last executing test programs: 29m15.201239933s ago: executing program 4 (id=797): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @random="ece65fbcee55", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @random="519f2c11bd89", @multicast2, @multicast, @multicast1}}}}, 0x0) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/\\/o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x91\xef\x8b0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xde) (async) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x835b9, 0x1, 0xfffffffd, 0x30b, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x20, 0x4, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d5b, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="670f79b800000000440f01f8660f2344c744240000000000c74424029e000000c7442406000000000f011424c481505d1bc4c27140e7c422f922e10f1c410f66baf80cb80e0e4987ef66bafc0c66ed0f9779d6", 0x53}], 0x1, 0x0, &(0x7f00000002c0), 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r13, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x40}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x3c}}, 0x0) (async) r14 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r16 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r17 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r17, 0x1, r16, &(0x7f0000000040)={0x9000000d}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r18 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r18, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r19 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r19, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) keyctl$revoke(0x3, r14) 29m13.763031536s ago: executing program 4 (id=803): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x0, 0x0) r9 = dup(r7) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x57) 29m13.40799569s ago: executing program 4 (id=805): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000041000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_ep_write(r0, 0x6, 0x7, &(0x7f0000000080)="b45b8258b28425") listen(r3, 0x5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r7, 0x21, &(0x7f0000000400)={0x0, 0x48fd, 0x4000, 0x3, 0x110}, 0x1) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r9 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMREADOOB(r9, 0xc0104d04, &(0x7f0000000340)={0x1df, 0x0, 0x0}) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaa1f0800450000140000000000019078ac1e0001ac1414aa04009078cbdbffae45a60007006600810232100000000000e00000018e2820bc4c47ed782f3497ca29100c5f5928"], 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r10, 0x0}]) close(0x3) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x101001, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 29m12.529882372s ago: executing program 32 (id=805): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000041000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a391a0890e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_usb_ep_write(r0, 0x6, 0x7, &(0x7f0000000080)="b45b8258b28425") listen(r3, 0x5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r7, 0x21, &(0x7f0000000400)={0x0, 0x48fd, 0x4000, 0x3, 0x110}, 0x1) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r9 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMREADOOB(r9, 0xc0104d04, &(0x7f0000000340)={0x1df, 0x0, 0x0}) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaa1f0800450000140000000000019078ac1e0001ac1414aa04009078cbdbffae45a60007006600810232100000000000e00000018e2820bc4c47ed782f3497ca29100c5f5928"], 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r10, 0x0}]) close(0x3) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x101001, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 18m44.628897251s ago: executing program 1 (id=4389): unshare(0x22020600) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 1) 18m44.552227459s ago: executing program 1 (id=4390): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000300)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\t'], 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 18m42.234747597s ago: executing program 1 (id=4399): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r9, 0x0, 0x0) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000080)=0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(r9, 0xc00c6f3e, &(0x7f0000000040)={0x4, 0x80000, r0}) 18m42.160140552s ago: executing program 1 (id=4400): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70200005f000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000001000)=0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000002a80)}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}], 0x2, 0x40480c0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x36, 0x5, 0x104a}, 0x2c) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x1000) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close(r4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r4) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000c80)={0x9, &(0x7f0000001040)=[{0x9, 0x0, 0x0}, {0x40, 0x77, &(0x7f0000000500)="4c2fe1084440461d9399b0e6c5c14797a7290af186b9abddc31ff6d883bba6e53206c4606dd766e072aaebf70688ffcec86551b943fea8ed93d7d0d4015a1857e3a4c772006a062707d7dd744bf2b812c5e5c289c38f1fd079d0b22c1409e18d03ae8979ce4f727ff76424dfaa233d861301d03362101d", 0x1, 0x1}, {0x3, 0xf8, &(0x7f0000000580)="75bf8dba8fbc90ee6757688cea81afae08b27f0a7c6847323cfb0c25e41048dc830b3a3dd924c4b80b8069878b064d21e97db80c5fab635a657e1eea3a03b9cf96afa363e29c9d95cb8c121406e7a37bcf735fb466df0999fe573569d088dcf3ca9abd5ffbbb749507e96ba08e428ba161b5325edd346fd25a0affff9df70d26e38002d04deb0466d047eaefff4c6136e83d13115620c54d4bc9c87610149af6212d5973e949cf6c39f97a12e12ac560c46f0ad8c1384c6f6a2e2338d285e296aa9f6ea44cc9e1b1f393b1272ac434c6305853624ecd26d9eb52095bdf4c1323125220e9159b032a4cee8d350f6e32ecd6ec1549c25d8732"}, {0xe22, 0x9b, &(0x7f0000000700)="171e16e210ba7b05025f8a7184d604a98d70d9271bc14307a30ca5b8f4fecfa37525acc9cacd355a416b72b345605181515a9eb08ade69429c08859cc2a2611f5c34d3a03cbad52324f22cd628d76459e9d37a8c491b790c7619b5181df2e78e1b5ea3462170f8333c9e46bd87d0dd7016e5858b9027dd34f1e2a193946eb8f756314544c0530874dfe58e1012748ee00a5d055f1f7c7b6912e14f", 0x0, 0x1}, {0x8, 0x2a, &(0x7f00000007c0)="03dd01b250ff2f54f8dbd119e91f13aec570b32c41e0937eb0d910c53baf1c67f26ae4eb2940c2922f6f", 0x1, 0x1}, {0x1000, 0x6, &(0x7f0000000800)="bf00d67217c2"}, {0x583, 0x148, &(0x7f0000001300)="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", 0x1, 0x1}, {0xfff, 0xc3, &(0x7f0000000880)="7c1b3899b17a62ddb3afbdc58f2ecde5d3552a3b52cef816f282fd4a5aedf3b4ff6fec22a47c327015c30a76925146f8a1ebd3ad7aa59540508e05edfaecd7e19035ff135602acd8c2812ca6dd00a1f41144a8dbeff0da1d79c158513f011039b9708cca0ec05d8b52e57773099cbb9fbd97847d33cf1b7ef1e334430d3740df3176be00f3463e806a52f6d1b532132fc2df91a5edb8f7d548240e61db3739098d28e65d27ec59495b60910690a48991d67b5add0a09d72058388d3850b425bc5516c4", 0x1}, {0xfffffffd, 0x0, 0x0, 0x1, 0x1}]}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0x3a, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x1, 0x7, 0xa, {0xa, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x40) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 18m41.978901276s ago: executing program 1 (id=4403): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xa, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x9, &(0x7f00000001c0)=[{0x4a, 0x1, 0xe, 0x80000001}, {0x4, 0x45, 0x80}, {0x4, 0x4, 0x8, 0xfc6}, {0x0, 0x2, 0x7, 0x9}, {0x800, 0x7, 0x71, 0x200}, {0x9, 0x9, 0x89, 0x10000}, {0x4, 0x1, 0x1a, 0x2}, {0x3, 0x4, 0x3, 0xfffffff9}, {0x1, 0x4, 0x4, 0x2}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x10001}}}, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="000d29bd7000fedbdf25090000000c00038008000100ff0300001000048009000189fa40b33100000000240009800800020000000000080002000210000008000100050000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x240090d1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00003c9000/0x1000)=nil) syz_usb_connect(0x5, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ffffff40950b20770000010203010902270001010080fa0904000003ff0000000705810200020007050202000200070583c392"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/76) 18m39.977436167s ago: executing program 1 (id=4419): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0xfffffffffffffdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20008050) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0x6}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xb}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto$packet(r5, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r4, 0x1, 0x2, 0x6, @local}, 0x14) r6 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7, 0x20500) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x5f, 0x3, 0x0, 0x1, 0x3, 0x4, 0xfffffff3, 0x8001, 0x7, 0x7, 0x1, 0x1, 0xfffffffb, 0xe, 0x10, 0x1, {0xfff, 0x4}, 0x16}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000001a40)={0x6, 0x1, 0x4, "3a860b000000000016c713b40c2a3600000000000000000000020100", 0x35303553}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004fff7ffff0000000003"], 0x0, 0x56}, 0x28) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) 18m24.883832812s ago: executing program 33 (id=4419): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0xfffffffffffffdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20008050) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0x6}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xb}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto$packet(r5, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r4, 0x1, 0x2, 0x6, @local}, 0x14) r6 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7, 0x20500) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x5f, 0x3, 0x0, 0x1, 0x3, 0x4, 0xfffffff3, 0x8001, 0x7, 0x7, 0x1, 0x1, 0xfffffffb, 0xe, 0x10, 0x1, {0xfff, 0x4}, 0x16}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000001a40)={0x6, 0x1, 0x4, "3a860b000000000016c713b40c2a3600000000000000000000020100", 0x35303553}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004fff7ffff0000000003"], 0x0, 0x56}, 0x28) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) 15m53.140124615s ago: executing program 5 (id=5344): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={'\x00', 0x3, 0x80000001, 0x81, 0x8000, 0x7fff, r1}) rt_tgsigqueueinfo(r1, r1, 0x9, &(0x7f0000000280)={0x4, 0x7, 0x200}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 15m50.99921557s ago: executing program 5 (id=5363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000500340000000000080026006c09000028005180240000"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080) 15m50.791349925s ago: executing program 5 (id=5366): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 15m50.645968065s ago: executing program 5 (id=5368): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 15m49.621642868s ago: executing program 5 (id=5374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xbf, 0x35, 0x7d, 0x8, 0x2001, 0x4002, 0x3b3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf8, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0xdf, 0x2, 0x1, 0x44, 0xaf, 0x9d, 0x7, [], [{{0x9, 0x5, 0x81, 0xc, 0x40, 0xf, 0x81, 0x9}}]}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x76) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 15m48.619253291s ago: executing program 5 (id=5378): syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x12, 0x22, 0xd, 0x14, 0x3, 0x800, 0x1, 0x5a, 0x1}}) pipe(0x0) 15m47.783486984s ago: executing program 34 (id=5378): syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x12, 0x22, 0xd, 0x14, 0x3, 0x800, 0x1, 0x5a, 0x1}}) pipe(0x0) 8.266741624s ago: executing program 7 (id=10976): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001000330600000000fddbdf250a01010120000080ff0000001a000000000040004e24800000000000000000000000000000000000000080ff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000033500000a"], 0x140}}, 0x200080d4) 8.227930656s ago: executing program 7 (id=10977): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) 8.044158051s ago: executing program 7 (id=10978): fsopen(&(0x7f0000000000)='ceph\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004280)=ANY=[@ANYBLOB="0500000001000000a003000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 7.854677104s ago: executing program 7 (id=10979): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000f0e000/0x1000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/101, 0x65}], 0x1, 0x1, 0x72) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) dup(r0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8, 0x0, 0xb49, 0x0, 0x7, 0x8, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)}], 0x1}}], 0x1, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r4, r4, 0x0, 0xfffa83) syz_emit_ethernet(0x1de, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd605adf000000000000020000000000000000000000000000fe8000000000", @ANYRES8], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x100}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4}) write$sndseq(r7, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) 7.151009549s ago: executing program 0 (id=10987): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x202400, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) r2 = dup2(r0, r1) syz_open_dev$sndctrl(&(0x7f0000000140), 0xa, 0x103002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) (async) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') (async) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) (async) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x4621c0, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r11 = syz_pidfd_open(r8, 0x0) setns(r11, 0x24020000) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r12, &(0x7f0000000340)=ANY=[@ANYRES16=r5], 0x454680) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$sndseq(r0, &(0x7f00000001c0)=[{0x6, 0x81, 0x3, 0x5, @time={0x9, 0x50c}, {0xa3, 0x9}, {0x1, 0x3}, @raw8={"9ec64824b004533cebed06ac"}}, {0x2, 0x2, 0x0, 0x2, @time={0x0, 0x4}, {0x6, 0x2e}, {0xac, 0x28}, @note={0x5, 0x97, 0x0, 0x2, 0x14}}, {0x8, 0xe8, 0x4, 0x5, @tick=0x1, {0xe, 0xb}, {0xba, 0x10}, @control={0x3, 0xb9ad, 0x1}}, {0x54, 0x0, 0x9, 0x5, @time={0x9, 0x4000002}, {0x0, 0xfb}, {0x7, 0x91}, @connect={{0x4, 0x1}, {0x7f, 0xf4}}}, {0x2, 0x5, 0xff, 0x2, @time={0x9, 0x5}, {0x25}, {0x10, 0x4}, @connect={{0xfa, 0x5}, {0xff, 0xe}}}, {0xa, 0x4, 0xe, 0xff, @tick=0x10000, {0x1, 0x81}, {0x66, 0x2a}, @note={0x5, 0x81, 0x5, 0x1, 0x1}}], 0xa8) (async, rerun: 64) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'netpci0\x00', 0x3}, 0x18) (rerun: 64) 6.050603828s ago: executing program 0 (id=10993): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000040034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb91", 0xb9, 0x4040004, 0x0, 0x0) 5.799736558s ago: executing program 0 (id=10994): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x4b01, 0x16, 0x0, 0x0) 5.442952009s ago: executing program 0 (id=10999): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 5.304268015s ago: executing program 0 (id=11000): r0 = syz_open_dev$I2C(&(0x7f0000000500), 0x0, 0x20000) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x1, 0x2, 0x7, &(0x7f00000000c0)={0x17, "a58f5f34170a090000f5008998090000000000000000000200"}}) 5.183973654s ago: executing program 0 (id=11001): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x100000000000000, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) 4.090938764s ago: executing program 7 (id=11008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000002c0)="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", 0x123}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000400)="7b375ad6710bd8c284308f7b13c43dc81d6cdf9c5a50fc9459cc2c3a859d656e7854b3eea75131d3d45494b62116067779cad5c7dc2b2c96b72cac45dd0f955f75208c75cec2c468071706bd9bfa2c62131e21b3c906932cf68a57c5a3ce340a1a15dbcee768a5e0a6e1968a063355c9deb7e8a3610b4c245b73df93d31850e2263c78829cc6ccc7d927d757b0d94be8f71ab18b0404fd1de912296bad395ad113b90bca512d3e477e6323cef87a45f5f30d2f7a6bd88979ab3b1c48a0f9f781746cbed600f14cb9643f4554937a6b0c60c3ad2fe82629fb45a14aec89972a2b3f29dcad532023a39cff25c5", 0xec}, {&(0x7f0000000600)="bdc7cdfd5c7fad71b11b78f2e0e76b01893f12207c34ecee4c3bfcaa9161aebdc44e9c8f4c1ab0e616f8915ac82f85bcdbd119c5d5cfc2d6a8f4134f8c85960a5df7ca8d8a8fcb6d47233b947567f67fc0117a8b1223329c2f7ee1c8672f38a502deca709a01b64f7f3427023f283c2943c4097f63d58b681383852fa1dd41407d588f2aeb0f2422fb5a4380924b7b51286699a1df6b06f534a58b6de281f051203829cb767090f2a6515c36b1151d4bdaccfc89ea37ec49efc511bdf45a56cf939186e3d1945f1ac4237a03dac5c20292450f6020c1dec690", 0xd9}], 0x2, &(0x7f0000000cc0)=[@ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x11, [@dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010101]}, @noop, @timestamp_prespec={0x44, 0x24, 0x3b, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x5}, {@multicast1, 0x4}, {@loopback, 0xed}, {@multicast1, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x95, 0xd, "194186736af2c6f87e1f13"}, @timestamp_addr={0x44, 0xc, 0x7b, 0x1, 0x2, [{@remote, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010102}}}], 0xb0}}, {{&(0x7f0000000d80)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000dc0)="a2d9ca69fdfcdefc44733939307ca738c4dffddd98fa3686a466f2a7eb4d64cb94864324903a495cde5072bdc985bb918cf07165", 0x34}, {&(0x7f0000000e00)="9cbf42d7607579769c8b7a14d62f3c454b49a1a7835e960c9daa871b32e5646298281104457e4e84b0a6c71a8e29b9018497192e90b15fa15089b42d21c096430ed4844469785186df59de9bc5a9beb5a2030cb979d35864ef5d369a04264c50866043f17aeb0d1fc82142a8ae72f4236fe239162dca62aa2b69c945a34fddd8ac9d773be9c9bf1cd70348dc2bfe7bcdc1c15a8a0502e517a6a62510ed934d12e7351e93bd33fb750a7eea0e08abff129236407e1e5d3c45cf7c3a8711c045ed252eb88c57ceeb38fe62f1a2d0b85244e20f", 0xd2}, {&(0x7f0000000f00)="ed043aa528cd294996b64236b6091f71fa0f4c0a87874bfed2f781c07996340a47094add0c360e8b304f61a6fa02d820dad51f0514e6405c96171568278e0c410d89f8abcaf5524b5151a7fbbdb5d3c8abe9e93b7f0f2d358100073e4cbddcd5755cf4bdb8cfadc376d7d98da8b853683193057bc95c65f1c3d699a9141b35e81052", 0x82}, {&(0x7f0000000fc0)="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", 0xff}], 0x4, &(0x7f0000001100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x9d, [@loopback, @local, @local, @rand_addr=0x64010101, @broadcast, @empty, @local, @multicast1]}, @lsrr={0x83, 