x0, 0xb, 0x0, 0x3, 0x0, 0xbf}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x24044810}, 0x8880) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendfile(r5, r5, 0x0, 0x200000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r6, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r7, &(0x7f0000002d00), 0x0, 0x0, &(0x7f0000002e00)={0x77359400}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r9, 0x0, 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="000e04e8000055dd20f3dc8ea66cbdd369cc825222f03f3b2a057a3e372b4128a84fc3f86a2ea373d1b6c25300"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m5.686072935s ago: executing program 6 (id=2964): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = getpgrp(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x6, 0x3}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x800) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x3, 0x3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRESHEX, @ANYBLOB="18"], 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m5.250796681s ago: executing program 1 (id=2966): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="0807e4ff", @ANYRES16=0x0, @ANYBLOB="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"], 0x708}, 0x1, 0x0, 0x0, 0x8800}, 0x4c041) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m4.330228524s ago: executing program 6 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r2, @ANYBLOB="ebffffffffffffff28001200180002"], 0x48}}, 0x0) 2m4.302339553s ago: executing program 6 (id=2968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r3 = syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x1) r5 = syz_open_procfs(r3, &(0x7f0000000180)='fdinfo/3\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0xfc}}}}}]}}]}}, 0x0) setitimer(0x2, 0x0, 0x0) read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r6, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000300)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r8, 0x0, 0x7, 0x1f5, 0x1, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffb, "b4bc323ef77d1f000071849800000000dfff00000000000000000800"}}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000000)={r10, 0x1}, &(0x7f0000000140)=0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r2, @ANYBLOB="ebffffffff0600000000124018012bc9021a0a2af6f9ef5afe2173f81668b54f9b5995c26f9300", @ANYRESHEX=r0, @ANYRES8=r9, @ANYRES64=r3, @ANYRES8=r5], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m3.247609933s ago: executing program 7 (id=2969): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x580, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0xea117000) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x18, 0xc, 0x6b}, {@loopback, 0x4e26, 0x1, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x5, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x4, 0x9}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x3, 0x7f, 0x1e, 0xff, 0x1}, 0x129, &(0x7f0000000180)={0x5, 0xf, 0x129, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3, 0x4, 0x401}, @generic={0xe0, 0x10, 0x1, "d7990d6085f2804f877522c4aab53f988af5fa6afb8803d354d5a1adb4cebd1d20c57f20814cd68770c25e161123db9e7f965a2c341050cbc33a5faf5adad93f3e98aef6ffc00891513120de2742e9d132b90e93448771e0207ad407e428083f1d9a12077d28e81e46106a7695e22882e053e6f34d2bc97e3941805a6bd5652fa7241b0abcd327b71c5c6ec26065b9dc00e7c0824c0837fd0e4220bce173bec5adb6d428b577707c3c87b2a91405d970c35e0f1850dcbb4228686fb1fc45770040d545a023be58896572764c2cc103d4d2e89ef78d3b9163472f2f7b92"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "6ce4a47df4c05539b1b5d676ca83895f"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0xa, 0x8, 0x1, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "df5e863c645725223b3f747aefbc2d8a"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0xd, 0x7}]}, 0x1, [{0xc1, &(0x7f00000002c0)=@string={0xc1, 0x3, "e7bb9ee979066c102b35e61bcb4fd1510a3a3846209bba614404f29d24ce88375f9b3aea4efc99f42038a10018fcf4dea6cca60d1a07da5618dd059696c7a131e8faec4bba32531ceaa58719e3082ec7d696d472d4be8b5bd367e97071a7d20864f51b403fb1da685f6ba4597f1a35eaf624792917edcaa227f711b445133247ff5b7b8ab057c218e0c8348cb75fb14be4d5c3f252bf62b5cc7bdfeffd84b41fa602e902d0069368da3514d14e747ef02cbd99d1e05e88ef09f1c1e1ffdde3"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000600)={0x14, &(0x7f0000000440)={0x20, 0x22, 0x2e, {0x2e, 0xe, "a5c41393213446ec7c4c62817743a670899451123a48da5878a0c342eea2656e34f8807419040fabf4a60ddd"}}, &(0x7f0000000480)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "2338f4ade1055ac8c71cc19012fa0735c74f10433301511a8944f3645d32d6fdbb87ce95be7e0bfa448a2819c8f333e89f0d3e249e47a9eff5bf20dd7c155ff2a32e7ddc65f1673bb9a3162c22cd65f94bb70ff4920376c47ec7577bb624c7969e65c305df6a831651bba32bb5664dec67fb60b985e24c8873e476192d3c671e0d976f285841370a1f939599fa25952b24fac3f2d81d83b62d6433dc7bbb08b8fc7a0eae2d24163135bbf0e544376cae39e6101327504a4ef3d97e0449a7a5a42d160d671131030fca31"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000640)={0x20, 0x14, 0x49, "5f2c41f302658cf02efe4d7905988073ae7f213469153a33ab1bf799416ac36d6bed96a2b17690ede71c64651997f8d0002d57c2b34a329f3998b6536b5b771930662cdc25c7162713"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0xc4, {0xc2, "083d9f6b2b168e4a5d6a8080ef7f3eeb2e725c19fcfb51285078da0ed45b8dc02d82140e0edbcc0a65a0ff8fd6e044098904e3c4bd7b05bd385de04a1628cdc15f00ddbe017e67246e75b375892b62150187d6b5f8faaea61aee888ce16af7d3090e2c279e497e701f3ca1b55b36cae3208177de2c170ec3c20acf106c61a45151dc2ad0399a0a008c00a2a663c2eda92d87ef7998ea7b86bbefa773f4b4ef3fcb1ecd4503d809382914c40f44d7a5ec573bb1ea54175fa1f0a2ebe3a0a54e4a61b3"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0xe2}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x5}}) 2m3.012326418s ago: executing program 3 (id=2970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, 0x0, 0x10) 2m2.615304335s ago: executing program 3 (id=2971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 2m2.535099754s ago: executing program 3 (id=2972): r0 = socket$kcm(0xa, 0x3, 0x73) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xce, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f00000000c0)=0x7) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x20000794) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20643, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x29, 0x5}], 0x10}, 0x0) 2m2.306293707s ago: executing program 3 (id=2973): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', '{', 0x20, 0x400}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', '{', 0x20, 0x400}, 0x2a, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) 2m2.234138305s ago: executing program 3 (id=2974): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x6, 0x4) 2m1.96194246s ago: executing program 5 (id=2975): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x9, 0x8, 0xfffffffe}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x70080000, 0x1004, 0x0, 0xa, 0x410}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r6, @in={{0x2, 0x4e21, @broadcast}}, [0x4, 0xb891, 0xf, 0x7, 0x7, 0x7f, 0x2f0b, 0xd2, 0x3, 0x2, 0x7, 0x9, 0xf7, 0x10000, 0x80000000]}, &(0x7f00000005c0)=0x100) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4041800) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0) 2m1.469853243s ago: executing program 1 (id=2976): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x4000) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7f62edac751478af9c62f000000000000", 0x40, r3) socket$nl_generic(0x10, 0x3, 0x10) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x2011, 0x3, 0xb, 0x6, 0x1, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 2m1.305235105s ago: executing program 3 (id=2977): syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (fail_nth: 7) 2m0.899928289s ago: executing program 6 (id=2978): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040), &(0x7f0000000180)=0x4) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007000000000000190780a010102ac1414aa0c009078ff0500004521000000650001c53300097f000001000000008903cc443c18a1ffffffff000000060a010100000035dde0000001000066bdc44a3fefbabb0000e000000200000008acff000000000006e0000001000001000036ab44eb7dedec62322bb01edeb58dbcbe1d29d615b140e8c87b98e65b25cf9596acde6ccaa04929c650dc5b488748c5910581cdc307be2dcb45751126107e9fae01078fe2ae24114a91efcbcf60a4c4d58b9cf1285027a0d0d59f21d408"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000001040), 0x282d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) capget(&(0x7f00000001c0)={0x20080522, r1}, &(0x7f0000000340)={0x9, 0x5, 0xec0, 0x3, 0x8, 0x9}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @tid=r1}, &(0x7f0000000300)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000080)) mprotect(&(0x7f000045d000/0x1000)=nil, 0x1000, 0x2000004) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x1003ff}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x64000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}, {r5, r6+60000000}}, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) 2m0.045953172s ago: executing program 6 (id=2979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x2000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x0, 0x8000009}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x1d3, 0x4}) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f00000000c0)={"0deb2f09c46ea1a25056060b852a7e3fe040df8ea9244f8aff1c55876afd", 0xffffffff, 0x2, 0x0, 0x6, 0x99, 0x8, 0x389, 0x0, [0x9, 0xb, 0x8, 0x2, 0xacf, 0x6, 0x5, 0x8e4, 0x7, 0x3, 0x1, 0x7f, 0x2, 0x8, 0x4, 0xfffff000, 0x7fffffff, 0x8]}) syz_emit_ethernet(0x2e, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4}]}}, @echo}}}}, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x1033, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, 0xffffffffffffffff, 0xe, 0x4) write$binfmt_script(r9, &(0x7f0000001380)={'#! ', './file0'}, 0xb) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000000040)={0x1, 0x8001}) syz_kvm_add_vcpu$x86(r5, 0x0) 1m59.970118616s ago: executing program 7 (id=2980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x48, 0x76, 0x1, 0x60bd25, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1e, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffff31c}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], 0x0) socket(0x1e, 0x1, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc004080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x0, 0x2a0000) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3], 0x20) 1m58.72734172s ago: executing program 1 (id=2981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x10) 1m46.622436867s ago: executing program 35 (id=2975): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x9, 0x8, 0xfffffffe}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x70080000, 0x1004, 0x0, 0xa, 0x410}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r6, @in={{0x2, 0x4e21, @broadcast}}, [0x4, 0xb891, 0xf, 0x7, 0x7, 0x7f, 0x2f0b, 0xd2, 0x3, 0x2, 0x7, 0x9, 0xf7, 0x10000, 0x80000000]}, &(0x7f00000005c0)=0x100) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4041800) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0) 1m46.0828022s ago: executing program 36 (id=2977): syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (fail_nth: 7) 1m44.619120385s ago: executing program 37 (id=2979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x2000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x0, 0x8000009}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x1d3, 0x4}) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f00000000c0)={"0deb2f09c46ea1a25056060b852a7e3fe040df8ea9244f8aff1c55876afd", 0xffffffff, 0x2, 0x0, 0x6, 0x99, 0x8, 0x389, 0x0, [0x9, 0xb, 0x8, 0x2, 0xacf, 0x6, 0x5, 0x8e4, 0x7, 0x3, 0x1, 0x7f, 0x2, 0x8, 0x4, 0xfffff000, 0x7fffffff, 0x8]}) syz_emit_ethernet(0x2e, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4}]}}, @echo}}}}, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x1033, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, 0xffffffffffffffff, 0xe, 0x4) write$binfmt_script(r9, &(0x7f0000001380)={'#! ', './file0'}, 0xb) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000000040)={0x1, 0x8001}) syz_kvm_add_vcpu$x86(r5, 0x0) 1m44.585817204s ago: executing program 38 (id=2980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x48, 0x76, 0x1, 0x60bd25, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1e, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffff31c}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], 0x0) socket(0x1e, 0x1, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc004080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x0, 0x2a0000) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3], 0x20) 1m43.122567956s ago: executing program 39 (id=2981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x10) 33.271704692s ago: executing program 0 (id=3060): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0xffc0], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000700) 32.902474352s ago: executing program 0 (id=3064): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) acct(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206014b9800000000000000410000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) 32.774286884s ago: executing program 0 (id=3066): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xf}, {0x7, 0x489aa92e}, {0x5}, {0x103, 0x7}], 0x1, 0x2c, 0x2, 0x2, 0x3}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000000)={0x0, 'wlan0\x00', {0x2}, 0x90d}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000060a010400000000000000000200000024000480200001800a0001006d6105636800000010000280090001006c32747000000000140000001100010000000000000000000000000a"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x5, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)={'caif0\x00', 0x100}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x810, 0xffffffffffffffff, 0x9f221000) 30.332029761s ago: executing program 0 (id=3076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000500000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500fc01000000000000000000000000000100000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 30.205779815s ago: executing program 0 (id=3077): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') socket$unix(0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pipe(&(0x7f0000000100)) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 30.151476262s ago: executing program 0 (id=3079): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb6010203010902", @ANYRESHEX], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x81d}}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000005340)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/116, 0x74}, {&(0x7f0000000600)=""/96, 0x60}], 0x2, &(0x7f00000006c0)=""/202, 0xca}, 0x85}, {{&(0x7f00000007c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000940)=""/24, 0x18}, {&(0x7f0000000980)=""/4, 0x4}, {&(0x7f00000009c0)=""/30, 0x1e}, {&(0x7f0000000a00)=""/95, 0x5f}, {&(0x7f0000000a80)=""/59, 0x3b}, {&(0x7f0000000ac0)=""/106, 0x6a}, {&(0x7f0000000b40)=""/253, 0xfd}, {&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000d00)=""/22, 0x16}], 0xa}, 0x3ff}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/174, 0xae}], 0x1}}, {{&(0x7f0000000f00)=@isdn, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f80)=""/2, 0x2}, {&(0x7f0000000fc0)=""/144, 0x90}, {&(0x7f0000001080)=""/92, 0x5c}], 0x3, &(0x7f0000001140)=""/118, 0x76}, 0x8001}, {{&(0x7f00000011c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001240)=""/115, 0x73}], 0x1, &(0x7f00000022c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000032c0)=@phonet, 0x80, &(0x7f0000003680)=[{&(0x7f0000003340)=""/240, 0xf0}, {&(0x7f0000003440)=""/214, 0xd6}, {&(0x7f0000003540)=""/23, 0x17}, {&(0x7f0000003580)=""/194, 0xc2}], 0x4, &(0x7f00000036c0)=""/130, 0x82}, 0x3}, {{&(0x7f0000003780)=@isdn, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003800)=""/216, 0xd8}, {&(0x7f0000003900)=""/185, 0xb9}, {&(0x7f00000039c0)=""/143, 0x8f}, {&(0x7f0000003a80)=""/216, 0xd8}, {&(0x7f0000003b80)=""/99, 0x63}, {&(0x7f0000003c00)=""/137, 0x89}, {&(0x7f0000003cc0)=""/250, 0xfa}, {&(0x7f0000003dc0)=""/37, 0x25}], 0x8, &(0x7f0000003e80)=""/171, 0xab}, 0x2}, {{&(0x7f0000003f40)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003fc0), 0x0, &(0x7f0000004000)=""/53, 0x35}, 0x6}, {{&(0x7f0000004040)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000005240)=[{&(0x7f00000040c0)=""/253, 0xfd}, {&(0x7f00000041c0)=""/10, 0xa}, {&(0x7f0000004200)=""/59, 0x3b}, {&(0x7f0000004240)=""/4096, 0x1000}], 0x4, &(0x7f0000005280)=""/151, 0x97}, 0x4}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dvmrp0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x7, 0x1001b}, {0x1, 0x2}, {0x1, 0xffe0}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x636ac1ec6a13f8ff) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x8, 0x709926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0x4, 0xb}, {0x4, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) memfd_create(&(0x7f00000000c0)='rxrpc_s\x00', 0x4) 28.930009711s ago: executing program 9 (id=3087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x30c3f000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x4}}, 0x20) 28.250568093s ago: executing program 9 (id=3089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') socket$unix(0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 27.910603873s ago: executing program 9 (id=3090): eventfd(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 27.673735981s ago: executing program 9 (id=3092): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000000)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000080)="116b41319ef13386d7fd40ac5cf9181c") 24.952845477s ago: executing program 8 (id=3104): socket$kcm(0x2, 0x3, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket(0x2b, 0x5, 0x4002) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = getpid() r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, 0x0, 0x0) syz_pidfd_open(r9, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001500)={0x0, 0x1, 0x1, 0x1}) syz_open_dev$vim2m(&(0x7f0000000180), 0x800000000000000, 0x2) 24.854011214s ago: executing program 2 (id=3105): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x16, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, {0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffff, 0x1}}, 0x48) unshare(0x2c020400) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = socket(0x27, 0x800, 0x4) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000340)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00012dc9fdc700030000000200000020"], 0x1c}}, 0x4) sendmsg$nl_netfilter(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200600000c02010429bd7000ffdbdf25020000040c08cb000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setns(r4, 0x10000000) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r6 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0x100, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) socket$pppl2tp(0x18, 0x1, 0x1) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r10, r9, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 24.517109786s ago: executing program 2 (id=3106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0xf5ff, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 24.439645727s ago: executing program 2 (id=3107): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001401b008917"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b900000080ff000000070000000600040000ef00"], 0x24}}, 0x0) 24.305866916s ago: executing program 2 (id=3108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819800482a4975a", 0x1b}], 0x2, &(0x7f0000000380), 0x0, 0xa1c970c45c8efce8}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000880)=""/140, 0x8c}], 0x2}, 0x40000062) 24.298938799s ago: executing program 9 (id=3109): pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xca9a3b, 0x9000000}, &(0x7f0000000140), 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x34}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="e904a20000000180c20000000800450000240000e000001190780000000000000014"], 0x0) read$FUSE(r5, &(0x7f00000004c0)={0x2020}, 0x2020) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r6, 0x0, 0x0) 24.162884284s ago: executing program 2 (id=3110): munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) syz_usb_connect(0x5, 0x51, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="dd83"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x9, [{0xed, &(0x7f0000000380)=@string={0xed, 0x3, "71bd7ff0b906d17cf4de21bca9ddcf5645c8d25c10dc12ceb4d35befff49ab77149400d8845332f85b8b0220ca379aeac2b59421f2c0f4dda846419d1a2c5fe605b5ae7517da761ea4f152b2c9527fe342e073f947803490901978e835e3924c241c1db668acc5c86db08fff21c444e9e1cf8f6c919394275a7a842a22cc30d4cb8e949c3331217a3a87c33c4128a953b3b088d8e8f854f1971427eb1171bac95610559f028f3aaaa6803e3fa897000e3f84d61e8e41b0c361d58c5097013679d5c4c24d067befded3940b0c42f878b3b1a0a508688bb160c525ea8dbebfed2801f57614fce5e227286d32"}}, {0xea, &(0x7f0000000480)=@string={0xea, 0x3, "0c6a638ab56be561d07b5964da641f74fd77e523d24ec931a288432f50479aa9c84e88bb2224e0ccc5892eead3dc8dd6b993d7e67a690d8862bfa3a5ce7526faf85fcd0e1eba3b00ed179a9e39543ad7538c114ae6d0084ef9ca37070c1a9683a8565b336a5e4702a72fc1bcd4a729e7269ba62404707da462d5e94dc33b49812a3c33988a3aa4a5c9b7514859e4e558c88093ce531bb727f08d3d5704f149ee025f2bcf4d45074daaa4391fc257894d62bd3fbb2f3a420e5faad37847b42aa496a66ad637e7b19b60a9281c9d62dfe84494b0e9bcdd6bb7f46ec2dbca8823f3d1bbac5c59b67f7b"}}, {0x74, &(0x7f0000000580)=@string={0x74, 0x3, "9d236bae34d7211c9f03498f504b2a8aca3e2a4390a74c7ca930539143fdc089e0a7f6dab4496399826619dd2cfea41aaca44eecad1c36d0838e6e0d885bd3d4fdb24e1b886897d4be333f9123e54264833e4049f1b13e7d2aa59137a4e3a7f1ab20a15378708f916a1f94784b22f0fb1d27"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000640)=@lang_id={0x4}}, {0xc9, &(0x7f0000000680)=@string={0xc9, 0x3, "2207412846143a3cdb3ce1c8eb6b9aa4fe6eb0f9f7b600163f3177bdc4e9976eb35e162a15b7ecbc330030ccd71c7ff4cea80d5ca2868f47f8606d312a588363d74ea4b1d543aac463ab3efd560271423acb2dd5b7873c64cad227d892095cd9014ec1b45cd282fcaf1e4bf0a849e0e24bc0b7d400417c5004c6317999e4a7fa5def826657e08d7a31b90331987abbc6f1d61c370cc01a71919a5db63c5c9c4593953b992faadbb654d7d4cf83a5588aeee77ab0d2d8a44a46c8ef6a7d95a650257912affb22b1"}}, {0xc9, &(0x7f0000000780)=@string={0xc9, 0x3, "949dcc4cb164eec190d022861ff9657cb0a30151ab4035bf06ae246051ceff6a0326ee17a82d0bb60326fb77ccf00fd2b0fd551b91250d6253515338b3eee449f962e297aeea56cae368391a09a0c60fb3bf47277ab70287e0711f0e9fa1f11a63935fbd69abbde438337127bd2117cb6b1170bacb21341ea788569796f22ba539377219e780a4ffe43fa1f1c60adb00b92baa9b2a6167d3fabbf7b9082da811255644a65b2b8af44de70d27a179d59c38022dc53a13414aa2535d3478f4536fd09dd6f1e85f4e"}}, {0x86, &(0x7f0000000880)=@string={0x86, 0x3, "c7dc5e3c515ad1451353945cf33cfa5c7ff045302f8411c6e9293ca66f67918c51b580fcec21073872337c2a998fb510013b36b145471ec943f635bf0c54d9313bd0be3babb13aefb85f98c6e2ac6f25cfae4ab0a63b6e407cefd0dc0c825855b3e311fd2b8d06960d83e155199ca86290aa1d0e76caa9f9697ed3299823d5e2a7c07740"}}, {0x5, &(0x7f0000000940)=@string={0x5, 0x3, "c972be"}}]}) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xd231c4f95da94448) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) dup(0xffffffffffffffff) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000b, 0x30, r2, 0xc6000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 23.272644552s ago: executing program 9 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') socket$unix(0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 22.290033804s ago: executing program 8 (id=3112): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000040)={@multicast1}, &(0x7f0000000080)=0x8) fchdir(r3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x25) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000240)) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) 22.237920046s ago: executing program 8 (id=3113): r0 = timerfd_create(0x0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x4) read(r0, &(0x7f0000000080)=""/50, 0x32) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) close_range(r0, r1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030400000004034f04a7dab0b59b547bd68a701a81705a34d82e29da74fae99b478de9927ee39968e098a3a45bb3e27a6f8cafbb1b4a8e9e2591ee2d020ce18a3050b5a30b38a30dee2116f076b141"], 0x0, 0x0}, 0x0) 21.53071116s ago: executing program 8 (id=3115): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xdddd0000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x206000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000, 0x0, 0x700000000000000}) 21.512010665s ago: executing program 4 (id=3116): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x40080) r6 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x48, 0x40000}], 0x1, 0x6004c801) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400102, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000080)={r9, 0x2, 0x1, "fa"}, 0x9) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, &(0x7f00000073c0)={&(0x7f0000007200)=[0x0, &(0x7f0000001080)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x3e8aa0a7, 0x7bb9b537}, {0x1f9, 0xb}, {0xffffffffffffff09, 0x1ff}, {0xf41, 0xd87}, {0x8, 0xffffffffffffffff}, {0x1, 0xbcde}, {0x6e, 0x3}, {0x5, 0x24000}, {0x0, 0xfb1}, {0x78, 0x1}, {0x6, 0x7}, {0x9, 0x3}, {0x59, 0x9}, {0x5, 0x3}, {0x116, 0xd54}, {0xa7a, 0x6}, {0x2, 0x1000}, {0x9, 0x1ff}, {0x6}, {0x3, 0x10000}, {0x5, 0x3}, {0xffffffffffffffcc, 0x1}, {0xbdc2, 0x1}, {0x4, 0xcc6}, {0xaf, 0x4}, {0x4, 0x4}, {0x3, 0x7}, {0x5, 0x6}, {0x10001, 0x153}, {0x9, 0x5}, {0x5, 0x7}, {0x9, 0xcbaf}, {0x988, 0x8000}, {0xfffffffffffff001, 0x5}, {0xa0d1, 0x2}, {0xb, 0x5}, {0x9, 0x80000000}, {0x0, 0x9}, {0x4, 0x7}, {0x8000}, {0x6, 0xc577}, {0x6, 0x901}, {0x5, 0x6}, {0x9, 0x6}, {0x2, 0x40}, {0x4, 0x7}, {0x3, 0x34}, {0x9, 