last executing test programs: 8m24.397956891s ago: executing program 4 (id=461): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x10000000000000, 0x4000001, 0x0, 0xec0000000000000, 0x3, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0xffff, 0x2004, 0x40004, 0x80000000000000, 0x6a9}, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all, 0xb) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100024f2f10100423a0a1587fdcf59e37090212"], 0xfffffffffffffffe) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x4) 8m21.309515929s ago: executing program 4 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x154}}, 0x0) (fail_nth: 16) 8m21.219280606s ago: executing program 4 (id=472): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xd0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000100)) 8m20.150882907s ago: executing program 4 (id=478): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000001c0)='./file0\x00', 0x229080, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESHEX=r1], 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x0, 0x1, 0x1, 0x0, 0x101}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2008800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x0, @remote}}, 0x3, 0x1}, 0x90) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) ptrace$setsig(0x4203, r3, 0xe, &(0x7f0000000000)={0x11, 0x9, 0x9}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616ef31400028008000300030000000800010010"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='limits\x00') getdents(r5, &(0x7f0000001ec0)=""/4096, 0x1000) 8m19.895362982s ago: executing program 4 (id=480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) fcntl$getflags(r1, 0x40a) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000080)=0x8000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80801) mlock2(&(0x7f00005f9000/0x1000)=nil, 0x1000, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x7}, [0x0, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_team\x00', {}, {}, 0x2f, 0x1, 0x1, 0x1}, 0x0, 0xa8, 0xd0, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) 8m19.440818281s ago: executing program 4 (id=483): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x1d, 0x18, 0x4}, 0x20) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, r0, 0x42799000) socket$kcm(0x11, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001940)={&(0x7f00002a4000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/46, 0x2e, 0x1, 0x0}, &(0x7f0000001980)=0x40) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x3, 0x8000, 0x8, 0x10, 0x0, 0x6, 0x7}}], 0x48, 0x40010}, 0x44040) userfaultfd(0x80801) syz_io_uring_setup(0x2008, &(0x7f0000000440)={0x0, 0x0, 0x800, 0x20000, 0x308}, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x100000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) eventfd(0xdc) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x3, 0x10) 8m18.844629331s ago: executing program 32 (id=483): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x1d, 0x18, 0x4}, 0x20) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, r0, 0x42799000) socket$kcm(0x11, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001940)={&(0x7f00002a4000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/46, 0x2e, 0x1, 0x0}, &(0x7f0000001980)=0x40) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x3, 0x8000, 0x8, 0x10, 0x0, 0x6, 0x7}}], 0x48, 0x40010}, 0x44040) userfaultfd(0x80801) syz_io_uring_setup(0x2008, &(0x7f0000000440)={0x0, 0x0, 0x800, 0x20000, 0x308}, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x100000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) eventfd(0xdc) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x3, 0x10) 4m19.668423504s ago: executing program 0 (id=1716): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) creat(&(0x7f00000001c0)='./file0\x00', 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff0000000000000000000055aaffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 4m19.512192862s ago: executing program 0 (id=1718): r0 = semget$private(0x0, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) unshare(0xc040400) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x400000, 0x7}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 4m19.218530497s ago: executing program 0 (id=1723): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000ff04000000011f00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0007000000050007000000000005000a00ffa100000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f00000007c0)=0x40000401, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000100)=0x2) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000035, 0x11, r5, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3904ff756e9edc1affffff000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000680001270000000000f0ff00000000000000000008000100020000000c00020001"], 0x2c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4m17.226955199s ago: executing program 0 (id=1736): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040050bbe1a00000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket(0x6, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8169523010902240001000064000904340102d469e70009058acf", @ANYRES8], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64000100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000001, 0x0, {0x0, 0x0, 0x0, r7, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m15.386812932s ago: executing program 0 (id=1740): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) creat(&(0x7f00000001c0)='./file0\x00', 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00000000000000000000dabeffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 4m15.17466766s ago: executing program 0 (id=1741): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18, 0x40000}}], 0x1, 0x4004080) recvmmsg(r2, &(0x7f0000000840), 0x40000000000036a, 0x10122, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)={0x1b4, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0xfffffffffffffe49, 0x4, 0x26}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed114ee}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x423}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d53}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5139}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000800}, 0x200000c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x8, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000700)="9abecdf70e8adc2831d693dfa74b93c99643b531179a7d2d380f0a303f8999b9733db4db830556097753ab8fecc094a8b12a4a0a75ab16645279ec0545ebced51971b74f5176585f6ec8dcb9e4a1a20ee658c2727482a5a5f075397053a7fd734779ce4582877441e5160c8a8a81e908a71d00", 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x400042, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)={0x0, 0x1, 0x7, [0x8, 0x9, 0x7a90, 0x4, 0x1, 0x7b, 0x4]}, &(0x7f0000000680)=0x16) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000a00)={r7, 0xfc, "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"}, &(0x7f0000000b40)=0x104) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44c8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000027f000/0x2000)=nil) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/174, 0xae}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) 4m0.120732991s ago: executing program 33 (id=1741): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18, 0x40000}}], 0x1, 0x4004080) recvmmsg(r2, &(0x7f0000000840), 0x40000000000036a, 0x10122, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)={0x1b4, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0xfffffffffffffe49, 0x4, 0x26}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed114ee}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x423}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d53}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5139}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000800}, 0x200000c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x8, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000700)="9abecdf70e8adc2831d693dfa74b93c99643b531179a7d2d380f0a303f8999b9733db4db830556097753ab8fecc094a8b12a4a0a75ab16645279ec0545ebced51971b74f5176585f6ec8dcb9e4a1a20ee658c2727482a5a5f075397053a7fd734779ce4582877441e5160c8a8a81e908a71d00", 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x400042, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)={0x0, 0x1, 0x7, [0x8, 0x9, 0x7a90, 0x4, 0x1, 0x7b, 0x4]}, &(0x7f0000000680)=0x16) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000a00)={r7, 0xfc, "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"}, &(0x7f0000000b40)=0x104) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44c8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000027f000/0x2000)=nil) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/174, 0xae}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) 8.82876197s ago: executing program 1 (id=2686): ptrace$poke(0x4, 0x0, &(0x7f0000000240), 0x2) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, &(0x7f000049f000/0x4000)=nil, 0x4000, 0x1}) mkdir(&(0x7f0000000300)='./file0\x00', 0xfc) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x4a848, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB="166a18be2f8d3d49188e96c4d6c79c6c4bcc981a3a84c897e73398ce7970e4b460ea8a671bd61c8c494d9f983ec3b99aaac2b7b2966ad26a06fa1cf6307042f6467fb679d30828a3d1fd8837f39179dcb9c233156592f63b826d87e773a27ffb676b9d55a88e46edfb7dc34648850d644a1937d7db00e9ba19e4dc78dc616b5501177e2f3ab43465421400b1a2a7c21df6f3934fc95cc960bbfcc76c2804457e5548629f10de76", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1809c2a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000040)=0x3f5, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000040), 0x2, 0x0) r11 = openat$cgroup_type(r9, &(0x7f0000000540), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') sendfile(r10, r11, 0x0, 0x7) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x60}}, 0x24008800) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="080008000310004235952100000045ad00170068000060049078ac1e0001ffffffff11f330db7e1908eaa51b7e396ccb8e2a88f664694e47f3111d10d5"], 0x25) 7.378083866s ago: executing program 1 (id=2693): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d1050120000701020301090212000100001a000904"], 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000340)={0xf0f080, 0x3}) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x3e, 0x1}, &(0x7f0000000140)=0x0) timer_gettime(r2, &(0x7f0000000180)) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x58, 0x5) 6.87169344s ago: executing program 6 (id=2694): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xc6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x422}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000000)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xb000, 0x4, 0x500, 0x4, 0x0, [{0x9, 0x1, 0x80, '\x00', 0x72}, {0x9, 0x8, 0x3, '\x00', 0x80}, {0x76, 0x3, 0x4, '\x00', 0x3}, {0xca, 0x9, 0x9, '\x00', 0x5}, {0x3, 0x5, 0x7, '\x00', 0x8}, {0x6, 0x6c, 0x81, '\x00', 0x2}, {0x4, 0xb, 0x2, '\x00', 0x2}, {0x2, 0xc, 0x8, '\x00', 0x4}, {0x7d, 0x4, 0xe, '\x00', 0x8}, {0xec, 0x71, 0x40, '\x00', 0x1}, {0xfb, 0x4, 0x1, '\x00', 0x4}, {0x8, 0x10, 0x3, '\x00', 0xfb}, {0x80, 0x4, 0x1}, {0x6, 0x5, 0x5, '\x00', 0x1}, {0x4, 0x7, 0x0, '\x00', 0x43}, {0x4d, 0x7d, 0x1, '\x00', 0xfd}, {0x8, 0x80, 0x80, '\x00', 0x8}, {0xce, 0xf, 0x73}, {0x9, 0x7f, 0x0, '\x00', 0x82}, {0x5, 0x5, 0xc, '\x00', 0xeb}, {0x1, 0xa, 0x5, '\x00', 0x4}, {0xfe, 0x1, 0x7a, '\x00', 0xc3}, {0x48, 0x65, 0x0, '\x00', 0x8}, {0x93, 0xb, 0x3, '\x00', 0x9}]}}) syz_usb_connect$cdc_ecm(0x5, 0x5d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011003020000082505a3a440000102030109024b0001017600030904008002020600090724060000939c05240000000d240f0105000000b00102004305241536000905810340003d0302090582"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xc6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x422}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) (async) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000000)) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xb000, 0x4, 0x500, 0x4, 0x0, [{0x9, 0x1, 0x80, '\x00', 0x72}, {0x9, 0x8, 0x3, '\x00', 0x80}, {0x76, 0x3, 0x4, '\x00', 0x3}, {0xca, 0x9, 0x9, '\x00', 0x5}, {0x3, 0x5, 0x7, '\x00', 0x8}, {0x6, 0x6c, 0x81, '\x00', 0x2}, {0x4, 0xb, 0x2, '\x00', 0x2}, {0x2, 0xc, 0x8, '\x00', 0x4}, {0x7d, 0x4, 0xe, '\x00', 0x8}, {0xec, 0x71, 0x40, '\x00', 0x1}, {0xfb, 0x4, 0x1, '\x00', 0x4}, {0x8, 0x10, 0x3, '\x00', 0xfb}, {0x80, 0x4, 0x1}, {0x6, 0x5, 0x5, '\x00', 0x1}, {0x4, 0x7, 0x0, '\x00', 0x43}, {0x4d, 0x7d, 0x1, '\x00', 0xfd}, {0x8, 0x80, 0x80, '\x00', 0x8}, {0xce, 0xf, 0x73}, {0x9, 0x7f, 0x0, '\x00', 0x82}, {0x5, 0x5, 0xc, '\x00', 0xeb}, {0x1, 0xa, 0x5, '\x00', 0x4}, {0xfe, 0x1, 0x7a, '\x00', 0xc3}, {0x48, 0x65, 0x0, '\x00', 0x8}, {0x93, 0xb, 0x3, '\x00', 0x9}]}}) (async) syz_usb_connect$cdc_ecm(0x5, 0x5d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011003020000082505a3a440000102030109024b0001017600030904008002020600090724060000939c05240000000d240f0105000000b00102004305241536000905810340003d0302090582"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async) socket$unix(0x1, 0x5, 0x0) (async) 6.806636232s ago: executing program 5 (id=2696): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$radio(&(0x7f00000004c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000002c0)={0x0, @ctrl={0x0, 0x0, @value64}}) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000400000000000000098468edc8854b0f5eac1040000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="93b00224611b06d33fa16289e52ecef701d327d03557a01d8dd8be99d475", @ANYRES64=0x0], 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xa8) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.926885942s ago: executing program 2 (id=2702): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000006c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4000000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xf8}}, 0x4000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r11 = ioctl$KVM_GET_STATS_FD_cpu(r10, 0xaece) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r11, 