0x1f, 0xad, [@broadcast, @loopback, @rand_addr=0x64010100, @empty, @loopback, @empty, @private=0xa010102]}, @rr={0x7, 0x13, 0x52, [@loopback, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x130}}, {{&(0x7f0000001240)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001280)="e4076565943ac41bda36c1a389efe9a9a3", 0x11}, {&(0x7f00000012c0)="200ff59a314490f48a31d359fb86404aff53fc3eb896cf", 0x17}, {&(0x7f0000001300)="2015f5b6ad9c50b8fa35de69d3edad9b2c7933cae1f57374b893b2e567aedff5068a6603f48d68e913925caa35667abfbdb1780142d949acd16db734bf5187238c60672dbab53b50f20df13a78ac97588793fe99e8f82c89335b32b9862660433f2fc668fb6dc2eb24453fc34f5a39086df69faedc9054e612701dd28e2c43d3a48d0dea35a8566bc03fe97f81f944481dccaa4479d359763a8179fb2784d78fc9b4b054fd45a11b7de463a4d10e0a6bbb0ce49ee8a9916bbce747221869b0ce1efa075a1ce062356d68e1487fbaa624c31ac5283173f89edf", 0xd9}, {&(0x7f0000001400)="ed9beaaa90e36d07b2695def07e36cc19e8c6d7b8d46d8163456d991041d1d3fe57f14345c63856cc07fb4574bafa87c59224b9729b8a089d0a5fe8e71a0c7f3e50617f1bf72840e591ad377a9482e4681c44a76b1ef5aea67d0878d10d938422cbc3ac2280db144e238994396eb02c8e6d82daff315557626a4c33830faef", 0x7f}, {&(0x7f0000001480)="85cca9425d298b6fac8696f0f5b74fe577a7738c1a355eea71073d47f45a3f3b2068c1f5a245ed415877c03af960ce816a4194d845eb06abc54457e5d155ba446ac2de90269630f57dbcfc29124d0f1a715f5b74fb4a4e3d81fd1f", 0x5b}], 0x5}}], 0x4, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) r3 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c43000101020301010902190001010080fa0904000001ffffff00070584"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) (async) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) (async) read$dsp(r4, &(0x7f0000000280)=""/79, 0x4f) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf253900000008000300", @ANYRES32=r7, @ANYBLOB="10005a"], 0x2c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="0003fd0fa4004f61775b48560d9ca3238d759b0401d924f4786399975b7bbfdbdd070af706a2629225d6e3d741adaec460f4420a7f84bdb15d662eda7e32d9900fc3034a7bc4aaa921c267e3f634e02801f8d7eaf3288881596eccdb85c0c4dd4325eca258d5671fe8014aa1e48c37bc02a479e974ed549793837fefe90bb3341f540d470287e07d27411ec837b7ed0d1b2393f28ee28b95824e7e21d883b14ec4e8cb0213765cbd6e0f63c32a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.807178532s ago: executing program 2 (id=11009): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) fcntl$setlease(r0, 0x400, 0x2) 3.806765775s ago: executing program 2 (id=11010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x31) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES64=r0, @ANYBLOB="73f0dce14bd37ad05b35d5d8e8eaaf92c2e823", @ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x2004c850}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f00000000c0)={0x10001, 0x8}) 3.709287588s ago: executing program 2 (id=11011): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x2) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="db", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000df"], 0x20, 0x40000}, 0x4008084) (fail_nth: 70) 3.615550389s ago: executing program 2 (id=11012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) (async) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) (async) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRESOCT, @ANYBLOB="d5eb6c08", @ANYRESOCT, @ANYRES16=r3, @ANYBLOB="00000000000000000000004fd08a50c4d21d89000014000000000000"], 0x48) (async) socket(0x1d, 0x2, 0x6) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1198, &(0x7f0000000040)={0x0, 0x3cbe, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async) io_uring_enter(r4, 0x2619, 0xcf74, 0x36, 0x0, 0x0) (async) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000200000000000000017f7502", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x40000200, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x10b, 0x0, 0x1000}]}) 3.194980116s ago: executing program 3 (id=11013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$getownex(r1, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.062214885s ago: executing program 3 (id=11014): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') readv(r1, &(0x7f0000000980)=[{&(0x7f0000000300)=""/118, 0x76}], 0x1) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000000)={'\x00', 0x2, 0x2, 0xff}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x2, 0x4, 0x1, 0x0, @sint={0x8001, 0xa}}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000080000004200000040"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_OIF={0x8}]}, 0x28}}, 0x8080) openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x20000000, 0x3, 0x403}}]}, {0x20}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001580)={r2, &(0x7f0000000180), 0x0}, 0x20) 2.635027993s ago: executing program 2 (id=11015): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000f0e000/0x1000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/101, 0x65}], 0x1, 0x1, 0x72) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) dup(r0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8, 0x0, 0xb49, 0x0, 0x7, 0x8, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)}], 0x1}}], 0x1, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r4, r4, 0x0, 0xfffa83) syz_emit_ethernet(0x1de, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd605adf000000000000020000000000000000000000000000fe8000000000", @ANYRES8], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x100}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4}) write$sndseq(r7, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) 1.920150639s ago: executing program 6 (id=11017): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000210000002800128009000100766c616e000000001800028006000100040000000c000200020000000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x58}, 0x1, 0xba01}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x200000000622c, 0x0) r6 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x0) ioctl$MEMGETREGIONINFO(r6, 0xc0104d08, &(0x7f0000000040)={0x1, 0x101, 0x7fffffff, 0x9}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0x2, 0x80000000, 0x3}) 1.837156673s ago: executing program 6 (id=11018): socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x400017e) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.734749059s ago: executing program 6 (id=11019): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2, 0x0, 0x0, 0xa1}, 0x40050) (fail_nth: 24) 1.718150527s ago: executing program 6 (id=11020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000480)={0x0, @in={{0x2, 0x4ea0, @empty}}, [0x9, 0x8, 0x233666cf, 0x4, 0x8001, 0xd4, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dbf, 0x8, 0x7]}, &(0x7f0000000300)=0x100) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000040)) fsopen(&(0x7f0000000000)='proc\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)=ANY=[]) 1.637604115s ago: executing program 6 (id=11021): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00060000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 1.60732282s ago: executing program 3 (id=11022): syz_open_dev$vim2m(&(0x7f0000000280), 0x2004, 0x2) r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x5281, 0x800, 0xffffffee, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x2000000, 0x8, 0x2, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.519075329s ago: executing program 6 (id=11023): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010000304000000000000008000000000", @ANYRES32=0x0, @ANYBLOB="460609000000f543a3642afc81064f0fe6f65f5d00000014003500766c076e310000000000000015000000"], 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@ll={0x11, 0x16, 0x0, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)="b211", 0x2}, {0x0}], 0x2}, 0x20000010) sendto$inet6(r3, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r3, &(0x7f0000000d80), 0x750, 0x10040, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x2000000d}) read$FUSE(r4, &(0x7f00000019c0)={0x2020}, 0xfffffdda) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x20000, 0x1, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(r2, 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010027bd70010000d3a05ffa0000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c001a800800028004000180"], 0x34}}, 0x0) 1.367741585s ago: executing program 3 (id=11024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x4, 0x1, 0x81, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x13000000}, 0x50) 1.29029377s ago: executing program 3 (id=11025): syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x1) unshare(0x26020480) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @local, 0x2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x30002010}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xf7, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x3, 0x1}, 0x8) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000180)={0x2000004, {{0xa, 0x4e23, 0x8006f0, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x8, @empty, 0x6}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x0) 926.927862ms ago: executing program 7 (id=11026): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xe7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7b, 0x3}}}}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4100, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) close(r4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2e, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xc}, {0x0, 0xfff1}, {0x0, 0xf}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RMKNOD(r8, &(0x7f0000000280)={0x14, 0x13, 0x1, {0x40, 0x1, 0x3}}, 0x14) r9 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x121001) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000100)="a8be01ffbb8c", 0x0, 0x0, 0x1c, 0x0, 0x0}) 391.739344ms ago: executing program 3 (id=11027): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x110000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="000290"}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0xfcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=11028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rt_sigpending(0x0, 0x1000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000100), 0xff, 0x22480) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f00000001c0)={0x0, 0x92, 0x0, '\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES8=r2, @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x42844}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="0fc7a440000000000f23d80f21f835c000009066b87e000f00d0c4c3556903f3672e660f3828cc0f01c90fc73b0fc7ae07000000360f01c49a3a91ee768d000f080f09", 0x43}], 0x1, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x3ffff9, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x286, 0x3, 0x2, 0x4, 0x8, 0x5, 0x101, 0x100000003], 0x4, 0x290fc4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000003c0)=@x86={0xdb, 0x3, 0x1, 0x0, 0x4f5, 0x0, 0xff, 0x2, 0x2, 0xb0, 0x3, 0xc, 0x0, 0x0, 0xf, 0xd, 0x9, 0x9, 0x6, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10682'. [ 1943.126989][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1943.896909][T31323] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1943.987176][ T5689] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1944.048780][T31323] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1944.049675][T31323] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1944.049697][T31323] usb 3-1: config 1 has no interface number 0 [ 1944.049719][T31323] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1944.049751][T31323] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1944.049765][T31323] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1944.054658][T31323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.054679][T31323] usb 3-1: Product: syz [ 1944.054687][T31323] usb 3-1: Manufacturer: syz [ 1944.054694][T31323] usb 3-1: SerialNumber: syz [ 1944.069471][ T7576] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1944.167914][ T5689] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1944.169440][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.169490][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.221322][ T5689] as10x_usb: device has been detected [ 1944.222140][ T5689] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1944.265384][ T5689] usb 4-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 1944.273747][ T7576] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1944.331472][ T5689] as10x_usb: error during firmware upload part1 [ 1944.332089][ T5689] Registered device Abilis Systems DVB-Titan [ 1944.383091][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1944.385314][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.389312][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1944.390310][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.520952][T12008] usb 4-1: USB disconnect, device number 123 [ 1944.559379][T12008] Unregistered device Abilis Systems DVB-Titan [ 1944.562231][T12008] as10x_usb: device has been disconnected [ 1944.842829][T31323] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1944.845912][ C1] sierra_net 3-1:1.7 wwan0: : unexpected notification bd! [ 1945.095011][ T7587] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1945.727001][T12008] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1945.878406][T12008] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1945.881554][T12008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.881581][T12008] usb 4-1: Product: syz [ 1945.881596][T12008] usb 4-1: Manufacturer: syz [ 1945.881636][T12008] usb 4-1: SerialNumber: syz [ 1945.883750][T12008] usb 4-1: config 0 descriptor?? [ 1946.570873][T12008] usb 4-1: Firmware version (0.0) predates our first public release. [ 1946.570890][T12008] usb 4-1: Please update to version 0.2 or newer [ 1946.621005][T12008] usb 4-1: USB disconnect, device number 124 [ 1946.654333][T31323] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 1946.654361][T31323] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 1946.654898][T31323] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 1946.654919][T31323] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 1946.694100][T31323] usb 3-1: USB disconnect, device number 118 [ 1946.707009][T31323] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 1946.878555][T31323] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1947.047157][T26951] net_ratelimit: 31 callbacks suppressed [ 1947.047181][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1947.157335][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1947.174519][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1947.185162][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1947.267532][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1947.290738][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 1947.388268][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1947.438432][T19719] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1947.474528][ T7625] FAULT_INJECTION: forcing a failure. [ 1947.474528][ T7625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1947.474565][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.6.10707 Tainted: G L syzkaller #0 PREEMPT(full) [ 1947.474591][ T7625] Tainted: [L]=SOFTLOCKUP [ 1947.474599][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1947.474611][ T7625] Call Trace: [ 1947.474619][ T7625] [ 1947.474628][ T7625] dump_stack_lvl+0xe8/0x150 [ 1947.474661][ T7625] should_fail_ex+0x410/0x560 [ 1947.474687][ T7625] _copy_from_user+0x2d/0xb0 [ 1947.474711][ T7625] ___sys_sendmsg+0x1c6/0x360 [ 1947.474737][ T7625] ? __lock_acquire+0x747/0x2de0 [ 1947.474762][ T7625] ? __pfx____sys_sendmsg+0x10/0x10 [ 1947.474785][ T7625] ? __lock_acquire+0x747/0x2de0 [ 1947.474813][ T7625] ? kstrtouint+0x6e/0xe0 [ 1947.474880][ T7625] __sys_sendmmsg+0x273/0x4d0 [ 1947.474911][ T7625] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1947.474944][ T7625] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1947.474981][ T7625] ? ksys_write+0x242/0x270 [ 1947.475011][ T7625] ? __pfx_ksys_write+0x10/0x10 [ 1947.475045][ T7625] __x64_sys_sendmmsg+0xa0/0xc0 [ 1947.475071][ T7625] do_syscall_64+0x166/0x520 [ 1947.475091][ T7625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.475110][ T7625] ? clear_bhb_loop+0x70/0xc0 [ 1947.475131][ T7625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.475149][ T7625] RIP: 0033:0x7fcabab9e159 [ 1947.475166][ T7625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1947.475182][ T7625] RSP: 002b:00007fcab8df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1947.475202][ T7625] RAX: ffffffffffffffda RBX: 00007fcabae25fa0 RCX: 00007fcabab9e159 [ 1947.475224][ T7625] RDX: 04000000000002cf RSI: 00002000000002c0 RDI: 0000000000000003 [ 1947.475237][ T7625] RBP: 00007fcab8df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1947.475249][ T7625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1947.475261][ T7625] R13: 00007fcabae26038 R14: 00007fcabae25fa0 R15: 00007fcabaf4fa48 [ 1947.475287][ T7625] [ 1947.502850][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1947.550443][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10708'. [ 1947.550469][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10708'. [ 1947.550484][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10708'. [ 1947.607585][T19719] usb 3-1: Using ep0 maxpacket: 32 [ 1947.610496][T19719] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1947.615503][T19719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.615536][T19719] usb 3-1: Product: syz [ 1947.615550][T19719] usb 3-1: Manufacturer: syz [ 1947.615564][T19719] usb 3-1: SerialNumber: syz [ 1947.617522][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1947.663459][T19719] usb 3-1: config 0 descriptor?? [ 1947.712390][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10710'. [ 1947.787041][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1947.871763][T19719] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1947.871793][T19719] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1947.987679][ T7632] bridge0: port 5(vlan6) entered blocking state [ 1947.988073][ T7632] bridge0: port 5(vlan6) entered disabled state [ 1947.988448][ T7632] vlan6: entered allmulticast