0x1}, {0x5}, {0xfffffffffffffffd, 0x4}, {0x9, 0x5}, {0x7, 0x9}, {0xceb, 0x9}, {0x8, 0xd}, {0x4f, 0xd}, {0x6, 0x2}, {0x51ea, 0x1}, {0x80000001, 0xc5}, {0x4a, 0x4d}, {0x1ff, 0x1}, {0x3, 0x5}, {0xffffffffffffff81, 0x2}, {0x7, 0x10}, {0x8}, {0xffffffffffff8001, 0x180}, {0x6, 0x7fffffff}, {0x2}, {0xd}, {0x6, 0x5}, {0x0, 0xc1}, {0x3, 0x401}, {0x5, 0x2}, {0x2, 0x5}, {0x8, 0x3}, {0x80, 0x80000001}, {0xb, 0x2}, {0x10001, 0x21b81f03}, {0x6, 0x6}, {0xe, 0x10}, {0xfffffffffffffffa, 0xf}, {0xf83}, {0x9, 0xfbf}, {0x6, 0x4a}, {0x5}, {0xc}, {0x9, 0xef6}, {0x2, 0x2}, {0x8dbd9ef, 0x5}, {0x8, 0x3}, {0x9, 0x81}, {0x6, 0x400}, {0x4, 0x3}, {0x8, 0x400}, {0x8000000000000000, 0x80000}, {0x2e1, 0x7}, {0x3, 0x100000000}, {0x4, 0x2}, {0x6, 0xd3}, {0xf14, 0xbadd}, {0x7, 0xffffffffffffff00}, {0x765, 0x1}, {0x1000, 0x39}, {0xad6, 0x100000000}, {0x0, 0x400}, {0xfffffffffffffffd, 0xffffffffffff8000}, {0x80000001}, {0x4, 0x4}, {0x6, 0xcec9}, {0x5, 0x8}, {0xc, 0xffffffff80000001}, {0x0, 0x2}, {0xe, 0x5}, {0x5, 0x8}, {0x9, 0x8000000000000001}, {0x4, 0xd}, {0x6, 0x4}, {0xffffffff, 0x764}, {0x0, 0x9}, {0x1, 0x73}, {0x100000001, 0xfffffffffffffffc}, {0x7}, {0x8000000000000000, 0x8000}, {0x5, 0x7}, {0x7, 0xe}, {0x94, 0x9d1c}, {0x0, 0x8}, {0xffffffffffff8000, 0x80000001}, {0x8, 0x200}, {0x0, 0x6}, {0xb, 0x94a8}, {0x8, 0x41}, {0x9, 0x10000}, {0xffffffff, 0xffffffffffffffff}, {0x5, 0x3}, {0x0, 0x6}, {0x4, 0xffffffffffffffff}, {0x1, 0x7af8}, {0xfff, 0xe56}, {0x4, 0x8000}, {0xfffffffffffffffc, 0x9}, {0x8000, 0x1}, {0x5, 0x1}, {0x3ff, 0x6}, {0xfffffffffffff001, 0x92a}, {0xa1}, {0x200, 0xfffffffffffffffc}, {0x4, 0x4}, {0x80000001, 0x5}, {0x62, 0x4}, {0x5, 0xbe9}, {0xff, 0x972}, {0x2, 0x1800000000}, {0x2, 0x4}, {0x8, 0x8}, {0x8}, {0x5, 0x9}, {0x0, 0x7f}, {0x8, 0x3}, {0x80, 0x4}, {0x7fff, 0x5}, {0x3, 0x68}, {0x7f, 0x8}, {0x4e, 0x6}, {0x9, 0x3}, {0x9, 0x6}, {0x8000000000000000, 0x2d}, {0x5, 0x6}, {0x1000, 0xfb}, {0x6}, {0x3, 0x6}, {0x8, 0x7}, {0x10001, 0x9ac}, {0xe3, 0x9}, {0x2, 0x6}, {0xf, 0x10}, {0x6, 0x7}, {0x7fffffffffffffff, 0x81}, {0x6, 0x1}, {0xff, 0x80}, {0x100000001, 0x9}, {0xffffffffffffffff}, {0x5, 0x200}, {0x401, 0x4}, {0x918d, 0xe}, {0x9, 0x5}, {0x2, 0x4}, {0x33, 0xffffffffffffffff}, {0x69a8, 0x2}, {0x9be, 0x42}, {0x5, 0x1}, {0xc, 0x81}, {0x900, 0x9ae}, {0x1, 0x3}, {0x1, 0x401}, {0x9, 0x101}, {0x5, 0x9}, {0x6, 0xfc3e}, {0x5, 0x11b}, {0x4, 0x6}, {0x100000000, 0x9}, {0x2, 0xde6}, {0xfffffffffffffe00, 0x1ff}, {0x3, 0x7ff}, {0x945, 0x80000001}, {0x4}, {0xff, 0x4e22}, {0x648, 0xfffffffffffffffa}, {0x1, 0x5}, {0x8, 0x56}, {0x3, 0x100000001}, {0x5, 0x81}, {0x4, 0x9}, {0xffffffff, 0x3}, {0xfffffffffffff263, 0x3}, {0x8, 0x2}, {0x7, 0xffffffffffffffc0}, {0x3000000000, 0x7}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x84}, {0x3, 0x1}, {0xa6e, 0x7169}, {0xcf, 0x2}, {0x5, 0x6}, {0x6, 0x3}, {0x7, 0x9}, {0x3, 0x88f}, {0x8, 0x7a}, {0x3, 0x112}, {0x3, 0x3}, {0x6, 0xd}, {0x388f8523, 0x7}, {0x7, 0xb15}, {0x7, 0xc0000000000000}, {0x6, 0x40ed}, {0x3, 0x40}, {0x1, 0x8001}, {0xc481, 0x5}, {0x7fff, 0x8000000000000001}, {0xed, 0x4}, {0x9, 0x80}, {0x1, 0x8}, {0x39c, 0x1}, {0x8, 0x6}, {0x67, 0x4}, {0x0, 0x400}, {0x2, 0x3}, {0x3, 0xfffffffffffffffd}, {0x28, 0x5}, {0x0, 0xfffffffffffffff7}, {0x0, 0x644d749d}, {0x5, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x80000001, 0x4}]}, &(0x7f00000020c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x6}, &(0x7f0000002200)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002240)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0xfffffff8}, &(0x7f0000002380)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f00000023c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000002400)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000002440)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0x5e4c, 0x6}, {0x3, 0x500000000}, {0xc1, 0x6}, {0x40, 0xa}, {0x4, 0x7fff}, {0x0, 0x734e}, {0x7, 0xfffffffffffffffa}, {0x4, 0x5}, {0x400, 0x3}, {0x101, 0x3ff}, {0x6, 0x10000}, {0x1, 0x7fff}, {0x2, 0x100000001}, {0x4, 0x5}, {0xb8f, 0x7}, {0x7}, {0x5, 0x5}, {0x3, 0x8b43}, {0x800, 0x5}, {0x1, 0x8000000000000000}, {0xfffffffffffffff9, 0x200000000}, {0xffffffffffffffc0, 0x200}, {0x0, 0x81}, {0x7fffffffffffffff, 0x9}, {0x7, 0xde}, {0x7, 0x8}, {0x9763, 0x5}, {0x0, 0x6}, {0x4, 0x2}, {0x7fff, 0x7}, {0x2, 0x10}, {0xafe3, 0x8}, {0x7, 0x9f8}, {0x7, 0x400}, {0x5, 0x100}, {0x1, 0xa}, {0x6, 0x9}, {0xfffffffffffffffd}, {0x118e, 0x3ff}, {0x8000000000000000, 0x81}, {0x8, 0x8}, {0xe, 0xa2d}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0x858a}, {0x9}, {0xd, 0x6}, {0xb, 0xc2}, {0xfb}, {0x5, 0x5}, {0x6, 0x8}, {0x0, 0x100000000}, {0x6, 0xfffffffffffffffd}, {0x7fffffffffffffff, 0x4}, {0x30988113, 0xff}, {0xb6, 0x6}, {0x71e, 0x2}, {0x1, 0x5}, {0x98, 0x4}, {0x6, 0xa}, {0x800}, {0x3ff, 0x8565}, {0x101, 0xbb86}, {0x401, 0x200}, {}, {0x8, 0x3}, {0x6, 0x3}, {0xb, 0x81}, {0xdd, 0x3}, {0x0, 0x6}, {0x4, 0x400}, {0xd2, 0x7}, {0x7, 0x1}, {0x7, 0x1000}, {0x6, 0x4}, {0x8, 0xfffffffffffffffc}, {0x8, 0x54}, {0x7, 0x1000}, {0x6, 0x1}, {0xff}, {0x4, 0x45d}, {0x1, 0x2}, {0x23, 0x7}, {0x128, 0x7}, {0x3000000000, 0x8}, {0x4, 0xfffffffffffffe00}, {0xffffffffffffffff, 0x5}, {0x5, 0x80}, {0x7, 0x7}, {0x6, 0xfff}, {0x5, 0x6}, {0x2, 0x7f}, {0x9, 0xaf5e}, {0xb, 0x8000000000000001}, {0xa5d}, {0x3, 0x100}, {0x6, 0x100000001}, {0x7f, 0x8}, {0x3, 0x7f}, {0xee7, 0x2}, {0x471, 0x2}, {0x5, 0xffffffffffffffff}, {0x74, 0x5}, {0x7ff, 0x1000}, {0x1, 0x4}, {0x3, 0xffffffffffffff8e}, {0x3c0000, 0x3}, {0x8, 0xf87}, {0x2, 0x1}, {0x5, 0x2}, {0x14a0, 0x7f}, {0x200, 0x7}, {0x9, 0x4}, {0x7f, 0x2}, {0xd, 0xd2}, {0xfff, 0x1000}, {0x6, 0x2d9}, {0x7, 0x7}, {0xf, 0x4d}, {0x9bd, 0x5}, {0xb1, 0x3}, {0x25e57d2e, 0x7960c9ee}, {0x9, 0x7}, {0x0, 0x8}, {0x8e2d, 0x8000000000000000}, {0x100, 0x5}, {0x5}, {0x3, 0xff}, {0x0, 0xf}, {0x1ff, 0x7ff}, {0x8, 0x80000001}, {0x9, 0x9}, {0x80000001}, {0x9, 0x7f}, {0x6178e306, 0x170e}, {0x3ff, 0x2}, {0x100000000, 0x9}, {0x3, 0xffffffffffffff47}, {0x5, 0x9}, {0x5, 0x7}, {0x7f, 0x81}, {0x2, 0x80000001}, {0xff, 0x5}, {0x7, 0x4}, {0x5cc9, 0x3}, {0xa7a, 0x8}, {0x3, 0x2}, {0x4, 0x7}, {0x400, 0x1}, {0x9, 0x2}, {0x3, 0x2e}, {0xd, 0x64da}, {0xda}, {0x2}, {0x6, 0xd}, {0x1, 0x300000000000000}, {0xb6f0, 0x1000}, {0x0, 0x1000}, {0xd}, {0x1, 0xf}, {0x1, 0x1}, {0x40, 0x9}, {0x80000001}, {0x141, 0x4}, {0x2, 0x3}, {0x7, 0x8e}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0xc62}, {0x5, 0x2}, {0x6, 0x5}, {0x8000000000000000, 0x7fff}, {0x5, 0xac9}, {0x0, 0xffffffffffff0001}, {0xffffffff, 0xce6}, {0x5, 0x1}, {0x7fffffffffffffff, 0x164}, {0x81, 0x1247}, {0x8, 0xd5}, {0x1, 0x45}, {0x0, 0x67c}, {0x9, 0xff}, {0x80000001, 0xe6d}, {0x0, 0x6}, {0xfffffffffffeffff, 0x7}, {0x1, 0xd}, {0x9, 0x7ff}, {0x30, 0xe08}, {0x3, 0x7}, {0x0, 0xe}, {0x3, 0xfffffffffffffff6}, {0x3, 0x4}, {0x25dead1a, 0x6ca9d7a5}, {0x40, 0x7}, {0xff, 0x2}, {0xfffffffffffffffe, 0x3}, {0x3, 0x4}, {0x4, 0x80000000}, {0x9, 0x8}, {0xbdc, 0x7}, {0x0, 0x9}, {0x8, 0x1}, {0x10, 0x2}, {0x6, 0xffffffffffffffcb}, {0xff, 0x1fb9}, {0x3, 0x3}, {0xa1, 0x7}, {0x8, 0x7}, {0x9, 0x10001}, {0x1, 0x8}, {0x9, 0xef}, {0x7, 0x8000000000000000}, {0x1, 0x5}, {0xfffffffffffffeff, 0x5}, {0x7ff, 0x75}, {0x4, 0x7fffffffffffffff}, {0x6, 0xc}, {0x6, 0xe698}, {0x5, 0xb57d}, {0xffff, 0x200}, {0xa, 0xb5}, {0x3ff, 0x401}, {0x1, 0xdf4}, {0x4, 0x4}, {0x4, 0x786b}, {0x5, 0x1c}, {0x1, 0xc19a}, {0xb, 0x66}, {0x3, 0x4}, {0x0, 0x2}, {0x8, 0x3}, {0xfffffffffffffff7, 0x9}, {0x7, 0x7}, {0xffffffff, 0x5}, {0x4}, {0x6, 0xb0}, {0x9, 0x74}, {}, {0x7, 0x80}, {0x3, 0x80000000}, {0x4, 0xbb}, {0x6, 0x5f}, {0x404, 0x40000000}, {0x40, 0xffffffffffff9c34}, {0x3, 0x10}, {0xb4fc, 0xfffffffffffffff7}, {0x5, 0x4ec}, {0x4, 0x1}, {0x8, 0x5}, {0x0, 0x2}, {0x1, 0x1}, {0x4, 0x100000001}, {0x4, 0x5}, {0x4, 0x796cf48e}]}, 0x0, &(0x7f00000034c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000003500)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000004000)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x7c5619a1, 0x3}, {0x7ff, 0x2}, {0x0, 0x8}, {0x37, 0x710}, {0x5, 0x101}, {0x0, 0xfffffffffffffffc}, {0x9, 0x1}, {0x0, 0x2}, {0x2, 0xad68}, {0x4, 0x1}, {0x0, 0xffffffff}, {0x3, 0x3}, {0x81, 0xfffffffffffffff7}, {0x7, 0xfffffffffffff982}, {0x9, 0x7}, {0x3, 0x3}, {0x2, 0x2}, {0x2b, 0x8}, {0x101, 0x5}, {0x7, 0xffffffff80000001}, {0x9, 0x3ff}, {0xffffffffffffffff, 0x3}, {0x7, 0x1}, {0x9, 0x100}, {0x2, 0x80000000}, {0x6, 0x80000001}, {0x9}, {0x3ff, 0xa}, {0x1a00000000000, 0x3}, {0x101, 0x8}, {0x9, 0x5}, {0x584b, 0x3}, {0x0, 0xaa}, {0x9, 0x7fff}, {0x0, 0x80000001}, {0x5, 0x9453}, {0xf3, 0x667}, {0xf, 0x4}, {0x0, 0x7}, {0x23, 0x6}, {0xffff, 0x1}, {0x7, 0x4c53}, {0x2}, {0x100, 0x6}, {0x1, 0x4}, {0x0, 0x1019}, {0x1, 0x9}, {0x2, 0xffffffffffffffbc}, {0x0, 0x10000}, {0x80, 0x3}, {0x7, 0x54f}, {0xffff, 0x9}, {0x7fff, 0x5}, {0x4, 0x2}, {0x3, 0x9}, {0xde, 0xfffffffffffffffd}, {0x6, 0x1}, {0x400}, {0x9, 0x7}, {0x68c, 0x7fffffffffffffff}, {0x9ca, 0xf76}, {0x7, 0x14000000000}, {0x8, 0xfffffffffffffffc}, {0x3, 0x7}, {0x3, 0x79}, {0x804, 0x8}, {0x6, 0x7}, {0xffffffffffffc7a5, 0x3}, {0x7, 0xfffffffffffffffc}, {0x6, 0x4}, {0xfffffffffffffffd, 0xb91e}, {0x7fffffffffffffff, 0x5}, {0x7, 0xff}, {0x401, 0xd}, {0x8}, {0x1, 0x4}, {0x7ff, 0x7}, {0x1000, 0x3}, {0x2, 0x1}, {0xea51, 0x6}, {0x5}, {0x5, 0x56}, {0xe, 0x5}, {0xfffffffffffffffb, 0xffffffffffff8000}, {0xf0, 0x7}, {0x0, 0xb0b}, {0x6, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x7}, {0x6, 0x8000000000000001}, {0x7fffffff, 0x9}, {0xfffffffffffffff7, 0xfffffffffffffff9}, {0x35c, 0x1}, {0x7, 0x8dfbeb9}, {0x4800, 0x4}, {0xe, 0x6d}, {0x8, 0x5}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x71}, {0x7, 0x7}, {0x1, 0x1}, {0x9, 0x9d34}, {0x8, 0x8000000000000000}, {0x10, 0x6}, {0x3, 0x4}, {0x5a56}, {0x8, 0xf}, {0x100, 0x1a}, {0x0, 0xfffffffffffffff7}, {0x968, 0x4}, {0xffff, 0x3}, {0xfffffffffffffffa, 0x7fffffff}, {0x1ff, 0x7}, {0x1, 0xfffffffffffffff8}, {0x4, 0xdde}, {0x100, 0x1}, {0x3, 0x8000000000000001}, {0x0, 0xc420}, {0xffffffffffffff8b, 0x9}, {0x2, 0x5}, {0x40, 0x3}, {0x7fff, 0xfffffffffffffffb}, {0x81, 0x7fffffffffffffff}, {0x2, 0x539}, {0xf, 0x17cb}, {0x237, 0x8}, {0x638, 0x2}, {0x4, 0x80000001}, {0x6, 0x4255}, {0x4, 0x3}, {0x3d}, {0x7a06, 0x10}, {0x101}, {0x7fff, 0xffe000000000}, {0x101, 0x8c}, {0x4, 0x49}, {0xf, 0x80}, {0xffffffffffffffc0, 0x4}, {0xa8a, 0x1}, {0xbb, 0x80}, {0x6, 0x7}, {0xdf, 0x289}, {0x1, 0xffff}, {0x6, 0xff}, {0x100000000, 0x936e}, {0x9, 0x5}, {0x80, 0x9}, {0x7, 0x4}, {0x2, 0x3ff}, {0x6, 0xb}, {0x5, 0x4}, {0x4, 0x8}, {0x3, 0x9}, {0x1827a8eb, 0x9}, {0x80000000, 0xfffffffffffffffd}, {0x200, 0x7ec4}, {0x5411, 0x77}, {0x40, 0x1}, {0xfffffffffffffffc, 0x6}, {0x101, 0xfffffffffffffb09}, {0x9d, 0x5}, {0x4, 0x48a}, {0x4, 0xfffffffffffffffb}, {0x2, 0x80000001}, {0x2, 0x1}, {0x9, 0x6723}, {0x100, 0x5}, {0x2, 0x8000}, {0x100000000, 0x800}, {0x8, 0xb}, {0x2, 0x6}, {}, {0x362b84bd, 0x80000000}, {0x81, 0xe47}, {0x7, 0x9}, {0xfffffffffffffffd, 0x9}, {0x8001, 0xffffffffffffffff}, {0x4}, {0x6, 0x4}, {0x2}, {0xfffffffffffffffe, 0x6}, {0x3, 0x401}, {0x5, 0xffffffffffff282a}, {0x9, 0xffffffff}, {0x9, 0x6}, {0x73, 0xfffffffffffffffe}, {0x2}, {0x1, 0x9}, {0xe, 0x9}, {0x8, 0x6}, {0x8, 0xffff}, {0x8, 0xefa4}, {0x7, 0x7}, {0xffff, 0xffffffff}, {0x5, 0x9}, {0x8000000000000001, 0xd}, {0xffffffffffffffff, 0x10000}, {0xa, 0x6}, {0x200000000, 0x5}, {0x2, 0x5}, {0x100000001, 0x5}, {0x6, 0x7f}, {0x4, 0x8c}, {0x6}, {0x80000000, 0x7}, {0x3, 0x8000000000000001}, {0xdd, 0xd}, {0x0, 0x4}, {0x4}, {0xf6, 0xd}, {0xc944, 0x8}, {0x7fff, 0x10001}, {0x4}, {0x2, 0x3}, {0x800, 0x8}, {0xf, 0x5}, {0x9, 0x7}, {0xffffffffffffffff, 0x4}, {0x8, 0x4}, {0x8000000000000000, 0x9}, {0x4, 0x28000}, {0x1, 0x2}, {0xfffffffffffffff7, 0x3f}, {0x8}, {0x8, 0x255}, {0xffffffff, 0x7fffffff}, {0x7, 0x4}, {0x3}, {0x10000, 0x8}, {0xa, 0x2}, {0xffffffffffffff00, 0x7}, {0xff, 0x401}, {0x3, 0x5}, {0x5, 0x27f}, {0x7f, 0x2bee}, {0x5, 0x4}, {0x4}, {0x7fff, 0x8}, {0xbea2}, {0x8, 0x3}, {0x7, 0xe0}, {0x8000000000000001, 0x9}, {0x800000000000, 0x6}, {0x100, 0xa}, {0x10, 0x163}, {0xe, 0x4}, {0x46e, 0x7fffffffffffffff}, {0x100000001, 0x800}, {0x100000001, 0x8}, {0x100, 0xe}, {0x4, 0x8}, {0x5, 0x8}, {0x6, 0x4}, {0x5, 0x3}, {0x8, 0x4}]}, &(0x7f0000005040)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000005080)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f00000050c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000005100)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000005140)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000005180)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000005200)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000001}, {}, 0x3}, &(0x7f0000005340)=@features={{0x4f32494e, 0x6, 0x10, 0x2}}, &(0x7f0000005380)=@journal={{0x4f32494e, 0x7, 0x10, 0xe0000000}}, &(0x7f00000053c0)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000005400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, 0x0, &(0x7f00000054c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000005500)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000005580)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x75203083, 0x61e2ffb}, {0xfffffffffffffffa, 0x4}, {0x99ca, 0x9}, {0xfb, 0x5}, {0x0, 0x4}, {0xe959, 0x7}, {0x10001, 0x6}, {0x9, 0x200}, {0x1, 0xffffffffffffd12c}, {0x6a, 0x80000000}, {0x1, 0x7fffffffffffffff}, {0x101, 0xfffffffffffffffa}, {0xc3, 0x80000000}, {0x40, 0x3}, {0x6, 0x3}, {0x8, 0x3}, {0x3, 0x7}, {0x5, 0x3ff}, {0x2, 0x3ff}, {0x6, 0x400}, {0x5, 0x2}, {0x7, 0xe9}, {0x9, 0x5}, {0x6, 0x6}, {0x200, 0x5}, {0x0, 0x3}, {0xfffffffffffffff7, 0x5}, {0x61f91b99, 0x7}, {0x18, 0x5}, {0xfbe, 0x3ff}, {0xa3e2}, {0xbc, 0x4}, {0x3}, {0x7fffffff, 0x55fff701}, {0x3, 0x8}, {0x0, 0x81}, {0x2, 0x3}, {0x2000000000000000, 0xfffffffffffffff7}, {0x5, 0x10001}, {0x9, 0x967}, {0x4, 0x2}, {0x88, 0xaf}, {0x2, 0x3}, {0x6, 0x5}, {0x40, 0xfff}, {0xffff, 0x2}, {0x81, 0x2}, {0x872, 0x2}, {0x7fff, 0x910}, {0x9, 0x4}, {0x7}, {0x4, 0x800}, {0xffffffffffff6606, 0x9}, {0x0, 0xde4}, {0x1, 0x2}, {0x1, 0x7}, {0xd, 0x1}, {0x8, 0x7}, {0x5, 0x3ff}, {0x9, 0x9}, {0x7, 0xffffffffffffffff}, {0x40, 0xfffffffffffff800}, {0x8, 0x3}, {0xfffffffffffff682}, {0x0, 0x8}, {0x1, 0x1}, {0x76e, 0x5}, {0xd5, 0x6}, {0x4, 0xcb00}, {0x6, 0x2}, {0x401, 0x8572}, {0x5c67, 0xfffffffffffffeff}, {0x2d4, 0x5}, {0x4, 0xd}, {0x1, 0x1ff8000}, {0xeb, 0x6}, {0x1b, 0x5}, {0x8, 0x100}, {0xd, 0x8}, {0x3, 0xe73}, {0x7, 0x2}, {0x4, 0x1}, {0x4d, 0x6}, {0x3ff, 0x5}, {0x80000001, 0x1}, {0x3, 0xe74c}, {0x81, 0x1}, {0x5, 0x5}, {0x9, 0x100000001}, {0xff, 0x8}, {0x3, 0x7f}, {0x2, 0x3}, {0xfffffffffffffff9, 0xffffffff00000001}, {0x6, 0x800}, {0x7, 0x1}, {0x6826, 0x7a}, {0xf, 0x3}, {0x62fe, 0x4011}, {0x4, 0x9}, {0x5, 0x3}, {0x5, 0xf7}, {0x7c, 0x7035}, {0xe75, 0x4}, {0x4, 0xf1d}, {0xffffffffffffffff, 0x6}, {0x5, 0x400}, {0x3, 0x7}, {0x3, 0xd}, {0x2, 0xc0}, {0x7, 0xee71}, {0x3, 0x9a79}, {0x7, 0x100}, {0x9, 0x5}, {0x8, 0x7}, {0x4, 0x2}, {0x7, 0x2}, {0x8, 0x7}, {0xffff, 0x3}, {0x4}, {0x2, 0xcc34}, {0x6, 0xfffffffffffff925}, {0x0, 0x101}, {0x2, 0x174}, {0x2f, 0xb0a}, {0x6d4, 0x4}, {0x2, 0x81}, {0x4, 0x9}, {0x7, 0x8f21}, {0x8}, {0x7fff, 0xe6f9}, {0x2, 0x9}, {0x3, 0x2}, {0x101}, {0xc, 0x2}, {0xfffffffffffffffc, 0xa}, {0x5, 0x3}, {0x8}, {0x6, 0x3}, {0x7, 0xff}, {0x2, 0x8000000000000000}, {0xffffffffffffffff, 0x3}, {0x8, 0x8000}, {0x35c, 0x9}, {0x1, 0xffffffff}, {0x81, 0x9}, {0x100000001, 0x6}, {0x8, 0xffffffff}, {0x800, 0x8}, {0x3, 0xc}, {0x3, 0x2}, {0x3, 0x7}, {0x8, 0x1d3}, {0xe74}, {0x1, 0x8}, {0x8, 0x26}, {0x4, 0xd18}, {0x44ad95c5, 0x5}, {0x282a, 0xf3}, {0x0, 0x1}, {0x4, 0x7}, {0xcf, 0xb1b}, {0x686, 0x10}, {0x4, 0x7a1}, {0x94, 0xff}, {0x6, 0x5}, {0x6, 0xffffffffffffff81}, {0x8, 0x2}, {0x7d0, 0xa}, {0x8, 0xffffffffffffffff}, {0x80, 0x7f}, {0x1, 0x2}, {0x7, 0xf}, {0x9, 0x8}, {0x1ff, 0x8}, {0x8bc, 0x9}, {0x7, 0x400}, {0x6, 0x3}, {0xffffffffffffd43d, 0x8001}, {0x3ff, 0x6}, {0x0, 0x3}, {0xe873, 0x4}, {0x40, 0x80000000}, {0x53, 0x4}, {0xffffffffffff625e, 0x6}, {0x3, 0x1}, {0x1, 0x5}, {0x8, 0x6c3f}, {0xffffffff, 0x9}, {0x7fffffffffffffff, 0x9}, {0x8, 0x2}, {0x7, 0x6}, {0x40, 0x6}, {0x0, 0x7ff}, {0x6, 0x9}, {0x5, 0x8}, {0x7fffffffffffffff, 0x5}, {0x1e9, 0x5}, {0x0, 0x7fff}, {0x9, 0x8000}, {0x1, 0xf}, {0x8, 0x81}, {0x9, 0xff}, {0x8, 0xe}, {0x3, 0x3}, {0x5, 0x3}, {0x100, 0x1}, {0x2, 0x6d5}, {0x9, 0xfffffffffffffffc}, {0x5, 0x169}, {0x0, 0x8000000000000001}, {0x7fffffff, 0x3}, {0x109, 0x9}, {0x4, 0x800000}, {0x5, 0x10}, {0x52, 0x8}, {0x1, 0x2}, {0x2, 0x5}, {0x80000000, 0x38}, {0xfffffffffffffff7, 0x3}, {0x9, 0x80000000}, {0x4, 0x8}, {0x7fff, 0x1ff}, {0x9, 0x1}, {0x1a5000000000000, 0x7f}, {0x5, 0xffffffffffff89bb}, {0x4, 0x6566}, {0xbe7, 0x7}, {0x6, 0xfff}, {0x2, 0x4}, {0x800, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x200, 0x3}, {0x0, 0x2}, {0x8000000000000001, 0x6}, {0x83, 0x8}, {0x0, 0xfffffffffe80f6ad}, {0x1}, {0x400, 0x6}, {0x80000001, 0xfffffffe00000}, {0x80}, {0x6, 0x7}, {0xfffffffffffffffe, 0xfae7}, {0x9, 0x3ff}, {0x1, 0xc226}, {0x7ac, 0x9}, {0x5c, 0xcd7f}, {0x101, 0x1}, {0x75, 0x46ee}, {0x6, 0xecaa}, {0x9}, {0x40, 0x9}, {0x1ff, 0x2}, {0x3, 0x8}]}, &(0x7f00000065c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000006600)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000006640)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000006680)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f00000066c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x1}, 0x0, &(0x7f0000006940)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000006980)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000006a00)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000006a40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f0000006a80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000006ac0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000001}, {}, 0x5}, &(0x7f0000006c00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x8}, &(0x7f0000006d40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000006d80)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000006e00)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000006e80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000006ec0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x100000001}, {}, 0x3}, &(0x7f0000007000)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x5}, &(0x7f0000007140)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, 0x0, &(0x7f00000071c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}], 0x32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB], 0x38}}, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)) lseek(r10, 0x4000000007, 0x1) r11 = eventfd(0x5ef) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r12, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r13, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24048884) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xdddd0000, 0x0, r11}) 21.341570985s ago: executing program 8 (id=3117): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount_setattr(r1, &(0x7f00000000c0)='./file0\x00', 0x8800, &(0x7f0000000140)={0x2, 0x100082, 0x1c0000, {r1}}, 0x20) socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@updpolicy={0xc0, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x8, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {0xffffffffffff95d0}, {0x0, 0x3, 0x0, 0x800000}, 0x4, 0x6e6bb8}, [@replay_thresh={0x8, 0xb, 0x8}]}, 0xc0}}, 0x8044) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000900)={0x0, 0x0, r10, r11, 0x0, 0x1, 0x9, 0x1000, {0x0, 0x5, 0x5, 0xb, 0x8000, 0x7, 0xffff, 0x1, 0x8001, 0xd24, 0x1000, 0x600000, 0x3, 0x2, "6f4f1b1330d057b322d1558fb7445443c528a9743641b12cd5ae7297dceeb0be"}}) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r12, 0x4068aea3, &(0x7f0000000280)={0xc7, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 21.006275681s ago: executing program 2 (id=3118): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000005}, 0x4044004) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYRESHEX=r1], 0x3c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="1000000000ad0000"], 0x20}}, 0x8080) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f00000001c0)=0xa4, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffffe3, &(0x7f00000001c0)={&(0x7f00000000c0)=@delchain={0x24, 0x11, 0x300, 0x1f, 0x4040000, {0x0, 0x0, 0x0, r1, {0x6, 0x17}}}, 0x24}}, 0x40000) 20.734660551s ago: executing program 8 (id=3119): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_setup(0x4, &(0x7f0000000000)) unshare(0x2c020400) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0x10000}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200002000", 0x1c) 16.033499475s ago: executing program 4 (id=3120): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819800482a4975a", 0x1b}], 0x2, &(0x7f0000000380), 0x0, 0xa1c970c45c8efce8}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000880)=""/140, 0x8c}], 0x2}, 0x40000062) 15.9120948s ago: executing program 4 (id=3121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x7c}}, 0x2400) 15.733839409s ago: executing program 4 (id=3122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x9}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = eventfd2(0x8, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0x0, 0x1000000, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000a40)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xffffffff}) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x9, 0x0, 0x2, r4, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x6, 0x2cc98c, 0x16d2d2}) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000080, 0x0, 0x8, r4}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010428bd7000ffdbdf25080000001400028010000200000001800800010000000100180001801400020073797a5f74756e"], 0x40}}, 0x10004000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x403, 0x70bd25, 0x1, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0xfffffffffffffed0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x3, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000640)={&(0x7f0000000100), 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1b4, r11, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_FEATURES_WANTED={0x138, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_MASK={0x87, 0x5, "dd32cae501438a4bab19f0b1e9289d52b248e11a4757e010e82cb1587379e1f2e5e5689e8bec7531dd070da841a24d002e6eb49b7e42ba76dbc83605805238cb3afe9c7b67cbe458f9b73b3f43c856038e30e60b5c7e6243a6cc0744addd0ad88d03d788cf5626b34396fdbadbbc6132ecf87c84fc657dafb5a7570f1ccc81cc3aff66"}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "5786aece4e3a02e2ed578724534182fa6cecc86d9615fcfc0f81f1e6e1b39f6fd2ecf3bc81609d486afabbd07a258d6471f004dc68dfcb651d39419611a7ce45140187a7715f4f93e22a6c0ae4f13038c697fefaa8f4743f5b8838dbc042924f768e296e25c0b8b06dfd2f526b11e7e48330ccd3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x40004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r16 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) (async) ioctl$KVM_RUN(r16, 0xae80, 0x0) 15.592008985s ago: executing program 4 (id=3123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000e00d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) 15.454428834s ago: executing program 4 (id=3124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3b4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x388, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x374, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x3b4}}, 0x20000000) 15.025288872s ago: executing program 40 (id=3079): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb6010203010902", @ANYRESHEX], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x81d}}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000005340)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/116, 0x74}, {&(0x7f0000000600)=""/96, 0x60}], 0x2, &(0x7f00000006c0)=""/202, 0xca}, 0x85}, {{&(0x7f00000007c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000940)=""/24, 0x18}, {&(0x7f0000000980)=""/4, 0x4}, {&(0x7f00000009c0)=""/30, 0x1e}, {&(0x7f0000000a00)=""/95, 0x5f}, {&(0x7f0000000a80)=""/59, 0x3b}, {&(0x7f0000000ac0)=""/106, 0x6a}, {&(0x7f0000000b40)=""/253, 0xfd}, {&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000d00)=""/22, 0x16}], 0xa}, 0x3ff}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/174, 0xae}], 0x1}}, {{&(0x7f0000000f00)=@isdn, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f80)=""/2, 0x2}, {&(0x7f0000000fc0)=""/144, 0x90}, {&(0x7f0000001080)=""/92, 0x5c}], 0x3, &(0x7f0000001140)=""/118, 0x76}, 0x8001}, {{&(0x7f00000011c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001240)=""/115, 0x73}], 0x1, &(0x7f00000022c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000032c0)=@phonet, 0x80, &(0x7f0000003680)=[{&(0x7f0000003340)=""/240, 0xf0}, {&(0x7f0000003440)=""/214, 0xd6}, {&(0x7f0000003540)=""/23, 0x17}, {&(0x7f0000003580)=""/194, 0xc2}], 0x4, &(0x7f00000036c0)=""/130, 0x82}, 0x3}, {{&(0x7f0000003780)=@isdn, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003800)=""/216, 0xd8}, {&(0x7f0000003900)=""/185, 0xb9}, {&(0x7f00000039c0)=""/143, 0x8f}, {&(0x7f0000003a80)=""/216, 0xd8}, {&(0x7f0000003b80)=""/99, 0x63}, {&(0x7f0000003c00)=""/137, 0x89}, {&(0x7f0000003cc0)=""/250, 0xfa}, {&(0x7f0000003dc0)=""/37, 0x25}], 0x8, &(0x7f0000003e80)=""/171, 0xab}, 0x2}, {{&(0x7f0000003f40)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003fc0), 0x0, &(0x7f0000004000)=""/53, 0x35}, 0x6}, {{&(0x7f0000004040)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000005240)=[{&(0x7f00000040c0)=""/253, 0xfd}, {&(0x7f00000041c0)=""/10, 0xa}, {&(0x7f0000004200)=""/59, 0x3b}, {&(0x7f0000004240)=""/4096, 0x1000}], 0x4, &(0x7f0000005280)=""/151, 0x97}, 0x4}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dvmrp0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x7, 0x1001b}, {0x1, 0x2}, {0x1, 0xffe0}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x636ac1ec6a13f8ff) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x8, 0x709926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0x4, 