0xffffffffffffff31, &(0x7f0000000400)}, 0x10) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0xfb, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r13, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.318580554s ago: executing program 1 (id=2703): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f00000005c0)=@delchain={0x34, 0x65, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {0x0, 0x5}, {0x2, 0xa}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02000019000100000000000000220000000000000000000000ffffac1414aa0000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000030000001d00000000000000000000000000000000000002000000000000000000000000dd020000000000000000000000000000000000000000000084010500fe8000000000000000000000000000bb000000002b00000000000000ac14140c000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000003200000000000000ff020000000000000000000000000001023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000700000000000000ff020000000000000000000000000001000000003c00000002000000200100000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000033"], 0x23c}}, 0x0) 4.08269873s ago: executing program 1 (id=2704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x1000, 0x1, 0x1, 0xfffffffe, 0x0, [{0x7, 0xc, 0x4, '\x00', 0x38}, {0x3, 0xfe, 0x7c, '\x00', 0x2f}, {0x6, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x1, '\x00', 0x6}, {0x5, 0x5, 0x6, '\x00', 0x79}, {0x81, 0x80, 0x2, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x1, '\x00', 0x7}, {0x40, 0x6, 0x73, '\x00', 0xff}, {0x1, 0xb7, 0x89, '\x00', 0x80}, {0x16, 0x24, 0xa5, '\x00', 0x1}, {0x7, 0x1, 0x7, '\x00', 0x4}, {0x6, 0xc, 0x5, '\x00', 0x3}, {0x1, 0x10, 0x8c}, {0x5, 0xc0, 0x8, '\x00', 0x3}, {0x8, 0x2, 0xcb, '\x00', 0x5}, {0x7, 0x6, 0xb, '\x00', 0x5}, {0x9, 0x0, 0x4, '\x00', 0x5}, {0x6, 0x3, 0x7, '\x00', 0x6}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x5, 0x31, '\x00', 0xf7}, {0x6, 0x7, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x85, 0x5, '\x00', 0xff}]}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000080000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000001c0008800c0002400000000000007fff0c00014000000001000000000800054000000000140000001100010000"], 0xc8}}, 0x0) 3.831115773s ago: executing program 1 (id=2705): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1000000) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="849267952194a70f819465cf1b854b2f43c6b15f45310d46d5a62793c641940d9fcb484948c56409fa0f141d7bbf54fbd938c44ceca697e61a47a6129026345f7a86c17375981732f23bec0865ff7f654aa13e4325ed22d64443c769ba03e5c9495fb0057676b8f25b5470ddd8c06e79ecd5c2aa27de56ea3f674446356ad72b4b4f6f625332131f18da11911976c9a35e5f07a1435a", @ANYRES32=0x0, @ANYBLOB="f66f758ea8b60c8c308a22fd3b888a1d4ef4e6baf23924122c9defa7ea7f553b96e5693518968e90042fe0f8a49da4316bbd", @ANYRESDEC=r0], 0x0) syz_usb_connect(0x5, 0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101217ad620e71a039008440102030109029d00010000100009044a020288dcb20009050602000202000a090582"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 3.69806018s ago: executing program 6 (id=2706): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) poll(&(0x7f00000001c0)=[{r4, 0x410c}], 0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x17, &(0x7f0000000100)={0x0, 0x9a11, 0xc000, 0x5, 0x290}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x0, 0x0, 0x0) 3.398846684s ago: executing program 3 (id=2709): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) creat(&(0x7f00000001c0)='./file0\x00', 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000000000000000002200", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 2.986163774s ago: executing program 3 (id=2710): unshare(0x4000600) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x12d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) writev(0xffffffffffffffff, &(0x7f0000000400)=[{}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x1, 0x18100}) mremap(&(0x7f00002b7000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00003e7000/0x1000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a3c0000000e0a050000000000000000000a00000509000101ffffffffffffff00100003800c00008008000340000000020900020073797a3100000000140000001100010000000000000000000500000ae189674c4b1e8ff9051a10f8b8a3004448e4cd2433cecde8ff75e8d3902da56a51bb1976694d527de4c8e54e29fc796f4886099f00b0ad152742cffd78657f80dd51991344bc1f79252b0eb60eef227ccf1ac072c77e1b15a7ec74a3d58246b3b87d"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2004c840) eventfd2(0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x9) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.868781848s ago: executing program 2 (id=2711): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000000)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) (async) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x81000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x81000, 0x0, 0xffffffffffffffff}) connect$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0x10) (async) connect$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0x10) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000180)) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000200)="4ff12d2b47b28aa86727715d5e4f83d956cabce3fe1e38e7363b1da925737f307f2eb4d887e3d69a39d05baf323cfdb75100853fda072e8908718465b5de732ffaeee5fb05cfbb404c7153b3a953bb94009911891213897b8dc98fabc694a64b9f091310182b4bbc83b97b0f5e0f4fa3985de6b36a60167b4e", 0x79}, {&(0x7f0000000280)="230c838c43793629142a63672ba9f30c4376ef106179611b0cfce247b93d105fd8e39b910a296d7c5ecd26352b072b7a4fde63a884066fc09de70326c6a0c450006621aeb9a19a173c568be901ebda8763fa4994a5faa15c862c682419b476e30bd1e0f011bfb026c1699ba61b680b4d1f75e50acf91ccedf3f326262f7efa6dec4841e6993cbe35f6ee36f805e0820e8d4e5e87e6ebf10e2e669ba8bc062bd93b72a7a51d1935f9ba35c8a5a9b59beaeabce54df0", 0xb5}, {&(0x7f0000000340)="73e5c31ad4a2469c255c631b7360b3ed720a3ae24262c7ad55ae3befddc85de6ec29b43be1237f828cd65c4c04d896159c41762a6780385cbb9b9eb9178d81ed17509196be59d1a539062ddc7629597ba330e5a52d8883c6547f3cfdb73474defd76f79908c61f6f24954a516ec68df57f9e619f00b67438bfe6c1dd225db4b05a7a671c01c12b41366027a54142fd2c3eb02b811e2aa2f6d79d4f6fe8328564ad02467682137f787a60209b7139331d886234b3c457e93618a68a0ef0e56ae54866811b8e9d0b7396da159b04f9efea30a2e7769af948afe0d6ad617cd5d0", 0xdf}, {&(0x7f0000000440)="48358b1f0cf3faf0f3ff1cf57c4b15906229d8a191d8d937f2338efd5b3fb88a809b133c20f4dddbd2e68ba724d0a5bc24f42e8d5969c6694bc19a76ca34da2b59a12d9372f5abe7278be10bf4a49877d11b625381ded10fafb316c0bb9433d429ad65852a5dcf3bcb1de8cc6609d0edeaca66190904e136bd7fdcfb683382d2baee17b1ee38a4c8af37ec9c2f79adb8b7440b5c7ac9c3df2a4aeb7f4fa0", 0x9e}, {&(0x7f0000000500)="ef698f623acd653161e7356dcddba536ebd67cd18a518504c002", 0x1a}, {&(0x7f0000000540)="8d542b7a874ce0c5035b2a92e81e5c9a8e106a7220761fc3ee69708114d354401a6aaaeef0d5b7c11ab33795385d61c9b36f9bac23b9175b51fa8299a174ba8dd233c8ae165e4a49160184660317ec0c3cff874a2165a76fee438599fabd5202777eb47cde4e859c", 0x68}, {&(0x7f00000005c0)="03f33e241da954309b031f893f69c2e5a178589517c3cbe2537329fa45b1074fe5fd58acc1231123", 0x28}, {&(0x7f0000000600)="a100430a6e0d77d219220b341f8d218d2cbc5079b5cdcc4cba75c9fc7ad262006f1419b588bc4d69abd9ef9307bf6dacb62f60455231df90e8da3ebdb4fc51de5e43e6e0b88c0049831ba362f399678bde06a0202c2e228194ece18033816fa1eb1dd66b1e49ee6922841d6c3bf545a8220a907e627aea5ba39a9973fa58020a1235454059e1c65cfd591186aa733940e5445939bbde48a2c9d3df7c0aaba4650e77a8dc905af3ec0ebb431a8b9c6e", 0xaf}, {&(0x7f00000006c0)="bc799fc4dc9fa0f83dfdb5e6d8b95521e765706d99897b9a0f82760a5da1de21d00edef6d22edbda65ab3179d3c7859d4335c918e85d236c832a6fbe390f9220197f5ee99a6843c5baab427d4cbc", 0x4e}], 0x9) (async) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000200)="4ff12d2b47b28aa86727715d5e4f83d956cabce3fe1e38e7363b1da925737f307f2eb4d887e3d69a39d05baf323cfdb75100853fda072e8908718465b5de732ffaeee5fb05cfbb404c7153b3a953bb94009911891213897b8dc98fabc694a64b9f091310182b4bbc83b97b0f5e0f4fa3985de6b36a60167b4e", 0x79}, {&(0x7f0000000280)="230c838c43793629142a63672ba9f30c4376ef106179611b0cfce247b93d105fd8e39b910a296d7c5ecd26352b072b7a4fde63a884066fc09de70326c6a0c450006621aeb9a19a173c568be901ebda8763fa4994a5faa15c862c682419b476e30bd1e0f011bfb026c1699ba61b680b4d1f75e50acf91ccedf3f326262f7efa6dec4841e6993cbe35f6ee36f805e0820e8d4e5e87e6ebf10e2e669ba8bc062bd93b72a7a51d1935f9ba35c8a5a9b59beaeabce54df0", 0xb5}, {&(0x7f0000000340)="73e5c31ad4a2469c255c631b7360b3ed720a3ae24262c7ad55ae3befddc85de6ec29b43be1237f828cd65c4c04d896159c41762a6780385cbb9b9eb9178d81ed17509196be59d1a539062ddc7629597ba330e5a52d8883c6547f3cfdb73474defd76f79908c61f6f24954a516ec68df57f9e619f00b67438bfe6c1dd225db4b05a7a671c01c12b41366027a54142fd2c3eb02b811e2aa2f6d79d4f6fe8328564ad02467682137f787a60209b7139331d886234b3c457e93618a68a0ef0e56ae54866811b8e9d0b7396da159b04f9efea30a2e7769af948afe0d6ad617cd5d0", 0xdf}, {&(0x7f0000000440)="48358b1f0cf3faf0f3ff1cf57c4b15906229d8a191d8d937f2338efd5b3fb88a809b133c20f4dddbd2e68ba724d0a5bc24f42e8d5969c6694bc19a76ca34da2b59a12d9372f5abe7278be10bf4a49877d11b625381ded10fafb316c0bb9433d429ad65852a5dcf3bcb1de8cc6609d0edeaca66190904e136bd7fdcfb683382d2baee17b1ee38a4c8af37ec9c2f79adb8b7440b5c7ac9c3df2a4aeb7f4fa0", 0x9e}, {&(0x7f0000000500)="ef698f623acd653161e7356dcddba536ebd67cd18a518504c002", 0x1a}, {&(0x7f0000000540)="8d542b7a874ce0c5035b2a92e81e5c9a8e106a7220761fc3ee69708114d354401a6aaaeef0d5b7c11ab33795385d61c9b36f9bac23b9175b51fa8299a174ba8dd233c8ae165e4a49160184660317ec0c3cff874a2165a76fee438599fabd5202777eb47cde4e859c", 0x68}, {&(0x7f00000005c0)="03f33e241da954309b031f893f69c2e5a178589517c3cbe2537329fa45b1074fe5fd58acc1231123", 0x28}, {&(0x7f0000000600)="a100430a6e0d77d219220b341f8d218d2cbc5079b5cdcc4cba75c9fc7ad262006f1419b588bc4d69abd9ef9307bf6dacb62f60455231df90e8da3ebdb4fc51de5e43e6e0b88c0049831ba362f399678bde06a0202c2e228194ece18033816fa1eb1dd66b1e49ee6922841d6c3bf545a8220a907e627aea5ba39a9973fa58020a1235454059e1c65cfd591186aa733940e5445939bbde48a2c9d3df7c0aaba4650e77a8dc905af3ec0ebb431a8b9c6e", 0xaf}, {&(0x7f00000006c0)="bc799fc4dc9fa0f83dfdb5e6d8b95521e765706d99897b9a0f82760a5da1de21d00edef6d22edbda65ab3179d3c7859d4335c918e85d236c832a6fbe390f9220197f5ee99a6843c5baab427d4cbc", 0x4e}], 0x9) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000800), 0x60000) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) (async) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000840)=""/67) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000008c0)=@gcm_128={{0x303}, "88364dc6167c98ac", "aac5c305975ee290c4d30a2b0e6c9998", "92747d56", "b0164fd343efde16"}, 0x28) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000900), 0x40001, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000009c0)={0xa, &(0x7f0000000940)=[{0x1, 0x3, 0x1, 0x1c0d400}, {0x8, 0x3, 0x48, 0x47b}, {0xf3, 0x3, 0x1, 0x5}, {0x1, 0x42, 0x75, 0x7}, {0x1ff, 0x6, 0x2, 0x7fc00}, {0x8, 0x2, 0x9, 0x7fffffff}, {0x8, 0x2, 0x3, 0x6}, {0x6aab, 0x19, 0x8}, {0x200, 0x1, 0xe7, 0x1}, {0x1, 0x2, 0x19, 0x7}]}) creat(&(0x7f0000000a00)='./file0\x00', 0x84) (async) r6 = creat(&(0x7f0000000a00)='./file0\x00', 0x84) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000a40)=0x6, 0x4) ptrace(0x4207, 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000a80)={0xb, {0xfd5, 0x3, 0x8, 0x2}}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000ac0)={0x7, 0xf69c, {0x0}, {0xee01}, 0x6, 0x5}) ptrace$pokeuser(0x6, r7, 0x6, 0xa) dup3(r0, r3, 0x80000) bind$tipc(r3, &(0x7f0000000b00)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x2}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000b00)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x2}}, 0x10) read$FUSE(r2, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004bc0)={r7, r8, r9}, 0xc) syz_open_dev$sg(&(0x7f0000004c00), 0xfffffffffffffffb, 0x121801) (async) r10 = syz_open_dev$sg(&(0x7f0000004c00), 0xfffffffffffffffb, 0x121801) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x80049367, &(0x7f0000004c40)) fchdir(r6) 2.727886247s ago: executing program 5 (id=2696): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$radio(&(0x7f00000004c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000002c0)={0x0, @ctrl={0x0, 0x0, @value64}}) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000400000000000000098468edc8854b0f5eac1040000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="93b00224611b06d33fa16289e52ecef701d327d03557a01d8dd8be99d475", @ANYRES64=0x0], 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xa8) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.617211014s ago: executing program 6 (id=2712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x20009, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x8, 0x7, 0x4, {0xb, @pix={0x5, 0x4, 0x31424752, 0x3, 0x7f, 0xfffff671, 0x0, 0x400, 0x0, 0x8, 0x0, 0x1}}, 0x2}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000580)={r0, &(0x7f0000000640)='(.