mode [ 1947.988466][ T7632] geneve0: entered allmulticast mode [ 1947.993411][ T7632] vlan6: entered promiscuous mode [ 1947.993432][ T7632] geneve0: entered promiscuous mode [ 1947.999437][T19719] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1948.014664][T19719] usb 3-1: USB disconnect, device number 119 [ 1948.067544][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1948.187299][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1948.307015][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1949.395074][T31323] wiimote 0005:057E:0306.0070: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 1949.395410][T31323] wiimote 0005:057E:0306.0070: New device registered [ 1949.419819][ T7660] wiimote 0005:057E:0306.0070: Device removed [ 1949.433130][T12008] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1949.577020][T12008] usb 3-1: Using ep0 maxpacket: 16 [ 1949.577644][T12008] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1949.578660][T12008] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1949.578683][T12008] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1949.578701][T12008] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1949.580724][T12008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.580749][T12008] usb 3-1: Product: syz [ 1949.580763][T12008] usb 3-1: Manufacturer: syz [ 1949.580778][T12008] usb 3-1: SerialNumber: syz [ 1949.594576][ T7663] fido_id[7663]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1949.674556][T12008] usb 3-1: 0:2 : does not exist [ 1949.804646][T12008] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1949.864784][T12008] usb 3-1: USB disconnect, device number 120 [ 1949.895727][ T4161] udevd[4161]: setting mode of /dev/bus/usb/003/120 to 020664 failed: No such file or directory [ 1949.895946][ T4161] udevd[4161]: setting owner of /dev/bus/usb/003/120 to uid=0, gid=0 failed: No such file or directory [ 1949.944248][ T4158] udevd[4158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1950.173281][ T7669] FAULT_INJECTION: forcing a failure. [ 1950.173281][ T7669] name failslab, interval 1, probability 0, space 100, times 0 [ 1950.173305][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.7.10719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1950.173321][ T7669] Tainted: [L]=SOFTLOCKUP [ 1950.173325][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1950.173332][ T7669] Call Trace: [ 1950.173337][ T7669] [ 1950.173343][ T7669] dump_stack_lvl+0xe8/0x150 [ 1950.173364][ T7669] should_fail_ex+0x410/0x560 [ 1950.173380][ T7669] should_failslab+0xa8/0x100 [ 1950.173395][ T7669] __kmalloc_cache_noprof+0xa3/0x600 [ 1950.173407][ T7669] ? vfs_parse_monolithic_sep+0xd0/0x360 [ 1950.173417][ T7669] ? proc_fill_super+0x76/0x760 [ 1950.173429][ T7669] ? proc_fill_super+0x76/0x760 [ 1950.173444][ T7669] proc_fill_super+0x76/0x760 [ 1950.173456][ T7669] ? __pfx_proc_fill_super+0x10/0x10 [ 1950.173469][ T7669] get_tree_nodev+0xbb/0x150 [ 1950.173486][ T7669] vfs_get_tree+0x92/0x2a0 [ 1950.173497][ T7669] do_new_mount+0x319/0xdc0 [ 1950.173532][ T7669] ? __pfx_do_new_mount+0x10/0x10 [ 1950.173561][ T7669] ? ns_capable+0x89/0xe0 [ 1950.173580][ T7669] ? path_mount+0x647/0x1050 [ 1950.173595][ T7669] ? user_path_at+0xd4/0x160 [ 1950.173612][ T7669] __se_sys_mount+0x31d/0x420 [ 1950.173629][ T7669] ? __pfx___se_sys_mount+0x10/0x10 [ 1950.173646][ T7669] ? __x64_sys_mount+0x20/0xc0 [ 1950.173661][ T7669] do_syscall_64+0x166/0x520 [ 1950.173674][ T7669] ? trace_irq_disable+0x3b/0x140 [ 1950.173685][ T7669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.173696][ T7669] ? clear_bhb_loop+0x70/0xc0 [ 1950.173709][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.173720][ T7669] RIP: 0033:0x7f60bf79e159 [ 1950.173731][ T7669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1950.173740][ T7669] RSP: 002b:00007f60c073c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1950.173754][ T7669] RAX: ffffffffffffffda RBX: 00007f60bfa25fa0 RCX: 00007f60bf79e159 [ 1950.173762][ T7669] RDX: 0000200000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1950.173769][ T7669] RBP: 00007f60c073c090 R08: 0000000000000000 R09: 0000000000000000 [ 1950.173776][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1950.173783][ T7669] R13: 00007f60bfa26038 R14: 00007f60bfa25fa0 R15: 00007f60bfb4fa48 [ 1950.173799][ T7669] [ 1950.411829][ T7582] wiimote 0005:057E:0306.0070: detected device: Nintendo Wii Remote (Gen 1) [ 1950.459929][ T7582] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0070/input/input204 [ 1950.523355][ T7582] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0070/input/input205 [ 1950.573707][ T7582] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0070/input/input203 [ 1950.971186][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 1950.971205][ T31] audit: type=1326 audit(1789225803.444:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1950.971249][ T31] audit: type=1326 audit(1789225803.444:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1950.971287][ T31] audit: type=1326 audit(1789225803.444:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1950.971331][ T31] audit: type=1326 audit(1789225803.444:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1950.971368][ T31] audit: type=1326 audit(1789225803.454:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1950.971408][ T31] audit: type=1326 audit(1789225803.454:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1950.971447][ T31] audit: type=1326 audit(1789225803.454:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1950.971484][ T31] audit: type=1326 audit(1789225803.454:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1950.971522][ T31] audit: type=1326 audit(1789225803.454:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1950.971567][ T31] audit: type=1326 audit(1789225803.454:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.6.10725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabab9e159 code=0x7ffc0000 [ 1951.111207][ T7687] veth1_to_bond: entered promiscuous mode [ 1951.115139][ T7687] veth1_to_bond: entered allmulticast mode [ 1951.204071][ T7684] veth1_to_bond: left allmulticast mode [ 1951.204156][ T7684] veth1_to_bond: left promiscuous mode [ 1951.323607][ T7692] FAULT_INJECTION: forcing a failure. [ 1951.323607][ T7692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.323643][ T7692] CPU: 1 UID: 0 PID: 7692 Comm: syz.3.10727 Tainted: G L syzkaller #0 PREEMPT(full) [ 1951.323671][ T7692] Tainted: [L]=SOFTLOCKUP [ 1951.323679][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1951.323691][ T7692] Call Trace: [ 1951.323699][ T7692] [ 1951.323709][ T7692] dump_stack_lvl+0xe8/0x150 [ 1951.323742][ T7692] should_fail_ex+0x410/0x560 [ 1951.323770][ T7692] _copy_from_user+0x2d/0xb0 [ 1951.323796][ T7692] __sys_bpf+0x2e7/0xd90 [ 1951.323828][ T7692] ? __pfx___sys_bpf+0x10/0x10 [ 1951.323861][ T7692] ? __fget_files+0x2a/0x420 [ 1951.323906][ T7692] ? ksys_write+0x242/0x270 [ 1951.323937][ T7692] ? __pfx_ksys_write+0x10/0x10 [ 1951.323971][ T7692] __x64_sys_bpf+0xba/0xd0 [ 1951.323995][ T7692] do_syscall_64+0x166/0x520 [ 1951.324017][ T7692] ? trace_irq_disable+0x3b/0x140 [ 1951.324037][ T7692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.324057][ T7692] ? clear_bhb_loop+0x70/0xc0 [ 1951.324081][ T7692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.324100][ T7692] RIP: 0033:0x7f723b39e159 [ 1951.324118][ T7692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1951.324136][ T7692] RSP: 002b:00007f723c1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1951.324158][ T7692] RAX: ffffffffffffffda RBX: 00007f723b625fa0 RCX: 00007f723b39e159 [ 1951.324172][ T7692] RDX: 0000000000000020 RSI: 0000200000001580 RDI: 0000000000000001 [ 1951.324185][ T7692] RBP: 00007f723c1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1951.324207][ T7692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1951.324219][ T7692] R13: 00007f723b626038 R14: 00007f723b625fa0 R15: 00007f723b74fa48 [ 1951.324250][ T7692] [ 1951.749346][ T7699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10730'. [ 1951.950992][ T7704] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1952.148362][ T3058] net_ratelimit: 33 callbacks suppressed [ 1952.148385][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1952.192777][ T7716] veth1_to_bond: entered promiscuous mode [ 1952.205793][ T7716] veth1_to_bond: entered allmulticast mode [ 1952.220400][ T7720] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10738'. [ 1952.237390][ T1879] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1952.246511][ T7711] veth1_to_bond: left allmulticast mode [ 1952.246549][ T7711] veth1_to_bond: left promiscuous mode [ 1952.267253][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1952.380879][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1952.400086][ T1879] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1952.401521][ T1879] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1952.401550][ T1879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1952.401582][ T1879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1952.401603][ T1879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1952.401644][ T1879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.415300][ T1879] usb 3-1: config 0 descriptor?? [ 1952.488816][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1952.600209][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1952.710694][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1952.821412][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1952.873562][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.873601][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.873629][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.873655][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.873678][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.873705][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.873731][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.873757][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.873782][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.873807][ T1879] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1952.919564][ T1879] plantronics 0003:047F:FFFF.0071: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1952.938549][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1953.050324][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1953.144194][T31323] usb 3-1: USB disconnect, device number 121 [ 1953.247474][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1953.896679][ T7770] FAULT_INJECTION: forcing a failure. [ 1953.896679][ T7770] name failslab, interval 1, probability 0, space 100, times 0 [ 1953.896717][ T7770] CPU: 1 UID: 0 PID: 7770 Comm: syz.7.10749 Tainted: G L syzkaller #0 PREEMPT(full) [ 1953.896746][ T7770] Tainted: [L]=SOFTLOCKUP [ 1953.896753][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1953.896764][ T7770] Call Trace: [ 1953.896772][ T7770] [ 1953.896779][ T7770] dump_stack_lvl+0xe8/0x150 [ 1953.896814][ T7770] should_fail_ex+0x410/0x560 [ 1953.896841][ T7770] should_failslab+0xa8/0x100 [ 1953.896868][ T7770] __kmalloc_cache_noprof+0xa3/0x600 [ 1953.896889][ T7770] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1953.896907][ T7770] ? sctp_add_bind_addr+0x8c/0x370 [ 1953.896933][ T7770] ? sctp_add_bind_addr+0x8c/0x370 [ 1953.896967][ T7770] sctp_add_bind_addr+0x8c/0x370 [ 1953.896999][ T7770] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1953.897029][ T7770] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1953.897057][ T7770] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1953.897087][ T7770] ? sctp_v6_is_any+0x64/0x80 [ 1953.897117][ T7770] ? sctp_copy_one_addr+0x93/0x360 [ 1953.897148][ T7770] sctp_bind_addr_copy+0xb3/0x3c0 [ 1953.897177][ T7770] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1953.897207][ T7770] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1953.897232][ T7770] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1953.897261][ T7770] ? __local_bh_enable_ip+0xd6/0x140 [ 1953.897285][ T7770] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1953.897311][ T7770] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1953.897335][ T7770] sctp_sendmsg+0x159b/0x2d00 [ 1953.897368][ T7770] ? kstrtouint+0x6e/0xe0 [ 1953.897397][ T7770] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1953.897424][ T7770] ? lock_acquire+0x115/0x350 [ 1953.897446][ T7770] ? get_pid_task+0x20/0x1f0 [ 1953.897483][ T7770] ? aa_sock_msg_perm+0xf5/0x210 [ 1953.897506][ T7770] ? sock_rps_record_flow+0x19/0x350 [ 1953.897540][ T7770] ? inet_sendmsg+0x298/0x320 [ 1953.897572][ T7770] ? __pfx_inet_sendmsg+0x10/0x10 [ 1953.897600][ T7770] sock_sendmsg_nosec+0x10e/0x180 [ 1953.897634][ T7770] __sys_sendto+0x408/0x5a0 [ 1953.897657][ T7770] ? ksys_write+0x1e6/0x270 [ 1953.897689][ T7770] ? __pfx___sys_sendto+0x10/0x10 [ 1953.897710][ T7770] ? __mutex_unlock_slowpath+0x731/0x900 [ 1953.897755][ T7770] ? __pfx_ksys_write+0x10/0x10 [ 1953.897787][ T7770] __x64_sys_sendto+0xde/0x100 [ 1953.897813][ T7770] do_syscall_64+0x166/0x520 [ 1953.897835][ T7770] ? trace_irq_disable+0x3b/0x140 [ 1953.897854][ T7770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.897875][ T7770] ? clear_bhb_loop+0x70/0xc0 [ 1953.897899][ T7770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.897915][ T7770] RIP: 0033:0x7f60bf79e159 [ 1953.897932][ T7770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.897949][ T7770] RSP: 002b:00007f60c073c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1953.897971][ T7770] RAX: ffffffffffffffda RBX: 00007f60bfa25fa0 RCX: 00007f60bf79e159 [ 1953.897986][ T7770] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1953.897999][ T7770] RBP: 00007f60c073c090 R08: 0000200000000480 R09: 000000000000001c [ 1953.898011][ T7770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1953.898023][ T7770] R13: 00007f60bfa26038 R14: 00007f60bfa25fa0 R15: 00007f60bfb4fa48 [ 1953.898054][ T7770] [ 1954.148255][ T7777] veth1_to_bond: entered promiscuous mode [ 1954.181124][ T7777] veth1_to_bond: entered allmulticast mode [ 1954.287531][ T7781] FAULT_INJECTION: forcing a failure. [ 1954.287531][ T7781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1954.287567][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.7.10751 Tainted: G L syzkaller #0 PREEMPT(full) [ 1954.287594][ T7781] Tainted: [L]=SOFTLOCKUP [ 1954.287602][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1954.287614][ T7781] Call Trace: [ 1954.287624][ T7781] [ 1954.287633][ T7781] dump_stack_lvl+0xe8/0x150 [ 1954.287666][ T7781] should_fail_ex+0x410/0x560 [ 1954.287694][ T7781] prepare_alloc_pages+0x223/0x600 [ 1954.287723][ T7781] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1954.287749][ T7781] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1954.287775][ T7781] ? __pfx_policy_nodemask+0x10/0x10 [ 1954.287810][ T7781] alloc_pages_mpol+0x21e/0x390 [ 1954.287841][ T7781] alloc_pages_noprof+0xb1/0x2b0 [ 1954.287868][ T7781] pte_alloc_one+0x22/0x370 [ 1954.287922][ T7781] do_pte_missing+0x13c8/0x34b0 [ 1954.287957][ T7781] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1954.287990][ T7781] handle_mm_fault+0x1a53/0x3750 [ 1954.288027][ T7781] ? handle_mm_fault+0xf1/0x3750 [ 1954.288063][ T7781] ? __pfx_handle_mm_fault+0x10/0x10 [ 1954.288102][ T7781] ? __lock_acquire+0x747/0x2de0 [ 1954.288128][ T7781] ? lock_mm_and_find_vma+0xa7/0x340 [ 1954.288160][ T7781] do_user_addr_fault+0x746/0x1340 [ 1954.288197][ T7781] exc_page_fault+0x6a/0xc0 [ 1954.288220][ T7781] asm_exc_page_fault+0x26/0x30 [ 1954.288239][ T7781] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 1954.288266][ T7781] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1954.288288][ T7781] RSP: 0018:ffffc9000401fb98 EFLAGS: 00050206 [ 1954.288308][ T7781] RAX: 00007ffffffff001 RBX: 000000000000002c RCX: 000000000000002c [ 1954.288322][ T7781] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000401fc20 [ 1954.288336][ T7781] RBP: ffffc9000401fdf0 R08: ffffc9000401fc4b R09: 1ffff92000803f89 [ 1954.288351][ T7781] R10: dffffc0000000000 R11: fffff52000803f8a R12: dffffc0000000000 [ 1954.288371][ T7781] R13: 1ffff92000803f80 R14: ffffc9000401fc20 R15: 0000200000000000 [ 1954.288403][ T7781] _copy_from_user+0x7a/0xb0 [ 1954.288430][ T7781] do_ip_vs_set_ctl+0x35d/0xaf0 [ 1954.288466][ T7781] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1954.288525][ T7781] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1954.288563][ T7781] nf_setsockopt+0x26f/0x290 [ 1954.288589][ T7781] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1954.288612][ T7781] do_sock_setsockopt+0x17c/0x1b0 [ 1954.288641][ T7781] __x64_sys_setsockopt+0x13d/0x1b0 [ 1954.288671][ T7781] do_syscall_64+0x166/0x520 [ 1954.288692][ T7781] ? trace_irq_disable+0x3b/0x140 [ 1954.288713][ T7781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.288733][ T7781] ? clear_bhb_loop+0x70/0xc0 [ 1954.288758][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.288777][ T7781] RIP: 0033:0x7f60bf79e159 [ 1954.288793][ T7781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1954.288808][ T7781] RSP: 002b:00007f60c073c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1954.288827][ T7781] RAX: ffffffffffffffda RBX: 00007f60bfa25fa0 RCX: 00007f60bf79e159 [ 1954.288840][ T7781] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 1954.288852][ T7781] RBP: 00007f60c073c090 R08: 000000000000002c R09: 0000000000000000 [ 1954.288864][ T7781] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1954.288884][ T7781] R13: 00007f60bfa26038 R14: 00007f60bfa25fa0 R15: 00007f60bfb4fa48 [ 1954.288914][ T7781] [ 1954.640024][ T3059] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.640059][ T3059] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1954.643903][T26951] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.643934][T26951] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1954.643971][T26951] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.643996][T26951] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1954.644028][T26951] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.644052][T26951] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1954.784843][ T7772] veth1_to_bond: left allmulticast