0xb}, {0x4, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) memfd_create(&(0x7f00000000c0)='rxrpc_s\x00', 0x4) 7.513767828s ago: executing program 41 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') socket$unix(0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.01122588s ago: executing program 42 (id=3118): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000005}, 0x4044004) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYRESHEX=r1], 0x3c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="1000000000ad0000"], 0x20}}, 0x8080) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f00000001c0)=0xa4, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffffe3, &(0x7f00000001c0)={&(0x7f00000000c0)=@delchain={0x24, 0x11, 0x300, 0x1f, 0x4040000, {0x0, 0x0, 0x0, r1, {0x6, 0x17}}}, 0x24}}, 0x40000) 5.492095208s ago: executing program 43 (id=3119): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_setup(0x4, &(0x7f0000000000)) unshare(0x2c020400) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0x10000}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200002000", 0x1c) 0s ago: executing program 44 (id=3124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3b4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x388, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x374, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x3b4}}, 0x20000000) kernel console output (not intermixed with test programs): control_msg 03, error -110 [ 716.906158][ T5841] gspca_cpia1: usb_control_msg 01, error -32 [ 716.930642][ T5841] gspca_cpia1: usb_control_msg 01, error -32 [ 716.961836][ T5841] gspca_cpia1: usb_control_msg 01, error -32 [ 716.981447][ T5841] gspca_cpia1: usb_control_msg 01, error -32 [ 716.998694][ T5841] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 717.193146][T15090] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 717.659341][ T5895] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 717.763268][ T5895] usb 6-1: USB disconnect, device number 46 [ 718.297680][T15105] usb usb8: usbfs: process 15105 (syz.3.2802) did not claim interface 0 before use [ 718.326377][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2807'. [ 718.467839][T15109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 718.547646][T15111] veth7: entered promiscuous mode [ 718.568549][T15111] veth7: entered allmulticast mode [ 718.596912][T15111] bond3: (slave veth7): Enslaving as an active interface with an up link [ 718.644575][T15115] netlink: 'syz.7.2809': attribute type 8 has an invalid length. [ 718.672779][T15115] sch_fq: defrate 0 ignored. [ 719.680279][T15129] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 719.812448][T15133] FAULT_INJECTION: forcing a failure. [ 719.812448][T15133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.869199][T15133] CPU: 0 UID: 0 PID: 15133 Comm: syz.1.2814 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.869227][T15133] Tainted: [L]=SOFTLOCKUP [ 719.869234][T15133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 719.869245][T15133] Call Trace: [ 719.869251][T15133] [ 719.869259][T15133] dump_stack_lvl+0xe8/0x150 [ 719.869287][T15133] should_fail_ex+0x412/0x560 [ 719.869317][T15133] _copy_to_user+0x31/0xb0 [ 719.869338][T15133] simple_read_from_buffer+0xe1/0x170 [ 719.869366][T15133] proc_fail_nth_read+0x1bb/0x230 [ 719.869393][T15133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.869419][T15133] ? rw_verify_area+0x2a6/0x4d0 [ 719.869436][T15133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.869461][T15133] vfs_read+0x20c/0xa70 [ 719.869477][T15133] ? fdget_pos+0x246/0x320 [ 719.869495][T15133] ? __pfx___mutex_lock+0x10/0x10 [ 719.869519][T15133] ? __pfx_vfs_read+0x10/0x10 [ 719.869538][T15133] ? __fget_files+0x2a/0x420 [ 719.869555][T15133] ? __fget_files+0x3a0/0x420 [ 719.869568][T15133] ? __fget_files+0x2a/0x420 [ 719.869589][T15133] ksys_read+0x150/0x270 [ 719.869608][T15133] ? __pfx_ksys_read+0x10/0x10 [ 719.869633][T15133] do_syscall_64+0x14d/0xf80 [ 719.869655][T15133] ? trace_irq_disable+0x3b/0x150 [ 719.869669][T15133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.869685][T15133] ? clear_bhb_loop+0x40/0x90 [ 719.869705][T15133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.869721][T15133] RIP: 0033:0x7f241815d04e [ 719.869736][T15133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 719.869755][T15133] RSP: 002b:00007f2419060fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 719.869773][T15133] RAX: ffffffffffffffda RBX: 00007f24190616c0 RCX: 00007f241815d04e [ 719.869785][T15133] RDX: 000000000000000f RSI: 00007f24190610a0 RDI: 0000000000000003 [ 719.869795][T15133] RBP: 00007f2419061090 R08: 0000000000000000 R09: 0000000000000000 [ 719.869805][T15133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.869815][T15133] R13: 00007f2418416038 R14: 00007f2418415fa0 R15: 00007f241853fa48 [ 719.869839][T15133] [ 720.560029][ T5909] usb 7-1: USB disconnect, device number 9 [ 721.267589][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2817'. [ 721.428253][T15147] dummy0: entered promiscuous mode [ 721.456188][T15147] macvtap1: entered promiscuous mode [ 721.502928][T15147] macvtap1: entered allmulticast mode [ 721.533341][T15147] dummy0: entered allmulticast mode [ 723.572420][T15178] overlay: Unknown parameter 'd' [ 723.675184][T15181] vlan0: entered promiscuous mode [ 723.692731][T15181] dummy0: entered promiscuous mode [ 724.078625][T10666] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 724.095408][T10666] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 724.654564][ T5917] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 724.833412][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 724.937028][T15191] program syz.7.2830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.759364][T15203] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2833'. [ 725.783168][T15203] ..0·: renamed from hsr0 [ 726.411470][T15203] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 726.425599][T15203] ..0·: Slave B (c0·) is not up; please bring it up to get a fully working HSR network [ 726.477796][T15203] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 727.160579][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 727.202560][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 727.234648][ T5917] usb 4-1: can't read configurations, error -71 [ 727.674861][ T5917] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 727.866565][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 727.885430][ T5917] usb 4-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 727.908006][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 727.934366][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 26419, setting to 1024 [ 727.962024][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 727.998485][ T5917] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 728.014441][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.031752][ T5917] usb 4-1: Product: syz [ 728.039914][ T5917] usb 4-1: Manufacturer: syz [ 728.053663][ T5917] usb 4-1: SerialNumber: syz [ 728.067225][ T5917] usb 4-1: config 0 descriptor?? [ 728.079234][T15229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 728.086903][T15229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 728.103498][ C1] usb 4-1: NFC: Urb failure (status -71) [ 728.122308][ C1] usb 4-1: NFC: Urb failure (status -71) [ 728.139360][ T5917] usb 4-1: NFC: Unable to get FW version [ 728.167023][ T5917] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -71 [ 728.313965][T10666] usb 4-1: USB disconnect, device number 102 [ 729.283054][T10666] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 729.448640][T10666] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 729.458145][T10666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.468485][T10666] usb 4-1: Product: syz [ 729.472995][T10666] usb 4-1: Manufacturer: syz [ 729.477637][T10666] usb 4-1: SerialNumber: syz [ 729.897431][T10666] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 729.920171][T10666] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 731.977174][T15224] tipc: Started in network mode [ 731.988628][T15224] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 732.033500][T15224] tipc: Enabling of bearer rejected, failed to enable media [ 732.152173][T10666] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 732.195072][T10666] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 732.270361][T10666] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 732.303164][ T9196] bridge_slave_1: left allmulticast mode [ 732.309125][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.344735][T10666] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 732.396478][T10666] usb 4-1: USB disconnect, device number 103 [ 732.417398][ T9196] bridge_slave_0: left allmulticast mode [ 732.445351][ T9196] bridge_slave_0: left promiscuous mode [ 732.478551][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.643532][ T5909] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 732.797628][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 732.810786][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.842093][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.865033][ T5909] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 732.882010][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.893881][ T5909] usb 7-1: config 0 descriptor?? [ 732.902444][ T5909] hub 7-1:0.0: USB hub found [ 732.973371][ T9196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.984899][ T9196] bond_slave_0: left allmulticast mode [ 732.996250][ T9196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.012076][ T9196] bond_slave_1: left allmulticast mode [ 733.019100][ T9196] bond0 (unregistering): Released all slaves [ 733.043695][ T9196] bond1 (unregistering): Released all slaves [ 733.077507][ T9196] bond2 (unregistering): (slave veth5): Releasing backup interface [ 733.089522][ T9196] bond2 (unregistering): Released all slaves [ 733.104979][ T5909] hub 7-1:0.0: 1 port detected [ 733.132384][ T9196] bond3 (unregistering): (slave veth7): Releasing backup interface [ 733.144555][ T9196] veth7: left promiscuous mode [ 733.158917][ T9196] bond3 (unregistering): Released all slaves [ 733.201840][T15255] tipc: Started in network mode [ 733.222358][T15255] tipc: Node identity 12c3a1ba158e, cluster identity 4711 [ 733.232459][T15255] tipc: Enabled bearer , priority 0 [ 733.450164][T15257] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.457987][T15257] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.815454][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.878452][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.907283][T15244] Bluetooth: hci6: command 0x0406 tx timeout [ 733.922296][T15244] Bluetooth: hci1: command 0x0406 tx timeout [ 734.145572][T15257] dummy0: left allmulticast mode [ 734.151275][ T5909] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 734.179225][ T5909] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 734.241629][ T5909] usbhid 7-1:0.0: can't add hid device: -32 [ 734.274165][ T5909] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 734.302345][ T9196] tipc: Left network mode [ 734.365915][T15255] tipc: Disabling bearer [ 734.449661][ T1325] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.519684][ T1325] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.577142][ T1325] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.740562][ T1325] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.756062][ T5895] usb 7-1: USB disconnect, device number 10 [ 734.824140][T15295] tipc: Node number set to 122528186 [ 735.297431][ T9196] hsr_slave_0: left promiscuous mode [ 735.309567][ T9196] hsr_slave_1: left promiscuous mode [ 735.330968][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.374039][T15323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.537605][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.828265][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2866'. [ 735.917333][T15323] overlayfs: missing 'lowerdir' [ 736.275282][ T9196] team0 (unregistering): Port device team_slave_1 removed [ 736.299830][ T9196] team0 (unregistering): Port device team_slave_0 removed [ 736.961534][ T9196] IPVS: stop unused estimator thread 0... [ 737.054212][ T5895] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 737.055085][T15351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2871'. [ 737.090695][T15351] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 737.092526][T15351] bond1 (unregistering): Released all slaves [ 737.202802][ T5895] usb 7-1: Using ep0 maxpacket: 8 [ 737.209465][ T5895] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 737.209502][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.209526][ T5895] usb 7-1: Product: syz [ 737.209544][ T5895] usb 7-1: Manufacturer: syz [ 737.209563][ T5895] usb 7-1: SerialNumber: syz [ 737.218710][ T5895] usb 7-1: config 0 descriptor?? [ 737.426850][ T5895] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 738.214508][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 738.214529][ T29] audit: type=1326 audit(1776062891.577:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15365 comm="syz.3.2875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f12baf96597 code=0x0 [ 739.073080][ T5895] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 739.123270][ T5895] usb 7-1: USB disconnect, device number 11 [ 739.761038][T15374] FAULT_INJECTION: forcing a failure. [ 739.761038][T15374] name failslab, interval 1, probability 0, space 0, times 0 [ 739.827904][T15374] CPU: 0 UID: 0 PID: 15374 Comm: syz.6.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.827932][T15374] Tainted: [L]=SOFTLOCKUP [ 739.827938][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 739.827948][T15374] Call Trace: [ 739.827955][T15374] [ 739.827963][T15374] dump_stack_lvl+0xe8/0x150 [ 739.827991][T15374] should_fail_ex+0x412/0x560 [ 739.828020][T15374] should_failslab+0xa8/0x100 [ 739.828042][T15374] ? alloc_pid+0x1a6/0x12f0 [ 739.828066][T15374] kmem_cache_alloc_noprof+0x87/0x650 [ 739.828083][T15374] ? copy_process+0x16df/0x3cd0 [ 739.828103][T15374] ? create_io_thread+0xfc/0x170 [ 739.828133][T15374] alloc_pid+0x1a6/0x12f0 [ 739.828162][T15374] ? __pfx_alloc_pid+0x10/0x10 [ 739.828196][T15374] ? fpu_clone+0x347/0xbc0 [ 739.828222][T15374] ? __asan_memcpy+0x40/0x70 [ 739.828265][T15374] ? copy_thread+0x74b/0x9a0 [ 739.828304][T15374] copy_process+0x1b3a/0x3cd0 [ 739.828349][T15374] ? copy_process+0x921/0x3cd0 [ 739.828385][T15374] ? __pfx_copy_process+0x10/0x10 [ 739.828411][T15374] ? __pfx_io_wq_worker+0x10/0x10 [ 739.828432][T15374] ? __pfx_io_wq_worker+0x10/0x10 [ 739.828453][T15374] create_io_thread+0xfc/0x170 [ 739.828478][T15374] ? __pfx_create_io_thread+0x10/0x10 [ 739.828507][T15374] ? __pfx_io_wq_worker+0x10/0x10 [ 739.828531][T15374] ? __raw_spin_lock_init+0x45/0x100 [ 739.828551][T15374] ? __init_swait_queue_head+0xa9/0x150 [ 739.828568][T15374] ? create_io_worker+0x27/0x5c0 [ 739.828589][T15374] create_io_worker+0x181/0x5c0 [ 739.828613][T15374] io_wq_enqueue+0x675/0x8a0 [ 739.828636][T15374] ? io_wq_enqueue+0x332/0x8a0 [ 739.828654][T15374] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 739.828675][T15374] ? __pfx_io_req_task_submit+0x10/0x10 [ 739.828715][T15374] io_handle_tw_list+0x3db/0x540 [ 739.828750][T15374] tctx_task_work_run+0x55/0x330 [ 739.828789][T15374] tctx_task_work+0x3f/0x90 [ 739.828811][T15374] task_work_run+0x1d9/0x270 [ 739.828831][T15374] ? __pfx_task_work_run+0x10/0x10 [ 739.828849][T15374] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 739.828879][T15374] get_signal+0x11eb/0x1330 [ 739.828914][T15374] arch_do_signal_or_restart+0xbc/0x830 [ 739.828934][T15374] ? __fget_files+0x3a0/0x420 [ 739.828950][T15374] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 739.828974][T15374] ? ksys_write+0x242/0x270 [ 739.828999][T15374] exit_to_user_mode_loop+0x86/0x480 [ 739.829018][T15374] ? rcu_is_watching+0x15/0xb0 [ 739.829044][T15374] do_syscall_64+0x32d/0xf80 [ 739.829066][T15374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.829082][T15374] ? clear_bhb_loop+0x40/0x90 [ 739.829102][T15374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.829120][T15374] RIP: 0033:0x7fe9e7f9c819 [ 739.829135][T15374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.829148][T15374] RSP: 002b:00007fe9e8d82028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 739.829166][T15374] RAX: 0000000000000004 RBX: 00007fe9e8215fa0 RCX: 00007fe9e7f9c819 [ 739.829177][T15374] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 739.829187][T15374] RBP: 00007fe9e8d82090 R08: 0000000000000000 R09: 0000000000000000 [ 739.829196][T15374] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 739.829206][T15374] R13: 00007fe9e8216038 R14: 00007fe9e8215fa0 R15: 00007fe9e833fa48 [ 739.829230][T15374] [ 740.913177][ T29] audit: type=1326 audit(1776062894.277:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.7.2886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5ff4396597 code=0x0 [ 741.233010][T15287] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 741.241649][T15416] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2890'. [ 741.426384][T15287] usb 4-1: Using ep0 maxpacket: 16 [ 741.444567][T15287] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 741.464559][T15287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.484674][T15287] usb 4-1: Product: syz [ 741.489356][T15287] usb 4-1: Manufacturer: syz [ 741.497013][T15287] usb 4-1: SerialNumber: syz [ 741.523264][T15287] usb 4-1: config 0 descriptor?? [ 741.778318][T15287] usb-storage 4-1:0.0: USB Mass Storage device detected [ 741.825838][T15287] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 741.863108][T15287] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 741.863108][T15287] Please send a copy of this message to and [ 742.163326][T15287] usb 4-1: USB disconnect, device number 104 [ 742.836244][T15455] kAFS: unable to lookup cell 'ÿ' [ 743.032747][T15287] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 743.110246][T15458] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 743.288701][T15445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.321120][T15445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.559064][T15445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.603273][T15445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.293693][T15287] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 744.301355][T15287] usb 6-1: can't read configurations, error -71 [ 744.900061][T15481] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 744.944410][T15482] netlink: 'syz.5.2910': attribute type 4 has an invalid length. [ 745.269862][T15479] fuse: Unknown parameter 'r™Õa-00000û0000' [ 745.908619][T15494] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 747.185753][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.192312][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.978972][T15516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2920'. [ 748.173018][T15525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2923'. [ 748.443142][T15532] netlink: 'syz.1.2924': attribute type 2 has an invalid length. [ 748.595789][T15532] bond0: (slave bond_slave_1): Releasing backup interface [ 749.120223][T15293] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 749.292817][T15293] usb 4-1: Using ep0 maxpacket: 16 [ 749.313133][T15293] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 749.326064][T15543] kvm: pic: single mode not supported [ 749.326242][T15543] kvm: pic: level sensitive irq not supported [ 749.332053][T15543] kvm: pic: single mode not supported [ 749.338310][T15543] kvm: pic: level sensitive irq not supported [ 749.380938][T15293] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 749.443332][T15293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.465299][T15293] usb 4-1: Product: syz [ 749.485370][T15293] usb 4-1: Manufacturer: syz [ 749.498103][T15293] usb 4-1: SerialNumber: syz [ 749.536174][T15293] r8152-cfgselector 4-1: Unknown version 0x0000 [ 749.552768][T15293] r8152-cfgselector 4-1: config 0 descriptor?? [ 749.652766][T15295] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 749.800043][T15293] r8152-cfgselector 4-1: Unknown version 0x0000 [ 749.824071][T15293] r8152-cfgselector 4-1: bad CDC descriptors [ 749.842758][T15295] usb 6-1: Using ep0 maxpacket: 32 [ 749.864357][T15295] usb 6-1: unable to get BOS descriptor or descriptor too short [ 749.902081][T15295] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 749.930151][T15295] usb 6-1: config 7 has an invalid descriptor of length 55, skipping remainder of the config [ 749.955926][T15295] usb 6-1: config 7 has no interface number 0 [ 749.971268][T15295] usb 6-1: config 7 interface 187 altsetting 6 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 750.001706][T15295] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x87 has invalid maxpacket 65482, setting to 1024 [ 750.032606][T15295] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x87 has invalid maxpacket 1024 [ 750.083600][T15295] usb 6-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 750.125434][T15295] usb 6-1: config 7 interface 187 has no altsetting 0 [ 750.144484][T15287] r8152-cfgselector 4-1: USB disconnect, device number 105 [ 750.161060][T15295] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 750.182738][T15295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.205289][T15295] usb 6-1: Product: syz [ 750.218581][T15295] usb 6-1: Manufacturer: syz [ 750.230127][T15295] usb 6-1: SerialNumber: syz [ 750.260817][T15543] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 750.500023][T15295] usb 6-1: Limiting number of CPorts to U8_MAX [ 750.526524][T15295] usb 6-1: Not enough endpoints found in device, aborting! [ 750.875028][T15560] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 751.286731][T15568] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 751.376841][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2935'. [ 751.997585][T15576] program syz.6.2938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 752.268622][T15579] Cannot find del_set index 286 as target [ 752.696367][T15287] usb 6-1: USB disconnect, device number 49 [ 752.987568][T15588] sctp: [Deprecated]: syz.5.2943 (pid 15588) Use of int in max_burst socket option. [ 752.987568][T15588] Use struct sctp_assoc_value instead [ 753.924205][T15293] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 754.102782][T15293] usb 7-1: Using ep0 maxpacket: 16 [ 754.121648][T15617] FAULT_INJECTION: forcing a failure. [ 754.121648][T15617] name failslab, interval 1, probability 0, space 0, times 0 [ 754.142811][T15617] CPU: 0 UID: 0 PID: 15617 Comm: syz.7.2955 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.142857][T15617] Tainted: [L]=SOFTLOCKUP [ 754.142867][T15617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 754.142880][T15617] Call Trace: [ 754.142889][T15617] [ 754.142899][T15617] dump_stack_lvl+0xe8/0x150 [ 754.142941][T15617] should_fail_ex+0x412/0x560 [ 754.143001][T15617] should_failslab+0xa8/0x100 [ 754.143033][T15617] __kmalloc_cache_noprof+0x88/0x660 [ 754.143058][T15617] ? sctp_v6_cmp_addr+0x15/0xd0 [ 754.143087][T15617] ? sctp_add_bind_addr+0x8c/0x370 [ 754.143108][T15617] sctp_add_bind_addr+0x8c/0x370 [ 754.143145][T15617] sctp_copy_local_addr_list+0x314/0x4f0 [ 754.143174][T15617] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 754.143198][T15617] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 754.143229][T15617] ? sctp_v6_is_any+0x64/0x80 [ 754.143249][T15617] ? sctp_copy_one_addr+0x93/0x360 [ 754.143268][T15617] sctp_bind_addr_copy+0xb3/0x3c0 [ 754.143301][T15617] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 754.143339][T15617] sctp_connect_new_asoc+0x2ff/0x6b0 [ 754.143370][T15617] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 754.143405][T15617] ? __local_bh_enable_ip+0xd0/0x130 [ 754.143425][T15617] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 754.143462][T15617] ? security_sctp_bind_connect+0x7e/0x2c0 [ 754.143495][T15617] sctp_sendmsg+0x1528/0x2c10 [ 754.143543][T15617] ? __pfx_sctp_sendmsg+0x10/0x10 [ 754.143566][T15617] ? aa_sk_perm+0x6d5/0x900 [ 754.143610][T15617] ? __pfx_aa_sk_perm+0x10/0x10 [ 754.143647][T15617] ? sock_rps_record_flow+0x19/0x400 [ 754.143679][T15617] ? inet_sendmsg+0x2f4/0x370 [ 754.143712][T15617] ____sys_sendmsg+0x80a/0x9f0 [ 754.143741][T15617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.143800][T15617] ? import_iovec+0x73/0xa0 [ 754.143835][T15617] ___sys_sendmsg+0x2a5/0x360 [ 754.143870][T15617] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.143934][T15617] ? __fget_files+0x2a/0x420 [ 754.143955][T15617] ? __fget_files+0x3a0/0x420 [ 754.143985][T15617] __x64_sys_sendmsg+0x1bd/0x2a0 [ 754.144020][T15617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 754.144048][T15617] ? __pfx_ksys_write+0x10/0x10 [ 754.144099][T15617] do_syscall_64+0x14d/0xf80 [ 754.144128][T15617] ? trace_irq_disable+0x3b/0x150 [ 754.144147][T15617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.144174][T15617] ? clear_bhb_loop+0x40/0x90 [ 754.144195][T15617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.144210][T15617] RIP: 0033:0x7f5ff439c819 [ 754.144241][T15617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.144261][T15617] RSP: 002b:00007f5ff52df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.144284][T15617] RAX: ffffffffffffffda RBX: 00007f5ff4615fa0 RCX: 00007f5ff439c819 [ 754.144299][T15617] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 754.144313][T15617] RBP: 00007f5ff52df090 R08: 0000000000000000 R09: 0000000000000000 [ 754.144331][T15617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.144340][T15617] R13: 00007f5ff4616038 R14: 00007f5ff4615fa0 R15: 