\x00', 0x2, &(0x7f00000003c0)={@_ha_fsid={[0x7ff, 0x8000]}, {0x61d9, 0x100, 0xc, 0x80000001}}, 0x5, &(0x7f0000000400), &(0x7f0000000480)=0x7}) mmap$snddsp(&(0x7f0000792000/0x1000)=nil, 0x1000, 0x100000c, 0x10, r2, 0xf000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x80010, 0xffffffffffffffff, 0xb3209000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$sysctl(r3, &(0x7f0000000500)='3\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x161382, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$UBLK_U_CMD_GET_PARAMS(r5, 0x80207509, &(0x7f00000001c0)={0x0, 0xffff, 0x70, &(0x7f00000005c0)={0x70}}) ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000340)={r6}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.498241646s ago: executing program 2 (id=2713): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000006c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xf8}}, 0x4000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r11 = ioctl$KVM_GET_STATS_FD_cpu(r10, 0xaece) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r11, 0xffffffffffffff31, &(0x7f0000000400)}, 0x10) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0xfb, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r13, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.360981858s ago: executing program 5 (id=2714): unshare(0x6a040000) r0 = eventfd2(0xff, 0x1000) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYBLOB="1b9da80337a8cccecd96d4085e8fa65f311545ca85fa7bdd623d095398824259efdfbc7e007c20b60d2c35d21bc15ed92bcd045065b982cda68168b5bec6682bc737e6723b81b78299364ab43223243e0e88e2972f72b6c993c89bf6d05100002945a8e8ae58e22d5cd29c84f32c459a3b4742623cddf3e47ea5ed12dda9407c20f15684e8416bdbb4923188714ff071ac3f27a3422fdebfe35ac4f9372d48867511b13d8a62262f44e2a4f3dbce4dd3b9e45e4ee31a0d750540ab97033d89e8754538d41fd1b5f631c25861110b6daea1eb35a48346bc3c519a8b1c13c0abbf10c61be20df750bc28c6c92ac51f8d4f83ee55a44058373dd644f47239cd", @ANYBLOB="9cf5ebf34d04822e56cb85969b1e745976743af0", @ANYRES16=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="a3e542d7dadbb0b219555fc239370902e5f43f590347cec5b7a8d678cddcea62af492cf7bfbd4f05ed8a8229f2197799af2bd28d9b3fac29bd3f30cd140e799974339e33ece9960844570e09e3f707083fd11f0af8ecb9730f8948", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000240)) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r3, 0x0, 0x4, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r3, 0x0, 0x1000, 0x2000}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000079c0)={0x28, 0x6, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x40}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x164, r5, 0xa20, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x291}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x3}}, {0x8, 0xb, 0xff}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2.237647917s ago: executing program 6 (id=2715): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f00000004c0), 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.891803289s ago: executing program 6 (id=2716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4200, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0x3) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x7) landlock_restrict_self(r3, 0x3) landlock_restrict_self(r4, 0x9) landlock_restrict_self(r3, 0x5) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x1) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x6) landlock_restrict_self(r4, 0x5) landlock_restrict_self(r4, 0xa) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) dup2(r1, r0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0, 0x0, 0x6}]) 1.747640144s ago: executing program 3 (id=2717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$unix(0x1, 0x1, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x2, 0x7) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'syzkaller1\x00'}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="9ee7", 0x2}], 0x1}, 0x840) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'dvmrp0\x00', 0x102}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.612601399s ago: executing program 6 (id=2718): syz_usb_connect(0x5, 0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090588061000060408082387ac33afe3410725010305f8040905070200020402660725"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="2eaa8169acf07ff6f4b201d91d827b55541b570fb1f58f59f813c17a854d7af794a1b75ef18a7952aa16181613025333c3739e7cb0cea4c1dd84a2ae243bd854fd5dc003c05dec", @ANYRESHEX=0x0, @ANYRES64=0x0], 0x0) 1.582221791s ago: executing program 3 (id=2719): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe15}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) r3 = mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x03r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x131, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r4, 0x80c3e000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffff4}, 0x68) lseek(r3, 0x5, 0x2) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) (async) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00220f000000b01b4550182185f59145b3"], 0x0}, 0x0) (async) r6 = socket$inet(0x2, 0x4, 0x800) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) 1.150124561s ago: executing program 2 (id=2720): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x6, 0x7, 0x3f8, 0x1, 0x32}, 0x9c) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x280143, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe2(&(0x7f0000000000), 0x84080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 1.041719405s ago: executing program 2 (id=2721): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) creat(&(0x7f00000001c0)='./file0\x00', 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 922.803371ms ago: executing program 2 (id=2722): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x9, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="060000000000000000001000000000008510000005000000950000000000000087d15802a472d613873b5e4d91fab5da2239eba9a3ca46b0b2b0717b4514072083fd183e2296844ff220ccf2b67ea5725387c13405f8aeb4d9bd6130a42f982f43dc55e65097aded52f0412b828523338cb1e3d9ef0f5c2eee831130cac22874f7bab37da94ce6ef7162f778d90731108a5122df3bd1e55991f2f8877e414c823bd48a85fd253cb383aab4dea2ce4d8995cf05017b032cea992f509df3740a75d573f9f2d3f1fb6aa10c72f917869ede1768252fcd11f12e1906aba0c8bf2cf33b05452966a664fa27ba209c8755f7ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000800000004000001ffffffffffff9500000000000008"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) capset(&(0x7f00000000c0)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r9, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) r10 = syz_usb_connect(0x5, 0x58, &(0x7f0000000680)=ANY=[@ANYBLOB="120110038e3ac620942601001378010203010902029e1b84120c678c5118e1192d1a6600020e061008000000d8011adaa8080905081020000709800904e41503b956da020905080000040112fc09050b00200007039a0705d15b89f26d090509034000820a84"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r10, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="90023c0dabd452d0f1522692489e2c8836cecbe980a240112eae1cb82db2f4c9989812347b91fe2d6a446c375c368e463c3b180606e3d48d35b2a76232de559109c2e0d98365d0fd50ed6f10e127ebd6fa7991d4ebc069bdeb4ed8a8339323bbb031f0244a13595a8599bd34b4ff393945bba5e8de0c1e4ab4fe"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000011c0)={0x24, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="e62732776f4224a57905182d4a9d09f16dd40843bca9b11f140120c7ca08e741bb47789156fc4f796d5f743d21429c6aeb259cbce33bce5c37089b0eb080d98265878520071a2fedbdb433f2f648e12bbc53f7b3dd06eb8ed9675a4bf21878f0961a4e7ec7ac0f74dc9687df8feed795dd1cebea4291dc8c11860b65574cf908da6dffe2083a12e4a6924369d6192eb73252edc60bec0edb6a2f01677209f461f2feee7c6c2d3175b13fbdb5f3f6b8dc7d4a3bb58678907ec30ecf316e52d17ff156fb6e6077717cae132bdc7398ca8b3dae23"], 0x0, 0x0}, 0x0) 887.399164ms ago: executing program 3 (id=2723): r0 = socket(0x1f, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x8, r7, 0x41}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000d80)="f1253d1aba097c8362cbf05c5dd3b7ec96ca8a4724140bae10cf861739407caad821", 0x22}], 0x1}, 0x40004) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a440)=[{{&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) 612.681575ms ago: executing program 1 (id=2724): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x1, 0x0, {0xa, 0x4e20, 0x8001, @remote, 0x4}}}, 0x32) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x1, 0x0, {0xa, 0x4e20, 0x8001, @remote, 0x4}}}, 0x32) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1f83, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1f83, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x3, 0x0}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000001340)='attr/prev\x00') pread64(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18230000", @ANYRES32, @ANYBLOB="0200000008000000850000be00a47557db182af474", @ANYRES32=r2, @ANYBLOB="0000000005000000460a040002000000"], &(0x7f0000000280)='syzkaller\x00', 0x9bb0, 0x3d, &(0x7f00000002c0)=""/61, 0x41100, 0x40, '\x00', 0x0, @fallback=0x20, r3, 0x8, &(0x7f00000003c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xa, 0x227d, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r5, r0], 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18230000", @ANYRES32, @ANYBLOB="0200000008000000850000be00a47557db182af474", @ANYRES32=r2, @ANYBLOB="0000000005000000460a040002000000"], &(0x7f0000000280)='syzkaller\x00', 0x9bb0, 0x3d, &(0x7f00000002c0)=""/61, 0x41100, 0x40, '\x00', 0x0, @fallback=0x20, r3, 0x8, &(0x7f00000003c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xa, 0x227d, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r5, r0], 0x0, 0x10, 0x1}, 0x94) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002800)=[{{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="828dc6b1adfc8eac01414692710e7a6f48be5b6637340757cd8cb9e5171ee4fca51d4e44b6", 0x25}, {&(0x7f00000023c0)}, {&(0x7f0000002400)="87857d151834f83c2176d8ad14d3decf7d70f432974357f8d7157119624ebe55c843b07dba02abfeeac5b74502faabefa474762bff", 0x35}, {&(0x7f0000002440)="bedf", 0x2}, {&(0x7f0000002480)="b5bb3a62a5622e6b8a1b9e58d943b89b84e61a42124aaf7c7b1c6f1f365c76e204e1612391b5aa967592bb59614e584c08e2b15c740b15bcea8db9b31f38d0eea813d52417c24903e8d0c2ad3464755474149616eb0a4ee1f03abba6", 0x5c}, {&(0x7f0000002500)="c6826e6adb70cf910f0d1c068e15f087bd4d75488f8e3bf6c38c670ed614c0e7a7f042c03cdcc5c527e0b78e689d31d445617330a74874e34b7a61ea8c42b5d768b85d76513f991cb6d7af4770ff486757b4603c129d2de2b053a2265566b1034293aa89a5983d4c2c1bcde2846f487b6d9ca5cc5abb603d185c4bd2385de5c1d1a00ab265b2014b7f1a34da6195a748c1c0dbcfd7997f4d17fd1551adb9d7a0fe9ff88dbed3cb45a3e08eec67df18415f7022676952a2d03f3beda46cf719ce35cce24fc791bec480a0f62c6c9c014397fb8f5687b4c4a6cf05b695a62f3a5a37d0e8bc5daa", 0xe6}, {&(0x7f0000002600)="7a4437e1bd8195c3a5e5a0d31ab65127a3f2997c3057769ab2fb4dd0d2dc8612e3cf903330db787f9e6ff83ecad1ad40f8c849a973f777f8b999bcceb253b56874e83491bc1c66c2ce56693cb36ec862c554b1755350e5450b2c3a1686bf710a667bcaf21864eae91536ea6f8b699ea9d8e1d714fb64c1f83497cc80b912e339a1f1ba13ba5d27dc4f19909c0ca38c552b63f44e50efdbbc940fd8def01284e6b9c2253be934202c", 0xa8}, {&(0x7f00000026c0)="c74c1227cd0de0e6885e24544a03066d41e514ee96d5587b88e1c02e6e8b58dda5ddb7c7ebc12fd2a398e3235f43a6aaede768ba0438780f1b44a52da2149b5fbfbbc35607d799cd42ddb563925651579937327ea87b03a15a5d753d55e3bf", 0x5f}], 0x9, 0x0, 0x0, 0x4c080}}], 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001000000000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001000000000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) 603.316997ms ago: executing program 5 (id=2725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x80000001, 0xfffffffffffffff7, 0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffffffffffffffd8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x5) 550.753091ms ago: executing program 3 (id=2726): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000), 0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES32=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="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"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@remote, @private}, &(0x7f0000000100)=0xc) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rmdir(&(0x7f0000000080)='./file0\x00') 159.365519ms ago: executing program 5 (id=2727): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xf, 0x111800) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0xff, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x9, 0x1c, 0x0, "bda659fb65a11422d9f74572ec928139a78af345a5a939383e10c0e20e8075ea4b5df8a9ce26d81d1700e3fe97a7b6a5eef1c833250b9b629d4be292b3b4b874", "277ca1f651281630896078463de41c8b4b1b44148baa100bc697c6d3d6e96603ddfbf1d0f85129aa66017c585bf8ed6c5790624ad33664875378545ff9a63237", "4f0122300263ee077967700efa92355639a45114a22374c06865003a0247d13b", [0x0, 0x3bf]}}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$FE_DISEQC_RESET_OVERLOAD(r2, 0x6f3e, 0x0) r3 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x121080, 0x32) ioctl$PPPIOCDISCONN(r3, 0x7439) getsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000300)={0x18}) r4 = syz_open_dev$loop(&(0x7f0000000340), 0x1, 0x8002) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0xa41, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000003c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6f, "68786764c8ab74"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000013c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000015c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000017c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000027c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000029c0)={{0x0, 0x43f, 0x2, 0xf39, 0x1, 0x1, 0xa1, 0x4, 0xe0, 0x734, 0xfffffffc, 0x3, 0x5, 0x4}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002a40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "239e34015accc3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000003a40)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8d, "913ac1e228d816"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000004a40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000005a40)={{0x0, 0x0, 0xb, 0xf, 0x2, 0x7f, 0xe, 0x2, 0xc9b3, 0x3228bc51, 0x7fffffff, 0x100000001, 0xb, 0x8, 0x1}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000005b00)={{0x0, 0x5, 0xa88, 0x9, 0x0, 0x2, 0x5, 0xd7, 0x5, 0xfffffff8, 0x101, 0x9, 0x1, 0xb, 0x10000}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000006b00)={0x2fa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "ce23d812353c0f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000007b00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000007d00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000008d00)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "7c8a26387b8515"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000009d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000009f00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000108640)={0x2, [{r6, r7}, {r8}, {0x0, r9}, {0x0, r10}, {r11, r12}, {r13, r14}, {r15}, {r16, r17}, {0x0, r18}, {0x0, r19}, {r20, r21}, {r22}], 0x5, "f372dac4021ceb"}) 0s ago: executing program 5 (id=2728): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x2102, r1}, 0x1) landlock_restrict_self(r2, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000010600000000000000000000000000000000000000000000001e0d0003006261726520f5181f4d85681a300012000c00010062617265756470002000020006000100b5120000060002"], 