mode [ 1954.784886][ T7772] veth1_to_bond: left promiscuous mode [ 1955.060296][ T7802] FAULT_INJECTION: forcing a failure. [ 1955.060296][ T7802] name failslab, interval 1, probability 0, space 100, times 0 [ 1955.060327][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.2.10759 Tainted: G L syzkaller #0 PREEMPT(full) [ 1955.060343][ T7802] Tainted: [L]=SOFTLOCKUP [ 1955.060347][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1955.060354][ T7802] Call Trace: [ 1955.060359][ T7802] [ 1955.060365][ T7802] dump_stack_lvl+0xe8/0x150 [ 1955.060384][ T7802] should_fail_ex+0x410/0x560 [ 1955.060400][ T7802] should_failslab+0xa8/0x100 [ 1955.060415][ T7802] __kmalloc_cache_noprof+0xa3/0x600 [ 1955.060426][ T7802] ? copy_array+0xab/0x100 [ 1955.060442][ T7802] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 1955.060457][ T7802] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 1955.060476][ T7802] bpf_copy_verifier_state+0xb1f/0x1170 [ 1955.060496][ T7802] push_stack+0x1b9/0x380 [ 1955.060513][ T7802] do_check_insn+0xb48b/0x18e70 [ 1955.060540][ T7802] ? __pfx_do_check_insn+0x10/0x10 [ 1955.060559][ T7802] ? vscnprintf+0x5c/0x90 [ 1955.060575][ T7802] ? bpf_verifier_vlog+0x3d1/0x900 [ 1955.060597][ T7802] ? verbose+0x11d/0x1a0 [ 1955.060610][ T7802] ? __pfx_verbose+0x10/0x10 [ 1955.060624][ T7802] ? print_insn_state+0x106/0x170 [ 1955.060636][ T7802] do_check_common+0x3c19/0x5d30 [ 1955.060667][ T7802] ? __pfx_do_check_common+0x10/0x10 [ 1955.060680][ T7802] ? __pfx_verbose+0x10/0x10 [ 1955.060688][ T7802] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 1955.060704][ T7802] bpf_check+0x2639/0x2e10 [ 1955.060721][ T7802] ? ktime_get_with_offset+0x93/0x2d0 [ 1955.060734][ T7802] ? __pfx_bpf_check+0x10/0x10 [ 1955.060747][ T7802] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1955.060765][ T7802] bpf_prog_load+0x14d6/0x1c20 [ 1955.060783][ T7802] ? __pfx_bpf_prog_load+0x10/0x10 [ 1955.060807][ T7802] __sys_bpf+0xd0d/0xd90 [ 1955.060823][ T7802] ? __pfx___sys_bpf+0x10/0x10 [ 1955.060840][ T7802] ? __fget_files+0x2a/0x420 [ 1955.060864][ T7802] ? ksys_write+0x242/0x270 [ 1955.060881][ T7802] ? __pfx_ksys_write+0x10/0x10 [ 1955.060899][ T7802] __x64_sys_bpf+0xba/0xd0 [ 1955.060912][ T7802] do_syscall_64+0x166/0x520 [ 1955.060923][ T7802] ? trace_irq_disable+0x3b/0x140 [ 1955.060934][ T7802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.060945][ T7802] ? clear_bhb_loop+0x70/0xc0 [ 1955.060958][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.060971][ T7802] RIP: 0033:0x7f541eb9e159 [ 1955.060982][ T7802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.060993][ T7802] RSP: 002b:00007f541fa5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1955.061006][ T7802] RAX: ffffffffffffffda RBX: 00007f541ee25fa0 RCX: 00007f541eb9e159 [ 1955.061014][ T7802] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1955.061022][ T7802] RBP: 00007f541fa5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.061029][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1955.061036][ T7802] R13: 00007f541ee26038 R14: 00007f541ee25fa0 R15: 00007f541ef4fa48 [ 1955.061052][ T7802] [ 1955.201220][T12005] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1955.212770][ T7804] nvme_fabrics: unknown parameter or missing value '#! »›¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 1955.407062][T12005] usb 4-1: Using ep0 maxpacket: 32 [ 1955.409637][T12005] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1955.409688][T12005] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1955.414169][T12005] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1955.414196][T12005] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1955.414217][T12005] usb 4-1: config 14 has an invalid descriptor of length 242, skipping remainder of the config [ 1955.414237][T12005] usb 4-1: config 14 has no interface number 0 [ 1955.414260][T12005] usb 4-1: config 14 has no interface number 1 [ 1955.414316][T12005] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1955.414339][T12005] usb 4-1: config 14 interface 228 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1955.414364][T12005] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1955.414381][T12005] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1955.452277][T12005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.452302][T12005] usb 4-1: Product: syz [ 1955.452310][T12005] usb 4-1: Manufacturer: syz [ 1955.452318][T12005] usb 4-1: SerialNumber: syz [ 1955.559411][ T7806] FAULT_INJECTION: forcing a failure. [ 1955.559411][ T7806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1955.559446][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.2.10760 Tainted: G L syzkaller #0 PREEMPT(full) [ 1955.559473][ T7806] Tainted: [L]=SOFTLOCKUP [ 1955.559481][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1955.559499][ T7806] Call Trace: [ 1955.559507][ T7806] [ 1955.559513][ T7806] dump_stack_lvl+0xe8/0x150 [ 1955.559535][ T7806] should_fail_ex+0x410/0x560 [ 1955.559551][ T7806] _copy_from_user+0x2d/0xb0 [ 1955.559572][ T7806] kstrtouint_from_user+0xd6/0x180 [ 1955.559594][ T7806] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1955.559622][ T7806] ? lock_acquire+0x115/0x350 [ 1955.559646][ T7806] proc_fail_nth_write+0x8e/0x210 [ 1955.559664][ T7806] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1955.559703][ T7806] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1955.559732][ T7806] vfs_write+0x296/0xba0 [ 1955.559771][ T7806] ? __pfx_vfs_write+0x10/0x10 [ 1955.559787][ T7806] ? __fget_files+0x2a/0x420 [ 1955.559805][ T7806] ? __fget_files+0x3a2/0x420 [ 1955.559818][ T7806] ? __fget_files+0x2a/0x420 [ 1955.559847][ T7806] ksys_write+0x150/0x270 [ 1955.559879][ T7806] ? __pfx_ksys_write+0x10/0x10 [ 1955.559919][ T7806] do_syscall_64+0x166/0x520 [ 1955.559931][ T7806] ? trace_irq_disable+0x3b/0x140 [ 1955.559942][ T7806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.559953][ T7806] ? clear_bhb_loop+0x70/0xc0 [ 1955.559967][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.559980][ T7806] RIP: 0033:0x7f541eb5e98e [ 1955.559998][ T7806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1955.560016][ T7806] RSP: 002b:00007f541fa5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1955.560039][ T7806] RAX: ffffffffffffffda RBX: 00007f541fa5f6c0 RCX: 00007f541eb5e98e [ 1955.560054][ T7806] RDX: 0000000000000001 RSI: 00007f541fa5f0a0 RDI: 0000000000000004 [ 1955.560066][ T7806] RBP: 00007f541fa5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.560073][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1955.560079][ T7806] R13: 00007f541ee26038 R14: 00007f541ee25fa0 R15: 00007f541ef4fa48 [ 1955.560096][ T7806] [ 1955.846121][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1955.846573][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.189049][ T7804] nvme nvme0: failed to connect socket: -512 [ 1956.492458][ T7818] FAULT_INJECTION: forcing a failure. [ 1956.492458][ T7818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1956.492494][ T7818] CPU: 0 UID: 0 PID: 7818 Comm: syz.7.10763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.492521][ T7818] Tainted: [L]=SOFTLOCKUP [ 1956.492529][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1956.492540][ T7818] Call Trace: [ 1956.492548][ T7818] [ 1956.492558][ T7818] dump_stack_lvl+0xe8/0x150 [ 1956.492579][ T7818] should_fail_ex+0x410/0x560 [ 1956.492594][ T7818] _copy_from_user+0x2d/0xb0 [ 1956.492608][ T7818] memdup_user+0x5e/0xd0 [ 1956.492623][ T7818] keyctl_pkey_e_d_s+0x151/0x310 [ 1956.492654][ T7818] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 1956.492703][ T7818] __se_sys_keyctl+0x494/0x9d0 [ 1956.492718][ T7818] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1956.492728][ T7818] ? __mutex_unlock_slowpath+0x731/0x900 [ 1956.492743][ T7818] ? __fget_files+0x2a/0x420 [ 1956.492758][ T7818] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1956.492774][ T7818] ? __fget_files+0x3a2/0x420 [ 1956.492807][ T7818] ? fput+0xa0/0xd0 [ 1956.492831][ T7818] ? ksys_write+0x242/0x270 [ 1956.492859][ T7818] ? __pfx_ksys_write+0x10/0x10 [ 1956.492877][ T7818] ? __x64_sys_keyctl+0x20/0xc0 [ 1956.492889][ T7818] do_syscall_64+0x166/0x520 [ 1956.492901][ T7818] ? trace_irq_disable+0x3b/0x140 [ 1956.492912][ T7818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.492928][ T7818] ? clear_bhb_loop+0x70/0xc0 [ 1956.492954][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.492973][ T7818] RIP: 0033:0x7f60bf79e159 [ 1956.492992][ T7818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1956.493008][ T7818] RSP: 002b:00007f60c073c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1956.493021][ T7818] RAX: ffffffffffffffda RBX: 00007f60bfa25fa0 RCX: 00007f60bf79e159 [ 1956.493029][ T7818] RDX: 0000200000000840 RSI: 0000200000000780 RDI: 0000000000000019 [ 1956.493037][ T7818] RBP: 00007f60c073c090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.493044][ T7818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1956.493051][ T7818] R13: 00007f60bfa26038 R14: 00007f60bfa25fa0 R15: 00007f60bfb4fa48 [ 1956.493068][ T7818] [ 1956.698776][T12005] legousbtower 4-1:14.57: interrupt endpoints not found [ 1956.745859][T12005] legousbtower 4-1:14.228: interrupt endpoints not found [ 1956.758995][T12005] usb 4-1: USB disconnect, device number 125 [ 1957.217591][ T3058] net_ratelimit: 30 callbacks suppressed [ 1957.217613][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1957.247488][ T7830] veth1_to_bond: entered promiscuous mode [ 1957.247895][ T7830] veth1_to_bond: entered allmulticast mode [ 1957.249957][ T7829] veth1_to_bond: left allmulticast mode [ 1957.249987][ T7829] veth1_to_bond: left promiscuous mode [ 1957.357267][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1957.466953][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1957.567060][T12005] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1957.586978][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1957.697027][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1957.718683][T12005] usb 4-1: Using ep0 maxpacket: 32 [ 1957.719974][T12005] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1957.721066][T12005] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1957.721095][T12005] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1957.723106][T12005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.723131][T12005] usb 4-1: Product: á”°ç¥ê‘挽칵ᅭ䱤å›è¥²å˜§í‚¿ç²©ê“冤뚠讥㕣螧蕶볇٩í¹î’ áƒ“í™™ [ 1957.723150][T12005] usb 4-1: Manufacturer: Л [ 1957.723165][T12005] usb 4-1: SerialNumber: ÑŒ [ 1957.806926][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1957.917205][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1958.012659][T12005] cdc_ncm 4-1:1.0: bind() failure [ 1958.020320][T12005] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1958.020366][T12005] cdc_ncm 4-1:1.1: bind() failure [ 1958.026631][T12005] usb 4-1: USB disconnect, device number 126 [ 1958.048694][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1958.156965][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1958.160957][ T7864] program syz.0.10780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1958.203669][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 1958.203689][ T31] audit: type=1326 audit(1789225810.684:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.203811][ T31] audit: type=1326 audit(1789225810.684:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.204193][ T31] audit: type=1326 audit(1789225810.684:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.204299][ T31] audit: type=1326 audit(1789225810.684:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.204425][ T31] audit: type=1326 audit(1789225810.684:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.204717][ T31] audit: type=1326 audit(1789225810.684:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.204879][ T31] audit: type=1326 audit(1789225810.684:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.204997][ T31] audit: type=1326 audit(1789225810.684:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.205232][ T31] audit: type=1326 audit(1789225810.684:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.206162][ T31] audit: type=1326 audit(1789225810.684:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.0.10781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1958.267192][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1959.196939][T12005] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1959.346925][T12005] usb 4-1: Using ep0 maxpacket: 16 [ 1959.349404][T12005] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1959.349454][T12005] usb 4-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=9c.c9 [ 1959.350628][T12005] usb 4-1: config 16 has an invalid interface number: 32 but max is 0 [ 1959.350652][T12005] usb 4-1: config 16 has no interface number 0 [ 1959.350679][T12005] usb 4-1: config 16 interface 32 has no altsetting 0 [ 1959.354006][T12005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.354022][T12005] usb 4-1: Product: syz [ 1959.354029][T12005] usb 4-1: Manufacturer: syz [ 1959.354037][T12005] usb 4-1: SerialNumber: syz [ 1959.617168][ T7881] gtp0: entered promiscuous mode [ 1959.617184][ T7881] gtp0: entered allmulticast mode [ 1959.677636][T12005] usb 4-1: USB disconnect, device number 127 [ 1960.234926][ T7905] sg_write: data in/out 745436/136 bytes for SCSI command 0x0-- guessing data in; [ 1960.234926][ T7905] program syz.2.10794 not setting count and/or reply_len properly [ 1960.391496][ T7907] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1960.723266][ T7921] tipc: Enabled bearer , priority 0 [ 1960.915404][ T7931] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1960.915563][ T7931] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1960.915695][ T7931] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1960.915827][ T7931] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1961.016918][ T7582] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1961.170038][ T7582] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1961.171258][ T7582] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1961.171290][ T7582] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1961.171316][ T7582] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1961.171357][ T7582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.224647][ T7919] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1961.237026][ T7582] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1961.412834][ T7938] veth1_to_bond: entered promiscuous mode [ 1961.414157][ T7938] veth1_to_bond: entered allmulticast mode [ 1961.431544][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10802'. [ 1961.480759][ T7582] usb 3-1: USB disconnect, device number 122 [ 1961.668066][ T7933] veth1_to_bond: left allmulticast mode [ 1961.668094][ T7933] veth1_to_bond: left promiscuous mode [ 1961.857163][ T5689] tipc: Node number set to 856870075 [ 1962.163193][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10805'. [ 1962.169737][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10806'. [ 1962.231265][ T7945] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1962.235912][ T7945] bond4 (unregistering): Released all slaves [ 1962.298276][ T3061] net_ratelimit: 34 callbacks suppressed [ 1962.298301][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1962.408551][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1962.520772][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1962.621684][ T7956] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1962.627867][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1962.756897][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1962.869094][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1962.978529][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1963.073375][ T7977] FAULT_INJECTION: forcing a failure. [ 1963.073375][ T7977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1963.073411][ T7977] CPU: 1 UID: 0 PID: 7977 Comm: syz.0.10817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1963.073437][ T7977] Tainted: [L]=SOFTLOCKUP [ 1963.073445][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1963.073456][ T7977] Call Trace: [ 1963.073465][ T7977] [ 1963.073474][ T7977] dump_stack_lvl+0xe8/0x150 [ 1963.073507][ T7977] should_fail_ex+0x410/0x560 [ 1963.073533][ T7977] _copy_from_user+0x2d/0xb0 [ 1963.073559][ T7977] sctp_getsockopt_encap_port+0x10b/0x690 [ 1963.073581][ T7977] ? lock_acquire+0x115/0x350 [ 1963.073602][ T7977] ? get_pid_task+0x20/0x1f0 [ 1963.073621][ T7977] ? __pfx_sctp_getsockopt_encap_port+0x10/0x10 [ 1963.073658][ T7977] ? sctp_getsockopt+0x12f/0xb90 [ 1963.073685][ T7977] ? __local_bh_enable_ip+0xd6/0x140 [ 1963.073715][ T7977] sctp_getsockopt+0xa15/0xb90 [ 1963.073736][ T7977] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1963.073757][ T7977] do_sock_getsockopt+0x51d/0x7e0 [ 1963.073787][ T7977] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1963.073828][ T7977] ? __fget_files+0x3a2/0x420 [ 1963.073854][ T7977] ? __fget_files+0x2a/0x420 [ 1963.073887][ T7977] __x64_sys_getsockopt+0x1a4/0x240 [ 1963.073921][ T7977] do_syscall_64+0x166/0x520 [ 1963.073942][ T7977] ? trace_irq_disable+0x3b/0x140 [ 1963.073961][ T7977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.073980][ T7977] ? clear_bhb_loop+0x70/0xc0 [ 1963.074004][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.074024][ T7977] RIP: 0033:0x7f0d1cd9e159 [ 1963.074043][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1963.074061][ T7977] RSP: 002b:00007f0d1dcee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1963.074082][ T7977] RAX: ffffffffffffffda RBX: 00007f0d1d025fa0 RCX: 00007f0d1cd9e159 [ 1963.074097][ T7977] RDX: 0000000000000084 RSI: 0000000000000084 RDI: 0000000000000003 [ 1963.074117][ T7977] RBP: 00007f0d1dcee090 R08: 0000200000000500 R09: 0000000000000000 [ 1963.074132][ T7977] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1963.074145][ T7977] R13: 00007f0d1d026038 R14: 00007f0d1d025fa0 R15: 00007f0d1d14fa48 [ 1963.074176][ T7977] [ 1963.090170][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1963.173923][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10819'. [ 