00007f5ff473fa48 [ 754.144365][T15617] [ 754.151743][T15293] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.233772][ T5895] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 754.417149][T15293] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 754.807777][T15624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 754.884898][T15293] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 754.936045][T15293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.962415][T15293] usb 7-1: Product: syz [ 755.025735][T15293] usb 7-1: Manufacturer: syz [ 755.075388][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 755.080683][T15293] usb 7-1: SerialNumber: syz [ 755.098937][ T5895] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 755.153744][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.179485][ T5895] usb 4-1: Product: syz [ 755.187227][ T5895] usb 4-1: Manufacturer: syz [ 755.197285][ T5895] usb 4-1: SerialNumber: syz [ 755.214196][ T5895] usb 4-1: config 0 descriptor?? [ 755.236560][ T5895] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 755.334850][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.416014][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.473317][T15293] usb 7-1: 0:2 : does not exist [ 755.489989][ T5895] usb 4-1: USB disconnect, device number 106 [ 755.509882][T15293] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 755.659869][T15647] FAULT_INJECTION: forcing a failure. [ 755.659869][T15647] name failslab, interval 1, probability 0, space 0, times 0 [ 755.702464][T15293] usb 7-1: USB disconnect, device number 12 [ 755.708713][T15647] CPU: 1 UID: 0 PID: 15647 Comm: syz.3.2962 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.708748][T15647] Tainted: [L]=SOFTLOCKUP [ 755.708757][T15647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 755.708770][T15647] Call Trace: [ 755.708779][T15647] [ 755.708788][T15647] dump_stack_lvl+0xe8/0x150 [ 755.708824][T15647] should_fail_ex+0x412/0x560 [ 755.708864][T15647] should_failslab+0xa8/0x100 [ 755.708900][T15647] __kmalloc_cache_noprof+0x88/0x660 [ 755.708927][T15647] ? fw_change+0x6f1/0xe50 [ 755.708964][T15647] ? __kmalloc_cache_noprof+0x15b/0x660 [ 755.708994][T15647] fw_change+0x6f1/0xe50 [ 755.709036][T15647] ? __pfx_fw_change+0x10/0x10 [ 755.709086][T15647] tc_new_tfilter+0xff8/0x1780 [ 755.709144][T15647] ? __pfx_tc_new_tfilter+0x10/0x10 [ 755.709205][T15647] ? __pfx_tc_new_tfilter+0x10/0x10 [ 755.709232][T15647] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 755.709263][T15647] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 755.709287][T15647] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 755.709310][T15647] ? ref_tracker_free+0x693/0x840 [ 755.709331][T15647] ? __copy_skb_header+0xa3/0x4a0 [ 755.709363][T15647] ? __pfx_ref_tracker_free+0x10/0x10 [ 755.709384][T15647] ? __skb_clone+0x63/0x7a0 [ 755.709423][T15647] netlink_rcv_skb+0x232/0x4b0 [ 755.709449][T15647] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 755.709475][T15647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 755.709510][T15647] ? netlink_deliver_tap+0x2e/0x1b0 [ 755.709540][T15647] netlink_unicast+0x80f/0x9b0 [ 755.709583][T15647] ? __pfx_netlink_unicast+0x10/0x10 [ 755.709620][T15647] ? netlink_sendmsg+0x650/0xb40 [ 755.709643][T15647] ? skb_put+0x11b/0x210 [ 755.709673][T15647] netlink_sendmsg+0x813/0xb40 [ 755.709710][T15647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.709739][T15647] ? aa_sock_msg_perm+0xf1/0x1b0 [ 755.709776][T15647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 755.709806][T15647] ____sys_sendmsg+0x972/0x9f0 [ 755.709843][T15647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 755.709881][T15647] ? import_iovec+0x73/0xa0 [ 755.709912][T15647] ___sys_sendmsg+0x2a5/0x360 [ 755.709953][T15647] ? __pfx____sys_sendmsg+0x10/0x10 [ 755.710021][T15647] ? __fget_files+0x2a/0x420 [ 755.710041][T15647] ? __fget_files+0x3a0/0x420 [ 755.710073][T15647] __x64_sys_sendmsg+0x1bd/0x2a0 [ 755.710106][T15647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 755.710146][T15647] ? __pfx_ksys_write+0x10/0x10 [ 755.710184][T15647] do_syscall_64+0x14d/0xf80 [ 755.710215][T15647] ? trace_irq_disable+0x3b/0x150 [ 755.710234][T15647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.710258][T15647] ? clear_bhb_loop+0x40/0x90 [ 755.710286][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.710309][T15647] RIP: 0033:0x7f12baf9c819 [ 755.710331][T15647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.710349][T15647] RSP: 002b:00007f12bbd7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.710374][T15647] RAX: ffffffffffffffda RBX: 00007f12bb215fa0 RCX: 00007f12baf9c819 [ 755.710390][T15647] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 755.710404][T15647] RBP: 00007f12bbd7d090 R08: 0000000000000000 R09: 0000000000000000 [ 755.710418][T15647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.710431][T15647] R13: 00007f12bb216038 R14: 00007f12bb215fa0 R15: 00007f12bb33fa48 [ 755.710466][T15647] [ 756.563669][T15289] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 756.622780][ T5895] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 756.734751][T15289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.022764][T15287] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 757.034352][T15289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.052978][T15289] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 757.062257][T15289] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 757.106785][T15289] usb 4-1: Manufacturer: syz [ 757.115980][T15289] usb 4-1: config 0 descriptor?? [ 757.132799][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 757.140335][ T5895] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 757.175825][ T5895] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 757.185470][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.204643][T15287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.222906][T15287] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 757.232258][ T5895] usb 6-1: Product: syz [ 757.242543][ T5895] usb 6-1: Manufacturer: syz [ 757.252563][T15287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.260690][ T5895] usb 6-1: SerialNumber: syz [ 757.285879][T15287] usb 2-1: config 0 descriptor?? [ 757.303827][T15287] pwc: Askey VC010 type 2 USB webcam detected. [ 757.312084][ T5895] r8152-cfgselector 6-1: Unknown version 0x0000 [ 757.327388][ T5895] r8152-cfgselector 6-1: config 0 descriptor?? [ 757.466274][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2967'. [ 757.516160][T15287] pwc: send_video_command error -71 [ 757.531833][T15287] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 757.550169][T15287] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 757.573985][T15287] usb 2-1: USB disconnect, device number 109 [ 757.872931][T15286] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 757.942286][T15289] uclogic 0003:256C:006D.0020: interface is invalid, ignoring [ 758.032748][T15286] usb 7-1: Using ep0 maxpacket: 8 [ 758.039786][T15286] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.052969][T15287] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 758.061370][T15286] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.071914][T15286] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 758.089670][T15286] usb 7-1: config 0 interface 0 has no altsetting 0 [ 758.100053][T15286] usb 7-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 758.126967][T15286] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.156203][T15289] usb 4-1: USB disconnect, device number 107 [ 758.181173][T15286] usb 7-1: config 0 descriptor?? [ 758.236325][T15287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.274402][T15287] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.300910][T15287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.346265][T15287] usb 2-1: config 0 descriptor?? [ 758.368789][T15287] pwc: Askey VC010 type 2 USB webcam detected. [ 758.449613][T15666] syz.6.2968 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 758.540977][T15668] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2968'. [ 758.575629][T15668] erspan0: entered allmulticast mode [ 758.767535][T15287] pwc: recv_control_msg error -32 req 02 val 2b00 [ 758.789492][T15287] pwc: recv_control_msg error -32 req 02 val 2700 [ 758.821439][T15287] pwc: recv_control_msg error -32 req 02 val 2c00 [ 758.838514][T15287] pwc: recv_control_msg error -32 req 04 val 1000 [ 758.875531][T15287] pwc: recv_control_msg error -32 req 04 val 1300 [ 758.917065][T15287] pwc: recv_control_msg error -32 req 04 val 1400 [ 758.933650][T15672] syzkaller0: entered promiscuous mode [ 758.946779][T15672] syzkaller0: entered allmulticast mode [ 759.004595][T15287] pwc: recv_control_msg error -32 req 02 val 2000 [ 759.063430][T15287] pwc: recv_control_msg error -32 req 02 val 2100 [ 759.092100][T15287] pwc: recv_control_msg error -32 req 04 val 1500 [ 759.113899][T15287] pwc: recv_control_msg error -32 req 02 val 2500 [ 759.370587][ T29] audit: type=1804 audit(1776062912.727:786): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2972" name="/newroot/40/file1" dev="tmpfs" ino=221 res=1 errno=0 [ 759.614698][T15287] pwc: recv_control_msg error -71 req 02 val 2600 [ 759.622584][T15287] pwc: recv_control_msg error -71 req 02 val 2900 [ 759.631478][T15287] pwc: recv_control_msg error -71 req 02 val 2800 [ 759.645087][T15287] pwc: recv_control_msg error -71 req 04 val 1100 [ 759.654659][T15287] pwc: recv_control_msg error -71 req 04 val 1200 [ 759.668778][T15287] pwc: Registered as video103. [ 759.678206][T15287] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input48 [ 759.707500][T15287] usb 2-1: USB disconnect, device number 110 [ 759.769718][ T5895] r8152-cfgselector 6-1: Unknown version 0x0000 [ 759.777051][ T5895] r8152-cfgselector 6-1: bad CDC descriptors [ 759.812598][ T5895] r8152-cfgselector 6-1: USB disconnect, device number 50 [ 760.028580][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2975'. [ 760.876658][T15286] usbhid 7-1:0.0: can't add hid device: -71 [ 760.894182][T15699] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 760.925186][T15286] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 761.323208][T15286] usb 7-1: USB disconnect, device number 13 [ 775.332805][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 775.346755][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 775.356101][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 775.365145][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 775.373748][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 776.018264][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 776.028288][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 776.037923][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 776.046096][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 776.055402][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 777.424194][ T5845] Bluetooth: hci2: command tx timeout [ 777.435282][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 777.456293][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 777.467327][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 777.483575][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 777.491299][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 777.586282][ T5845] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 777.597064][ T5845] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 777.606434][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 777.614617][ T5845] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 777.622326][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 778.142897][ T5845] Bluetooth: hci4: command tx timeout [ 778.858977][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 778.871800][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 778.880994][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 778.889477][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 778.899550][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 779.502744][ T5844] Bluetooth: hci2: command tx timeout [ 779.583707][ T5844] Bluetooth: hci7: command tx timeout [ 779.663257][ T5844] Bluetooth: hci8: command tx timeout [ 780.229694][ T5844] Bluetooth: hci4: command tx timeout [ 780.942943][ T5844] Bluetooth: hci9: command tx timeout [ 781.582819][ T5844] Bluetooth: hci2: command tx timeout [ 781.670619][ T5844] Bluetooth: hci7: command tx timeout [ 781.756021][ T5844] Bluetooth: hci8: command tx timeout [ 782.303143][ T5844] Bluetooth: hci4: command tx timeout [ 783.022774][ T5844] Bluetooth: hci9: command tx timeout [ 783.713501][ T5844] Bluetooth: hci2: command tx timeout [ 783.744631][ T5844] Bluetooth: hci7: command tx timeout [ 783.831541][ T5844] Bluetooth: hci8: command tx timeout [ 784.392814][ T5844] Bluetooth: hci4: command tx timeout [ 785.103017][ T5844] Bluetooth: hci9: command tx timeout [ 785.822849][ T5844] Bluetooth: hci7: command tx timeout [ 785.902803][ T5844] Bluetooth: hci8: command tx timeout [ 787.182784][ T5844] Bluetooth: hci9: command tx timeout [ 789.533056][T15724] chnl_net:caif_netlink_parms(): no params data found [ 789.591824][T15731] chnl_net:caif_netlink_parms(): no params data found [ 789.621940][T15736] chnl_net:caif_netlink_parms(): no params data found [ 789.761120][T15727] chnl_net:caif_netlink_parms(): no params data found [ 789.966398][T15733] chnl_net:caif_netlink_parms(): no params data found [ 808.630060][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.637006][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.182991][T15724] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.190144][T15724] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.215245][T15724] bridge_slave_0: entered allmulticast mode [ 809.232830][T15724] bridge_slave_0: entered promiscuous mode [ 809.249824][T15724] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.275513][T15724] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.292923][T15724] bridge_slave_1: entered allmulticast mode [ 809.314083][T15724] bridge_slave_1: entered promiscuous mode [ 809.339302][T15731] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.346703][T15731] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.354465][T15731] bridge_slave_0: entered allmulticast mode [ 809.362452][T15731] bridge_slave_0: entered promiscuous mode [ 809.371661][T15731] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.379248][T15731] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.386865][T15731] bridge_slave_1: entered allmulticast mode [ 809.395284][T15731] bridge_slave_1: entered promiscuous mode [ 809.403191][T15736] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.410373][T15736] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.418519][T15736] bridge_slave_0: entered allmulticast mode [ 809.429033][T15736] bridge_slave_0: entered promiscuous mode [ 809.438257][T15736] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.445877][T15736] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.453597][T15736] bridge_slave_1: entered allmulticast mode [ 809.461514][T15736] bridge_slave_1: entered promiscuous mode [ 809.753561][T15724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.814484][T15731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.846494][T15731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.877249][T15736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.907663][T15736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.930702][T15727] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.952971][T15727] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.960327][T15727] bridge_slave_0: entered allmulticast mode [ 809.986746][T15727] bridge_slave_0: entered promiscuous mode [ 809.997688][T15724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.127483][T15727] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.144688][T15727] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.152007][T15727] bridge_slave_1: entered allmulticast mode [ 810.174281][T15727] bridge_slave_1: entered promiscuous mode [ 810.217664][T15724] team0: Port device team_slave_0 added [ 810.233685][T15733] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.244611][T15733] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.251903][T15733] bridge_slave_0: entered allmulticast mode [ 810.275352][T15733] bridge_slave_0: entered promiscuous mode [ 810.295654][T15731] team0: Port device team_slave_0 added [ 810.376484][T15724] team0: Port device team_slave_1 added [ 810.393483][T15733] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.400646][T15733] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.424618][T15733] bridge_slave_1: entered allmulticast mode [ 810.444201][T15733] bridge_slave_1: entered promiscuous mode [ 810.455107][T15731] team0: Port device team_slave_1 added [ 810.509847][T15736] team0: Port device team_slave_0 added [ 810.535207][T15727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.617664][T15733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.665509][T15736] team0: Port device team_slave_1 added [ 810.674668][T15727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.743584][T15733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.833271][T15724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.840273][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.868341][T15724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.883373][T15731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.890462][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.918808][T15731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.968474][T15733] team0: Port device team_slave_0 added [ 810.991684][T15736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.001390][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.028992][T15736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.042852][T15727] team0: Port device team_slave_0 added [ 811.052290][T15727] team0: Port device team_slave_1 added [ 811.064930][T15724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.071942][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.099419][T15724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.123778][T15731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.130804][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.158580][T15731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.197841][T15733] team0: Port device team_slave_1 added [ 811.228018][T15736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.235398][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.261588][T15736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.374615][ T13] bridge_slave_1: left allmulticast mode [ 811.380345][ T13] bridge_slave_1: left promiscuous mode [ 811.388223][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.398051][ T13] bridge_slave_0: left allmulticast mode [ 811.404120][ T13] bridge_slave_0: left promiscuous mode [ 811.409978][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.730051][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.740761][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.752343][ T13] bond0 (unregistering): Released all slaves [ 811.856952][T15727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.866680][T15727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.915669][T15727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.943724][T15724] hsr_slave_0: entered promiscuous mode [ 811.950613][T15724] hsr_slave_1: entered promiscuous mode [ 811.958336][T15724] debugfs: 'hsr0' already exists in 'hsr' [ 811.964319][T15724] Cannot create hsr debugfs directory [ 811.982973][T15731] hsr_slave_0: entered promiscuous mode [ 811.989765][T15731] hsr_slave_1: entered promiscuous mode [ 811.996624][T15731] debugfs: 'hsr0' already exists in 'hsr' [ 812.002400][T15731] Cannot create hsr debugfs directory [ 812.026521][T15733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.034568][T15733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.060888][T15733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.087890][T15727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.095981][T15727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.122436][T15727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.180916][T15736] hsr_slave_0: entered promiscuous mode [ 812.189389][T15736] hsr_slave_1: entered promiscuous mode [ 812.201041][T15736] debugfs: 'hsr0' already exists in 'hsr' [ 812.207145][T15736] Cannot create hsr debugfs directory [ 812.213788][T15733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.220813][T15733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.248050][T15733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.503607][ T13] hsr_slave_0: left promiscuous mode [ 812.509848][ T13] hsr_slave_1: left promiscuous mode [ 812.519071][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.527429][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.688472][ T13] team0 (unregistering): Port device team_slave_1 removed [ 812.721956][ T13] team0 (unregistering): Port device team_slave_0 removed [ 812.911160][T15727] hsr_slave_0: entered promiscuous mode [ 812.918320][T15727] hsr_slave_1: entered promiscuous mode [ 812.928247][T15727] debugfs: 'hsr0' already exists in 'hsr' [ 812.964143][T15727] Cannot create hsr debugfs directory [ 813.014819][T15733] hsr_slave_0: entered promiscuous mode [ 813.021800][T15733] hsr_slave_1: entered promiscuous mode [ 813.029421][T15733] debugfs: 'hsr0' already exists in 'hsr' [ 813.037065][T15733] Cannot create hsr debugfs directory [ 813.842000][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.948904][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.045414][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.136189][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.330589][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.452303][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.547739][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.566940][T15724] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 814.582333][T15724] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 814.614172][T15724] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 814.627548][T15724] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 814.689854][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.948857][T15724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.046534][T15724] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.110384][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.117637][ T8186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.186079][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.193329][ T9196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.217657][T15727] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 815.277799][T15727] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 815.290301][T15727] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 815.372952][T15727] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 815.531539][T15731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 815.546121][T15731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 815.589216][T15731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 815.636036][T15731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 815.811804][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.877385][T15736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 815.890120][T15736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 815.901593][T15736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 815.947224][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.979064][T15736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 816.005438][T15724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.105066][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.217539][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.299636][T15727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.378021][T15733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 816.409269][T15733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 816.497595][T15733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 816.535629][T15733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 816.576164][T15724] veth0_vlan: entered promiscuous mode [ 816.621777][T15727] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.656837][ T13] bridge_slave_1: left allmulticast mode [ 816.663968][ T13] bridge_slave_1: left promiscuous mode [ 816.669801][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.680974][ T13] bridge_slave_0: left allmulticast mode [ 816.687039][ T13] bridge_slave_0: left promiscuous mode [ 816.694314][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.708251][ T13] bridge_slave_1: left allmulticast mode [ 816.714316][ T13] bridge_slave_1: left promiscuous mode [ 816.720103][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.732296][ T13] bridge_slave_0: left allmulticast mode [ 816.738600][ T13] bridge_slave_0: left promiscuous mode [ 816.746706][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.767262][ T13] bridge_slave_1: left allmulticast mode [ 816.776486][ T13] bridge_slave_1: left promiscuous mode [ 816.782464][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.793819][ T13] bridge_slave_0: left allmulticast mode [ 816.799553][ T13] bridge_slave_0: left promiscuous mode [ 816.805878][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.080307][ T13] bond0 (unregistering): (slave gretap1): Releasing active interface [ 817.088612][ T13] gretap1 (unregistering): left allmulticast mode [ 817.166252][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.178502][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.191236][ T13] .