0x60}}, 0x8000) kernel console output (not intermixed with test programs): xe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 512.947561][ T30] audit: type=1326 audit(1789186653.706:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.5.2172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 515.524852][T14000] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2176'. [ 516.805179][ C0] bridge0: port 1(veth0) entered learning state [ 516.963180][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.963598][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.007784][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.008620][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.086616][T14038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.087038][T14038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.195432][T14007] bridge0: port 3(erspan0) entered blocking state [ 519.195568][T14007] bridge0: port 3(erspan0) entered disabled state [ 519.195825][T14007] erspan0: entered allmulticast mode [ 519.218610][T14007] erspan0: entered promiscuous mode [ 519.220712][T14007] bridge0: port 3(erspan0) entered blocking state [ 519.220809][T14007] bridge0: port 3(erspan0) entered forwarding state [ 519.234482][T14030] pim6reg: entered allmulticast mode [ 519.255548][T14028] pim6reg: left allmulticast mode [ 519.336019][T14014] erspan0: left allmulticast mode [ 519.336039][T14014] erspan0: left promiscuous mode [ 519.338218][T14014] bridge0: port 3(erspan0) entered disabled state [ 519.474001][T14041] syzkaller0: entered promiscuous mode [ 519.474017][T14041] syzkaller0: entered allmulticast mode [ 521.394313][T14064] sock: sock_set_timeout: `syz.6.2191' (pid 14064) tries to set negative timeout [ 523.809565][T14076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2194'. [ 524.069482][T14093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.073758][T14093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.144936][T14093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 524.387470][ T51] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 524.513294][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2201'. [ 524.560226][ T51] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 524.562691][ T51] usb 6-1: config 0 interface 0 has no altsetting 0 [ 524.562730][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.603406][ T51] usb 6-1: config 0 descriptor?? [ 525.239041][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 525.239062][ T30] audit: type=1800 audit(1789186665.996:2076): pid=14127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2199" name="nullb0" dev="devtmpfs" ino=3148 res=0 errno=0 [ 525.562000][ T51] usb 6-1: string descriptor 0 read error: -71 [ 525.592379][ T51] usbhid 6-1:0.0: can't add hid device: -71 [ 525.592446][ T51] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 525.618210][ T51] usb 6-1: USB disconnect, device number 77 [ 526.166665][T14138] --map-set only usable from mangle table [ 526.241333][T14141] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2207'. [ 526.241638][T14143] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2207'. [ 526.257388][ T5696] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 526.423772][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 526.438385][ T5696] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 526.444671][ T5696] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 526.444698][ T5696] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 526.444718][ T5696] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 526.444735][ T5696] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 526.444752][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 526.444770][ T5696] usb 4-1: config 0 has no interface number 0 [ 526.444810][ T5696] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 526.444835][ T5696] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 526.444857][ T5696] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.444888][ T5696] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.444914][ T5696] usb 4-1: config 0 interface 125 has no altsetting 0 [ 526.444931][ T5696] usb 4-1: config 0 interface 125 has no altsetting 2 [ 526.480149][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.480177][ T5696] usb 4-1: Product: syz [ 526.480192][ T5696] usb 4-1: Manufacturer: syz [ 526.480206][ T5696] usb 4-1: SerialNumber: syz [ 526.482888][ T5696] usb 4-1: config 0 descriptor?? [ 526.492225][ T5696] usb 4-1: selecting invalid altsetting 2 [ 526.530892][T14151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2210'. [ 526.623632][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.624135][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.639656][T14154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.640138][T14154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.687399][ T5704] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 526.838085][ T5704] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 526.839097][ T5704] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 526.839114][ T5704] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 526.841295][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.841319][ T5704] usb 6-1: Product: syz [ 526.841334][ T5704] usb 6-1: Manufacturer: syz [ 526.841363][ T5704] usb 6-1: SerialNumber: syz [ 527.147830][T14136] netlink: 'syz.3.2205': attribute type 1 has an invalid length. [ 527.251376][ C0] usb 6-1: check_urb_status: overflow actual length is 128 [ 527.251491][ C0] usb 6-1: arpc in-urb error -75 (dropped) [ 527.382294][T14172] coredump: 1(syz.2.2214): Core dump to core aborted: cannot preserve file permissions [ 527.454294][T14148] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2209'. [ 527.456886][T14149] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2209'. [ 527.494590][ T5704] usb 6-1: failed to set cport flags for port 0 [ 527.494695][ T5704] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 527.497056][ T5704] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 527.534274][ T5704] usb 6-1: USB disconnect, device number 78 [ 527.535835][ T5696] get_1284_register timeout [ 527.535946][ C0] usb 4-1: async_complete: urb error -104 [ 527.536021][ C0] usb 4-1: async_complete: urb error -104 [ 527.581600][T14168] kvm: pic: non byte write [ 527.788058][T14177] syzkaller1: entered promiscuous mode [ 527.788074][T14177] syzkaller1: entered allmulticast mode [ 527.796210][T14177] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 528.110982][T11534] tipc: Subscription rejected, illegal request [ 528.864943][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 528.882053][T14208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2226'. [ 528.889970][T14208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2226'. [ 528.910895][T14209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.911680][T14209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.912389][T14208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'. [ 529.203500][T14215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.206117][T14215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.524694][T14223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.524947][T14223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.934884][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.935317][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.784855][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 531.784878][T14264] netlink: 'syz.2.2240': attribute type 5 has an invalid length. [ 531.784888][T14264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2240'. [ 531.997005][T14264] geneve3: entered promiscuous mode [ 531.997022][T14264] geneve3: entered allmulticast mode [ 532.056608][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 532.056821][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 532.056861][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 532.078355][ T7319] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 532.158739][ C0] bridge0: port 1(veth0) entered forwarding state [ 532.158761][ C0] bridge0: topology change detected, propagating [ 532.522510][T14282] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2245'. [ 532.522528][T14282] openvswitch: netlink: Flow key attr not present in new flow. [ 533.136007][T14299] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 533.177007][T14297] program syz.3.2249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.647626][ T5696] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 533.757936][T14315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.758379][T14315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.807370][ T5696] usb 6-1: Using ep0 maxpacket: 16 [ 533.808097][ T5696] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 533.809244][ T5696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.809274][ T5696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.809296][ T5696] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 533.809344][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.816959][ T5696] usb 6-1: config 0 descriptor?? [ 533.823527][T14315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 533.987428][T14317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.990115][T14317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.223853][ T5696] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 534.223890][ T5696] microsoft 0003:045E:07DA.0026: item fetching failed at offset 32/34 [ 534.224739][ T5696] microsoft 0003:045E:07DA.0026: parse failed [ 534.224840][ T5696] microsoft 0003:045E:07DA.0026: probe with driver microsoft failed with error -22 [ 534.226790][T14322] loop3: detected capacity change from 0 to 7 [ 534.267481][T14322] Dev loop3: unable to read RDB block 7 [ 534.267526][T14322] loop3: unable to read partition table [ 534.269036][T14322] loop3: partition table beyond EOD, truncated [ 534.269075][T14322] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 534.789989][ T30] audit: type=1326 audit(1789186675.546:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 534.792954][ T30] audit: type=1326 audit(1789186675.546:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 534.794674][ T30] audit: type=1326 audit(1789186675.546:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 534.795424][ T30] audit: type=1326 audit(1789186675.546:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 534.795712][ T30] audit: type=1326 audit(1789186675.546:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 534.796109][ T30] audit: type=1326 audit(1789186675.546:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 534.824047][ T30] audit: type=1326 audit(1789186675.586:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 534.874787][ T30] audit: type=1326 audit(1789186675.636:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 534.893845][T14336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2259'. [ 534.893868][T14336] openvswitch: netlink: Flow key attr not present in new flow. [ 534.925044][ T30] audit: type=1326 audit(1789186675.656:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 534.925098][ T30] audit: type=1326 audit(1789186675.656:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.6.2258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 535.785339][T14349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.786859][T14347] loop4: detected capacity change from 0 to 7 [ 535.799106][T14347] Dev loop4: unable to read RDB block 7 [ 535.799147][T14347] loop4: unable to read partition table [ 535.799359][T14347] loop4: partition table beyond EOD, truncated [ 535.799378][T14347] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 535.802336][T14346] syzkaller0: entered promiscuous mode [ 535.802355][T14346] syzkaller0: entered allmulticast mode [ 537.303971][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.304225][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.580439][T14386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.042043][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2273'. [ 539.185267][T14393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.185542][T14393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.231659][T14391] netlink: 'syz.3.2274': attribute type 10 has an invalid length. [ 540.985089][T14374] batadv0: entered promiscuous mode [ 540.989367][T14374] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 540.990384][T14374] batadv0: left promiscuous mode [ 541.079192][T14388] bridge5: entered promiscuous mode [ 541.313995][T14402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.337464][T14402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.573220][T14408] gretap1: entered promiscuous mode [ 541.783207][T14418] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2280'. [ 541.982552][T14421] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2281'. [ 542.009425][T14421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.029131][T14421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.051053][T14425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.060819][T14428] netlink: 'syz.6.2284': attribute type 1 has an invalid length. [ 542.060839][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2284'. [ 542.230933][T14433] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 542.230971][T14433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.300729][T14439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.314230][T14433] binder: BINDER_SET_CONTEXT_MGR already set [ 542.314267][T14433] binder: 14431:14433 ioctl 4018620d 200000004a80 returned -16 [ 543.229594][T14454] kvm_intel: kvm [14453]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xe82f [ 543.506737][ T5704] hid (null): unknown global tag 0xc [ 543.544904][ T5704] hid-generic 0006:0008:00FF.0027: unknown main item tag 0x3 [ 543.544940][ T5704] hid-generic 0006:0008:00FF.0027: unknown main item tag 0x5 [ 543.544966][ T5704] hid-generic 0006:0008:00FF.0027: unknown global tag 0xc [ 543.544980][ T5704] hid-generic 