1963.198350][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1963.311117][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1963.609653][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1963.632513][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1963.633811][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1963.647734][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1963.662588][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1964.314664][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1964.314822][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1964.314956][ T7990] bridge_slave_0: entered allmulticast mode [ 1964.317396][ T7990] bridge_slave_0: entered promiscuous mode [ 1964.323459][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1964.323649][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.323777][ T7990] bridge_slave_1: entered allmulticast mode [ 1964.329963][ T7990] bridge_slave_1: entered promiscuous mode [ 1964.396539][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1964.414934][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1964.493181][ T7990] team0: Port device team_slave_0 added [ 1964.503193][ T7990] team0: Port device team_slave_1 added [ 1964.582111][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1964.582130][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1964.582156][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1964.591025][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1964.591043][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1964.591071][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1964.720095][ T7990] hsr_slave_0: entered promiscuous mode [ 1964.721243][ T7990] hsr_slave_1: entered promiscuous mode [ 1965.767674][ T2314] Bluetooth: hci5: command tx timeout [ 1966.041526][ T7990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1966.059008][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1966.061872][ T7990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1966.104075][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1966.105198][ T7990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1966.131097][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1966.178173][ T7990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1966.270050][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1966.616220][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1966.672112][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 1966.700658][ T3061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.700790][ T3061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1966.718772][ T3061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1966.718895][ T3061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1967.037753][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1967.345381][ T7990] veth0_vlan: entered promiscuous mode [ 1967.382085][ T7990] veth1_vlan: entered promiscuous mode [ 1967.401224][ T8051] FAULT_INJECTION: forcing a failure. [ 1967.401224][ T8051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1967.401258][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.7.10834 Tainted: G L syzkaller #0 PREEMPT(full) [ 1967.401285][ T8051] Tainted: [L]=SOFTLOCKUP [ 1967.401293][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1967.401304][ T8051] Call Trace: [ 1967.401313][ T8051] [ 1967.401322][ T8051] dump_stack_lvl+0xe8/0x150 [ 1967.401356][ T8051] should_fail_ex+0x410/0x560 [ 1967.401382][ T8051] _copy_to_user+0x31/0xb0 [ 1967.401409][ T8051] bpf_verifier_vlog+0x496/0x900 [ 1967.401450][ T8051] bpf_verifier_log_write+0x11d/0x1a0 [ 1967.401477][ T8051] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1967.401495][ T8051] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1967.401520][ T8051] ? record_arg_access+0x148/0x970 [ 1967.401551][ T8051] analyze_subprog+0x5d98/0x9e00 [ 1967.401570][ T8051] ? probe_event_enable+0x6df/0xae0 [ 1967.401637][ T8051] ? __pfx_analyze_subprog+0x10/0x10 [ 1967.401659][ T8051] ? __x64_sys_bpf+0xba/0xd0 [ 1967.401676][ T8051] ? gssp_accept_sec_context_upcall+0x3f3/0xf00 [ 1967.401704][ T8051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.401759][ T8051] ? call_instance+0x263/0x560 [ 1967.401780][ T8051] ? rcu_is_watching+0x16/0xb0 [ 1967.401803][ T8051] ? call_instance+0x263/0x560 [ 1967.401823][ T8051] ? trace_kmalloc+0x2a/0xf0 [ 1967.401854][ T8051] ? call_instance+0x263/0x560 [ 1967.401875][ T8051] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1967.401898][ T8051] ? __kvmalloc_node_noprof+0x345/0x820 [ 1967.401919][ T8051] ? call_instance+0x263/0x560 [ 1967.401939][ T8051] ? call_instance+0x263/0x560 [ 1967.401977][ T8051] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1967.402001][ T8051] ? bpf_base_func_proto+0x25f/0xb00 [ 1967.402030][ T8051] ? __pfx_sk_filter_func_proto+0x10/0x10 [ 1967.402084][ T8051] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1967.402114][ T8051] ? __kvmalloc_node_noprof+0x345/0x820 [ 1967.402136][ T8051] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1967.402157][ T8051] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1967.402188][ T8051] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1967.402230][ T8051] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1967.402265][ T8051] bpf_check+0x25ed/0x2e10 [ 1967.402298][ T8051] ? ktime_get_with_offset+0x93/0x2d0 [ 1967.402323][ T8051] ? __pfx_bpf_check+0x10/0x10 [ 1967.402348][ T8051] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1967.402379][ T8051] bpf_prog_load+0x14d6/0x1c20 [ 1967.402414][ T8051] ? __pfx_bpf_prog_load+0x10/0x10 [ 1967.402461][ T8051] __sys_bpf+0xd0d/0xd90 [ 1967.402491][ T8051] ? __pfx___sys_bpf+0x10/0x10 [ 1967.402523][ T8051] ? __fget_files+0x2a/0x420 [ 1967.402565][ T8051] ? ksys_write+0x242/0x270 [ 1967.402597][ T8051] ? __pfx_ksys_write+0x10/0x10 [ 1967.402631][ T8051] __x64_sys_bpf+0xba/0xd0 [ 1967.402654][ T8051] do_syscall_64+0x166/0x520 [ 1967.402676][ T8051] ? trace_irq_disable+0x3b/0x140 [ 1967.402695][ T8051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.402716][ T8051] ? clear_bhb_loop+0x70/0xc0 [ 1967.402740][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.402761][ T8051] RIP: 0033:0x7f60bf79e159 [ 1967.402779][ T8051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1967.402796][ T8051] RSP: 002b:00007f60c073c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1967.402818][ T8051] RAX: ffffffffffffffda RBX: 00007f60bfa25fa0 RCX: 00007f60bf79e159 [ 1967.402833][ T8051] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 1967.402846][ T8051] RBP: 00007f60c073c090 R08: 0000000000000000 R09: 0000000000000000 [ 1967.402864][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1967.402876][ T8051] R13: 00007f60bfa26038 R14: 00007f60bfa25fa0 R15: 00007f60bfb4fa48 [ 1967.402908][ T8051] [ 1967.502321][ T7990] veth0_macvtap: entered promiscuous mode [ 1967.532387][ T7990] veth1_macvtap: entered promiscuous mode [ 1967.542016][ T3061] net_ratelimit: 21 callbacks suppressed [ 1967.542035][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1967.616146][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1967.657022][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1967.674155][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1967.797104][ T3061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.797156][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1967.797294][ T3061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.797416][ T3061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.797448][ T3061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.858035][ T2314] Bluetooth: hci5: command tx timeout [ 1967.909887][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1968.037678][ T3054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1968.037700][ T3054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1968.049137][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1968.080730][ T31] kauditd_printk_skb: 127 callbacks suppressed [ 1968.080749][ T31] audit: type=1326 audit(1789225820.554:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.7.10836" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x0 [ 1968.162529][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1968.162544][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1968.182221][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1968.234881][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10838'. [ 1968.264172][ T31] audit: type=1326 audit(1789225820.744:6656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.10838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1968.264779][ T31] audit: type=1326 audit(1789225820.744:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.10838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1968.264889][ T31] audit: type=1326 audit(1789225820.744:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.10838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1968.265146][ T31] audit: type=1326 audit(1789225820.744:6657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.10838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1968.265283][ T31] audit: type=1326 audit(1789225820.744:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.10838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1968.265418][ T31] audit: type=1326 audit(1789225820.744:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.10838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1968.316566][ T31] audit: type=1326 audit(1789225820.744:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.10838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1968.343879][ T31] audit: type=1326 audit(1789225820.804:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.10838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1968.343928][ T31] audit: type=1326 audit(1789225820.804:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.10838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1968.384869][ T8062] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1968.388133][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1968.490981][T12008] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1968.519527][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1968.628599][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1968.657705][T12008] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 1968.660021][T12008] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1968.660053][T12008] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1968.665058][T12008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.665084][T12008] usb 4-1: Product: syz [ 1968.665099][T12008] usb 4-1: Manufacturer: syz [ 1968.665114][T12008] usb 4-1: SerialNumber: syz [ 1968.738562][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1968.795640][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10840'. [ 1968.881178][ T8072] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 1968.881701][ T8072] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 1968.958355][T12008] kaweth 4-1:1.0: Firmware present in device. [ 1969.137460][T12008] kaweth 4-1:1.0: Statistics collection: 0 [ 1969.137484][T12008] kaweth 4-1:1.0: Multicast filter limit: 0 [ 1969.137501][T12008] kaweth 4-1:1.0: MTU: 0 [ 1969.137515][T12008] kaweth 4-1:1.0: Read MAC address 00:00:00:00:00:00 [ 1969.752734][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10851'. [ 1969.773907][T12008] kaweth 4-1:1.0: kaweth interface created at eth9 [ 1969.927059][ T2314] Bluetooth: hci5: command tx timeout [ 1969.962160][ T1879] usb 4-1: USB disconnect, device number 2 [ 1970.317074][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10853'. [ 1970.317100][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10853'. [ 1970.423178][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10855'. [ 1970.426748][ T8112] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10855'. [ 1970.431236][ T8112] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1970.447196][ T8112] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1970.466661][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10855'. [ 1970.768445][ T8124] netlink: 'syz.3.10858': attribute type 1 has an invalid length. [ 1970.840317][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10858'. [ 1970.989971][ T8125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1971.396223][ T8142] bridge0: port 3(vlan2) entered blocking state [ 1971.396330][ T8142] bridge0: port 3(vlan2) entered disabled state [ 1971.396480][ T8142] vlan2: entered allmulticast mode [ 1971.396497][ T8142] syz_tun: entered allmulticast mode [ 1971.424726][ T8142] vlan2: entered promiscuous mode [ 1971.424747][ T8142] syz_tun: entered promiscuous mode [ 1971.425653][ T8142] bridge0: port 3(vlan2) entered blocking state [ 1971.425791][ T8142] bridge0: port 3(vlan2) entered forwarding state [ 1971.758102][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10862'. [ 1971.992155][ T8157] dlm: non-version read from control device 36 [ 1971.992264][ T8158] dlm: non-version read from control device 8224 [ 1971.992311][ T8157] dlm: non-version read from control device 8224 [ 1972.010747][ T2314] Bluetooth: hci5: command tx timeout [ 1972.618394][T26947] net_ratelimit: 31 callbacks suppressed [ 1972.618417][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1972.734480][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1972.840898][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1972.951644][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1973.057743][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1973.169147][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1973.226981][ T5689] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1973.277129][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1973.387130][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1973.407330][ T5689] usb 4-1: Using ep0 maxpacket: 8 [ 1973.408052][ T5689] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1973.412030][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.412055][ T5689] usb 4-1: Product: syz [ 1973.412070][ T5689] usb 4-1: Manufacturer: syz [ 1973.412085][ T5689] usb 4-1: SerialNumber: syz [ 1973.415675][ T5689] usb 4-1: config 0 descriptor?? [ 1973.423832][ T5689] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1973.471157][T12008] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1973.487720][ T8188] bond4: Removing last arp target with arp_interval on [ 1973.489052][ T8188] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1973.512437][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1973.617252][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1973.617940][T12008] usb 3-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 1973.620593][T12008] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1973.622589][T12008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.622614][T12008] usb 3-1: Product: syz [ 1973.622629][T12008] usb 3-1: Manufacturer: syz [ 1973.622643][T12008] usb 3-1: SerialNumber: syz [ 1973.774980][ T8194] FAULT_INJECTION: forcing a failure. [ 1973.774980][ T8194] name failslab, interval 1, probability 0, space 100, times 0 [ 1973.775017][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.7.10882 Tainted: G L syzkaller #0 PREEMPT(full) [ 1973.775044][ T8194] Tainted: [L]=SOFTLOCKUP [ 1973.775053][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1973.775065][ T8194] Call Trace: [ 1973.775073][ T8194] [ 1973.775085][ T8194] dump_stack_lvl+0xe8/0x150 [ 1973.775120][ T8194] should_fail_ex+0x410/0x560 [ 1973.775148][ T8194] should_failslab+0xa8/0x100 [ 1973.775175][ T8194] __kmalloc_cache_noprof+0xa3/0x600 [ 1973.775196][ T8194] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1973.775215][ T8194] ? sctp_add_bind_addr+0x8c/0x370 [ 1973.775242][ T8194] ? sctp_add_bind_addr+0x8c/0x370 [ 1973.775276][ T8194] sctp_add_bind_addr+0x8c/0x370 [ 1973.775308][ T8194] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1973.775340][ T8194] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1973.775376][ T8194] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1973.775409][ T8194] ? sctp_v4_is_any+0x35/0x60 [ 1973.775436][ T8194] ? sctp_copy_one_addr+0x93/0x360 [ 1973.775468][ T8194] sctp_bind_addr_copy+0xb3/0x3c0 [ 1973.775497][ T8194] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1973.775526][ T8194] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1973.775552][ T8194] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1973.775575][ T8194] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1973.775597][ T8194] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1973.775618][ T8194] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1973.775641][ T8194] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1973.775668][ T8194] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1973.775692][ T8194] sctp_sendmsg+0x159b/0x2d00 [ 1973.775728][ T8194] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1973.775754][ T8194] ? __lock_acquire+0x747/0x2de0 [ 1973.775789][ T8194] ? aa_sock_msg_perm+0xf5/0x210 [ 1973.775812][ T8194] ? sock_rps_record_flow+0x19/0x350 [ 1973.775842][ T8194] ? inet_sendmsg+0x298/0x320 [ 1973.775869][ T8194] ? apparmor_socket_sendmsg+0x98/0x360 [ 1973.775893][ T8194] ? __pfx_inet_sendmsg+0x10/0x10 [ 1973.775921][ T8194] sock_sendmsg_nosec+0x10e/0x180 [ 1973.775955][ T8194] ____sys_sendmsg+0x54e/0x850 [ 1973.775987][ T8194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1973.776022][ T8194] ? import_iovec+0x73/0xa0 [ 1973.776051][ T8194] ___sys_sendmsg+0x2a5/0x360 [ 1973.776076][ T8194] ? __lock_acquire+0x747/0x2de0 [ 1973.776101][ T8194] ? __pfx____sys_sendmsg+0x10/0x10 [ 1973.776132][ T8194] ? kstrtouint+0x6e/0xe0 [ 1973.776188][ T8194] ? __fget_files+0x2a/0x420 [ 1973.776214][ T8194] ? __fget_files+0x3a2/0x420 [ 1973.776251][ T8194] __sys_sendmmsg+0x273/0x4d0 [ 1973.776282][ T8194] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1973.776318][ T8194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1973.776361][ T8194] ? ksys_write+0x242/0x270 [ 1973.776392][ T8194] ? __pfx_ksys_write+0x10/0x10 [ 1973.776428][ T8194] __x64_sys_sendmmsg+0xa0/0xc0 [ 1973.776456][ T8194] do_syscall_64+0x166/0x520 [ 1973.776478][ T8194] ? trace_irq_disable+0x3b/0x140 [ 1973.776498][ T8194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1973.776519][ T8194] ? clear_bhb_loop+0x70/0xc0 [ 1973.776544][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1973.776564][ T8194] RIP: 0033:0x7f60bf79e159 [ 1973.776583][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1973.776601][ T8194] RSP: 002b:00007f60c073c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1973.776624][ T8194] RAX: ffffffffffffffda RBX: 00007f60bfa25fa0 RCX: 00007f60bf79e159 [ 1973.776639][ T8194] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 1973.776652][ T8194] RBP: 00007f60c073c090 R08: 0000000000000000 R09: 0000000000000000 [ 1973.776665][ T8194] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000002 [ 1973.776678][ T8194] R13: 00007f60bfa26038 R14: 00007f60bfa25fa0 R15: 00007f60bfb4fa48 [ 1973.776710][ T8194] [ 1974.290947][T12008] asix 3-1:1.0: probe with driver asix failed with error -71 [ 1974.304926][T12008] usb 3-1: USB disconnect, device number 123 [ 1974.391347][ T5689] gspca_sonixj: reg_r err -110 [ 1974.391440][ T5689] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1975.318377][ T8217] FAULT_INJECTION: forcing a failure. [ 1975.318377][ T8217] name failslab, interval 1, probability 0, space 100, times 0 [ 1975.318414][ T8217] CPU: 1 UID: 0 PID: 8217 Comm: syz.2.10889 Tainted: G L syzkaller #0 PREEMPT(full) [ 1975.318440][ T8217] Tainted: [L]=SOFTLOCKUP [ 1975.318448][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1975.318460][ T8217] Call Trace: [ 1975.318469][ T8217] [ 1975.318477][ T8217] dump_stack_lvl+0xe8/0x150 [ 1975.318510][ T8217] should_fail_ex+0x410/0x560 [ 1975.318539][ T8217] should_failslab+0xa8/0x100 [ 1975.318566][ T8217] __kvmalloc_node_noprof+0x176/0x820 [ 1975.318591][ T8217] ? __kvmalloc_node_noprof+0x345/0x820 [ 1975.318612][ T8217] ? bpf_compute_scc+0xd2/0xb10 [ 1975.318631][ T8217] ? bpf_compute_scc+0xd2/0xb10 [ 1975.318657][ T8217] bpf_compute_scc+0xd2/0xb10 [ 1975.318700][ T8217] bpf_check+0x25c9/0x2e10 [ 1975.318741][ T8217] ? ktime_get_with_offset+0x93/0x2d0 [ 1975.318767][ T8217] ? __pfx_bpf_check+0x10/0x10 [ 1975.318791][ T8217] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1975.318823][ T8217] bpf_prog_load+0x14d6/0x1c20 [ 1975.318859][ T8217] ? __pfx_bpf_prog_load+0x10/0x10 [ 1975.318903][ T8217] __sys_bpf+0xd0d/0xd90 [ 1975.318933][ T8217] ? __pfx___sys_bpf+0x10/0x10 [ 1975.318966][ T8217] ? __fget_files+0x2a/0x420 [ 1975.319011][ T8217] ? ksys_write+0x242/0x270 [ 1975.319044][ T8217] ? __pfx_ksys_write+0x10/0x10 [ 1975.319078][ T8217] __x64_sys_bpf+0xba/0xd0 [ 1975.319101][ T8217] do_syscall_64+0x166/0x520 [ 1975.319123][ T8217] ? trace_irq_disable+0x3b/0x140 [ 1975.319143][ T8217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.319165][ T8217] ? clear_bhb_loop+0x70/0xc0 [ 1975.319189][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.319209][ T8217] RIP: 0033:0x7f1ba159e159 [ 1975.319228][ T8217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1975.319246][ T8217] RSP: 002b:00007f1ba24d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1975.319269][ T8217] RAX: ffffffffffffffda RBX: 00007f1ba1825fa0 RCX: 00007f1ba159e159 [ 1975.319284][ T8217] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1975.319298][ T8217] RBP: 00007f1ba24d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1975.319311][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1975.319323][ T8217] R13: 00007f1ba1826038 R14: 00007f1ba1825fa0 R15: 00007f1ba194fa48 [ 1975.319356][ T8217] [ 1975.414677][ T31] kauditd_printk_skb: 176 callbacks suppressed [ 1975.414697][ T31] audit: type=1326 audit(1789225827.894:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.414917][ T31] audit: type=1326 audit(1789225827.894:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.421358][ T31] audit: type=1326 audit(1789225827.904:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.421626][ T31] audit: type=1326 audit(1789225827.904:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.421695][ T31] audit: type=1326 audit(1789225827.904:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.425822][ T31] audit: type=1326 audit(1789225827.904:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.426530][ T31] audit: type=1326 audit(1789225827.904:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.426574][ T31] audit: type=1326 audit(1789225827.904:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.427769][ T31] audit: type=1326 audit(1789225827.914:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.431454][ T31] audit: type=1326 audit(1789225827.914:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.2.10890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1975.933794][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.933863][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.054796][ T7582] usb 4-1: USB disconnect, device number 3 [ 1976.228459][ T8229] gretap0: entered promiscuous mode [ 1976.239001][ T8229] gretap0: left promiscuous mode [ 1977.687807][ T3058] net_ratelimit: 31 callbacks suppressed [ 1977.687831][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1977.847814][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1977.960859][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1978.067121][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1978.177152][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1978.291276][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1978.397775][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1978.459273][ T8270] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1978.477924][ T8270] netlink: 'syz.0.10905': attribute type 10 has an invalid length. [ 1978.539298][ T8270] team0 (unregistering): Port device team_slave_0 removed [ 1978.576684][ T8270] team0 (unregistering): Port device team_slave_1 removed [ 1978.647527][ T3058] bond2: (slave batadv0): failed to get link speed/duplex [ 1978.719655][ T8286] loop6: detected capacity change from 0 to 7 [ 1978.720878][ T8286] loop6: [ 1978.720893][ T8286] loop6: partition table partially beyond EOD, truncated [ 1978.757277][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1978.812941][ T8283] FAULT_INJECTION: forcing a failure. [ 1978.812941][ T8283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1978.812978][ T8283] CPU: 0 UID: 0 PID: 8283 Comm: syz.3.10910 Tainted: G L syzkaller #0 PREEMPT(full) [ 1978.813005][ T8283] Tainted: [L]=SOFTLOCKUP [ 1978.813011][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1978.813023][ T8283] Call Trace: [ 1978.813031][ T8283] [ 1978.813040][ T8283] dump_stack_lvl+0xe8/0x150 [ 1978.813074][ T8283] should_fail_ex+0x410/0x560 [ 1978.813099][ T8283] _copy_from_user+0x2d/0xb0 [ 1978.813123][ T8283] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 1978.813152][ T8283] ? __lock_acquire+0x747/0x2de0 [ 1978.813177][ T8283] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1978.813202][ T8283] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1978.813255][ T8283] ? __task_pid_nr_ns+0x28/0x470 [ 1978.813282][ T8283] do_syscall_64+0x166/0x520 [ 1978.813302][ T8283] ? trace_irq_disable+0x3b/0x140 [ 1978.813321][ T8283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.813340][ T8283] ? clear_bhb_loop+0x70/0xc0 [ 1978.813370][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.813389][ T8283] RIP: 0033:0x7f723b33f4d9 [ 1978.813407][ T8283] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1978.813425][ T8283] RSP: 002b:00007f723c1aaa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1978.813447][ T8283] RAX: ffffffffffffffda RBX: 00007f723b625fa0 RCX: 00007f723b33f4d9 [ 1978.813460][ T8283] RDX: 00007f723c1aaa80 RSI: 00007f723c1aabb0 RDI: 0000000000000021 [ 1978.813472][ T8283] RBP: 00007f723c1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1978.813484][ T8283] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1978.813496][ T8283] R13: 00007f723b626038 R14: 00007f723b625fa0 R15: 00007f723b74fa48 [ 1978.813526][ T8283] [ 1978.867295][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1978.880043][ T8283] misc userio: No port type given on /dev/userio [ 1979.307000][T12008] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1979.469349][T12008] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1979.470380][T12008] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1979.470406][T12008] usb 3-1: config 0 has no interface number 0 [ 1979.470446][T12008] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1979.472446][T12008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.472471][T12008] usb 3-1: Product: syz [ 1979.472486][T12008] usb 3-1: Manufacturer: syz [ 1979.472500][T12008] usb 3-1: SerialNumber: syz [ 1979.509008][T12008] usb 3-1: config 0 descriptor?? [ 1979.662448][ T8303] __nla_validate_parse: 2 callbacks suppressed [ 1979.662470][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10918'. [ 1980.120885][T12008] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 1980.461557][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 1980.461577][ T31] audit: type=1326 audit(1789225832.804:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.0.10923" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1980.461622][ T31] audit: type=1326 audit(1789225832.944:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.0.10923" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1980.461662][ T31] audit: type=1326 audit(1789225832.944:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.0.10923" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1cd9e159 code=0x7ffc0000 [ 1982.073526][ T5616] usb 3-1: USB disconnect, device number 124 [ 1982.848882][ T5689] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1982.911791][ T3061] net_ratelimit: 33 callbacks suppressed [ 1982.911812][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.011771][ T5689] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1983.012940][ T5689] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1983.012985][ T5689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1983.013011][ T5689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1983.013042][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1983.013082][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.017322][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.097131][ T5689] usb 3-1: config 0 descriptor?? [ 1983.128612][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.239173][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.275130][ T8350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1983.347009][ T3059] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.396963][ T1879] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1983.458388][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.546997][ T1879] usb 4-1: Using ep0 maxpacket: 32 [ 1983.548752][ T1879] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.5e [ 1983.550310][ T1879] usb 4-1: config 5 has an invalid interface number: 132 but max is 0 [ 1983.550325][ T1879] usb 4-1: config 5 has no interface number 0 [ 1983.550366][ T1879] usb 4-1: config 5 interface 132 has no altsetting 0 [ 1983.572154][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.574392][ T1879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.574421][ T1879] usb 4-1: Product: syz [ 1983.574435][ T1879] usb 4-1: Manufacturer: syz [ 1983.574451][ T1879] usb 4-1: SerialNumber: syz [ 1983.644795][ T5689] hid_parser_main: 5 callbacks suppressed [ 1983.644811][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.644830][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.644845][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.644860][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.644893][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.644909][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.644924][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.644938][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.644953][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.644968][ T5689] cherry 0003:046A:0027.0072: unknown main item tag 0x0 [ 1983.677116][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.751010][ T5689] cherry 0003:046A:0027.0072: hidraw0: USB HID v0.05 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 1983.788957][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.869525][ T7582] usb 3-1: USB disconnect, device number 125 [ 1983.872884][ T1879] uvcvideo 4-1:5.132: Found UVC 0.00 device syz (19ab:1000) [ 1983.872917][ T1879] uvcvideo 4-1:5.132: No valid video chain found. [ 1983.898045][ T3061] bond2: (slave batadv0): failed to get link speed/duplex [ 1983.909647][ T1879] usb 4-1: USB disconnect, device number 4 [ 1983.950828][ T8357] fido_id[8357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1983.995470][ T8359] binder: 8358:8359 ioctl c0306201 200000000680 returned -14 [ 1984.014676][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10936'. [ 1984.330135][ T8363] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10938'. [ 1984.637620][ T8371] fuse: Unknown parameter 'ì‚×ïóD+' [ 1984.741615][ T8377] netlink: 'syz.3.10941': attribute type 6 has an invalid length. [ 1984.741629][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10941'. [ 1984.812396][ T8367] bridge0: port 3(vlan2) entered disabled state [ 1984.812595][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.813440][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1984.970431][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1984.986038][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1985.176554][ T8370] geneve2: entered promiscuous mode [ 1985.217238][T26947] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.217273][T26947] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 59995 - 0 [ 1985.217352][T26947] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.217391][T26947] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 59995 - 0 [ 1985.217423][T26947] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.217446][T26947] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 59995 - 0 [ 1985.217475][T26947] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.217499][T26947] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 59995 - 0 [ 1986.028760][ T31] audit: type=1326 audit(1789225838.514:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.028796][ T31] audit: type=1326 audit(1789225838.514:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.081722][ T31] audit: type=1326 audit(1789225838.564:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.082481][ T31] audit: type=1326 audit(1789225838.564:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.082510][ T31] audit: type=1326 audit(1789225838.564:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.084611][ T31] audit: type=1326 audit(1789225838.564:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.084749][ T31] audit: type=1326 audit(1789225838.564:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.085229][ T31] audit: type=1326 audit(1789225838.564:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.085275][ T31] audit: type=1326 audit(1789225838.564:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.131107][ T31] audit: type=1326 audit(1789225838.614:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.7.10947" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1986.347392][ T8397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10948'. [ 1986.347427][ T8397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10948'. [ 1986.797800][ T8418] veth1_to_bond: entered promiscuous mode [ 1986.823477][ T8418] veth1_to_bond: entered allmulticast mode [ 1987.047252][ T5616] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1987.165758][ T8407] veth1_to_bond: left allmulticast mode [ 1987.165798][ T8407] veth1_to_bond: left promiscuous mode [ 1987.203376][ T5616] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1987.203434][ T5616] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1987.239414][ T5616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1987.249763][ T8424] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[514] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[8424] [ 1987.274348][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.274376][ T5616] usb 3-1: Product: syz [ 1987.274391][ T5616] usb 3-1: Manufacturer: syz [ 1987.274406][ T5616] usb 3-1: SerialNumber: syz [ 1987.402984][ T8426] FAULT_INJECTION: forcing a failure. [ 1987.402984][ T8426] name failslab, interval 1, probability 0, space 100, times 0 [ 1987.403043][ T8426] CPU: 0 UID: 0 PID: 8426 Comm: syz.0.10957 Tainted: G L syzkaller #0 PREEMPT(full) [ 1987.403071][ T8426] Tainted: [L]=SOFTLOCKUP [ 1987.403079][ T8426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1987.403091][ T8426] Call Trace: [ 1987.403099][ T8426] [ 1987.403108][ T8426] dump_stack_lvl+0xe8/0x150 [ 1987.403143][ T8426] should_fail_ex+0x410/0x560 [ 1987.403171][ T8426] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1987.403194][ T8426] should_failslab+0xa8/0x100 [ 1987.403219][ T8426] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1987.403239][ T8426] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1987.403270][ T8426] ? proc_alloc_inode+0x2a/0xc0 [ 1987.403288][ T8426] ? proc_alloc_inode+0x2a/0xc0 [ 1987.403314][ T8426] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1987.403334][ T8426] proc_alloc_inode+0x2a/0xc0 [ 1987.403355][ T8426] alloc_inode+0x6a/0x1b0 [ 1987.403382][ T8426] new_inode+0x1f/0x170 [ 1987.403407][ T8426] ? proc_get_inode+0x1a/0x6a0 [ 1987.403429][ T8426] proc_get_inode+0x22/0x6a0 [ 1987.403450][ T8426] ? proc_fill_super+0x52a/0x760 [ 1987.403476][ T8426] proc_fill_super+0x543/0x760 [ 1987.403499][ T8426] ? __pfx_proc_fill_super+0x10/0x10 [ 1987.403523][ T8426] get_tree_nodev+0xbb/0x150 [ 1987.403555][ T8426] vfs_get_tree+0x92/0x2a0 [ 1987.403574][ T8426] do_new_mount+0x319/0xdc0 [ 1987.403603][ T8426] ? __pfx_do_new_mount+0x10/0x10 [ 1987.403631][ T8426] ? ns_capable+0x89/0xe0 [ 1987.403660][ T8426] ? path_mount+0x647/0x1050 [ 1987.403689][ T8426] ? user_path_at+0xd4/0x160 [ 1987.403721][ T8426] __se_sys_mount+0x31d/0x420 [ 1987.403754][ T8426] ? __pfx___se_sys_mount+0x10/0x10 [ 1987.403788][ T8426] ? __x64_sys_mount+0x20/0xc0 [ 1987.403817][ T8426] do_syscall_64+0x166/0x520 [ 1987.403840][ T8426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1987.403861][ T8426] ? clear_bhb_loop+0x70/0xc0 [ 1987.403887][ T8426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1987.403908][ T8426] RIP: 0033:0x7f0d1cd9e159 [ 1987.403934][ T8426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1987.403952][ T8426] RSP: 002b:00007f0d1dcee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1987.403976][ T8426] RAX: ffffffffffffffda RBX: 00007f0d1d025fa0 RCX: 00007f0d1cd9e159 [ 1987.403991][ T8426] RDX: 0000200000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1987.404005][ T8426] RBP: 00007f0d1dcee090 R08: 0000000000000000 R09: 0000000000000000 [ 1987.404019][ T8426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1987.404032][ T8426] R13: 00007f0d1d026038 R14: 00007f0d1d025fa0 R15: 00007f0d1d14fa48 [ 1987.404061][ T8426] [ 1987.404116][ T8426] proc_fill_super: get root inode failed [ 1987.705739][ T5616] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1987.706166][ T5616] usb 3-1: 2:1 : bogus bTerminalLink 3 [ 1987.800386][ T5616] usb 3-1: USB disconnect, device number 126 [ 1987.913646][ T4158] udevd[4158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1987.928544][ T6188] net_ratelimit: 28 callbacks suppressed [ 1987.928566][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.037466][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.147642][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.257965][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.368138][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.477658][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.491901][ T8442] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1988.587566][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.707322][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.818031][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.927129][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1988.975687][ T8453] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 1989.100782][T26951] IPVS: starting estimator thread 0... [ 1989.119768][ T8457] KVM: debugfs: duplicate directory 8457-6 [ 1989.187376][ T8458] IPVS: using max 30 ests per chain, 72000 per kthread [ 1989.397116][T12008] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1989.548083][T12008] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1989.549104][T12008] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1989.549152][T12008] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1989.549175][T12008] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1989.549198][T12008] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1989.549236][T12008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.570620][ T8470] tipc: Started in network mode [ 1990.570636][ T8470] tipc: Node identity 1000001, cluster identity 4369 [ 1990.570644][ T8470] tipc: Node number set to 16777217 [ 1991.079595][ T8476] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1991.178216][ T8480] netlink: 80 bytes leftover after parsing attributes in process `syz.7.10976'. [ 1991.215768][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 1991.215787][ T31] audit: type=1326 audit(1789225843.694:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.216461][ T31] audit: type=1326 audit(1789225843.694:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.216851][ T31] audit: type=1326 audit(1789225843.694:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.300330][ T31] audit: type=1326 audit(1789225843.784:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.300367][ T31] audit: type=1326 audit(1789225843.784:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.301792][ T31] audit: type=1326 audit(1789225843.784:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.302083][ T31] audit: type=1326 audit(1789225843.784:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.302311][ T31] audit: type=1326 audit(1789225843.784:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.302456][ T31] audit: type=1326 audit(1789225843.784:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.302625][ T31] audit: type=1326 audit(1789225843.784:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.7.10977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bf79e159 code=0x7ffc0000 [ 1991.493067][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10978'. [ 1991.493087][ T8485] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1992.115670][T12008] usb 3-1: USB disconnect, device number 127 [ 1992.271477][ T8504] FAULT_INJECTION: forcing a failure. [ 1992.271477][ T8504] name failslab, interval 1, probability 0, space 100, times 0 [ 1992.271542][ T8504] CPU: 1 UID: 0 PID: 8504 Comm: syz.2.10986 Tainted: G L syzkaller #0 PREEMPT(full) [ 1992.271570][ T8504] Tainted: [L]=SOFTLOCKUP [ 1992.271578][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1992.271589][ T8504] Call Trace: [ 1992.271598][ T8504] [ 1992.271607][ T8504] dump_stack_lvl+0xe8/0x150 [ 1992.271639][ T8504] should_fail_ex+0x410/0x560 [ 1992.271666][ T8504] should_failslab+0xa8/0x100 [ 1992.271694][ T8504] __kmalloc_cache_noprof+0xa3/0x600 [ 1992.271716][ T8504] ? sctp_transport_new+0x7e/0x620 [ 1992.271740][ T8504] ? sctp_transport_new+0x7e/0x620 [ 1992.271769][ T8504] sctp_transport_new+0x7e/0x620 [ 1992.271797][ T8504] sctp_assoc_add_peer+0x299/0x1430 [ 1992.271833][ T8504] sctp_connect_new_asoc+0x329/0x6b0 [ 1992.271859][ T8504] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1992.271888][ T8504] ? __local_bh_enable_ip+0xd6/0x140 [ 1992.271913][ T8504] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1992.271939][ T8504] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1992.271962][ T8504] sctp_sendmsg+0x159b/0x2d00 [ 1992.271988][ T8504] ? kstrtouint+0x6e/0xe0 [ 1992.272015][ T8504] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1992.272033][ T8504] ? lock_acquire+0x115/0x350 [ 1992.272051][ T8504] ? get_pid_task+0x20/0x1f0 [ 1992.272081][ T8504] ? aa_sock_msg_perm+0xf5/0x210 [ 1992.272102][ T8504] ? sock_rps_record_flow+0x19/0x350 [ 1992.272132][ T8504] ? inet_sendmsg+0x298/0x320 [ 1992.272162][ T8504] ? __pfx_inet_sendmsg+0x10/0x10 [ 1992.272190][ T8504] sock_sendmsg_nosec+0x10e/0x180 [ 1992.272222][ T8504] __sys_sendto+0x408/0x5a0 [ 1992.272245][ T8504] ? ksys_write+0x1e6/0x270 [ 1992.272272][ T8504] ? __pfx___sys_sendto+0x10/0x10 [ 1992.272292][ T8504] ? __mutex_unlock_slowpath+0x731/0x900 [ 1992.272336][ T8504] ? __pfx_ksys_write+0x10/0x10 [ 1992.272370][ T8504] __x64_sys_sendto+0xde/0x100 [ 1992.272397][ T8504] do_syscall_64+0x166/0x520 [ 1992.272427][ T8504] ? trace_irq_disable+0x3b/0x140 [ 1992.272447][ T8504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.272468][ T8504] ? clear_bhb_loop+0x70/0xc0 [ 1992.272492][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.272513][ T8504] RIP: 0033:0x7f1ba159e159 [ 1992.272534][ T8504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1992.272552][ T8504] RSP: 002b:00007f1ba24d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1992.272575][ T8504] RAX: ffffffffffffffda RBX: 00007f1ba1825fa0 RCX: 00007f1ba159e159 [ 1992.272591][ T8504] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1992.272604][ T8504] RBP: 00007f1ba24d4090 R08: 0000200000000480 R09: 000000000000001c [ 1992.272617][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1992.272629][ T8504] R13: 00007f1ba1826038 R14: 00007f1ba1825fa0 R15: 00007f1ba194fa48 [ 1992.272661][ T8504] [ 1993.007572][ T3054] net_ratelimit: 35 callbacks suppressed [ 1993.007594][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1993.119397][ T3652] bond2: (slave batadv0): failed to get link speed/duplex [ 1993.228197][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1993.347746][ T3652] bond2: (slave batadv0): failed to get link speed/duplex [ 1993.422718][ T8524] FAULT_INJECTION: forcing a failure. [ 1993.422718][ T8524] name failslab, interval 1, probability 0, space 100, times 0 [ 1993.422743][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.2.10991 Tainted: G L syzkaller #0 PREEMPT(full) [ 1993.422758][ T8524] Tainted: [L]=SOFTLOCKUP [ 1993.422762][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1993.422769][ T8524] Call Trace: [ 1993.422774][ T8524] [ 1993.422779][ T8524] dump_stack_lvl+0xe8/0x150 [ 1993.422800][ T8524] should_fail_ex+0x410/0x560 [ 1993.422815][ T8524] should_failslab+0xa8/0x100 [ 1993.422829][ T8524] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1993.422846][ T8524] kmem_cache_alloc_noprof+0xa1/0x600 [ 1993.422869][ T8524] ? __kvmalloc_node_noprof+0x345/0x820 [ 1993.422881][ T8524] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 1993.422896][ T8524] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1993.422916][ T8524] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1993.422954][ T8524] mmu_topup_memory_caches+0x21/0x170 [ 1993.422972][ T8524] kvm_mmu_load+0x9d/0x21e0 [ 1993.422984][ T8524] ? kvm_msr_allowed+0x9a/0x490 [ 1993.422996][ T8524] ? kvm_msr_allowed+0x9a/0x490 [ 1993.423007][ T8524] ? kvm_msr_allowed+0x9a/0x490 [ 1993.423016][ T8524] ? kvm_msr_allowed+0x3f4/0x490 [ 1993.423029][ T8524] ? kvm_msr_allowed+0x9a/0x490 [ 1993.423039][ T8524] ? kvm_apic_has_interrupt+0x740/0x770 [ 1993.423060][ T8524] vcpu_run+0x4f68/0x79b0 [ 1993.423092][ T8524] ? update_se+0x90/0x1020 [ 1993.423125][ T8524] ? __pfx_vcpu_run+0x10/0x10 [ 1993.423141][ T8524] ? lock_acquire+0x115/0x350 [ 1993.423160][ T8524] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1993.423178][ T8524] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1993.423195][ T8524] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1993.423209][ T8524] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1993.423223][ T8524] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1993.423234][ T8524] ? hook_file_ioctl+0x1f2/0x600 [ 1993.423257][ T8524] ? __fget_files+0x2a/0x420 [ 1993.423273][ T8524] ? __fget_files+0x2a/0x420 [ 1993.423286][ T8524] ? __fget_files+0x3a2/0x420 [ 1993.423299][ T8524] ? __fget_files+0x2a/0x420 [ 1993.423315][ T8524] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1993.423331][ T8524] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1993.423342][ T8524] __se_sys_ioctl+0xfc/0x170 [ 1993.423358][ T8524] do_syscall_64+0x166/0x520 [ 1993.423371][ T8524] ? trace_irq_disable+0x3b/0x140 [ 1993.423381][ T8524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.423392][ T8524] ? clear_bhb_loop+0x70/0xc0 [ 1993.423406][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.423417][ T8524] RIP: 0033:0x7f1ba159e159 [ 1993.423428][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.423438][ T8524] RSP: 002b:00007f1ba24d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1993.423451][ T8524] RAX: ffffffffffffffda RBX: 00007f1ba1825fa0 RCX: 00007f1ba159e159 [ 1993.423459][ T8524] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1993.423466][ T8524] RBP: 00007f1ba24d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.423473][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.423480][ T8524] R13: 00007f1ba1826038 R14: 00007f1ba1825fa0 R15: 00007f1ba194fa48 [ 1993.423496][ T8524] [ 1993.470023][ T3652] bond2: (slave batadv0): failed to get link speed/duplex [ 1993.592638][ T3652] bond2: (slave batadv0): failed to get link speed/duplex [ 1993.726318][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1993.827460][ T3054] bond2: (slave batadv0): failed to get link speed/duplex [ 1993.980048][T26951] bond2: (slave batadv0): failed to get link speed/duplex [ 1994.028650][ T8537] syzkaller0: entered promiscuous mode [ 1994.034628][ T8537] syzkaller0: entered allmulticast mode [ 1994.099622][ T8533] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10996'. [ 1994.373067][ T8547] FAULT_INJECTION: forcing a failure. [ 1994.373067][ T8547] name failslab, interval 1, probability 0, space 100, times 0 [ 1994.373091][ T8547] CPU: 1 UID: 0 PID: 8547 Comm: syz.3.11002 Tainted: G L syzkaller #0 PREEMPT(full) [ 1994.373106][ T8547] Tainted: [L]=SOFTLOCKUP [ 1994.373110][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1994.373117][ T8547] Call Trace: [ 1994.373122][ T8547] [ 1994.373128][ T8547] dump_stack_lvl+0xe8/0x150 [ 1994.373148][ T8547] should_fail_ex+0x410/0x560 [ 1994.373163][ T8547] should_failslab+0xa8/0x100 [ 1994.373178][ T8547] __kmalloc_noprof+0xfe/0x720 [ 1994.373189][ T8547] ? tomoyo_init_log+0x1aae/0x1fa0 [ 1994.373206][ T8547] ? tomoyo_init_log+0x1aae/0x1fa0 [ 1994.373222][ T8547] tomoyo_init_log+0x1aae/0x1fa0 [ 1994.373246][ T8547] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1994.373260][ T8547] ? tomoyo_profile+0x11/0x50 [ 1994.373273][ T8547] ? tomoyo_domain_quota_is_ok+0x422/0x570 [ 1994.373286][ T8547] tomoyo_supervisor+0x35f/0x1560 [ 1994.373308][ T8547] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1994.373333][ T8547] ? tomoyo_check_path_acl+0x137/0x1d0 [ 1994.373346][ T8547] ? tomoyo_check_acl+0x386/0x400 [ 1994.373363][ T8547] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 1994.373376][ T8547] tomoyo_path_permission+0x262/0x3b0 [ 1994.373389][ T8547] tomoyo_check_open_permission+0x2b2/0x470 [ 1994.373402][ T8547] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1994.373413][ T8547] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1994.373426][ T8547] ? __asan_memset+0x22/0x50 [ 1994.373457][ T8547] ? mnt_get_write_access+0x66/0x280 [ 1994.373469][ T8547] ? tomoyo_file_open+0x163/0x220 [ 1994.373486][ T8547] security_file_open+0xa9/0x240 [ 1994.373497][ T8547] do_dentry_open+0x4a0/0x1380 [ 1994.373516][ T8547] vfs_open+0x3b/0x340 [ 1994.373527][ T8547] ? path_openat+0x1428/0x1d60 [ 1994.373539][ T8547] path_openat+0x1443/0x1d60 [ 1994.373559][ T8547] do_file_open+0x23e/0x4a0 [ 1994.373572][ T8547] ? __pfx_do_file_open+0x10/0x10 [ 1994.373593][ T8547] ? _raw_spin_unlock+0x28/0x50 [ 1994.373609][ T8547] ? alloc_fd+0x651/0x6c0 [ 1994.373628][ T8547] do_sys_openat2+0x115/0x200 [ 1994.373642][ T8547] ? __pfx_do_sys_openat2+0x10/0x10 [ 1994.373656][ T8547] ? ksys_write+0x242/0x270 [ 1994.373672][ T8547] ? __pfx_ksys_write+0x10/0x10 [ 1994.373689][ T8547] __x64_sys_openat+0x138/0x170 [ 1994.373704][ T8547] do_syscall_64+0x166/0x520 [ 1994.373716][ T8547] ? trace_irq_disable+0x3b/0x140 [ 1994.373727][ T8547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.373738][ T8547] ? clear_bhb_loop+0x70/0xc0 [ 1994.373752][ T8547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.373762][ T8547] RIP: 0033:0x7f723b39e159 [ 1994.373774][ T8547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1994.373783][ T8547] RSP: 002b:00007f723c1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1994.373796][ T8547] RAX: ffffffffffffffda RBX: 00007f723b625fa0 RCX: 00007f723b39e159 [ 1994.373809][ T8547] RDX: 000000000000275a RSI: 0000200000000500 RDI: ffffffffffffff9c [ 1994.373817][ T8547] RBP: 00007f723c1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.373824][ T8547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1994.373831][ T8547] R13: 00007f723b626038 R14: 00007f723b625fa0 R15: 00007f723b74fa48 [ 1994.373848][ T8547] [ 1994.442461][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1994.772137][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11003'. [ 1994.890405][ T8556] input: syz0 as /devices/virtual/input/input206 [ 1994.964014][ T8558] FAULT_INJECTION: forcing a failure. [ 1994.964014][ T8558] name failslab, interval 1, probability 0, space 100, times 0 [ 1994.964051][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.2.11006 Tainted: G L syzkaller #0 PREEMPT(full) [ 1994.964077][ T8558] Tainted: [L]=SOFTLOCKUP [ 1994.964084][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1994.964096][ T8558] Call Trace: [ 1994.964104][ T8558] [ 1994.964112][ T8558] dump_stack_lvl+0xe8/0x150 [ 1994.964144][ T8558] should_fail_ex+0x410/0x560 [ 1994.964169][ T8558] should_failslab+0xa8/0x100 [ 1994.964193][ T8558] __kmalloc_noprof+0xfe/0x720 [ 1994.964210][ T8558] ? keyctl_pkey_e_d_s+0x1a6/0x310 [ 1994.964235][ T8558] ? keyctl_pkey_e_d_s+0x1a6/0x310 [ 1994.964257][ T8558] ? _copy_from_user+0x94/0xb0 [ 1994.964283][ T8558] keyctl_pkey_e_d_s+0x1a6/0x310 [ 1994.964311][ T8558] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 1994.964351][ T8558] __se_sys_keyctl+0x494/0x9d0 [ 1994.964375][ T8558] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1994.964393][ T8558] ? __mutex_unlock_slowpath+0x731/0x900 [ 1994.964417][ T8558] ? __fget_files+0x2a/0x420 [ 1994.964446][ T8558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1994.964469][ T8558] ? __fget_files+0x3a2/0x420 [ 1994.964501][ T8558] ? fput+0xa0/0xd0 [ 1994.964525][ T8558] ? ksys_write+0x242/0x270 [ 1994.964555][ T8558] ? __pfx_ksys_write+0x10/0x10 [ 1994.964589][ T8558] ? __x64_sys_keyctl+0x20/0xc0 [ 1994.964612][ T8558] do_syscall_64+0x166/0x520 [ 1994.964634][ T8558] ? trace_irq_disable+0x3b/0x140 [ 1994.964652][ T8558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.964673][ T8558] ? clear_bhb_loop+0x70/0xc0 [ 1994.964696][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.964716][ T8558] RIP: 0033:0x7f1ba159e159 [ 1994.964743][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1994.964761][ T8558] RSP: 002b:00007f1ba24d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1994.964783][ T8558] RAX: ffffffffffffffda RBX: 00007f1ba1825fa0 RCX: 00007f1ba159e159 [ 1994.964799][ T8558] RDX: 0000200000000840 RSI: 0000200000000780 RDI: 0000000000000019 [ 1994.964812][ T8558] RBP: 00007f1ba24d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.964826][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1994.964838][ T8558] R13: 00007f1ba1826038 R14: 00007f1ba1825fa0 R15: 00007f1ba194fa48 [ 1994.964868][ T8558] [ 1995.247827][ T5689] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1995.407088][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 1995.407901][ T5689] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1995.410487][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.410510][ T5689] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1995.411545][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1995.411567][ T5689] usb 4-1: SerialNumber: syz [ 1995.458252][ T5689] usb 4-1: 0:2 : does not exist [ 1995.624742][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1995.633310][ T5689] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1995.640311][ T5689] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1995.668998][ T5689] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1995.695601][ T5689] usb 4-1: USB disconnect, device number 5 [ 1995.740211][ T4158] udevd[4158]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1995.743178][ T8570] FAULT_INJECTION: forcing a failure. [ 1995.743178][ T8570] name failslab, interval 1, probability 0, space 100, times 0 [ 1995.743209][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.2.11011 Tainted: G L syzkaller #0 PREEMPT(full) [ 1995.743230][ T8570] Tainted: [L]=SOFTLOCKUP [ 1995.743245][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1995.743255][ T8570] Call Trace: [ 1995.743261][ T8570] [ 1995.743277][ T8570] dump_stack_lvl+0xe8/0x150 [ 1995.743308][ T8570] should_fail_ex+0x410/0x560 [ 1995.743329][ T8570] should_failslab+0xa8/0x100 [ 1995.743349][ T8570] __kmalloc_cache_noprof+0xa3/0x600 [ 1995.743365][ T8570] ? rcu_read_lock_any_held+0x33/0x90 [ 1995.743384][ T8570] ? sctp_transport_new+0x7e/0x620 [ 1995.743401][ T8570] ? sctp_transport_new+0x7e/0x620 [ 1995.743423][ T8570] sctp_transport_new+0x7e/0x620 [ 1995.743443][ T8570] sctp_assoc_add_peer+0x299/0x1430 [ 1995.743471][ T8570] ? sctp_endpoint_is_peeled_off+0xc2/0x100 [ 1995.743489][ T8570] sctp_sendmsg+0x240a/0x2d00 [ 1995.743516][ T8570] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1995.743535][ T8570] ? __lock_acquire+0x747/0x2de0 [ 1995.743561][ T8570] ? aa_sock_msg_perm+0xf5/0x210 [ 1995.743579][ T8570] ? sock_rps_record_flow+0x19/0x350 [ 1995.743604][ T8570] ? inet_sendmsg+0x298/0x320 [ 1995.743624][ T8570] ? apparmor_socket_sendmsg+0x98/0x360 [ 1995.743642][ T8570] ? __pfx_inet_sendmsg+0x10/0x10 [ 1995.743662][ T8570] sock_sendmsg_nosec+0x10e/0x180 [ 1995.743689][ T8570] ____sys_sendmsg+0x54e/0x850 [ 1995.743712][ T8570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1995.743738][ T8570] ? import_iovec+0x73/0xa0 [ 1995.743759][ T8570] ___sys_sendmsg+0x2a5/0x360 [ 1995.743777][ T8570] ? __lock_acquire+0x747/0x2de0 [ 1995.743795][ T8570] ? __pfx____sys_sendmsg+0x10/0x10 [ 1995.743839][ T8570] ? __fget_files+0x2a/0x420 [ 1995.743860][ T8570] ? __fget_files+0x3a2/0x420 [ 1995.743887][ T8570] __x64_sys_sendmsg+0x1b1/0x290 [ 1995.743908][ T8570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1995.743944][ T8570] do_syscall_64+0x166/0x520 [ 1995.743960][ T8570] ? trace_irq_disable+0x3b/0x140 [ 1995.743977][ T8570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.743994][ T8570] ? clear_bhb_loop+0x70/0xc0 [ 1995.744015][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.744030][ T8570] RIP: 0033:0x7f1ba159e159 [ 1995.744045][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1995.744059][ T8570] RSP: 002b:00007f1ba24d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1995.744076][ T8570] RAX: ffffffffffffffda RBX: 00007f1ba1825fa0 RCX: 00007f1ba159e159 [ 1995.744087][ T8570] RDX: 0000000004008084 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1995.744098][ T8570] RBP: 00007f1ba24d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1995.744106][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1995.744116][ T8570] R13: 00007f1ba1826038 R14: 00007f1ba1825fa0 R15: 00007f1ba194fa48 [ 1995.744139][ T8570] [ 1996.263772][ T8580] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1996.647113][ T5689] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1996.799459][ T5689] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1996.803068][ T5689] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 1996.803096][ T5689] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1996.803115][ T5689] usb 4-1: config 2 has no interface number 0 [ 1996.803154][ T5689] usb 4-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1996.803180][ T5689] usb 4-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1996.803202][ T5689] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1996.803226][ T5689] usb 4-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1996.805373][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.805408][ T5689] usb 4-1: Product: syz [ 1996.805423][ T5689] usb 4-1: Manufacturer: syz [ 1996.805438][ T5689] usb 4-1: SerialNumber: syz [ 1996.928417][ T31] kauditd_printk_skb: 98 callbacks suppressed [ 1996.928437][ T31] audit: type=1326 audit(1789225849.414:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1996.928632][ T31] audit: type=1326 audit(1789225849.414:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1996.929154][ T31] audit: type=1326 audit(1789225849.414:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1996.929437][ T31] audit: type=1326 audit(1789225849.414:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1996.929591][ T31] audit: type=1326 audit(1789225849.414:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1996.929971][ T31] audit: type=1326 audit(1789225849.414:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1996.930108][ T31] audit: type=1326 audit(1789225849.414:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1996.930543][ T31] audit: type=1326 audit(1789225849.414:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1996.930686][ T31] audit: type=1326 audit(1789225849.414:7053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1996.931717][ T31] audit: type=1326 audit(1789225849.414:7054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.11015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba159e159 code=0x7ffc0000 [ 1997.032364][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11014'. [ 1997.032389][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11014'. [ 1997.066361][ T2314] Bluetooth: hci0: command 0x0406 tx timeout [ 1997.069327][ T1879] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1997.069349][ T1879] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1997.267684][ T5689] usb 4-1: probing VID:PID(0424:012C) [ 1997.273134][ T5689] usb 4-1: vub300 testing BULK IN EndPoint(0) 8E [ 1997.273164][ T5689] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1997.274919][ T5689] vub300 4-1:2.174: probe with driver vub300 failed with error -22 [ 1997.291138][ T5689] usb 4-1: USB disconnect, device number 6 [ 1997.927944][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11023'. [ 1998.111677][ T3652] net_ratelimit: 29 callbacks suppressed [ 1998.111701][ T3652] bond2: (slave batadv0): failed to get link speed/duplex [ 1998.217056][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1998.331020][ T3652] bond2: (slave batadv0): failed to get link speed/duplex [ 1998.439556][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1998.549763][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1998.658042][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1998.769361][T26947] bond2: (slave batadv0): failed to get link speed/duplex [ 1998.877861][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1998.989857][ T3652] bond2: (slave batadv0): failed to get link speed/duplex [ 1999.098054][ T6188] bond2: (slave batadv0): failed to get link speed/duplex [ 1999.527817][ T1879] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1999.527842][ T1879] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1999.536834][ C1] ------------[ cut here ]------------ [ 1999.536851][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 1999.536887][ C1] WARNING: kernel/workqueue.c:2353 at __queue_work+0xd83/0x10d0, CPU#1: syz.2.11028/8624 [ 1999.572824][ C1] Modules linked in: [ 1999.576733][ C1] CPU: 1 UID: 0 PID: 8624 Comm: syz.2.11028 Tainted: G L syzkaller #0 PREEMPT(full) [ 1999.587681][ C1] Tainted: [L]=SOFTLOCKUP [ 1999.592013][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1999.602070][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 1999.607463][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 2d cd ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 fb 8f a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 1999.627079][ C1] RSP: 0018:ffffc90000a18bc0 EFLAGS: 00010046 [ 1999.633152][ C1] RAX: 1ffff1100874094e RBX: dffffc0000000000 RCX: ffff888060df1f40 [ 1999.641119][ C1] RDX: ffff888053e10170 RSI: ffffffff8ad5a580 RDI: ffffffff907d0870 [ 1999.649095][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f466f [ 1999.657065][ C1] R10: dffffc0000000000 R11: ffffffff818e4260 R12: 0000000000000008 [ 1999.665040][ C1] R13: ffff888043a04a58 R14: ffffffff907d0870 R15: ffff888053e10170 [ 1999.673008][ C1] FS: 00007f1ba24d46c0(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 1999.681934][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1999.688514][ C1] CR2: 0000000000000000 CR3: 0000000030ae8000 CR4: 00000000003526f0 [ 1999.696482][ C1] Call Trace: [ 1999.699753][ C1] [ 1999.702593][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1999.707972][ C1] call_timer_fn+0x18d/0x5f0 [ 1999.712557][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1999.718358][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1999.723029][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1999.728146][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1999.733253][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1999.739053][ C1] __run_timer_base+0x67e/0x8b0 [ 1999.743908][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1999.749275][ C1] ? ktime_get+0x1f5/0x220 [ 1999.753684][ C1] ? lapic_next_event+0x11/0x20 [ 1999.758530][ C1] run_timer_softirq+0xb7/0x170 [ 1999.763374][ C1] handle_softirqs+0x226/0x860 [ 1999.768139][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1999.772904][ C1] __irq_exit_rcu+0xcb/0x220 [ 1999.777490][ C1] irq_exit_rcu+0x9/0x30 [ 1999.781725][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1999.787348][ C1] [ 1999.790266][ C1] [ 1999.793188][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1999.799159][ C1] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 1999.804700][ C1] Code: 89 df 48 c7 c6 2b 05 70 8e e8 a7 6e f0 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d [ 1999.824300][ C1] RSP: 0018:ffffc90005bef7f0 EFLAGS: 00000246 [ 1999.830362][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81464d6b [ 1999.838325][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88805f4dd138 [ 1999.846286][ C1] RBP: ffffc90005befbd0 R08: ffff88805f4dd13f R09: 1ffff1100be9ba27 [ 1999.854247][ C1] R10: dffffc0000000000 R11: ffffed100be9ba28 R12: ffff88805f4dd100 [ 1999.862209][ C1] R13: 1ffff1100be9ba27 R14: ffff88805f4dd138 R15: dffffc0000000000 [ 1999.870178][ C1] ? vcpu_run+0x10bb/0x79b0 [ 1999.874706][ C1] vcpu_run+0x10bb/0x79b0 [ 1999.879065][ C1] ? vcpu_run+0x28fd/0x79b0 [ 1999.883606][ C1] ? __pfx_vcpu_run+0x10/0x10 [ 1999.888280][ C1] ? lock_acquire+0x115/0x350 [ 1999.892963][ C1] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1999.898510][ C1] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1999.904230][ C1] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1999.909088][ C1] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1999.913779][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1999.918967][ C1] ? hook_file_ioctl+0x1f2/0x600 [ 1999.923949][ C1] ? __fget_files+0x2a/0x420 [ 1999.928539][ C1] ? __fget_files+0x2a/0x420 [ 1999.933222][ C1] ? __fget_files+0x3a2/0x420 [ 1999.937897][ C1] ? __fget_files+0x2a/0x420 [ 1999.942499][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1999.947438][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1999.952627][ C1] __se_sys_ioctl+0xfc/0x170 [ 1999.957213][ C1] do_syscall_64+0x166/0x520 [ 1999.961795][ C1] ? trace_irq_disable+0x3b/0x140 [ 1999.966812][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1999.972977][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1999.977764][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1999.983686][ C1] RIP: 0033:0x7f1ba159e159 [ 1999.988149][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2000.007757][ C1] RSP: 002b:00007f1ba24d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2000.016201][ C1] RAX: ffffffffffffffda RBX: 00007f1ba1825fa0 RCX: 00007f1ba159e159 [ 2000.024166][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2000.032217][ C1] RBP: 00007f1ba163503b R08: 0000000000000000 R09: 0000000000000000 [ 2000.040181][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2000.048408][ C1] R13: 00007f1ba1826038 R14: 00007f1ba1825fa0 R15: 00007f1ba194fa48 [ 2000.056390][ C1] [ 2000.059420][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2000.066693][ C1] CPU: 1 UID: 0 PID: 8624 Comm: syz.2.11028 Tainted: G L syzkaller #0 PREEMPT(full) [ 2000.077619][ C1] Tainted: [L]=SOFTLOCKUP [ 2000.081928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2000.091975][ C1] Call Trace: [ 2000.095251][ C1] [ 2000.098096][ C1] vpanic+0x56d/0xa60 [ 2000.102088][ C1] ? __pfx__printk+0x10/0x10 [ 2000.106669][ C1] ? __pfx_vpanic+0x10/0x10 [ 2000.111169][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 2000.116452][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 2000.121670][ C1] panic+0xc5/0xd0 [ 2000.125391][ C1] ? __pfx_panic+0x10/0x10 [ 2000.129819][ C1] __warn+0x315/0x4c0 [ 2000.133799][ C1] ? __queue_work+0xd83/0x10d0 [ 2000.138571][ C1] ? __queue_work+0xd83/0x10d0 [ 2000.143357][ C1] __report_bug+0x276/0x570 [ 2000.147865][ C1] ? __queue_work+0xd83/0x10d0 [ 2000.152640][ C1] ? __pfx___report_bug+0x10/0x10 [ 2000.157659][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 2000.162949][ C1] ? look_up_lock_class+0x57/0x110 [ 2000.168051][ C1] ? register_lock_class+0x31/0x2e0 [ 2000.173245][ C1] report_bug_entry+0x19b/0x290 [ 2000.178094][ C1] ? __queue_work+0xd9f/0x10d0 [ 2000.182853][ C1] ? __queue_work+0xda4/0x10d0 [ 2000.187612][ C1] handle_bug+0xce/0x200 [ 2000.191870][ C1] exc_invalid_op+0x1a/0x50 [ 2000.196368][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2000.201217][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 2000.206612][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 2d cd ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 fb 8f a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 2000.226217][ C1] RSP: 0018:ffffc90000a18bc0 EFLAGS: 00010046 [ 2000.232287][ C1] RAX: 1ffff1100874094e RBX: dffffc0000000000 RCX: ffff888060df1f40 [ 2000.240250][ C1] RDX: ffff888053e10170 RSI: ffffffff8ad5a580 RDI: ffffffff907d0870 [ 2000.248216][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f466f [ 2000.256183][ C1] R10: dffffc0000000000 R11: ffffffff818e4260 R12: 0000000000000008 [ 2000.264232][ C1] R13: ffff888043a04a58 R14: ffffffff907d0870 R15: ffff888053e10170 [ 2000.272216][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2000.278047][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 2000.283344][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2000.288728][ C1] call_timer_fn+0x18d/0x5f0 [ 2000.293444][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2000.299245][ C1] ? call_timer_fn+0xd5/0x5f0 [ 2000.303915][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2000.309035][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 2000.314180][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2000.319987][ C1] __run_timer_base+0x67e/0x8b0 [ 2000.324842][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 2000.330214][ C1] ? ktime_get+0x1f5/0x220 [ 2000.334633][ C1] ? lapic_next_event+0x11/0x20 [ 2000.339479][ C1] run_timer_softirq+0xb7/0x170 [ 2000.344325][ C1] handle_softirqs+0x226/0x860 [ 2000.349088][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 2000.353854][ C1] __irq_exit_rcu+0xcb/0x220 [ 2000.358439][ C1] irq_exit_rcu+0x9/0x30 [ 2000.362675][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2000.368310][ C1] [ 2000.371234][ C1] [ 2000.374159][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2000.380149][ C1] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 2000.385712][ C1] Code: 89 df 48 c7 c6 2b 05 70 8e e8 a7 6e f0 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d [ 2000.405318][ C1] RSP: 0018:ffffc90005bef7f0 EFLAGS: 00000246 [ 2000.411386][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81464d6b [ 2000.419357][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88805f4dd138 [ 2000.427409][ C1] RBP: ffffc90005befbd0 R08: ffff88805f4dd13f R09: 1ffff1100be9ba27 [ 2000.435375][ C1] R10: dffffc0000000000 R11: ffffed100be9ba28 R12: ffff88805f4dd100 [ 2000.443352][ C1] R13: 1ffff1100be9ba27 R14: ffff88805f4dd138 R15: dffffc0000000000 [ 2000.451346][ C1] ? vcpu_run+0x10bb/0x79b0 [ 2000.455873][ C1] vcpu_run+0x10bb/0x79b0 [ 2000.460229][ C1] ? vcpu_run+0x28fd/0x79b0 [ 2000.464762][ C1] ? __pfx_vcpu_run+0x10/0x10 [ 2000.469438][ C1] ? lock_acquire+0x115/0x350 [ 2000.474119][ C1] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 2000.479681][ C1] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 2000.485413][ C1] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 2000.490266][ C1] kvm_vcpu_ioctl+0xa61/0xfd0 [ 2000.494945][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2000.500143][ C1] ? hook_file_ioctl+0x1f2/0x600 [ 2000.505112][ C1] ? __fget_files+0x2a/0x420 [ 2000.509705][ C1] ? __fget_files+0x2a/0x420 [ 2000.514296][ C1] ? __fget_files+0x3a2/0x420 [ 2000.518983][ C1] ? __fget_files+0x2a/0x420 [ 2000.523579][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2000.528518][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2000.533713][ C1] __se_sys_ioctl+0xfc/0x170 [ 2000.538301][ C1] do_syscall_64+0x166/0x520 [ 2000.542892][ C1] ? trace_irq_disable+0x3b/0x140 [ 2000.547906][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.553999][ C1] ? clear_bhb_loop+0x70/0xc0 [ 2000.558676][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.564590][ C1] RIP: 0033:0x7f1ba159e159 [ 2000.568999][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2000.588646][ C1] RSP: 002b:00007f1ba24d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2000.597061][ C1] RAX: ffffffffffffffda RBX: 00007f1ba1825fa0 RCX: 00007f1ba159e159 [ 2000.605037][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2000.613007][ C1] RBP: 00007f1ba163503b R08: 0000000000000000 R09: 0000000000000000 [ 2000.620975][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2000.628978][ C1] R13: 00007f1ba1826038 R14: 00007f1ba1825fa0 R15: 00007f1ba194fa48 [ 2000.636991][ C1] [ 2000.640162][ C1] Kernel Offset: disabled [ 2000.644565][ C1] Rebooting in 86400 seconds..