` (unregistering): Released all slaves [ 817.207117][ T13] bond0 (unregistering): Released all slaves [ 817.230171][ T13] bond1 (unregistering): Released all slaves [ 817.250859][ T13] bond2 (unregistering): (slave veth5): Releasing backup interface [ 817.275901][ T13] bond2 (unregistering): Released all slaves [ 817.296887][ T13] bond3 (unregistering): (slave veth7): Releasing backup interface [ 817.307085][ T13] bond3 (unregistering): Released all slaves [ 817.560099][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.571531][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.586975][ T13] bond0 (unregistering): Released all slaves [ 817.742262][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 817.860402][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.871879][ T13] bond0 (unregistering): Released all slaves [ 817.898593][ T13] bond1 (unregistering): Released all slaves [ 818.171295][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.184706][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.200081][ T13] bond0 (unregistering): Released all slaves [ 818.215127][T15724] veth1_vlan: entered promiscuous mode [ 818.329096][ T9196] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.336331][ T9196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.378370][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.385714][ T9196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.478874][T15731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.545623][ T13] !: left promiscuous mode [ 818.624371][ T13] tipc: Left network mode [ 818.640644][T15736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.656991][T15724] veth0_macvtap: entered promiscuous mode [ 818.689552][ T13] tipc: Left network mode [ 818.730838][ T13] IPVS: stopping backup sync thread 8419 ... [ 818.812394][T15724] veth1_macvtap: entered promiscuous mode [ 818.897389][T15731] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.956151][T15736] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.979403][T15733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.008993][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.016280][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.062080][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.069321][ T9196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.159549][ T9196] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.166827][ T9196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.207534][T15733] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.227490][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.234752][ T9196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.263932][T15724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.295025][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.302231][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.316403][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.323679][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.389566][T15727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.398644][T15724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.465271][ T9193] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.545489][ T9193] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.555781][ T9193] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.612497][ T9193] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.787300][T15733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 819.905061][T15727] veth0_vlan: entered promiscuous mode [ 820.027635][T15731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.049043][T15727] veth1_vlan: entered promiscuous mode [ 820.107792][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.132721][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.182056][T15733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.232132][ T13] hsr_slave_0: left promiscuous mode [ 820.243686][ T13] hsr_slave_1: left promiscuous mode [ 820.249701][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.282694][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.290682][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.312853][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.330109][ T13] hsr_slave_0: left promiscuous mode [ 820.337038][ T13] hsr_slave_1: left promiscuous mode [ 820.345963][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.353625][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.361845][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.371616][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.382064][ T13] hsr_slave_0: left promiscuous mode [ 820.391466][ T13] 0·: left promiscuous mode [ 820.397112][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.405462][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.417959][ T13] hsr_slave_0: left promiscuous mode [ 820.426583][ T13] hsr_slave_1: left promiscuous mode [ 820.435988][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.444330][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.455020][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.462490][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.495143][ T13] veth0_macvtap: left promiscuous mode [ 820.502349][ T13] veth1_macvtap: left promiscuous mode [ 820.508331][ T13] veth0_macvtap: left promiscuous mode [ 820.514086][ T13] veth1_vlan: left promiscuous mode [ 820.519377][ T13] veth0_vlan: left promiscuous mode [ 820.527522][ T13] veth1_macvtap: left promiscuous mode [ 820.534643][ T13] veth0_macvtap: left promiscuous mode [ 820.540297][ T13] veth1_vlan: left promiscuous mode [ 820.550364][ T13] veth0_vlan: left promiscuous mode [ 821.049940][ T13] team0 (unregistering): Port device team_slave_1 removed [ 821.083337][ T13] team0 (unregistering): Port device team_slave_0 removed [ 821.465109][ T13] team0 (unregistering): Port device team_slave_1 removed [ 821.494831][ T13] team0 (unregistering): Port device team_slave_0 removed [ 821.650680][ T13] team0 (unregistering): Port device batadv1 removed [ 821.800355][ T13] team0 (unregistering): Port device team_slave_1 removed [ 821.831900][ T13] team0 (unregistering): Port device team_slave_0 removed [ 822.199836][ T13] team0 (unregistering): Port device team_slave_1 removed [ 822.221306][ T13] team0 (unregistering): Port device team_slave_0 removed [ 822.438410][T15736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.511114][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.527121][T15727] veth0_macvtap: entered promiscuous mode [ 822.547701][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.588600][T15727] veth1_macvtap: entered promiscuous mode [ 822.608523][T15731] veth0_vlan: entered promiscuous mode [ 822.684922][T15736] veth0_vlan: entered promiscuous mode [ 822.706838][T15731] veth1_vlan: entered promiscuous mode [ 822.749266][T15727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.767738][T15733] veth0_vlan: entered promiscuous mode [ 822.788293][T15736] veth1_vlan: entered promiscuous mode [ 822.859590][T15727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.878944][T15733] veth1_vlan: entered promiscuous mode [ 822.945478][T15731] veth0_macvtap: entered promiscuous mode [ 822.961065][T15800] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2982'. [ 822.986036][ T9193] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.012784][ T9193] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.021918][ T9193] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.106268][T15802] netlink: 'syz.8.2987': attribute type 1 has an invalid length. [ 823.120232][T15731] veth1_macvtap: entered promiscuous mode [ 823.167756][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2987'. [ 823.179934][ T9193] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.237986][T15736] veth0_macvtap: entered promiscuous mode [ 823.343902][T15736] veth1_macvtap: entered promiscuous mode [ 823.391927][T15733] veth0_macvtap: entered promiscuous mode [ 823.426674][T15731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.458210][T15733] veth1_macvtap: entered promiscuous mode [ 823.511341][T15736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.558979][ T9193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.574531][ T9193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.589291][T15736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.605604][T15731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.719158][ T8186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.729305][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.744084][ T8186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.756293][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.784011][T15733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.807899][ T8186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.821242][ T8186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.859316][T15733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.878558][ T8186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.889312][ T8186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.935720][ T8186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.071284][ T8186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.179916][ T8186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.237571][ T8186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.243372][T15813] FAULT_INJECTION: forcing a failure. [ 824.243372][T15813] name failslab, interval 1, probability 0, space 0, times 0 [ 824.311720][T15813] CPU: 1 UID: 0 PID: 15813 Comm: syz.9.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 824.311764][T15813] Tainted: [L]=SOFTLOCKUP [ 824.311772][T15813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 824.311786][T15813] Call Trace: [ 824.311794][T15813] [ 824.311804][T15813] dump_stack_lvl+0xe8/0x150 [ 824.311841][T15813] should_fail_ex+0x412/0x560 [ 824.311881][T15813] should_failslab+0xa8/0x100 [ 824.311909][T15813] ? ptlock_alloc+0x20/0x70 [ 824.311932][T15813] kmem_cache_alloc_noprof+0x87/0x650 [ 824.311965][T15813] ptlock_alloc+0x20/0x70 [ 824.311987][T15813] pte_alloc_one+0x7a/0x370 [ 824.312024][T15813] __pte_alloc+0x25/0x1a0 [ 824.312055][T15813] do_pte_missing+0x2c47/0x3490 [ 824.312087][T15813] ? do_raw_spin_unlock+0xf5/0x210 [ 824.312123][T15813] handle_mm_fault+0x1bec/0x3310 [ 824.312172][T15813] ? handle_mm_fault+0xee/0x3310 [ 824.312215][T15813] ? __pfx_handle_mm_fault+0x10/0x10 [ 824.312270][T15813] ? lock_mm_and_find_vma+0xa7/0x340 [ 824.312299][T15813] do_user_addr_fault+0x75b/0x1340 [ 824.312345][T15813] exc_page_fault+0x6a/0xc0 [ 824.312378][T15813] asm_exc_page_fault+0x26/0x30 [ 824.312400][T15813] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 824.312423][T15813] Code: c4 10 e9 94 48 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 824.312443][T15813] RSP: 0018:ffffc90006207d78 EFLAGS: 00050202 [ 824.312463][T15813] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 824.312477][T15813] RDX: 0000000000000001 RSI: 0000200000001a80 RDI: ffffc90006207e00 [ 824.312492][T15813] RBP: ffffc90006207e68 R08: 0000000000000003 R09: 0000000000000004 [ 824.312506][T15813] R10: dffffc0000000000 R11: fffff52000c40fc0 R12: ffff888012389700 [ 824.312522][T15813] R13: ffffc90006207de0 R14: ffffc90006207e00 R15: 0000200000001a80 [ 824.312557][T15813] _copy_from_user+0x7a/0xb0 [ 824.312590][T15813] do_sock_getsockopt+0x165/0x3f0 [ 824.312622][T15813] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 824.312651][T15813] ? __fget_files+0x3a0/0x420 [ 824.312671][T15813] ? __fget_files+0x2a/0x420 [ 824.312698][T15813] __x64_sys_getsockopt+0x1a4/0x240 [ 824.312744][T15813] do_syscall_64+0x14d/0xf80 [ 824.312775][T15813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.312798][T15813] ? clear_bhb_loop+0x40/0x90 [ 824.312824][T15813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.312847][T15813] RIP: 0033:0x7f4b2e19c819 [ 824.312866][T15813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.312885][T15813] RSP: 002b:00007f4b2f06c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 824.312906][T15813] RAX: ffffffffffffffda RBX: 00007f4b2e415fa0 RCX: 00007f4b2e19c819 [ 824.312922][T15813] RDX: 0000000000000024 RSI: 0000000000000001 RDI: 0000000000000003 [ 824.312935][T15813] RBP: 00007f4b2f06c090 R08: 0000200000001a80 R09: 0000000000000000 [ 824.312948][T15813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.312961][T15813] R13: 00007f4b2e416038 R14: 00007f4b2e415fa0 R15: 00007f4b2e53fa48 [ 824.312992][T15813] [ 825.283037][ T9193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.290976][ T9193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.432105][ T9195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.453003][ T9195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.516520][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2989'. [ 825.538763][ T8186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.550393][ T8186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.928588][ T9193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.965672][ T13] IPVS: stop unused estimator thread 0... [ 825.978894][ T9193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.024759][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.072724][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.201002][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.228992][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.363614][T15286] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 826.377190][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.412750][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.562807][T15286] usb 10-1: Using ep0 maxpacket: 32 [ 826.578506][T15286] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.639368][T15286] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.688949][T15286] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 826.730229][T15286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.744049][T15289] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 826.776466][T15286] usb 10-1: config 0 descriptor?? [ 826.808786][T15286] hub 10-1:0.0: USB hub found [ 826.927246][T15289] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 826.972664][T15289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.022055][T15289] usb 1-1: config 0 has no interface number 0 [ 827.043824][T15286] hub 10-1:0.0: config failed, can't read hub descriptor (err -90) [ 827.077716][T15289] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 827.123642][T15289] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.172754][T10681] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 827.183491][T15289] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 827.211400][T15289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.220927][T15289] usb 1-1: Product: syz [ 827.272964][T15289] usb 1-1: Manufacturer: syz [ 827.289293][T15289] usb 1-1: SerialNumber: syz [ 827.325007][T15289] usb 1-1: config 0 descriptor?? [ 827.413101][T10681] usb 5-1: Using ep0 maxpacket: 32 [ 827.441616][T10681] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 827.472859][T10681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.509439][T10681] usb 5-1: config 0 descriptor?? [ 827.576357][T10681] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 827.642811][T15295] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 827.774091][T15285] usb 1-1: USB disconnect, device number 86 [ 827.792884][T15295] usb 9-1: device descriptor read/64, error -71 [ 828.054278][T15295] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 828.213654][T15295] usb 9-1: device descriptor read/64, error -71 [ 828.333867][T15295] usb usb9-port1: attempt power cycle [ 828.693555][T15295] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 828.753615][T15295] usb 9-1: device descriptor read/8, error -71 [ 828.791357][T15847] netlink: 'syz.0.2996': attribute type 2 has an invalid length. [ 828.825552][T10681] gspca_vc032x: reg_w err -71 [ 828.845434][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 828.872153][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 828.905368][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 828.937465][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 828.941879][T15847] bond0: (slave bond_slave_1): Releasing backup interface [ 828.986226][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.002705][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.030680][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.042725][T15295] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 829.063855][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.097880][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.109717][T15295] usb 9-1: device descriptor read/8, error -71 [ 829.142449][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.155529][T15286] usbhid 10-1:0.0: can't add hid device: -71 [ 829.173805][T15286] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 829.204745][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.221807][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.237378][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.258853][T15295] usb usb9-port1: unable to enumerate USB device [ 829.273365][T15286] usb 10-1: USB disconnect, device number 2 [ 829.297843][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.315645][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.353433][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.380740][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.411126][T10681] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.427045][T10681] gspca_vc032x: Unknown sensor... [ 829.462517][T10681] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 829.506005][T10681] usb 5-1: USB disconnect, device number 54 [ 829.687384][T15861] netlink: 'syz.4.3000': attribute type 4 has an invalid length. [ 830.564338][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3001'. [ 830.610895][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3001'. [ 831.726965][T15877] FAULT_INJECTION: forcing a failure. [ 831.726965][T15877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.792869][T15877] CPU: 0 UID: 0 PID: 15877 Comm: syz.8.3004 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.792906][T15877] Tainted: [L]=SOFTLOCKUP [ 831.792916][T15877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 831.792929][T15877] Call Trace: [ 831.792937][T15877] [ 831.792960][T15877] dump_stack_lvl+0xe8/0x150 [ 831.792994][T15877] should_fail_ex+0x412/0x560 [ 831.793031][T15877] _copy_to_user+0x31/0xb0 [ 831.793067][T15877] simple_read_from_buffer+0xe1/0x170 [ 831.793104][T15877] proc_fail_nth_read+0x1bb/0x230 [ 831.793138][T15877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 831.793172][T15877] ? rw_verify_area+0x2a6/0x4d0 [ 831.793195][T15877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 831.793227][T15877] vfs_read+0x20c/0xa70 [ 831.793249][T15877] ? fdget_pos+0x246/0x320 [ 831.793273][T15877] ? __pfx___mutex_lock+0x10/0x10 [ 831.793303][T15877] ? __pfx_vfs_read+0x10/0x10 [ 831.793329][T15877] ? __fget_files+0x2a/0x420 [ 831.793352][T15877] ? __fget_files+0x3a0/0x420 [ 831.793371][T15877] ? __fget_files+0x2a/0x420 [ 831.793399][T15877] ksys_read+0x150/0x270 [ 831.793426][T15877] ? __pfx_ksys_read+0x10/0x10 [ 831.793464][T15877] do_syscall_64+0x14d/0xf80 [ 831.793492][T15877] ? trace_irq_disable+0x3b/0x150 [ 831.793513][T15877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.793541][T15877] ? clear_bhb_loop+0x40/0x90 [ 831.793587][T15877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.793610][T15877] RIP: 0033:0x7f3088d5d04e [ 831.793631][T15877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 831.793651][T15877] RSP: 002b:00007f3089c5dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 831.793675][T15877] RAX: ffffffffffffffda RBX: 00007f3089c5e6c0 RCX: 00007f3088d5d04e [ 831.793698][T15877] RDX: 000000000000000f RSI: 00007f3089c5e0a0 RDI: 0000000000000005 [ 831.793712][T15877] RBP: 00007f3089c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 831.793726][T15877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.793739][T15877] R13: 00007f3089016128 R14: 00007f3089016090 R15: 00007f308913fa48 [ 831.793774][T15877] [ 832.604439][ T29] audit: type=1804 audit(1776062985.957:787): pid=15883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3007" name="/newroot/9/file1" dev="tmpfs" ino=63 res=1 errno=0 [ 833.163099][T15287] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 833.199453][T15887] netlink: 'syz.4.3006': attribute type 4 has an invalid length. [ 833.338537][T15287] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.354711][T15287] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.387866][T15287] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 833.437522][T15287] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.530073][T15287] usb 10-1: config 0 descriptor?? [ 833.552834][T15294] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 833.692769][T15286] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 833.722752][T15294] usb 1-1: Using ep0 maxpacket: 16 [ 833.730233][T15294] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 833.781405][T15294] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 833.825441][T15294] usb 1-1: config 166 has no interface number 0 [ 833.862170][T15294] usb 1-1: config 166 has no interface number 1 [ 833.916964][T15286] usb 9-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 833.950312][T15286] usb 9-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.999726][T15286] usb 9-1: config 1 interface 0 has no altsetting 0 [ 834.007474][T15294] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 834.064986][T15294] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 834.157821][T15294] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 834.232811][T15294] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 834.283162][T15294] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 834.335456][T15294] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 834.352712][T15294] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 834.372978][T15294] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 834.402747][T15294] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 834.437916][T15294] usb 1-1: config 166 interface 177 has no altsetting 0 [ 834.457153][T15294] usb 1-1: config 166 interface 34 has no altsetting 0 [ 834.497975][T15294] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 834.517492][T15294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.537758][T15294] usb 1-1: Product: syz [ 834.558890][T15294] usb 1-1: Manufacturer: syz [ 834.568197][T15294] usb 1-1: SerialNumber: syz [ 834.611294][T15289] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 834.817986][T15294] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 834.910668][T15289] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 834.930019][T15289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.971732][T15289] usb 3-1: config 0 descriptor?? [ 835.028189][T15294] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 835.228742][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.267747][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.286466][T15890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.326122][T15890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.342275][T15909] syz.2.3008: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 835.394052][T15890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.407323][T15909] CPU: 1 UID: 0 PID: 15909 Comm: syz.2.3008 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.407362][T15909] Tainted: [L]=SOFTLOCKUP [ 835.407371][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 835.407386][T15909] Call Trace: [ 835.407394][T15909] [ 835.407404][T15909] dump_stack_lvl+0xe8/0x150 [ 835.407442][T15909] warn_alloc+0x249/0x340 [ 835.407486][T15909] ? register_lock_class+0x31/0x2e0 [ 835.407521][T15909] ? security_file_ioctl+0xc3/0x2a0 [ 835.407550][T15909] ? __se_sys_ioctl+0x47/0x170 [ 835.407580][T15909] ? __pfx_warn_alloc+0x10/0x10 [ 835.407598][T15909] ? __lock_acquire+0x6b5/0x2cf0 [ 835.407657][T15909] __vmalloc_node_range_noprof+0x132/0x1730 [ 835.407697][T15909] ? __mutex_trylock_common+0x158/0x260 [ 835.407734][T15909] ? __pfx___mutex_trylock_common+0x10/0x10 [ 835.407763][T15909] ? rcu_is_watching+0x15/0xb0 [ 835.407812][T15909] ? __mutex_lock+0x319/0x1300 [ 835.407852][T15909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 835.407880][T15909] ? tomoyo_path_number_perm+0x219/0x630 [ 835.407902][T15909] ? dvb_demux_do_ioctl+0x320/0x540 [ 835.407944][T15909] ? __pfx___mutex_lock+0x10/0x10 [ 835.407979][T15909] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 835.408013][T15909] vmalloc_noprof+0xb2/0xe0 [ 835.408042][T15909] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 835.408069][T15909] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 835.408119][T15909] dvb_demux_do_ioctl+0x45d/0x540 [ 835.408158][T15909] dvb_usercopy+0x199/0x2e0 [ 835.408193][T15909] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 835.408218][T15909] ? __pfx_dvb_usercopy+0x10/0x10 [ 835.408265][T15909] ? __fget_files+0x3a0/0x420 [ 835.408286][T15909] ? __fget_files+0x2a/0x420 [ 835.408308][T15909] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 835.408345][T15909] dvb_demux_ioctl+0x29/0x40 [ 835.408370][T15909] __se_sys_ioctl+0xfc/0x170 [ 835.408391][T15909] do_syscall_64+0x14d/0xf80 [ 835.408435][T15909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.408458][T15909] ? clear_bhb_loop+0x40/0x90 [ 835.408483][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.408513][T15909] RIP: 0033:0x7ffb37b9c819 [ 835.408528][T15909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.408541][T15909] RSP: 002b:00007ffb38a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.408576][T15909] RAX: ffffffffffffffda RBX: 00007ffb37e16090 RCX: 00007ffb37b9c819 [ 835.408593][T15909] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 835.408607][T15909] RBP: 00007ffb37c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 835.408621][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.408633][T15909] R13: 00007ffb37e16128 R14: 00007ffb37e16090 R15: 00007ffb37f3fa48 [ 835.408667][T15909] [ 835.408796][T15909] Mem-Info: [ 835.541943][T15289] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 835.566052][T15890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.031561][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3017'. [ 836.041600][T15294] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 836.090719][T15909] active_anon:8439 inactive_anon:0 isolated_anon:0 [ 836.090719][T15909] active_file:16558 inactive_file:40274 isolated_file:0 [ 836.090719][T15909] unevictable:770 dirty:185 writeback:0 [ 836.090719][T15909] slab_reclaimable:11994 slab_unreclaimable:98888 [ 836.090719][T15909] mapped:36127 shmem:2696 pagetables:1424 [ 836.090719][T15909] sec_pagetables:0 bounce:0 [ 836.090719][T15909] kernel_misc_reclaimable:0 [ 836.090719][T15909] free:1301861 free_pcp:13298 free_cma:0 [ 836.334055][T15909] Node 0 active_anon:34056kB inactive_anon:0kB active_file:66220kB inactive_file:160888kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:144496kB dirty:736kB writeback:0kB shmem:9248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12708kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 836.366038][T15286] usb 9-1: string descriptor 0 read error: -71 [ 836.366207][T15286] usb 9-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 836.366234][T15286] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.481384][T15286] usb 9-1: can't set config #1, error -71 [ 836.585294][T15286] usb 9-1: USB disconnect, device number 6 [ 836.607827][T15909] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 836.752029][T15909] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 836.854109][T15294] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 836.882317][T15294] uvcvideo 1-1:166.34: No valid video chain found. [ 836.889429][T15909] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 836.930987][T15909] Node 0 DMA32 free:1252628kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31884kB inactive_anon:0kB active_file:66220kB inactive_file:160892kB unevictable:1544kB writepending:800kB zspages:0kB present:3129332kB managed:2552580kB mlocked:8kB bounce:0kB free_pcp:52556kB local_pcp:31096kB free_cma:0kB [ 836.986714][T15294] usb 1-1: USB disconnect, device number 87 [ 837.088258][T15935] bridge0: port 3(vlan2) entered blocking state [ 837.099607][T15909] lowmem_reserve[]: 0 0 0 0 0 [ 837.109317][T15909] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 837.142779][T15935] bridge0: port 3(vlan2) entered disabled state [ 837.159747][T15935] vlan2: entered allmulticast mode [ 837.172253][T15935] bridge0: entered allmulticast mode [ 837.196810][T15935] vlan2: left allmulticast mode [ 837.244679][T15935] bridge0: left allmulticast mode [ 837.249903][T15909] lowmem_reserve[]: 0 0 0 0 0 [ 837.303526][T15909] Node 1 Normal free:3941072kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 837.430475][T15287] usbhid 10-1:0.0: can't add hid device: -71 [ 837.456769][T15287] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 837.486071][T15937] syzkaller1: entered promiscuous mode [ 837.496170][T15287] usb 10-1: USB disconnect, device number 3 [ 837.502212][T15937] syzkaller1: entered allmulticast mode [ 837.522693][T15909] lowmem_reserve[]: 0 0 0 0 0 [ 837.527533][T15909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 837.630391][T15909] Node 0 DMA32: 7037*4kB (UME) 4141*8kB (UME) 3111*16kB (UME) 407*32kB (UME) 568*64kB (UME) 457*128kB (UME) 308*256kB (UME) 190*512kB (UME) 98*1024kB (UME) 34*2048kB (UME) 168*4096kB (UM) = 1253164kB [ 837.706906][T15909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 837.759819][T15909] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 9*16kB (U) 9*32kB (UM) 12*64kB (UM) 6*128kB (UM) 5*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3941072kB [ 837.897838][T15909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 837.953417][T15909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 837.982962][T15909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 838.025720][T15909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 838.045447][ T29] audit: type=1326 audit(1776062991.407:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 838.052933][T15909] 60544 total pagecache pages [ 838.149240][T15909] 0 pages in swap cache [ 838.163728][T15945] kernel read not supported for file /¡sxt (pid: 15945 comm: syz.8.3024) [ 838.182350][ T29] audit: type=1326 audit(1776062991.407:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 838.183852][T15909] Free swap = 124996kB [ 838.315895][T15909] Total swap = 124996kB [ 838.324678][T15909] 2097051 pages RAM [ 838.328643][T15909] 0 pages HighMem/MovableOnly [ 838.349841][T15909] 427072 pages reserved [ 838.359988][T15909] 0 pages cma reserved [ 838.383141][ T29] audit: type=1326 audit(1776062991.467:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 838.452758][ T29] audit: type=1326 audit(1776062991.467:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 838.482868][T15295] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 838.486114][T15289] [drm:udl_init] *ERROR* Selecting channel failed [ 838.532875][T15286] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 838.552553][ T29] audit: type=1326 audit(1776062991.467:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 838.629404][ T29] audit: type=1326 audit(1776062991.467:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 838.672723][T15295] usb 1-1: Using ep0 maxpacket: 32 [ 838.681250][T15295] usb 1-1: config 7 has an invalid interface number: 160 but max is 0 [ 838.701070][T15289] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 838.714996][T15286] usb 9-1: Using ep0 maxpacket: 8 [ 838.722465][T15286] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.725240][T15295] usb 1-1: config 7 has an invalid interface association descriptor of length 2, skipping [ 838.744931][ T29] audit: type=1326 audit(1776062991.467:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 838.776004][T15295] usb 1-1: config 7 has no interface number 0 [ 838.782287][T15295] usb 1-1: config 7 interface 160 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 838.802800][ T29] audit: type=1326 audit(1776062991.467:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 838.843446][T15295] usb 1-1: config 7 interface 160 has no altsetting 0 [ 838.852791][T15286] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 838.883439][T15289] [drm] Initialized udl on minor 2 [ 838.902477][T15295] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 838.920642][T15286] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 838.930630][ T29] audit: type=1326 audit(1776062991.467:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 838.938788][T15289] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 838.971950][T15295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.980383][T15286] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.006324][T15295] usb 1-1: Product: syz [ 839.017669][T15289] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 839.027451][T15287] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 839.044656][T15286] usb 9-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 839.058207][T15295] usb 1-1: Manufacturer: syz [ 839.073105][T15295] usb 1-1: SerialNumber: syz [ 839.078000][ T29] audit: type=1326 audit(1776062991.467:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15942 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d939c819 code=0x7ffc0000 [ 839.086225][T15287] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 839.117410][T15286] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.125690][T15289] usb 3-1: USB disconnect, device number 89 [ 839.154427][T15286] usb 9-1: Product: syz [ 839.162679][T15286] usb 9-1: Manufacturer: syz [ 839.177474][T15286] usb 9-1: SerialNumber: syz [ 839.197377][T15287] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 839.248598][T15286] usb 9-1: config 0 descriptor?? [ 839.268591][T15286] port100 9-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 839.416652][T15943] netlink: 'syz.0.3023': attribute type 10 has an invalid length. [ 839.460431][T15943] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3023'. [ 839.504818][T15943] bond0: entered promiscuous mode [ 839.527800][T15943] bond_slave_0: entered promiscuous mode [ 839.546677][T15286] usb 9-1: USB disconnect, device number 7 [ 839.558097][T15943] bridge0: port 3(bond0) entered blocking state [ 839.603985][T15943] bridge0: port 3(bond0) entered disabled state [ 839.610543][T15943] bond0: entered allmulticast mode [ 839.659917][T15943] bond_slave_0: entered allmulticast mode [ 839.689404][T15943] bridge0: port 3(bond0) entered blocking state [ 839.695921][T15943] bridge0: port 3(bond0) entered forwarding state [ 839.843609][T15965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.864444][T15965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.002947][T15285] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 840.082697][T15286] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 840.112895][T15289] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 840.197176][T15285] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 840.220072][T15285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.236427][T15285] usb 3-1: Product: syz [ 840.240658][T15285] usb 3-1: Manufacturer: syz [ 840.262770][T15285] usb 3-1: SerialNumber: syz [ 840.271532][T15286] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 840.298599][T15286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.315488][T15286] usb 5-1: Product: syz [ 840.319813][T15286] usb 5-1: Manufacturer: syz [ 840.324646][T15289] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.334933][T15289] usb 10-1: config 0 has no interfaces? [ 840.340823][T15286] usb 5-1: SerialNumber: syz [ 840.346563][T15289] usb 10-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 840.358585][T15289] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.369375][T15286] usb 5-1: config 0 descriptor?? [ 840.378693][T15286] ch341 5-1:0.0: ch341-uart converter detected [ 840.385616][T15295] usb 1-1: USB disconnect, device number 88 [ 840.387205][T15294] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 840.428604][T15289] usb 10-1: config 0 descriptor?? [ 840.495775][T15285] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 840.545593][T15285] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 840.583889][T15285] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 840.608387][T15285] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 840.610201][T15294] usb 9-1: config 0 has no interfaces? [ 840.638087][T15294] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 840.651201][T15285] usb 3-1: USB disconnect, device number 90 [ 840.658307][T15294] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.694555][T15294] usb 9-1: config 0 descriptor?? [ 840.808339][T15966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.829114][T15965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.843175][T15966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.853130][T15965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.906799][T15286] usb 5-1: failed to send control message: -71 [ 840.937462][T15970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.966545][T15286] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 840.968761][T15970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.995219][T15286] usb 5-1: USB disconnect, device number 55 [ 841.013231][T15286] ch341 5-1:0.0: device disconnected [ 841.019451][T15977] netlink: 'syz.0.3034': attribute type 2 has an invalid length. [ 841.078268][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3032'. [ 841.135673][T15294] usb 9-1: USB disconnect, device number 8 [ 841.604441][T15983] FAULT_INJECTION: forcing a failure. [ 841.604441][T15983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.691231][T15983] CPU: 1 UID: 0 PID: 15983 Comm: syz.4.3037 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.691259][T15983] Tainted: [L]=SOFTLOCKUP [ 841.691265][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 841.691275][T15983] Call Trace: [ 841.691282][T15983] [ 841.691291][T15983] dump_stack_lvl+0xe8/0x150 [ 841.691318][T15983] should_fail_ex+0x412/0x560 [ 841.691383][T15983] _copy_from_user+0x2d/0xb0 [ 841.691412][T15983] video_usercopy+0x36f/0x14b0 [ 841.691440][T15983] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 841.691483][T15983] ? __pfx___video_do_ioctl+0x10/0x10 [ 841.691501][T15983] ? __pfx_video_usercopy+0x10/0x10 [ 841.691524][T15983] ? __fget_files+0x2a/0x420 [ 841.691542][T15983] ? __fget_files+0x2a/0x420 [ 841.691555][T15983] ? __fget_files+0x3a0/0x420 [ 841.691572][T15983] v4l2_ioctl+0x18d/0x1e0 [ 841.691598][T15983] ? __pfx_v4l2_ioctl+0x10/0x10 [ 841.691622][T15983] __se_sys_ioctl+0xfc/0x170 [ 841.691644][T15983] do_syscall_64+0x14d/0xf80 [ 841.691665][T15983] ? trace_irq_disable+0x3b/0x150 [ 841.691679][T15983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.691696][T15983] ? clear_bhb_loop+0x40/0x90 [ 841.691716][T15983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.691732][T15983] RIP: 0033:0x7f80e319c819 [ 841.691748][T15983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.691762][T15983] RSP: 002b:00007f80e40e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.691779][T15983] RAX: ffffffffffffffda RBX: 00007f80e3415fa0 RCX: 00007f80e319c819 [ 841.691791][T15983] RDX: 0000200000000000 RSI: 00000000c040565e RDI: 0000000000000003 [ 841.691802][T15983] RBP: 00007f80e40e3090 R08: 0000000000000000 R09: 0000000000000000 [ 841.691812][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.691821][T15983] R13: 00007f80e3416038 R14: 00007f80e3415fa0 R15: 00007f80e353fa48 [ 841.691845][T15983] [ 842.058297][T15286] usb 10-1: USB disconnect, device number 4 [ 843.688708][T16001] netlink: 'syz.0.3041': attribute type 4 has an invalid length. [ 844.053679][T16016] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3046'. [ 844.099547][T16016] IPv6: Can't replace route, no match found [ 844.113146][T15294] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 844.143232][T10681] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 844.282733][T15294] usb 3-1: Using ep0 maxpacket: 32 [ 844.289787][T15294] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 844.299354][T16023] Invalid logical block size (83886080) [ 844.320794][T15294] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 844.345247][T10681] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 844.353530][T15294] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 844.362228][T10681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.372993][T15285] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 844.382950][T15294] usb 3-1: Product: syz [ 844.387181][T15294] usb 3-1: Manufacturer: syz [ 844.391816][T15294] usb 3-1: SerialNumber: syz [ 844.396801][T10681] usb 1-1: config 0 has no interface number 0 [ 844.413030][T10681] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.427193][T15294] usb 3-1: config 0 descriptor?? [ 844.443230][T16007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 844.454427][T10681] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.471675][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3052'. [ 844.493179][T10681] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.526015][T10681] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 844.546284][T10681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.564800][T15285] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.576289][T10681] usb 1-1: config 0 descriptor?? [ 844.594791][T15285] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 844.615411][T15285] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.660630][T15285] usb 10-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 844.695214][T15285] usb 10-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 844.723571][T15285] usb 10-1: Manufacturer: syz [ 844.752908][T15285] usb 10-1: config 0 descriptor?? [ 844.763015][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 844.803797][T15285] smsusb:smsusb_probe: board id=9, interface number 0 [ 844.843781][T15285] smsusb:smsusb_probe: Device initialized with return code -19 [ 844.998967][T16015] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.3048'. [ 845.010765][T16009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.027979][T16009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.199718][T15285] usb 10-1: USB disconnect, device number 5 [ 845.971436][T16041] netlink: 'syz.2.3044': attribute type 12 has an invalid length. [ 846.940253][T10681] usbhid 1-1:0.1: can't add hid device: -71 [ 846.948110][T10681] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 846.972885][T10681] usb 1-1: USB disconnect, device number 89 [ 847.412764][T10679] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 847.590373][T10679] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 847.665405][T10679] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.722264][T10679] usb 10-1: Product: syz [ 847.739401][T10679] usb 10-1: Manufacturer: syz [ 847.757673][T10679] usb 10-1: SerialNumber: syz [ 847.797228][T10679] usb 10-1: config 0 descriptor?? [ 848.101909][T10679] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 848.601844][T15286] usb 3-1: USB disconnect, device number 91 [ 849.192978][T15286] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 849.364938][T15286] usb 3-1: device descriptor read/64, error -71 [ 849.544900][T10679] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 849.568397][T16083] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3068'. [ 849.594874][T10679] usb 10-1: USB disconnect, device number 6 [ 849.632794][T15286] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 849.692375][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3066'. [ 849.748545][T16076] netlink: 'syz.0.3066': attribute type 2 has an invalid length. [ 849.748881][T16081] use of bytesused == 0 is deprecated and will be removed in the future, [ 849.802813][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3066'. [ 849.832312][T16081] use the actual size instead. [ 849.837527][T15286] usb 3-1: device descriptor read/64, error -71 [ 850.199455][T15286] usb usb3-port1: attempt power cycle [ 850.632719][T15286] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 850.654816][T15286] usb 3-1: device descriptor read/8, error -71 [ 850.756292][T16089] netlink: 'syz.9.3069': attribute type 4 has an invalid length. [ 850.764141][T16088] netlink: 'syz.9.3069': attribute type 4 has an invalid length. [ 850.937736][T15286] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 850.983886][T15286] usb 3-1: device descriptor read/8, error -71 [ 851.088463][T16095] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002 [ 851.114521][T15286] usb usb3-port1: unable to enumerate USB device [ 851.353156][T16099] sctp: [Deprecated]: syz.9.3073 (pid 16099) Use of int in maxseg socket option. [ 851.353156][T16099] Use struct sctp_assoc_value instead [ 851.794651][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 851.794672][ T29] audit: type=1326 audit(1776063005.157:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16108 comm="syz.9.3078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b2e19c819 code=0x0 [ 851.922915][T10679] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 852.105364][T10679] usb 1-1: config index 0 descriptor too short (expected 30768, got 18) [ 852.132949][T10679] usb 1-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 852.156102][T10679] usb 1-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 852.188691][T10679] usb 1-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 852.214574][T10679] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 852.234823][T10679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.271269][T10679] usb 1-1: Product: syz [ 852.284614][T10679] usb 1-1: Manufacturer: syz [ 852.311159][T10679] usb 1-1: SerialNumber: syz [ 853.335855][T16137] syzkaller0: entered promiscuous mode [ 853.341620][T16137] syzkaller0: entered allmulticast mode [ 853.987359][T16150] netlink: 'syz.9.3090': attribute type 4 has an invalid length. [ 854.223116][T16156] netlink: 'syz.4.3093': attribute type 3 has an invalid length. [ 854.242524][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3093'. [ 854.392941][T15286] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 854.562886][T15286] usb 10-1: Using ep0 maxpacket: 32 [ 854.588388][T15286] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 854.637138][T15286] usb 10-1: config 0 interface 0 has no altsetting 0 [ 854.655457][T15286] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 854.676287][T15286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.718828][T15286] usb 10-1: config 0 descriptor?? [ 854.799125][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3097'. [ 854.948675][T16169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 855.055302][T16171] veth3: entered promiscuous mode [ 855.061826][T16171] veth3: entered allmulticast mode [ 855.079897][T16171] bond1: (slave veth3): Enslaving as an active interface with an up link [ 855.558941][T15286] corsair-cpro 0003:1B1C:0C10.0021: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0 [ 855.591785][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'. [ 855.821270][T15286] corsair-cpro 0003:1B1C:0C10.0021: probe with driver corsair-cpro failed with error -5 [ 856.098125][T16186] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 856.353606][T15286] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 856.513004][T15286] usb 5-1: Using ep0 maxpacket: 8 [ 856.546734][T15286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.563633][T15286] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 856.685693][T15295] usb 10-1: USB disconnect, device number 7 [ 856.690973][T15286] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 856.727451][T15286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.764915][T15286] usb 5-1: Product: syz [ 856.779505][T15286] usb 5-1: Manufacturer: syz [ 856.795341][T15286] usb 5-1: SerialNumber: syz [ 856.921653][T15286] usb 5-1: config 0 descriptor?? [ 857.408002][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'. [ 857.944326][T15295] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 858.092997][T15295] usb 3-1: device descriptor read/64, error -71 [ 858.452695][T15295] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 858.627743][T15295] usb 3-1: device descriptor read/64, error -71 [ 858.753206][T15295] usb usb3-port1: attempt power cycle [ 859.142883][T15295] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 859.184257][T15295] usb 3-1: device descriptor read/8, error -71 [ 859.422969][T15295] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 859.473429][T15295] usb 3-1: device descriptor read/8, error -71 [ 859.608118][T15295] usb usb3-port1: unable to enumerate USB device [ 859.972248][T15289] usb 5-1: USB disconnect, device number 56 [ 867.031765][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 867.050550][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 867.060865][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 867.073547][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 867.086674][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 869.182820][ T5844] Bluetooth: hci0: command tx timeout [ 870.066928][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.073787][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.264947][ T5844] Bluetooth: hci0: command tx timeout [ 873.343703][ T5844] Bluetooth: hci0: command tx timeout [ 874.407525][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 874.419113][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 874.429476][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 874.439429][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 874.448842][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 875.422827][ T5844] Bluetooth: hci0: command tx timeout [ 875.947247][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 875.959113][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 875.968951][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 875.977354][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 875.986249][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 876.441476][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 876.453264][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 876.462060][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 876.471830][T15291] Bluetooth: hci1: command tx timeout [ 876.479844][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 876.496091][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 878.062728][ T5844] Bluetooth: hci3: command tx timeout [ 878.543032][ T5844] Bluetooth: hci5: command tx timeout [ 878.549562][ T5844] Bluetooth: hci1: command tx timeout [ 880.142710][ T5844] Bluetooth: hci3: command tx timeout [ 880.623008][ T5845] Bluetooth: hci5: command tx timeout [ 880.628625][ T5844] Bluetooth: hci1: command tx timeout [ 881.951560][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 881.961395][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 881.970577][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 881.979430][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 881.990686][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 882.225509][ T5844] Bluetooth: hci3: command tx timeout [ 882.703049][ T5844] Bluetooth: hci1: command tx timeout [ 882.708560][ T5844] Bluetooth: hci5: command tx timeout [ 884.063719][ T5844] Bluetooth: hci6: command tx timeout [ 884.302700][ T5844] Bluetooth: hci3: command tx timeout [ 884.783590][ T5844] Bluetooth: hci5: command tx timeout [ 886.145355][ T5845] Bluetooth: hci6: command tx timeout [ 888.222773][ T5845] Bluetooth: hci6: command tx timeout [ 890.302753][ T5845] Bluetooth: hci6: command tx timeout [ 897.745605][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 902.868895][ T5845] Bluetooth: hci9: command 0x0406 tx timeout [ 902.875085][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 902.879845][T15244] Bluetooth: hci7: command 0x0406 tx timeout [ 926.964812][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 926.979415][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 926.989215][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 927.008209][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 927.016475][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 929.102766][ T5844] Bluetooth: hci8: command tx timeout [ 931.182745][ T5844] Bluetooth: hci8: command tx timeout [ 931.511275][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.517703][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.263091][ T5844] Bluetooth: hci8: command tx timeout [ 934.992072][T13149] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 935.003070][T13149] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 935.011747][T13149] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 935.020274][T13149] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 935.048572][T13149] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 935.342830][ T5844] Bluetooth: hci8: command tx timeout [ 936.007868][T13149] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 936.023076][T13149] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 936.031607][T13149] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 936.041674][T13149] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 936.050039][T13149] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 936.476908][T13149] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 936.489078][T13149] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 936.500193][T13149] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 936.508698][T13149] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 936.516503][T13149] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 937.102814][ T5844] Bluetooth: hci10: command tx timeout [ 938.142883][ T5844] Bluetooth: hci11: command tx timeout [ 938.623040][ T5844] Bluetooth: hci12: command tx timeout [ 939.182853][ T5844] Bluetooth: hci10: command tx timeout [ 940.222773][ T5844] Bluetooth: hci11: command tx timeout [ 940.703034][ T5844] Bluetooth: hci12: command tx timeout [ 941.262732][ T5844] Bluetooth: hci10: command tx timeout [ 941.967409][T13149] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 941.979577][T13149] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 941.988966][T13149] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 942.005100][T13149] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 942.013035][T13149] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 942.302670][ T5844] Bluetooth: hci11: command tx timeout [ 942.783076][ T5844] Bluetooth: hci12: command tx timeout [ 943.342651][ T5844] Bluetooth: hci10: command tx timeout [ 944.063680][ T5844] Bluetooth: hci13: command tx timeout [ 944.383967][ T5844] Bluetooth: hci11: command tx timeout [ 944.863122][ T5844] Bluetooth: hci12: command tx timeout [ 946.142721][ T5844] Bluetooth: hci13: command tx timeout [ 948.222714][ T5844] Bluetooth: hci13: command tx timeout [ 950.303710][ T5844] Bluetooth: hci13: command tx timeout [ 987.562402][T13149] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 987.572182][T13149] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 987.582494][T13149] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 987.591720][T13149] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 987.603826][T13149] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 989.662858][T13149] Bluetooth: hci14: command tx timeout [ 989.904655][T13149] Bluetooth: hci0: command 0x0406 tx timeout [ 991.742641][T13149] Bluetooth: hci14: command tx timeout [ 992.946362][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.952809][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.822767][ T5844] Bluetooth: hci14: command tx timeout [ 995.044153][T13149] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 995.054011][T13149] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 995.062168][T13149] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 995.073611][T13149] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 995.081260][T13149] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 995.907315][ T5844] Bluetooth: hci14: command tx timeout [ 996.104531][T13149] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 996.116567][T13149] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 996.130513][T13149] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 996.139453][T13149] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 996.148430][T13149] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 997.054814][T13149] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 997.065548][T13149] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 997.073997][T13149] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 997.081952][T13149] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 997.091387][T13149] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 997.183340][ T5844] Bluetooth: hci15: command tx timeout [ 998.223379][T16273] Bluetooth: hci16: command tx timeout [ 999.185853][T16273] Bluetooth: hci17: command tx timeout [ 999.266119][T16273] Bluetooth: hci15: command tx timeout [ 1000.146073][T16273] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.146434][T15291] Bluetooth: hci1: command 0x0406 tx timeout [ 1000.152223][T16273] Bluetooth: hci5: command 0x0406 tx timeout [ 1000.302934][T15244] Bluetooth: hci16: command tx timeout [ 1001.262954][T15244] Bluetooth: hci17: command tx timeout [ 1001.342855][T15244] Bluetooth: hci15: command tx timeout [ 1002.051958][T13149] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1002.072869][T13149] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1002.083074][T13149] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1002.106927][T13149] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1002.118221][T13149] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1002.382706][T15244] Bluetooth: hci16: command tx timeout [ 1003.352644][T13149] Bluetooth: hci17: command tx timeout [ 1003.423997][T13149] Bluetooth: hci15: command tx timeout [ 1004.225339][T13149] Bluetooth: hci18: command tx timeout [ 1004.462935][T13149] Bluetooth: hci16: command tx timeout [ 1005.263015][T13149] Bluetooth: hci6: command 0x0406 tx timeout [ 1005.428355][T15244] Bluetooth: hci17: command tx timeout [ 1006.304781][T15244] Bluetooth: hci18: command tx timeout [ 1008.383794][T15244] Bluetooth: hci18: command tx timeout [ 1010.462872][T15244] Bluetooth: hci18: command tx timeout [ 1022.383197][ T30] INFO: task kworker/u8:12:9193 blocked for more than 143 seconds. [ 1022.391178][ T30] Tainted: G L syzkaller #0 [ 1022.406388][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1022.418073][ T30] task:kworker/u8:12 state:D stack:21248 pid:9193 tgid:9193 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1022.430466][ T30] Workqueue: events_unbound linkwatch_event [ 1022.436558][ T30] Call Trace: [ 1022.439873][ T30] [ 1022.443641][ T30] __schedule+0x15dd/0x52d0 [ 1022.448267][ T30] ? update_se+0x91/0x620 [ 1022.462897][ T30] ? __pfx___schedule+0x10/0x10 [ 1022.467870][ T30] ? schedule+0x90/0x360 [ 1022.472174][ T30] schedule+0x164/0x360 [ 1022.486132][ T30] schedule_preempt_disabled+0x13/0x30 [ 1022.491707][ T30] __mutex_lock+0x7fe/0x1300 [ 1022.522816][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1022.527691][ T30] ? linkwatch_event+0xe/0x60 [ 1022.532425][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1022.572622][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 1022.578442][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 1022.612643][ T30] linkwatch_event+0xe/0x60 [ 1022.618448][ T30] process_scheduled_works+0xb6e/0x18c0 [ 1022.632645][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1022.638724][ T30] ? assign_work+0x3d5/0x5e0 [ 1022.652627][ T30] worker_thread+0xa53/0xfc0 [ 1022.657311][ T30] kthread+0x388/0x470 [ 1022.661393][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1022.682627][ T30] ? __pfx_kthread+0x10/0x10 [ 1022.687279][ T30] ret_from_fork+0x51e/0xb90 [ 1022.691904][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1022.712619][ T30] ? __switch_to+0xc7d/0x1450 [ 1022.717433][ T30] ? __pfx_kthread+0x10/0x10 [ 1022.723601][ T30] ret_from_fork_asm+0x1a/0x30 [ 1022.728469][ T30] [ 1022.733619][ T30] INFO: task syz-executor:15733 blocked for more than 143 seconds. [ 1022.741572][ T30] Tainted: G L syzkaller #0 [ 1022.769040][ T30] Blocked by coredump. [ 1022.773982][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1022.783062][ T30] task:syz-executor state:D stack:22312 pid:15733 tgid:15733 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1022.795371][ T30] Call Trace: [ 1022.798742][ T30] [ 1022.801741][ T30] __schedule+0x15dd/0x52d0 [ 1022.806929][ T30] ? __pfx___schedule+0x10/0x10 [ 1022.811857][ T30] ? schedule+0x90/0x360 [ 1022.816571][ T30] schedule+0x164/0x360 [ 1022.820833][ T30] schedule_preempt_disabled+0x13/0x30 [ 1022.829287][ T30] __mutex_lock+0x7fe/0x1300 [ 1022.834336][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1022.839170][ T30] ? tun_chr_close+0x3e/0x1c0 [ 1022.844408][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1022.849550][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1022.858735][ T30] tun_chr_close+0x3e/0x1c0 [ 1022.863719][ T30] __fput+0x44f/0xa70 [ 1022.867821][ T30] task_work_run+0x1d9/0x270 [ 1022.872459][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1022.879825][ T30] ? kmem_cache_free+0x187/0x630 [ 1022.885142][ T30] ? do_exit+0x70a/0x23c0 [ 1022.889536][ T30] do_exit+0x70f/0x23c0 [ 1022.894182][ T30] ? __pfx_do_exit+0x10/0x10 [ 1022.898878][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1022.906946][ T30] do_group_exit+0x21b/0x2d0 [ 1022.911609][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1022.917556][ T30] get_signal+0x1284/0x1330 [ 1022.922153][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 1022.930971][ T30] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1022.937017][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1022.943506][ T30] exit_to_user_mode_loop+0x86/0x480 [ 1022.948873][ T30] ? rcu_is_watching+0x15/0xb0 [ 1022.954132][ T30] do_syscall_64+0x32d/0xf80 [ 1022.958780][ T30] ? trace_irq_disable+0x3b/0x150 [ 1022.968429][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.974898][ T30] ? clear_bhb_loop+0x40/0x90 [ 1022.979651][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.987714][ T30] RIP: 0033:0x7fd0d935d04e [ 1022.992192][ T30] RSP: 002b:00007fd0d973fd48 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1023.001136][ T30] RAX: fffffffffffffe00 RBX: 000055558af0f500 RCX: 00007fd0d935d04e [ 1023.009442][ T30] RDX: 0000000040000000 RSI: 00007fd0d973fdec RDI: ffffffffffffffff [ 1023.017837][ T30] RBP: 00007fd0d973fdec R08: 0000000000000000 R09: 0000000000000000 [ 1023.028761][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 1023.037672][ T30] R13: 000055558af229f0 R14: 00000000000d056a R15: 00007fd0d973fe40 [ 1023.046050][ T30] [ 1023.049315][ T30] INFO: task syz.9.3111:16211 blocked for more than 144 seconds. [ 1023.057518][ T30] Tainted: G L syzkaller #0 [ 1023.064348][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1023.077221][ T30] task:syz.9.3111 state:D stack:26840 pid:16211 tgid:16210 ppid:15727 task_flags:0x400140 flags:0x00080002 [ 1023.089570][ T30] Call Trace: [ 1023.093171][ T30] [ 1023.096151][ T30] __schedule+0x15dd/0x52d0 [ 1023.100825][ T30] ? __pfx___schedule+0x10/0x10 [ 1023.108968][ T30] ? schedule+0x90/0x360 [ 1023.113610][ T30] schedule+0x164/0x360 [ 1023.117866][ T30] schedule_preempt_disabled+0x13/0x30 [ 1023.123752][ T30] __mutex_lock+0x7fe/0x1300 [ 1023.130428][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1023.136446][ T30] ? rtnl_newlink+0x883/0x1bb0 [ 1023.141277][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1023.146435][ T30] ? ns_capable+0x89/0xe0 [ 1023.150851][ T30] rtnl_newlink+0x883/0x1bb0 [ 1023.156070][ T30] ? netlink_deliver_tap+0x19c/0x1b0 [ 1023.161402][ T30] ? netlink_unicast+0x7e3/0x9b0 [ 1023.166482][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1023.171557][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.178327][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 1023.189008][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1023.194437][ T30] ? kmem_cache_free+0x187/0x630 [ 1023.199480][ T30] ? nlmon_xmit+0xb0/0x100 [ 1023.204479][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1023.209528][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 1023.216316][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1023.221594][ T30] ? __dev_queue_xmit+0x277/0x3890 [ 1023.227326][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 1023.233947][ T30] ? __dev_queue_xmit+0x277/0x3890 [ 1023.239159][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1023.245316][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1023.250399][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1023.255676][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1023.261191][ T30] ? ref_tracker_free+0x693/0x840 [ 1023.266990][ T30] ? __copy_skb_header+0xa3/0x4a0 [ 1023.272082][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1023.277621][ T30] ? __skb_clone+0x63/0x7a0 [ 1023.282221][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1023.287699][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1023.293565][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1023.298954][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1023.304782][ T30] netlink_unicast+0x80f/0x9b0 [ 1023.309628][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1023.315497][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1023.320492][ T30] ? skb_put+0x11b/0x210 [ 1023.327569][ T30] netlink_sendmsg+0x813/0xb40 [ 1023.334236][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1023.339592][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1023.350741][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1023.356418][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1023.361241][ T30] ? futex_unqueue+0x211/0x240 [ 1023.366479][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1023.371832][ T30] ? import_iovec+0x73/0xa0 [ 1023.376833][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1023.381609][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1023.387238][ T30] ? futex_wait+0x29a/0x380 [ 1023.391833][ T30] ? __fget_files+0x2a/0x420 [ 1023.396905][ T30] ? __fget_files+0x3a0/0x420 [ 1023.401679][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1023.407086][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1023.412897][ T30] ? rcu_is_watching+0x15/0xb0 [ 1023.417978][ T30] do_syscall_64+0x14d/0xf80 [ 1023.423089][ T30] ? trace_irq_disable+0x3b/0x150 [ 1023.428164][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.434829][ T30] ? clear_bhb_loop+0x40/0x90 [ 1023.441420][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.447871][ T30] RIP: 0033:0x7f4b2e19c819 [ 1023.452372][ T30] RSP: 002b:00007f4b2f06c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.461331][ T30] RAX: ffffffffffffffda RBX: 00007f4b2e415fa0 RCX: 00007f4b2e19c819 [ 1023.469710][ T30] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1023.477847][ T30] RBP: 00007f4b2e232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1023.486300][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.494439][ T30] R13: 00007f4b2e416038 R14: 00007f4b2e415fa0 R15: 00007f4b2e53fa48 [ 1023.502904][ T30] [ 1023.506034][ T30] INFO: task syz.2.3118:16232 blocked for more than 144 seconds. [ 1023.514233][ T30] Tainted: G L syzkaller #0 [ 1023.520802][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1023.529947][ T30] task:syz.2.3118 state:D stack:26840 pid:16232 tgid:16230 ppid:15736 task_flags:0x400140 flags:0x00080002 [ 1023.543460][ T30] Call Trace: [ 1023.546835][ T30] [ 1023.549853][ T30] __schedule+0x15dd/0x52d0 [ 1023.564120][ T30] ? __pfx___schedule+0x10/0x10 [ 1023.569167][ T30] ? schedule+0x90/0x360 [ 1023.574062][ T30] schedule+0x164/0x360 [ 1023.578284][ T30] schedule_preempt_disabled+0x13/0x30 [ 1023.584319][ T30] __mutex_lock+0x7fe/0x1300 [ 1023.588993][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1023.594218][ T30] ? rtnl_newlink+0x883/0x1bb0 [ 1023.599104][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1023.604674][ T30] ? ns_capable+0x89/0xe0 [ 1023.609075][ T30] rtnl_newlink+0x883/0x1bb0 [ 1023.614151][ T30] ? netlink_deliver_tap+0x19c/0x1b0 [ 1023.619520][ T30] ? netlink_unicast+0x7e3/0x9b0 [ 1023.624961][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1023.630047][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.636693][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 1023.643931][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1023.649249][ T30] ? kmem_cache_free+0x187/0x630 [ 1023.654765][ T30] ? nlmon_xmit+0xb0/0x100 [ 1023.659257][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1023.668146][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 1023.675849][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1023.681125][ T30] ? __dev_queue_xmit+0x277/0x3890 [ 1023.687125][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 1023.692482][ T30] ? __dev_queue_xmit+0x277/0x3890 [ 1023.697794][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1023.703440][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1023.708440][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1023.714137][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1023.719681][ T30] ? ref_tracker_free+0x693/0x840 [ 1023.725147][ T30] ? __copy_skb_header+0xa3/0x4a0 [ 1023.730232][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1023.736150][ T30] ? __skb_clone+0x63/0x7a0 [ 1023.740724][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1023.747381][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1023.753249][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1023.758604][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1023.764407][ T30] netlink_unicast+0x80f/0x9b0 [ 1023.769306][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1023.778113][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1023.785496][ T30] ? skb_put+0x11b/0x210 [ 1023.789816][ T30] netlink_sendmsg+0x813/0xb40 [ 1023.795529][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1023.800918][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1023.806321][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1023.811669][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1023.816929][ T30] ? futex_unqueue+0x211/0x240 [ 1023.821762][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1023.827612][ T30] ? import_iovec+0x73/0xa0 [ 1023.832205][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1023.837372][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1023.842904][ T30] ? futex_wait+0x29a/0x380 [ 1023.850027][ T30] ? __fget_files+0x2a/0x420 [ 1023.855239][ T30] ? __fget_files+0x3a0/0x420 [ 1023.859986][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1023.865451][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1023.870982][ T30] ? rcu_is_watching+0x15/0xb0 [ 1023.876515][ T30] do_syscall_64+0x14d/0xf80 [ 1023.881175][ T30] ? trace_irq_disable+0x3b/0x150 [ 1023.889714][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.898114][ T30] ? clear_bhb_loop+0x40/0x90 [ 1023.903959][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.909911][ T30] RIP: 0033:0x7ffb37b9c819 [ 1023.914878][ T30] RSP: 002b:00007ffb38a36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.923622][ T30] RAX: ffffffffffffffda RBX: 00007ffb37e16090 RCX: 00007ffb37b9c819 [ 1023.931670][ T30] RDX: 0000000000008080 RSI: 0000200000000200 RDI: 0000000000000004 [ 1023.940329][ T30] RBP: 00007ffb37c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1023.951108][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.959481][ T30] R13: 00007ffb37e16128 R14: 00007ffb37e16090 R15: 00007ffb37f3fa48 [ 1023.967811][ T30] [ 1023.971125][ T30] INFO: task syz.8.3119:16238 blocked for more than 144 seconds. [ 1023.979898][ T30] Tainted: G L syzkaller #0 [ 1023.987247][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1024.002552][ T30] task:syz.8.3119 state:D stack:26824 pid:16238 tgid:16235 ppid:15724 task_flags:0x400140 flags:0x00080002 [ 1024.017173][ T30] Call Trace: [ 1024.020497][ T30] [ 1024.023832][ T30] __schedule+0x15dd/0x52d0 [ 1024.028413][ T30] ? kasan_save_track+0x4f/0x80 [ 1024.042671][ T30] ? __pfx___schedule+0x10/0x10 [ 1024.047617][ T30] ? schedule+0x90/0x360 [ 1024.054849][ T30] schedule+0x164/0x360 [ 1024.059099][ T30] schedule_preempt_disabled+0x13/0x30 [ 1024.065729][ T30] __mutex_lock+0x7fe/0x1300 [ 1024.070378][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1024.075634][ T30] ? rtnl_dumpit+0x92/0x200 [ 1024.080274][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1024.085742][ T30] ? rcu_is_watching+0x15/0xb0 [ 1024.090582][ T30] ? trace_kmalloc+0x2a/0x110 [ 1024.095913][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1024.105494][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1024.110664][ T30] rtnl_dumpit+0x92/0x200 [ 1024.115460][ T30] netlink_dump+0x722/0xe80 [ 1024.120019][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 1024.127574][ T30] ? __netlink_lookup+0x7e4/0x8b0 [ 1024.132937][ T30] ? netlink_lookup+0x30/0x200 [ 1024.137769][ T30] ? netlink_lookup+0x30/0x200 [ 1024.143422][ T30] ? netlink_lookup+0x30/0x200 [ 1024.148270][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 1024.155392][ T30] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 1024.160383][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1024.165931][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1024.171102][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1024.176976][ T30] ? ref_tracker_free+0x693/0x840 [ 1024.182074][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1024.187445][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1024.192836][ T30] ? __skb_clone+0x63/0x7a0 [ 1024.197407][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1024.202250][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1024.208406][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1024.216989][ T30] netlink_unicast+0x80f/0x9b0 [ 1024.221837][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1024.228880][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1024.236620][ T30] ? skb_put+0x11b/0x210 [ 1024.240940][ T30] netlink_sendmsg+0x813/0xb40 [ 1024.246190][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.251609][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1024.259407][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1024.265049][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.270435][ T30] sock_write_iter+0x49b/0x4f0 [ 1024.275617][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 1024.280982][ T30] ? bpf_lsm_file_permission+0x9/0x20 [ 1024.286811][ T30] ? security_file_permission+0x75/0x260 [ 1024.292768][ T30] vfs_write+0x61d/0xb90 [ 1024.297083][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1024.302007][ T30] ? __pfx_do_futex+0x10/0x10 [ 1024.311036][ T30] ksys_write+0x150/0x270 [ 1024.315967][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1024.320881][ T30] do_syscall_64+0x14d/0xf80 [ 1024.328689][ T30] ? trace_irq_disable+0x3b/0x150 [ 1024.334135][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.340252][ T30] ? clear_bhb_loop+0x40/0x90 [ 1024.347917][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.354179][ T30] RIP: 0033:0x7f3088d9c819 [ 1024.361069][ T30] RSP: 002b:00007f3089c3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1024.370065][ T30] RAX: ffffffffffffffda RBX: 00007f3089016180 RCX: 00007f3088d9c819 [ 1024.378349][ T30] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000008 [ 1024.393326][ T30] RBP: 00007f3088e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1024.401417][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.409831][ T30] R13: 00007f3089016218 R14: 00007f3089016180 R15: 00007f308913fa48 [ 1024.418370][ T30] [ 1024.431906][ T30] INFO: task syz.4.3124:16251 blocked for more than 145 seconds. [ 1024.442870][ T30] Tainted: G L syzkaller #0 [ 1024.449547][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1024.463713][ T30] task:syz.4.3124 state:D stack:25408 pid:16251 tgid:16251 ppid:15731 task_flags:0x400040 flags:0x00080002 [ 1024.476633][ T30] Call Trace: [ 1024.479955][ T30] [ 1024.483297][ T30] __schedule+0x15dd/0x52d0 [ 1024.487891][ T30] ? __pfx___schedule+0x10/0x10 [ 1024.493121][ T30] ? schedule+0x90/0x360 [ 1024.497409][ T30] schedule+0x164/0x360 [ 1024.501632][ T30] schedule_preempt_disabled+0x13/0x30 [ 1024.507171][ T30] __mutex_lock+0x7fe/0x1300 [ 1024.511807][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1024.517390][ T30] ? tun_chr_close+0x3e/0x1c0 [ 1024.522116][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1024.527587][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1024.533014][ T30] tun_chr_close+0x3e/0x1c0 [ 1024.537578][ T30] __fput+0x44f/0xa70 [ 