0006:0008:00FF.0027: item 0 0 1 12 parsing failed [ 543.545035][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2293'. [ 543.547107][ T5704] hid-generic 0006:0008:00FF.0027: probe with driver hid-generic failed with error -22 [ 543.609563][T14470] fuse: Bad value for 'fd' [ 543.672275][T14469] FAULT_INJECTION: forcing a failure. [ 543.672275][T14469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.672310][T14469] CPU: 0 UID: 0 PID: 14469 Comm: syz.3.2295 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.672336][T14469] Tainted: [L]=SOFTLOCKUP [ 543.672343][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.672356][T14469] Call Trace: [ 543.672364][T14469] [ 543.672374][T14469] dump_stack_lvl+0xe8/0x150 [ 543.672411][T14469] should_fail_ex+0x410/0x560 [ 543.672439][T14469] _copy_from_user+0x2d/0xb0 [ 543.672466][T14469] scsi_ioctl+0x4d1/0x2130 [ 543.672616][T14469] ? __pfx_scsi_ioctl+0x10/0x10 [ 543.672665][T14469] ? kasan_quarantine_put+0xbb/0x1f0 [ 543.672703][T14469] ? scsi_block_when_processing_errors+0x3b6/0x480 [ 543.672734][T14469] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 543.672780][T14469] sg_ioctl+0x17a9/0x21b0 [ 543.672841][T14469] ? __pfx_sg_ioctl+0x10/0x10 [ 543.672864][T14469] ? __fget_files+0x2a/0x420 [ 543.672890][T14469] ? __fget_files+0x2a/0x420 [ 543.672912][T14469] ? __fget_files+0x3a2/0x420 [ 543.672935][T14469] ? __fget_files+0x2a/0x420 [ 543.672961][T14469] ? bpf_lsm_file_ioctl+0x9/0x20 [ 543.672988][T14469] ? __pfx_sg_ioctl+0x10/0x10 [ 543.673011][T14469] __se_sys_ioctl+0xfc/0x170 [ 543.673035][T14469] do_syscall_64+0x166/0x520 [ 543.673057][T14469] ? trace_irq_disable+0x3b/0x140 [ 543.673076][T14469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.673097][T14469] ? clear_bhb_loop+0x70/0xc0 [ 543.673118][T14469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.673138][T14469] RIP: 0033:0x7f0e8519e159 [ 543.673158][T14469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.673176][T14469] RSP: 002b:00007f0e85fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.673197][T14469] RAX: ffffffffffffffda RBX: 00007f0e85425fa0 RCX: 00007f0e8519e159 [ 543.673212][T14469] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000012 [ 543.673225][T14469] RBP: 00007f0e85fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 543.673239][T14469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.673250][T14469] R13: 00007f0e85426038 R14: 00007f0e85425fa0 R15: 00007f0e8554fa48 [ 543.673278][T14469] [ 543.738472][T14474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.738863][T14474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.744729][T14475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.745125][T14475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.965469][T14476] warning: `syz.5.2296' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 543.972670][T14479] openvswitch: netlink: Message has 8 unknown bytes. [ 544.252662][T14486] usb usb7: usbfs: process 14486 (syz.3.2298) did not claim interface 0 before use [ 544.913134][T14496] kvm: pic: non byte write [ 546.582501][T14526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.583245][T14526] FAULT_INJECTION: forcing a failure. [ 546.583245][T14526] name failslab, interval 1, probability 0, space 0, times 0 [ 546.583278][T14526] CPU: 0 UID: 0 PID: 14526 Comm: syz.1.2312 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.583304][T14526] Tainted: [L]=SOFTLOCKUP [ 546.583312][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.583324][T14526] Call Trace: [ 546.583332][T14526] [ 546.583341][T14526] dump_stack_lvl+0xe8/0x150 [ 546.583379][T14526] should_fail_ex+0x410/0x560 [ 546.583406][T14526] ? __alloc_skb+0x1db/0x7a0 [ 546.583430][T14526] should_failslab+0xa8/0x100 [ 546.583456][T14526] ? __alloc_skb+0x1db/0x7a0 [ 546.583477][T14526] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 546.583508][T14526] ? __alloc_skb+0x18d/0x7a0 [ 546.583532][T14526] ? __alloc_skb+0x1db/0x7a0 [ 546.583561][T14526] __alloc_skb+0x1db/0x7a0 [ 546.583587][T14526] netlink_ack+0x136/0xb30 [ 546.583614][T14526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.583652][T14526] netlink_rcv_skb+0x2a4/0x4a0 [ 546.583680][T14526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.583704][T14526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.583755][T14526] ? down_read+0x2be/0x330 [ 546.583784][T14526] genl_rcv+0x28/0x40 [ 546.583804][T14526] netlink_unicast+0x7bd/0x940 [ 546.583840][T14526] netlink_sendmsg+0x813/0xb40 [ 546.583877][T14526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.583913][T14526] ? apparmor_socket_sendmsg+0x98/0x360 [ 546.583939][T14526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.583966][T14526] sock_sendmsg_nosec+0x13a/0x180 [ 546.584000][T14526] ____sys_sendmsg+0x54e/0x850 [ 546.584031][T14526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.584065][T14526] ? import_iovec+0x73/0xa0 [ 546.584093][T14526] ___sys_sendmsg+0x2a5/0x360 [ 546.584118][T14526] ? __lock_acquire+0x747/0x2de0 [ 546.584144][T14526] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.584205][T14526] ? __fget_files+0x2a/0x420 [ 546.584230][T14526] ? __fget_files+0x3a2/0x420 [ 546.584266][T14526] __x64_sys_sendmsg+0x1b1/0x290 [ 546.584295][T14526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.584340][T14526] do_syscall_64+0x166/0x520 [ 546.584360][T14526] ? trace_irq_disable+0x3b/0x140 [ 546.584380][T14526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.584400][T14526] ? clear_bhb_loop+0x70/0xc0 [ 546.584424][T14526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.584444][T14526] RIP: 0033:0x7fe8fa99e159 [ 546.584463][T14526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.584481][T14526] RSP: 002b:00007fe8fb927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.584503][T14526] RAX: ffffffffffffffda RBX: 00007fe8fac25fa0 RCX: 00007fe8fa99e159 [ 546.584517][T14526] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 000000000000000b [ 546.584529][T14526] RBP: 00007fe8fb927090 R08: 0000000000000000 R09: 0000000000000000 [ 546.584541][T14526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.584553][T14526] R13: 00007fe8fac26038 R14: 00007fe8fac25fa0 R15: 00007fe8fad4fa48 [ 546.584585][T14526] [ 547.057008][T14528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2313'. [ 547.067574][T14534] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 547.129780][T14538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.130215][T14538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.135375][T14538] netlink: 'syz.1.2316': attribute type 29 has an invalid length. [ 547.266934][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.269147][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.913071][T14566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.913356][T14566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.932801][T14593] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 549.363057][T14602] netlink: 'syz.5.2330': attribute type 1 has an invalid length. [ 549.365529][T14599] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 549.393005][T14602] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.445414][T14602] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 549.533933][T14602] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 549.552662][T14602] bond6 (unregistering): Released all slaves [ 549.852473][T14613] Invalid argument reading file caps for ./file0 [ 550.070881][T14618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.071140][T14618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.119269][T14618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.119540][T14618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.123463][T14618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.123720][T14618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.125790][T14618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.126047][T14618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.986512][T14632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.986795][T14632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.033093][T14632] batadv0: entered promiscuous mode [ 551.061348][T14632] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.062059][T14632] batadv0: left promiscuous mode [ 551.541290][T14648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.542032][T14648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.959508][T14654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.965918][T14654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.072041][T14669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.075372][T14669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.080747][T14669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.081150][T14669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.390846][T14688] FAULT_INJECTION: forcing a failure. [ 554.390846][T14688] name failslab, interval 1, probability 0, space 0, times 0 [ 554.390881][T14688] CPU: 1 UID: 0 PID: 14688 Comm: syz.1.2350 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.390908][T14688] Tainted: [L]=SOFTLOCKUP [ 554.390915][T14688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.390927][T14688] Call Trace: [ 554.390934][T14688] [ 554.390942][T14688] dump_stack_lvl+0xe8/0x150 [ 554.390978][T14688] should_fail_ex+0x410/0x560 [ 554.391000][T14688] should_failslab+0xa8/0x100 [ 554.391022][T14688] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 554.391048][T14688] ? __d_alloc+0x37/0x6f0 [ 554.391070][T14688] ? __d_alloc+0x37/0x6f0 [ 554.391097][T14688] __d_alloc+0x37/0x6f0 [ 554.391123][T14688] d_alloc_pseudo+0x21/0xc0 [ 554.391147][T14688] alloc_path_pseudo+0x107/0x220 [ 554.391170][T14688] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 554.391197][T14688] alloc_file_pseudo+0xa8/0x1e0 [ 554.391219][T14688] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 554.391237][T14688] ? security_inode_alloc+0xd5/0x310 [ 554.391337][T14688] ? inode_init_always_gfp+0x994/0xd30 [ 554.391361][T14688] sock_alloc_file+0xb8/0x2e0 [ 554.391419][T14688] do_accept+0x3a0/0x750 [ 554.391440][T14688] ? __pfx_do_accept+0x10/0x10 [ 554.391474][T14688] __sys_accept4+0x139/0x230 [ 554.391494][T14688] ? __pfx___sys_accept4+0x10/0x10 [ 554.391512][T14688] ? __pfx_ksys_write+0x10/0x10 [ 554.391540][T14688] __x64_sys_accept+0x7d/0x90 [ 554.391559][T14688] do_syscall_64+0x166/0x520 [ 554.391576][T14688] ? trace_irq_disable+0x3b/0x140 [ 554.391593][T14688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.391609][T14688] ? clear_bhb_loop+0x70/0xc0 [ 554.391629][T14688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.391646][T14688] RIP: 0033:0x7fe8fa99e159 [ 554.391661][T14688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.391677][T14688] RSP: 002b:00007fe8fb8a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 554.391697][T14688] RAX: ffffffffffffffda RBX: 00007fe8fac26360 RCX: 00007fe8fa99e159 [ 554.391710][T14688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 554.391720][T14688] RBP: 00007fe8fb8a3090 R08: 0000000000000000 R09: 0000000000000000 [ 554.391731][T14688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.391741][T14688] R13: 00007fe8fac263f8 R14: 00007fe8fac26360 R15: 00007fe8fad4fa48 [ 554.391766][T14688] [ 554.962593][T14611] Set syz1 is full, maxelem 65536 reached [ 555.135452][T14692] futex_wake_op: syz.2.2352 tries to shift op by -1; fix this program [ 555.234202][T14697] kAFS: unable to lookup cell ' [ 555.234202][T14697] $)-.ײfYǝa2s [ 555.234202][T14697] ' [ 555.547029][T14702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.559915][T14702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.620264][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.620536][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.655996][T14713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.656290][T14713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.677629][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.677965][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.388211][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.411223][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.029507][T14735] loop3: detected capacity change from 0 to 7 [ 557.037044][T14735] Dev loop3: unable to read RDB block 7 [ 557.037071][T14735] loop3: unable to read partition table [ 557.037206][T14735] loop3: partition table beyond EOD, truncated [ 557.064527][T14735] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 557.171304][T14737] netlink: 'syz.3.2365': attribute type 1 has an invalid length. [ 557.174646][T14739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2365'. [ 557.464988][T14705] pim6reg: entered allmulticast mode [ 557.486941][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2355'. [ 557.546141][T14737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 557.603084][T14738] 8021q: adding VLAN 0 to HW filter on device bond3 [ 557.603586][T14738] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 557.604494][T14738] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 557.648192][T14699] pim6reg: left allmulticast mode [ 558.661072][T14780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.661317][T14780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.717110][T14780] netlink: 'syz.5.2373': attribute type 1 has an invalid length. [ 558.814930][T14780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 558.873944][T14779] bond6: (slave geneve3): making interface the new active one [ 558.931645][T14779] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 559.006619][T14783] bond3: entered allmulticast mode [ 559.020471][T14783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 559.807143][T14817] futex_wake_op: syz.5.2383 tries to shift op by -1; fix this program [ 560.155508][T14830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.157217][T14830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.502633][T14834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.508229][T14834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.389040][T14851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.389293][T14851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.879961][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.879999][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.151064][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2401'. [ 563.151136][T14876] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2401'. [ 563.151156][T14876] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2401'. [ 563.151178][T14876] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2401'. [ 563.317051][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.322197][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.349475][T14884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.030266][T14888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.030776][T14888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.206830][T14893] syzkaller0: entered promiscuous mode [ 564.206848][T14893] syzkaller0: entered allmulticast mode [ 564.414154][T14896] netlink: ct family unspecified [ 564.414185][T14896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.100740][T14901] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 565.363526][T14904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2409'. [ 567.014336][T14931] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 567.157332][T14934] FAULT_INJECTION: forcing a failure. [ 567.157332][T14934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.157367][T14934] CPU: 1 UID: 0 PID: 14934 Comm: syz.2.2416 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.157393][T14934] Tainted: [L]=SOFTLOCKUP [ 567.157400][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.157413][T14934] Call Trace: [ 567.157424][T14934] [ 567.157433][T14934] dump_stack_lvl+0xe8/0x150 [ 567.157468][T14934] should_fail_ex+0x410/0x560 [ 567.157494][T14934] _copy_to_user+0x31/0xb0 [ 567.157521][T14934] simple_read_from_buffer+0xe1/0x170 [ 567.157556][T14934] proc_fail_nth_read+0x1bb/0x230 [ 567.157587][T14934] ? common_file_perm+0x20e/0x2b0 [ 567.157615][T14934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 567.157645][T14934] ? rw_verify_area+0x24a/0x4c0 [ 567.157673][T14934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 567.157701][T14934] vfs_read+0x213/0xa80 [ 567.157732][T14934] ? __pfx___mutex_lock+0x10/0x10 [ 567.157757][T14934] ? __pfx_vfs_read+0x10/0x10 [ 567.157786][T14934] ? __fget_files+0x2a/0x420 [ 567.157816][T14934] ? __fget_files+0x3a2/0x420 [ 567.157840][T14934] ? __fget_files+0x2a/0x420 [ 567.157872][T14934] ksys_read+0x150/0x270 [ 567.157901][T14934] ? __pfx_ksys_read+0x10/0x10 [ 567.157938][T14934] do_syscall_64+0x166/0x520 [ 567.157959][T14934] ? trace_irq_disable+0x3b/0x140 [ 567.157979][T14934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.157997][T14934] ? clear_bhb_loop+0x70/0xc0 [ 567.158021][T14934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.158040][T14934] RIP: 0033:0x7f45bf95e98e [ 567.158058][T14934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 567.158075][T14934] RSP: 002b:00007f45c07e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 567.158097][T14934] RAX: ffffffffffffffda RBX: 00007f45c07e16c0 RCX: 00007f45bf95e98e [ 567.158111][T14934] RDX: 000000000000000f RSI: 00007f45c07e10a0 RDI: 0000000000000006 [ 567.158124][T14934] RBP: 00007f45c07e1090 R08: 0000000000000000 R09: 0000000000000000 [ 567.158135][T14934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.158144][T14934] R13: 00007f45bfc26038 R14: 00007f45bfc25fa0 R15: 00007f45bfd4fa48 [ 567.158172][T14934] [ 567.666209][T14940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.796599][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 567.796615][ T30] audit: type=1326 audit(1789186708.546:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.3.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 567.796644][ T30] audit: type=1326 audit(1789186708.546:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.3.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 567.858801][ T30] audit: type=1326 audit(1789186708.616:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.3.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 567.859014][ T30] audit: type=1326 audit(1789186708.616:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.3.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 567.872888][ T30] audit: type=1326 audit(1789186708.616:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.3.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 568.883810][T14947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.043470][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'. [ 569.081010][T14951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2421'. [ 569.635338][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2423'. [ 569.891384][T14901] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 570.092446][T14972] netlink: 'syz.1.2426': attribute type 1 has an invalid length. [ 570.205115][T14977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.209067][T14977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.685778][ T30] audit: type=1326 audit(1789186711.436:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.6.2429" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 570.714739][ T30] audit: type=1326 audit(1789186711.466:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.6.2429" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 570.716383][ T30] audit: type=1326 audit(1789186711.466:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.6.2429" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 570.716697][ T30] audit: type=1326 audit(1789186711.466:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.6.2429" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 570.747892][ T30] audit: type=1326 audit(1789186711.496:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.6.2429" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 571.977183][T15000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.988002][T15000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.052357][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2433'. [ 572.293007][T15013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.293509][T15013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.403991][T15016] netlink: NAT attribute type 0 has unexpected length (2 != 0) [ 572.404039][T15016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.278575][T15022] futex_wake_op: syz.2.2436 tries to shift op by 36; fix this program [ 573.280088][T15024] futex_wake_op: syz.2.2436 tries to shift op by 36; fix this program [ 573.520975][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.524317][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.554050][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.559944][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.560379][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.562648][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.582007][T15032] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 573.805045][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 573.805066][ T30] audit: type=1326 audit(1789186714.556:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.5.2440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 573.805353][ T30] audit: type=1326 audit(1789186714.556:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.5.2440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 573.865608][ T30] audit: type=1326 audit(1789186714.626:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.5.2440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 573.865988][ T30] audit: type=1326 audit(1789186714.626:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.5.2440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 573.866150][ T30] audit: type=1326 audit(1789186714.626:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.5.2440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 573.930231][ T30] audit: type=1326 audit(1789186714.676:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.5.2440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 573.930701][ T30] audit: type=1326 audit(1789186714.676:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.5.2440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 573.935570][ T30] audit: type=1326 audit(1789186714.676:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.5.2440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d38f9e159 code=0x7ffc0000 [ 573.970563][T15043] netlink: ct family unspecified [ 573.970595][T15043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.369534][T15051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.371235][T15051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.372524][ T30] audit: type=1326 audit(1789186715.126:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa99e159 code=0x0 [ 574.942329][T15060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 574.947144][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 574.966411][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 574.983573][T15060] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2447'. [ 575.540708][T15069] netlink: 'syz.5.2451': attribute type 1 has an invalid length. [ 575.889078][T15078] binder: 15077:15078 ioctl c0306201 2000000003c0 returned -22 [ 575.931820][T15078] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2454'. [ 575.934088][T15078] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2454'. [ 576.140553][ T30] audit: type=1326 audit(1789186716.896:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.6.2456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075df9e159 code=0x7ffc0000 [ 576.450958][T15098] futex_wake_op: syz.5.2458 tries to shift op by -1; fix this program [ 577.006234][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.012173][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.021107][T15101] openvswitch: netlink: Flow key attribute not present in set flow. [ 578.145858][T15117] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 578.195029][T15120] netlink: 'syz.6.2464': attribute type 21 has an invalid length. [ 578.195054][T15120] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2464'. [ 578.195121][T15120] netlink: 'syz.6.2464': attribute type 4 has an invalid length. [ 578.195135][T15120] netlink: 'syz.6.2464': attribute type 5 has an invalid length. [ 578.195147][T15120] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2464'. [ 578.201614][T15120] netlink: 'syz.6.2464': attribute type 21 has an invalid length. [ 578.201636][T15120] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2464'. [ 578.201710][T15120] netlink: 'syz.6.2464': attribute type 4 has an invalid length. [ 578.201723][T15120] netlink: 'syz.6.2464': attribute type 5 has an invalid length. [ 578.201734][T15120] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2464'. [ 578.201896][T15120] netlink: 'syz.6.2464': attribute type 21 has an invalid length. [ 578.201910][T15120] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2464'. [ 578.398570][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.399013][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.416569][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.419266][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.502465][T15128] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 578.503141][T15135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.087308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 579.380315][T15155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.384750][T15155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.511051][T15166] program syz.1.2476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.706125][T15168] validate_nla: 14 callbacks suppressed [ 580.706142][T15168] netlink: 'syz.5.2477': attribute type 1 has an invalid length. [ 581.124614][T15177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.140561][T15177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.504784][T15171] __nla_validate_parse: 10 callbacks suppressed [ 581.504823][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'. [ 581.538377][T15184] loop3: detected capacity change from 0 to 7 [ 581.540063][T15184] Dev loop3: unable to read RDB block 7 [ 581.540103][T15184] loop3: unable to read partition table [ 581.540822][T15184] loop3: partition table beyond EOD, truncated [ 581.540841][T15184] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 581.586003][T15171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2478'. [ 581.586101][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 581.733521][T15186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.733761][T15186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.471016][T15192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.474149][T15192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.525049][T15192] batadv0: entered promiscuous mode [ 582.537087][T15192] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 582.550795][T15192] batadv0: left promiscuous mode [ 582.647902][T15195] netlink: 328 bytes leftover after parsing attributes in process `syz.6.2486'. [ 582.647919][T15195] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2486'. [ 583.398370][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.398783][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.440411][T15204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.442927][T15204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.738944][T15221] kvm: MONITOR instruction emulated as NOP! [ 583.989918][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2490'. [ 584.462122][T15231] ipvlan2: entered allmulticast mode [ 584.462226][T15231] macvlan1: entered allmulticast mode [ 584.462241][T15231] veth1_vlan: entered allmulticast mode [ 584.492774][T15231] batman_adv: batadv0: Adding interface: ipvlan2 [ 584.492791][T15231] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.492820][T15231] batman_adv: batadv0: Interface activated: ipvlan2 [ 584.492837][T15231] batadv0: mtu less than device minimum [ 