1024.541610][ T30] task_work_run+0x1d9/0x270 [ 1024.548916][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1024.555373][ T30] exit_to_user_mode_loop+0xed/0x480 [ 1024.560714][ T30] ? rcu_is_watching+0x15/0xb0 [ 1024.570674][ T30] do_syscall_64+0x32d/0xf80 [ 1024.575788][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.581944][ T30] ? clear_bhb_loop+0x40/0x90 [ 1024.587122][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.593132][ T30] RIP: 0033:0x7f80e319c819 [ 1024.597584][ T30] RSP: 002b:00007f80e353fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1024.606560][ T30] RAX: 0000000000000000 RBX: 00007f80e3417da0 RCX: 00007f80e319c819 [ 1024.614661][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1024.624594][ T30] RBP: 00007f80e3417da0 R08: 0000000000000006 R09: 0000000000000000 [ 1024.632703][ T30] R10: 00007f80e3417cb0 R11: 0000000000000246 R12: 00000000000d3b67 [ 1024.640717][ T30] R13: 00007f80e3415fac R14: 00000000000d38cd R15: 00007f80e3415fa0 [ 1024.649187][ T30] [ 1024.652270][ T30] INFO: task syz.4.3124:16253 blocked for more than 145 seconds. [ 1024.663212][ T30] Tainted: G L syzkaller #0 [ 1024.670938][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1024.683224][ T30] task:syz.4.3124 state:D stack:27144 pid:16253 tgid:16251 ppid:15731 task_flags:0x400140 flags:0x00080002 [ 1024.695299][ T30] Call Trace: [ 1024.698643][ T30] [ 1024.701613][ T30] __schedule+0x15dd/0x52d0 [ 1024.706818][ T30] ? __pfx___schedule+0x10/0x10 [ 1024.711733][ T30] ? schedule+0x90/0x360 [ 1024.716101][ T30] schedule+0x164/0x360 [ 1024.720321][ T30] schedule_preempt_disabled+0x13/0x30 [ 1024.726480][ T30] __mutex_lock+0x7fe/0x1300 [ 1024.731151][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1024.736055][ T30] ? rtnetlink_rcv_msg+0x722/0xbe0 [ 1024.741235][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1024.746892][ T30] rtnetlink_rcv_msg+0x722/0xbe0 [ 1024.751924][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1024.757141][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1024.764209][ T30] ? ref_tracker_free+0x693/0x840 [ 1024.771168][ T30] ? __copy_skb_header+0xa3/0x4a0 [ 1024.783005][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1024.788463][ T30] ? __skb_clone+0x63/0x7a0 [ 1024.795648][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1024.800524][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1024.806271][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1024.811626][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.816957][ T30] netlink_unicast+0x80f/0x9b0 [ 1024.821942][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1024.827328][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1024.832456][ T30] ? skb_put+0x11b/0x210 [ 1024.836811][ T30] netlink_sendmsg+0x813/0xb40 [ 1024.841759][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.847212][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1024.852326][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1024.857718][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1024.862712][ T30] ? futex_unqueue+0x211/0x240 [ 1024.867576][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1024.874356][ T30] ? import_iovec+0x73/0xa0 [ 1024.879094][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1024.883901][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.889262][ T30] ? futex_wait+0x29a/0x380 [ 1024.893915][ T30] ? __fget_files+0x2a/0x420 [ 1024.898736][ T30] ? __fget_files+0x3a0/0x420 [ 1024.903532][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1024.910297][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1024.915977][ T30] ? rcu_is_watching+0x15/0xb0 [ 1024.920818][ T30] do_syscall_64+0x14d/0xf80 [ 1024.925607][ T30] ? trace_irq_disable+0x3b/0x150 [ 1024.930845][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.937056][ T30] ? clear_bhb_loop+0x40/0x90 [ 1024.941915][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.948076][ T30] RIP: 0033:0x7f80e319c819 [ 1024.952613][ T30] RSP: 002b:00007f80e40c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.961226][ T30] RAX: ffffffffffffffda RBX: 00007f80e3416090 RCX: 00007f80e319c819 [ 1024.969408][ T30] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 1024.978970][ T30] RBP: 00007f80e3232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1024.987131][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.996335][ T30] R13: 00007f80e3416128 R14: 00007f80e3416090 R15: 00007f80e353fa48 [ 1025.004474][ T30] [ 1025.007686][ T30] INFO: task syz-executor:16256 blocked for more than 145 seconds. [ 1025.018647][ T30] Tainted: G L syzkaller #0 [ 1025.025312][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.034173][ T30] task:syz-executor state:D stack:27680 pid:16256 tgid:16256 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1025.046265][ T30] Call Trace: [ 1025.049626][ T30] [ 1025.052894][ T30] __schedule+0x15dd/0x52d0 [ 1025.057473][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1025.062997][ T30] ? __pfx_kasan_save_track+0x1/0x10 [ 1025.068554][ T30] ? kasan_save_track+0x3e/0x80 [ 1025.073527][ T30] ? __pfx___schedule+0x10/0x10 [ 1025.079893][ T30] ? schedule+0x90/0x360 [ 1025.084591][ T30] schedule+0x164/0x360 [ 1025.088803][ T30] schedule_preempt_disabled+0x13/0x30 [ 1025.094708][ T30] __mutex_lock+0x7fe/0x1300 [ 1025.099402][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1025.104781][ T30] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1025.111137][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1025.116706][ T30] ? net_generic+0x1e/0x240 [ 1025.121270][ T30] ? net_generic+0x1e/0x240 [ 1025.126363][ T30] register_netdevice_notifier_net+0x1a/0xa0 [ 1025.132439][ T30] ops_init+0x35c/0x5c0 [ 1025.137067][ T30] setup_net+0x118/0x340 [ 1025.141365][ T30] ? __pfx_setup_net+0x10/0x10 [ 1025.146627][ T30] ? preinit_net+0x47d/0x780 [ 1025.151318][ T30] copy_net_ns+0x50e/0x730 [ 1025.156228][ T30] create_new_namespaces+0x3e7/0x6a0 [ 1025.161588][ T30] ? security_capable+0x7e/0x2c0 [ 1025.167052][ T30] unshare_nsproxy_namespaces+0x11a/0x160 [ 1025.173155][ T30] ksys_unshare+0x51d/0x930 [ 1025.178924][ T30] ? fput_close_sync+0x11f/0x240 [ 1025.184430][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1025.189539][ T30] __x64_sys_unshare+0x38/0x50 [ 1025.194743][ T30] do_syscall_64+0x14d/0xf80 [ 1025.199418][ T30] ? trace_irq_disable+0x3b/0x150 [ 1025.204990][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.211113][ T30] ? clear_bhb_loop+0x40/0x90 [ 1025.222703][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.228649][ T30] RIP: 0033:0x7f1cfb39dae7 [ 1025.233572][ T30] RSP: 002b:00007f1cfb73ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1025.242036][ T30] RAX: ffffffffffffffda RBX: 00007f1cfb433d1b RCX: 00007f1cfb39dae7 [ 1025.250355][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1025.258766][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1025.267482][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1025.275884][ T30] R13: 0000000000000003 R14: 00007ffd30f0f718 R15: 0000000000000000 [ 1025.285485][ T30] [ 1025.288865][ T30] INFO: task syz-executor:16259 blocked for more than 146 seconds. [ 1025.298167][ T30] Tainted: G L syzkaller #0 [ 1025.308788][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.326444][ T30] task:syz-executor state:D stack:27552 pid:16259 tgid:16259 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1025.338823][ T30] Call Trace: [ 1025.342188][ T30] [ 1025.345678][ T30] __schedule+0x15dd/0x52d0 [ 1025.350286][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1025.362234][ T30] ? __pfx_kasan_save_track+0x1/0x10 [ 1025.367888][ T30] ? kasan_save_track+0x3e/0x80 [ 1025.373111][ T30] ? __pfx___schedule+0x10/0x10 [ 1025.378030][ T30] ? schedule+0x90/0x360 [ 1025.384442][ T30] schedule+0x164/0x360 [ 1025.388684][ T30] schedule_preempt_disabled+0x13/0x30 [ 1025.394788][ T30] __mutex_lock+0x7fe/0x1300 [ 1025.399477][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1025.404695][ T30] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1025.410904][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1025.416728][ T30] ? net_generic+0x1e/0x240 [ 1025.421337][ T30] ? net_generic+0x1e/0x240 [ 1025.431587][ T30] register_netdevice_notifier_net+0x1a/0xa0 [ 1025.438238][ T30] ops_init+0x35c/0x5c0 [ 1025.442474][ T30] setup_net+0x118/0x340 [ 1025.447063][ T30] ? __pfx_setup_net+0x10/0x10 [ 1025.451916][ T30] ? preinit_net+0x47d/0x780 [ 1025.457051][ T30] copy_net_ns+0x50e/0x730 [ 1025.461528][ T30] create_new_namespaces+0x3e7/0x6a0 [ 1025.467033][ T30] ? security_capable+0x7e/0x2c0 [ 1025.472036][ T30] unshare_nsproxy_namespaces+0x11a/0x160 [ 1025.478419][ T30] ksys_unshare+0x51d/0x930 [ 1025.483073][ T30] ? fput_close_sync+0x11f/0x240 [ 1025.490137][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1025.495554][ T30] __x64_sys_unshare+0x38/0x50 [ 1025.500418][ T30] do_syscall_64+0x14d/0xf80 [ 1025.505517][ T30] ? trace_irq_disable+0x3b/0x150 [ 1025.510594][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.517169][ T30] ? clear_bhb_loop+0x40/0x90 [ 1025.521953][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.528343][ T30] RIP: 0033:0x7f5dac99dae7 [ 1025.533108][ T30] RSP: 002b:00007f5dacd3ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1025.541591][ T30] RAX: ffffffffffffffda RBX: 00007f5daca33d1b RCX: 00007f5dac99dae7 [ 1025.550097][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1025.558558][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1025.566920][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1025.576963][ T30] R13: 0000000000000003 R14: 00007fff1567d828 R15: 0000000000000000 [ 1025.593840][ T30] [ 1025.597000][ T30] INFO: task syz-executor:16262 blocked for more than 146 seconds. [ 1025.605845][ T30] Tainted: G L syzkaller #0 [ 1025.612394][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.621221][ T30] task:syz-executor state:D stack:27264 pid:16262 tgid:16262 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1025.634191][ T30] Call Trace: [ 1025.637527][ T30] [ 1025.640492][ T30] __schedule+0x15dd/0x52d0 [ 1025.646060][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1025.651536][ T30] ? __pfx_kasan_save_track+0x1/0x10 [ 1025.657510][ T30] ? kasan_save_track+0x3e/0x80 [ 1025.662411][ T30] ? __pfx___schedule+0x10/0x10 [ 1025.668738][ T30] ? schedule+0x90/0x360 [ 1025.673712][ T30] schedule+0x164/0x360 [ 1025.677936][ T30] schedule_preempt_disabled+0x13/0x30 [ 1025.686465][ T30] __mutex_lock+0x7fe/0x1300 [ 1025.693941][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1025.698827][ T30] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1025.707423][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1025.712589][ T30] ? net_generic+0x1e/0x240 [ 1025.717217][ T30] ? net_generic+0x1e/0x240 [ 1025.721777][ T30] register_netdevice_notifier_net+0x1a/0xa0 [ 1025.728376][ T30] ops_init+0x35c/0x5c0 [ 1025.732864][ T30] setup_net+0x118/0x340 [ 1025.737173][ T30] ? __pfx_setup_net+0x10/0x10 [ 1025.741985][ T30] ? preinit_net+0x47d/0x780 [ 1025.747585][ T30] copy_net_ns+0x50e/0x730 [ 1025.752091][ T30] create_new_namespaces+0x3e7/0x6a0 [ 1025.757851][ T30] ? security_capable+0x7e/0x2c0 [ 1025.763133][ T30] unshare_nsproxy_namespaces+0x11a/0x160 [ 1025.768951][ T30] ksys_unshare+0x51d/0x930 [ 1025.773897][ T30] ? fput_close_sync+0x11f/0x240 [ 1025.778903][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1025.784633][ T30] __x64_sys_unshare+0x38/0x50 [ 1025.789459][ T30] do_syscall_64+0x14d/0xf80 [ 1025.799191][ T30] ? trace_irq_disable+0x3b/0x150 [ 1025.805216][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.811352][ T30] ? clear_bhb_loop+0x40/0x90 [ 1025.818560][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.824875][ T30] RIP: 0033:0x7fb5b8d9dae7 [ 1025.829333][ T30] RSP: 002b:00007fb5b913ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1025.838234][ T30] RAX: ffffffffffffffda RBX: 00007fb5b8e33d1b RCX: 00007fb5b8d9dae7 [ 1025.846560][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1025.855304][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1025.863882][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1025.871935][ T30] R13: 0000000000000003 R14: 00007fff42e64cb8 R15: 0000000000000000 [ 1025.880402][ T30] [ 1025.883758][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1025.895974][ T30] INFO: task syz-executor:16265 blocked for more than 146 seconds. [ 1025.910594][ T30] Tainted: G L syzkaller #0 [ 1025.917537][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.929217][ T30] task:syz-executor state:D stack:27264 pid:16265 tgid:16265 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1025.941597][ T30] Call Trace: [ 1025.945200][ T30] [ 1025.948253][ T30] __schedule+0x15dd/0x52d0 [ 1025.953283][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1025.958716][ T30] ? __pfx_kasan_save_track+0x1/0x10 [ 1025.965068][ T30] ? kasan_save_track+0x3e/0x80 [ 1025.970013][ T30] ? __pfx___schedule+0x10/0x10 [ 1025.975392][ T30] ? schedule+0x90/0x360 [ 1025.979716][ T30] schedule+0x164/0x360 [ 1025.993035][ T30] schedule_preempt_disabled+0x13/0x30 [ 1026.001131][ T30] __mutex_lock+0x7fe/0x1300 [ 1026.006424][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1026.011257][ T30] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1026.020640][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1026.026023][ T30] ? net_generic+0x1e/0x240 [ 1026.030588][ T30] ? net_generic+0x1e/0x240 [ 1026.037531][ T30] register_netdevice_notifier_net+0x1a/0xa0 [ 1026.043873][ T30] ops_init+0x35c/0x5c0 [ 1026.048130][ T30] setup_net+0x118/0x340 [ 1026.052423][ T30] ? __pfx_setup_net+0x10/0x10 [ 1026.057843][ T30] ? preinit_net+0x47d/0x780 [ 1026.063303][ T30] copy_net_ns+0x50e/0x730 [ 1026.067825][ T30] create_new_namespaces+0x3e7/0x6a0 [ 1026.074004][ T30] ? security_capable+0x7e/0x2c0 [ 1026.079018][ T30] unshare_nsproxy_namespaces+0x11a/0x160 [ 1026.085233][ T30] ksys_unshare+0x51d/0x930 [ 1026.089797][ T30] ? fput_close_sync+0x11f/0x240 [ 1026.095203][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1026.103546][ T30] __x64_sys_unshare+0x38/0x50 [ 1026.108407][ T30] do_syscall_64+0x14d/0xf80 [ 1026.113716][ T30] ? trace_irq_disable+0x3b/0x150 [ 1026.118852][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.128561][ T30] ? clear_bhb_loop+0x40/0x90 [ 1026.133600][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.139559][ T30] RIP: 0033:0x7f8b2ad9dae7 [ 1026.146845][ T30] RSP: 002b:00007f8b2b13ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1026.155681][ T30] RAX: ffffffffffffffda RBX: 00007f8b2ae33d1b RCX: 00007f8b2ad9dae7 [ 1026.163964][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1026.172012][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1026.180884][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1026.189677][ T30] R13: 0000000000000003 R14: 00007ffdfd9e8c98 R15: 0000000000000000 [ 1026.198313][ T30] [ 1026.203477][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1026.221479][ T30] [ 1026.221479][ T30] Showing all locks held in the system: [ 1026.232066][ T30] 1 lock held by khungtaskd/30: [ 1026.240119][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1026.256259][ T30] 1 lock held by udevd/5194: [ 1026.260925][ T30] 2 locks held by getty/5581: [ 1026.266037][ T30] #0: ffff888036f280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1026.275913][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1026.286527][ T30] 3 locks held by kworker/u8:11/8186: [ 1026.291937][ T30] #0: ffff888031fe0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1026.307793][ T30] #1: ffffc9000d44fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1026.322059][ T30] #2: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1026.331699][ T30] 3 locks held by kworker/u8:12/9193: [ 1026.337522][ T30] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1026.362623][ T30] #1: ffffc90004237c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1026.384929][ T30] #2: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1026.402599][ T30] 3 locks held by kworker/1:16/15295: [ 1026.422722][ T30] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1026.435274][ T30] #1: ffffc90004cd7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1026.446473][ T30] #2: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa5/0xfe0 [ 1026.456509][ T30] 1 lock held by syz-executor/15733: [ 1026.461976][ T30] #0: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1026.476807][ T30] 2 locks held by syz.0.3079/16136: [ 1026.482118][ T30] 2 locks held by syz.9.3111/16211: [ 1026.488532][ T30] #0: ffffffff90139dd8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1026.498548][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1026.509010][ T30] 1 lock held by syz.2.3118/16232: [ 1026.515330][ T30] #0: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1026.524793][ T30] 2 locks held by syz.8.3119/16238: [ 1026.530037][ T30] #0: ffff8880216b26f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1026.540823][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1026.550635][ T30] 1 lock held by syz.4.3124/16251: [ 1026.556471][ T30] #0: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1026.568829][ T30] 1 lock held by syz.4.3124/16253: [ 1026.574255][ T30] #0: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1026.584051][ T30] 2 locks held by syz-executor/16256: [ 1026.589512][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.601384][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.614864][ T30] 2 locks held by syz-executor/16259: [ 1026.620297][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.630608][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.641530][ T30] 2 locks held by syz-executor/16262: [ 1026.647244][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.657030][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.668291][ T30] 2 locks held by syz-executor/16265: [ 1026.677142][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.687073][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.697933][ T30] 2 locks held by syz-executor/16269: [ 1026.706919][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.718211][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.729290][ T30] 2 locks held by syz-executor/16276: [ 1026.735314][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.745124][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.755974][ T30] 2 locks held by syz-executor/16279: [ 1026.761382][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.771280][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.784156][ T30] 2 locks held by syz-executor/16282: [ 1026.789592][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.799497][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.810331][ T30] 2 locks held by syz-executor/16285: [ 1026.817240][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.827063][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.837880][ T30] 2 locks held by syz-executor/16288: [ 1026.843578][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.853368][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.866489][ T30] 2 locks held by syz-executor/16295: [ 1026.872257][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.882302][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.893256][ T30] 2 locks held by syz-executor/16298: [ 1026.898719][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.909623][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.924125][ T30] 2 locks held by syz-executor/16301: [ 1026.929553][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.939663][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.961010][ T30] 2 locks held by syz-executor/16304: [ 1026.966636][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1026.976594][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1026.987209][ T30] 2 locks held by syz-executor/16308: [ 1026.992657][ T30] #0: ffffffff8fbc23f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1027.002423][ T30] #1: ffffffff8fbd0b88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1027.013727][ T30] [ 1027.016121][ T30] ============================================= [ 1027.016121][ T30] [ 1027.026109][ T30] NMI backtrace for cpu 0 [ 1027.026134][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.026163][ T30] Tainted: [L]=SOFTLOCKUP [ 1027.026171][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1027.026186][ T30] Call Trace: [ 1027.026195][ T30] [ 1027.026205][ T30] dump_stack_lvl+0xe8/0x150 [ 1027.026241][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1027.026267][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1027.026298][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1027.026326][ T30] sys_info+0x135/0x170 [ 1027.026357][ T30] watchdog+0xfd9/0x1030 [ 1027.026383][ T30] ? watchdog+0x21a/0x1030 [ 1027.026407][ T30] kthread+0x388/0x470 [ 1027.026428][ T30] ? __pfx_watchdog+0x10/0x10 [ 1027.026445][ T30] ? __pfx_kthread+0x10/0x10 [ 1027.026466][ T30] ret_from_fork+0x51e/0xb90 [ 1027.026495][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.026520][ T30] ? __switch_to+0xc7d/0x1450 [ 1027.026547][ T30] ? __pfx_kthread+0x10/0x10 [ 1027.026570][ T30] ret_from_fork_asm+0x1a/0x30 [ 1027.026616][ T30] [ 1027.026625][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1027.144204][ C1] NMI backtrace for cpu 1 [ 1027.144226][ C1] CPU: 1 UID: 0 PID: 9196 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.144252][ C1] Tainted: [L]=SOFTLOCKUP [ 1027.144259][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1027.144272][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1027.144297][ C1] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 1027.144326][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 0c 49 85 00 48 c7 c3 98 f9 1d 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d d9 e2 71 11 74 11 83 e0 04 c1 e8 02 5b [ 1027.144348][ C1] RSP: 0018:ffffc9000cfd74f8 EFLAGS: 00000a06 [ 1027.144363][ C1] RAX: 0000000000000000 RBX: ffff8880b8733998 RCX: 0000000000000002 [ 1027.144376][ C1] RDX: 0000000028752fbd RSI: ffffffff8c27d560 RDI: ffffffff8c27d520 [ 1027.144398][ C1] RBP: dffffc0000000000 R08: ffffffff81769a55 R09: ffffffff8e75e5e0 [ 1027.144411][ C1] R10: ffffc9000cfd7638 R11: ffffffff81b0eba0 R12: 1ffff920019faebd [ 1027.144426][ C1] R13: ffffc9000cfd7620 R14: ffffffff8e1b4798 R15: dffffc0000000000 [ 1027.144440][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 1027.144456][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1027.144468][ C1] CR2: 00007ff314f47e20 CR3: 0000000036f96000 CR4: 00000000003526f0 [ 1027.144485][ C1] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 1027.144497][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1027.144509][ C1] Call Trace: [ 1027.144516][ C1] [ 1027.144523][ C1] ? stack_trace_save+0xa9/0x100 [ 1027.144544][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1027.144571][ C1] unwind_next_frame+0xd4/0x23c0 [ 1027.144603][ C1] ? __unwind_start+0x5b8/0x760 [ 1027.144629][ C1] ? stack_trace_save+0xa9/0x100 [ 1027.144649][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1027.144669][ C1] arch_stack_walk+0x11b/0x150 [ 1027.144705][ C1] ? stack_trace_save+0xa9/0x100 [ 1027.144738][ C1] stack_trace_save+0xa9/0x100 [ 1027.144760][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1027.144798][ C1] ? __kfree_skb+0x5d/0x210 [ 1027.144821][ C1] ? kthread+0x388/0x470 [ 1027.144843][ C1] ? ret_from_fork+0x51e/0xb90 [ 1027.144867][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1027.144906][ C1] kasan_save_track+0x3e/0x80 [ 1027.144955][ C1] kasan_save_free_info+0x46/0x50 [ 1027.144984][ C1] __kasan_slab_free+0x5c/0x80 [ 1027.145005][ C1] kmem_cache_free+0x187/0x630 [ 1027.145027][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 1027.145049][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 1027.145076][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1027.145103][ C1] process_scheduled_works+0xb6e/0x18c0 [ 1027.145144][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1027.145172][ C1] ? assign_work+0x3d5/0x5e0 [ 1027.145199][ C1] worker_thread+0xa53/0xfc0 [ 1027.145239][ C1] kthread+0x388/0x470 [ 1027.145257][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1027.145281][ C1] ? __pfx_kthread+0x10/0x10 [ 1027.145300][ C1] ret_from_fork+0x51e/0xb90 [ 1027.145326][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.145357][ C1] ? __switch_to+0xc7d/0x1450 [ 1027.145380][ C1] ? __pfx_kthread+0x10/0x10 [ 1027.145399][ C1] ret_from_fork_asm+0x1a/0x30 [ 1027.145435][ C1] [ 1027.472707][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1027.479611][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.490336][ T30] Tainted: [L]=SOFTLOCKUP [ 1027.494698][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1027.504793][ T30] Call Trace: [ 1027.508115][ T30] [ 1027.511072][ T30] vpanic+0x56c/0xa60 [ 1027.515090][ T30] ? __pfx___schedule+0x10/0x10 [ 1027.519972][ T30] ? __pfx_vpanic+0x10/0x10 [ 1027.524504][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1027.529743][ T30] panic+0xc5/0xd0 [ 1027.533497][ T30] ? __pfx_panic+0x10/0x10 [ 1027.537961][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1027.543366][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1027.549558][ T30] watchdog+0x1023/0x1030 [ 1027.553915][ T30] ? watchdog+0x21a/0x1030 [ 1027.558362][ T30] kthread+0x388/0x470 [ 1027.562453][ T30] ? __pfx_watchdog+0x10/0x10 [ 1027.567152][ T30] ? __pfx_kthread+0x10/0x10 [ 1027.571765][ T30] ret_from_fork+0x51e/0xb90 [ 1027.576394][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.581541][ T30] ? __switch_to+0xc7d/0x1450 [ 1027.586245][ T30] ? __pfx_kthread+0x10/0x10 [ 1027.590855][ T30] ret_from_fork_asm+0x1a/0x30 [ 1027.595653][ T30] [ 1027.599291][ T30] Kernel Offset: disabled [ 1027.603646][ T30] Rebooting in 86400 seconds..