584.497083][T15231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.498507][T15231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.499837][T15231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.501155][T15231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.502305][T15231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.503659][T15231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.505081][T15231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.506320][T15231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.507798][T15231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.516727][T15235] input: syz1 as /devices/virtual/input/input36 [ 584.694016][T15232] ipvlan3: entered allmulticast mode [ 584.715438][T15232] batman_adv: batadv0: Adding interface: ipvlan3 [ 584.715457][T15232] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.715473][T15232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 584.715483][T15232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.715530][T15232] batman_adv: batadv0: Interface activated: ipvlan3 [ 584.853912][T15240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.855784][T15240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.182435][T15248] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2497'. [ 585.706422][T15258] FAULT_INJECTION: forcing a failure. [ 585.706422][T15258] name failslab, interval 1, probability 0, space 0, times 0 [ 585.707211][T15258] CPU: 0 UID: 0 PID: 15258 Comm: syz.2.2500 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.707240][T15258] Tainted: [L]=SOFTLOCKUP [ 585.707247][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.707258][T15258] Call Trace: [ 585.707267][T15258] [ 585.707275][T15258] dump_stack_lvl+0xe8/0x150 [ 585.707308][T15258] should_fail_ex+0x410/0x560 [ 585.707336][T15258] should_failslab+0xa8/0x100 [ 585.707362][T15258] ? ovs_flow_alloc+0x24/0x1f0 [ 585.707485][T15258] kmem_cache_alloc_noprof+0xa1/0x600 [ 585.707503][T15258] ? ovs_flow_alloc+0x24/0x1f0 [ 585.707520][T15258] ovs_flow_alloc+0x24/0x1f0 [ 585.707535][T15258] ovs_flow_cmd_new+0x28b/0xea0 [ 585.707548][T15258] ? __kasan_kmalloc+0x93/0xb0 [ 585.707562][T15258] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 585.707597][T15258] ? __kmalloc_noprof+0x38c/0x720 [ 585.707608][T15258] ? __nla_parse+0x40/0x60 [ 585.707659][T15258] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 585.707673][T15258] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 585.707689][T15258] genl_family_rcv_msg_doit+0x233/0x340 [ 585.707705][T15258] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 585.707723][T15258] ? bpf_lsm_capable+0x9/0x20 [ 585.707733][T15258] ? security_capable+0x7e/0x2c0 [ 585.707750][T15258] genl_rcv_msg+0x614/0x7a0 [ 585.707765][T15258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.707777][T15258] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 585.707794][T15258] netlink_rcv_skb+0x226/0x4a0 [ 585.707811][T15258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.707823][T15258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.707845][T15258] ? down_read+0x2be/0x330 [ 585.707870][T15258] genl_rcv+0x28/0x40 [ 585.707881][T15258] netlink_unicast+0x7bd/0x940 [ 585.707900][T15258] netlink_sendmsg+0x813/0xb40 [ 585.707920][T15258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.707939][T15258] ? apparmor_socket_sendmsg+0x98/0x360 [ 585.707952][T15258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.707967][T15258] sock_sendmsg_nosec+0x13a/0x180 [ 585.707986][T15258] ____sys_sendmsg+0x54e/0x850 [ 585.708002][T15258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.708019][T15258] ? import_iovec+0x73/0xa0 [ 585.708035][T15258] ___sys_sendmsg+0x2a5/0x360 [ 585.708048][T15258] ? __lock_acquire+0x747/0x2de0 [ 585.708061][T15258] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.708092][T15258] ? __fget_files+0x2a/0x420 [ 585.708107][T15258] ? __fget_files+0x3a2/0x420 [ 585.708128][T15258] __x64_sys_sendmsg+0x1b1/0x290 [ 585.708144][T15258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.708168][T15258] do_syscall_64+0x166/0x520 [ 585.708180][T15258] ? trace_irq_disable+0x3b/0x140 [ 585.708191][T15258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.708202][T15258] ? clear_bhb_loop+0x70/0xc0 [ 585.708216][T15258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.708226][T15258] RIP: 0033:0x7f45bf99e159 [ 585.708238][T15258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.708248][T15258] RSP: 002b:00007f45c07e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.708260][T15258] RAX: ffffffffffffffda RBX: 00007f45bfc25fa0 RCX: 00007f45bf99e159 [ 585.708269][T15258] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 000000000000000c [ 585.708276][T15258] RBP: 00007f45c07e1090 R08: 0000000000000000 R09: 0000000000000000 [ 585.708283][T15258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.708290][T15258] R13: 00007f45bfc26038 R14: 00007f45bfc25fa0 R15: 00007f45bfd4fa48 [ 585.708305][T15258] [ 586.255628][T15263] binfmt_misc: register: failed to install interpreter ./file0 [ 586.390916][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 586.390936][ T30] audit: type=1326 audit(1789186727.146:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 586.393452][ T30] audit: type=1326 audit(1789186727.146:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 586.393707][ T30] audit: type=1326 audit(1789186727.146:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 586.398326][ T30] audit: type=1326 audit(1789186727.146:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 586.398655][ T30] audit: type=1326 audit(1789186727.156:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 586.398941][ T30] audit: type=1326 audit(1789186727.156:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 586.405141][ T30] audit: type=1326 audit(1789186727.156:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 586.405194][ T30] audit: type=1326 audit(1789186727.156:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 586.405237][ T30] audit: type=1326 audit(1789186727.156:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 586.405277][ T30] audit: type=1326 audit(1789186727.156:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.1.2504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa99e159 code=0x7ffc0000 [ 587.042535][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 587.059011][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 587.063654][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 587.065345][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 587.066941][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.500373][T15285] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 587.780691][ T6126] raw-gadget.0 gadget.1: failed to queue disconnect event [ 588.331161][T15297] fuse: Bad value for 'fd' [ 588.342997][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.347056][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.425954][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.426371][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.642255][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ecdcc00: rx timeout, send abort [ 588.807024][T15310] syzkaller0: entered promiscuous mode [ 588.807043][T15310] syzkaller0: entered allmulticast mode [ 588.824477][T15311] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2515'. [ 588.841939][T15277] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.842119][T15277] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.842267][T15277] bridge_slave_0: entered allmulticast mode [ 588.846128][T15277] bridge_slave_0: entered promiscuous mode [ 588.852615][T15277] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.852780][T15277] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.852992][T15277] bridge_slave_1: entered allmulticast mode [ 588.854905][T15277] bridge_slave_1: entered promiscuous mode [ 588.896569][T15277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.911561][T15277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.984955][T15277] team0: Port device team_slave_0 added [ 589.119260][ T5621] Bluetooth: hci2: command tx timeout [ 589.144297][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ecdcc00: abort rx timeout. Force session deactivation [ 589.146438][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ecdf400: rx timeout, send abort [ 589.156686][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807ecdf400: connection exists (fe ff). last cmd: 20 [ 589.406623][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ecdf800: rx timeout, send abort [ 589.906683][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ecdf800: abort rx timeout. Force session deactivation [ 590.173920][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b812800: rx timeout, send abort [ 590.673995][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b812800: abort rx timeout. Force session deactivation [ 590.946244][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b812000: rx timeout, send abort [ 591.197602][ T5621] Bluetooth: hci2: command tx timeout [ 591.356499][T15326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.356945][T15326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.009449][T15329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2520'. [ 592.075495][T15330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.974291][T15277] team0: Port device team_slave_1 added [ 593.156869][T15277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.156882][T15277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.156897][T15277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.210053][T15277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.210066][T15277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.210089][T15277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.277682][ T5621] Bluetooth: hci2: command tx timeout [ 593.536527][T15277] hsr_slave_0: entered promiscuous mode [ 593.538858][T15277] hsr_slave_1: entered promiscuous mode [ 593.543268][T15277] debugfs: 'hsr0' already exists in 'hsr' [ 593.543292][T15277] Cannot create hsr debugfs directory [ 593.710449][T15345] net_ratelimit: 30 callbacks suppressed [ 593.710465][T15345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.556985][T15277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.615817][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2529'. [ 594.820495][T15277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.889497][T15374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.889912][T15374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.949076][T15277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.049356][T15277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.225930][T15277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 595.240057][T15277] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.241217][T15277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 595.243623][T15277] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.244584][T15277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 595.282221][T15277] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.283127][T15277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 595.285260][T15277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.357628][ T5621] Bluetooth: hci2: command tx timeout [ 595.396383][T15277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.430346][T15277] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.437833][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.437930][ T7320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.466225][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.466285][ T7320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.604144][T15277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.666242][T15277] veth0_vlan: entered promiscuous mode [ 595.684651][T15277] veth1_vlan: entered promiscuous mode [ 595.689679][T15384] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 595.743395][T15384] bond4: entered promiscuous mode [ 595.743771][T15384] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.791317][T15384] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.791533][T15384] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 595.791546][T15384] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 595.793914][T15384] bond4: (slave ip6gre1): making interface the new active one [ 595.793935][T15384] ip6gre1: entered promiscuous mode [ 595.794793][T15384] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 595.829939][T15277] veth0_macvtap: entered promiscuous mode [ 595.880585][T15277] veth1_macvtap: entered promiscuous mode [ 595.922517][T15277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.944646][T15277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.062780][ T7320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.063316][ T7320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.063341][ T7320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.063360][ T7320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.276965][T11532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.276979][T11532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.394415][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.394432][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.790132][T15413] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 596.790169][T15413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.895709][T15410] program syz.2.2536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.282082][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.282335][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.325802][T15422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2541'. [ 597.497360][ T5614] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 597.648997][ T5614] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 597.650182][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.650213][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.650252][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.654256][ T5614] usb 2-1: config 0 descriptor?? [ 597.876027][T15420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.883815][T15420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.896395][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 597.978698][T15444] FAULT_INJECTION: forcing a failure. [ 597.978698][T15444] name failslab, interval 1, probability 0, space 0, times 0 [ 597.978722][T15444] CPU: 1 UID: 0 PID: 15444 Comm: syz.3.2546 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.978747][T15444] Tainted: [L]=SOFTLOCKUP [ 597.978754][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.978766][T15444] Call Trace: [ 597.978775][T15444] [ 597.978784][T15444] dump_stack_lvl+0xe8/0x150 [ 597.978819][T15444] should_fail_ex+0x410/0x560 [ 597.978849][T15444] should_failslab+0xa8/0x100 [ 597.978877][T15444] __kmalloc_cache_noprof+0xa3/0x600 [ 597.978896][T15444] ? __kasan_kmalloc+0x93/0xb0 [ 597.978917][T15444] ? ovs_nla_get_identifier+0x72/0xd0 [ 597.978942][T15444] ? ovs_nla_get_identifier+0x72/0xd0 [ 597.978971][T15444] ovs_nla_get_identifier+0x72/0xd0 [ 597.978997][T15444] ovs_flow_cmd_new+0x494/0xea0 [ 597.979026][T15444] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 597.979075][T15444] ? __kmalloc_noprof+0x38c/0x720 [ 597.979098][T15444] ? __nla_parse+0x40/0x60 [ 597.979127][T15444] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 597.979153][T15444] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 597.979170][T15444] genl_family_rcv_msg_doit+0x233/0x340 [ 597.979186][T15444] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 597.979204][T15444] ? bpf_lsm_capable+0x9/0x20 [ 597.979218][T15444] ? security_capable+0x7e/0x2c0 [ 597.979249][T15444] genl_rcv_msg+0x614/0x7a0 [ 597.979278][T15444] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.979300][T15444] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 597.979319][T15444] netlink_rcv_skb+0x226/0x4a0 [ 597.979336][T15444] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.979348][T15444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.979378][T15444] ? down_read+0x2be/0x330 [ 597.979415][T15444] genl_rcv+0x28/0x40 [ 597.979436][T15444] netlink_unicast+0x7bd/0x940 [ 597.979463][T15444] netlink_sendmsg+0x813/0xb40 [ 597.979483][T15444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.979502][T15444] ? apparmor_socket_sendmsg+0x98/0x360 [ 597.979518][T15444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.979546][T15444] sock_sendmsg_nosec+0x13a/0x180 [ 597.979585][T15444] ____sys_sendmsg+0x54e/0x850 [ 597.979610][T15444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.979628][T15444] ? import_iovec+0x73/0xa0 [ 597.979643][T15444] ___sys_sendmsg+0x2a5/0x360 [ 597.979656][T15444] ? __lock_acquire+0x747/0x2de0 [ 597.979679][T15444] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.979740][T15444] ? __fget_files+0x2a/0x420 [ 597.979761][T15444] ? __fget_files+0x3a2/0x420 [ 597.979779][T15444] __x64_sys_sendmsg+0x1b1/0x290 [ 597.979794][T15444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.979824][T15444] do_syscall_64+0x166/0x520 [ 597.979846][T15444] ? trace_irq_disable+0x3b/0x140 [ 597.979867][T15444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.979889][T15444] ? clear_bhb_loop+0x70/0xc0 [ 597.979909][T15444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.979920][T15444] RIP: 0033:0x7f0e8519e159 [ 597.979932][T15444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.979941][T15444] RSP: 002b:00007f0e85fc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.979954][T15444] RAX: ffffffffffffffda RBX: 00007f0e85425fa0 RCX: 00007f0e8519e159 [ 597.979963][T15444] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 000000000000000c [ 597.979976][T15444] RBP: 00007f0e85fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 597.979988][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.980001][T15444] R13: 00007f0e85426038 R14: 00007f0e85425fa0 R15: 00007f0e8554fa48 [ 597.980031][T15444] [ 598.598551][T15454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.598912][T15454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.619861][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'. [ 598.989712][T15466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.993847][T15466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.314706][T15468] xt_l2tp: v2 doesn't support IP mode [ 599.341523][T15469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2554'. [ 599.753964][T15481] FAULT_INJECTION: forcing a failure. [ 599.753964][T15481] name failslab, interval 1, probability 0, space 0, times 0 [ 599.753999][T15481] CPU: 1 UID: 0 PID: 15481 Comm: syz.3.2558 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.754026][T15481] Tainted: [L]=SOFTLOCKUP [ 599.754034][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.754045][T15481] Call Trace: [ 599.754053][T15481] [ 599.754062][T15481] dump_stack_lvl+0xe8/0x150 [ 599.754095][T15481] should_fail_ex+0x410/0x560 [ 599.754123][T15481] should_failslab+0xa8/0x100 [ 599.754151][T15481] __kmalloc_cache_noprof+0xa3/0x600 [ 599.754170][T15481] ? __kasan_kmalloc+0x93/0xb0 [ 599.754193][T15481] ? ovs_nla_get_identifier+0x72/0xd0 [ 599.754215][T15481] ? ovs_nla_get_identifier+0x72/0xd0 [ 599.754244][T15481] ovs_nla_get_identifier+0x72/0xd0 [ 599.754268][T15481] ovs_flow_cmd_new+0x494/0xea0 [ 599.754297][T15481] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 599.754363][T15481] ? __kmalloc_noprof+0x38c/0x720 [ 599.754386][T15481] ? __nla_parse+0x40/0x60 [ 599.754413][T15481] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 599.754436][T15481] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 599.754466][T15481] genl_family_rcv_msg_doit+0x233/0x340 [ 599.754494][T15481] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 599.754528][T15481] ? bpf_lsm_capable+0x9/0x20 [ 599.754546][T15481] ? security_capable+0x7e/0x2c0 [ 599.754576][T15481] genl_rcv_msg+0x614/0x7a0 [ 599.754604][T15481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.754624][T15481] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 599.754655][T15481] netlink_rcv_skb+0x226/0x4a0 [ 599.754684][T15481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.754708][T15481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.754748][T15481] ? down_read+0x2be/0x330 [ 599.754775][T15481] genl_rcv+0x28/0x40 [ 599.754794][T15481] netlink_unicast+0x7bd/0x940 [ 599.754829][T15481] netlink_sendmsg+0x813/0xb40 [ 599.754872][T15481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.754906][T15481] ? apparmor_socket_sendmsg+0x98/0x360 [ 599.754930][T15481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.754954][T15481] sock_sendmsg_nosec+0x13a/0x180 [ 599.754988][T15481] ____sys_sendmsg+0x54e/0x850 [ 599.755017][T15481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.755051][T15481] ? import_iovec+0x73/0xa0 [ 599.755078][T15481] ___sys_sendmsg+0x2a5/0x360 [ 599.755101][T15481] ? __lock_acquire+0x747/0x2de0 [ 599.755126][T15481] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.755182][T15481] ? __fget_files+0x2a/0x420 [ 599.755207][T15481] ? __fget_files+0x3a2/0x420 [ 599.755242][T15481] __x64_sys_sendmsg+0x1b1/0x290 [ 599.755270][T15481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.755314][T15481] do_syscall_64+0x166/0x520 [ 599.755336][T15481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.755356][T15481] ? clear_bhb_loop+0x70/0xc0 [ 599.755380][T15481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.755400][T15481] RIP: 0033:0x7f0e8519e159 [ 599.755420][T15481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.755438][T15481] RSP: 002b:00007f0e85fc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.755460][T15481] RAX: ffffffffffffffda RBX: 00007f0e85425fa0 RCX: 00007f0e8519e159 [ 599.755474][T15481] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 000000000000000c [ 599.755484][T15481] RBP: 00007f0e85fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 599.755492][T15481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.755498][T15481] R13: 00007f0e85426038 R14: 00007f0e85425fa0 R15: 00007f0e8554fa48 [ 599.755515][T15481] [ 600.279070][ T5614] usbhid 2-1:0.0: can't add hid device: -71 [ 600.279136][ T5614] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 600.292086][ T5614] usb 2-1: USB disconnect, device number 12 [ 600.459903][T15488] kvm: pic: non byte write [ 624.321149][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321206][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 651.599879][T15500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.605561][T15500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.547681][T15530] netlink: 'syz.5.2568': attribute type 3 has an invalid length. [ 652.666583][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.666838][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.051091][T15536] netlink: ct family unspecified [ 653.051126][T15536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.506895][T15545] kvm: pic: non byte write [ 653.622138][T15551] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2574'. [ 653.626823][T15551] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2574'. [ 653.657347][ T5614] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 653.785578][T15552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.785834][T15552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.818142][ T5614] usb 2-1: Using ep0 maxpacket: 16 [ 653.828519][ T5614] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.839613][ T5614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.839649][ T5614] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 653.839671][ T5614] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 653.839694][ T5614] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 653.841218][T15552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.854649][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 653.854675][ T5614] usb 2-1: SerialNumber: syz [ 653.874868][T15552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.917864][T15546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 653.917955][T15546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 653.924881][ T5614] hub 2-1:1.0: bad descriptor, ignoring hub [ 653.924897][ T5614] hub 2-1:1.0: probe with driver hub failed with error -5 [ 653.995380][T15554] binder: 15553:15554 ioctl c0306201 200000000300 returned -14 [ 654.138769][T15546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.138835][T15546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.716491][T15562] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2576'. [ 654.745934][ T5614] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 654.801303][T15562] ipvlan2: entered allmulticast mode [ 654.801320][T15562] macvlan1: entered allmulticast mode [ 654.801433][T15562] veth1_vlan: entered allmulticast mode [ 654.828065][T15563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.828417][T15563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.835422][T15562] batman_adv: batadv0: Adding interface: ipvlan2 [ 654.885496][T15564] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2576'. [ 654.897067][T15562] batman_adv: batadv0: Interface activated: ipvlan2 [ 654.930863][T15563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.931129][T15563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.069074][T15564] ipvlan3: entered allmulticast mode [ 655.090100][T15564] batman_adv: batadv0: Adding interface: ipvlan3 [ 655.090113][T15564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 655.090123][T15564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.090130][T15564] batman_adv: batadv0: Interface activated: ipvlan3 [ 655.269315][ T5704] usb 2-1: USB disconnect, device number 13 [ 655.278846][ T5704] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 655.597945][T15580] futex_wake_op: syz.6.2578 tries to shift op by -1; fix this program [ 659.043598][T15630] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 659.068375][T15630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.068898][T15630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.103627][T15636] kvm: emulating exchange as write [ 659.227428][ T5614] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 659.378060][ T5614] usb 2-1: Using ep0 maxpacket: 16 [ 659.382272][ T5614] usb 2-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 659.384293][ T5614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 487, setting to 64 [ 659.384328][ T5614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 659.384354][ T5614] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 659.384375][ T5614] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1023 [ 659.384391][ T5614] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 659.384403][ T5614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 80, setting to 64 [ 659.424068][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.424095][ T5614] usb 2-1: Product: ᜃ꤅熓ਞꡂ擅足幁⭝ꟻ螨䝿ꭹ쏑塄ﵞﮪ긯鋞뺂簘鶟䐌貞怲㒁媯ᣯ᝭睔葙﬉ʋౙ‿燍踿䤾후㨈䷉㝑ຠ [ 659.424113][ T5614] usb 2-1: Manufacturer: Л [ 659.424126][ T5614] usb 2-1: SerialNumber: syz [ 659.521030][T15633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 659.574219][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.576692][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.588269][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.595178][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.949489][T15633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.949779][T15633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.980373][ T5614] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.980433][ T5614] usb 2-1: MIDIStreaming interface descriptor not found [ 660.235346][ T5614] usb 2-1: USB disconnect, device number 14 [ 660.396024][T15529] udevd[15529]: setting owner of /dev/bus/usb/002/014 to uid=0, gid=0 failed: No such file or directory [ 660.554087][T15663] udevd[15663]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 660.880371][T15674] netlink: 'syz.6.2599': attribute type 9 has an invalid length. [ 660.880394][T15674] netlink: 'syz.6.2599': attribute type 4 has an invalid length. [ 661.096770][T15681] binder: 15680:15681 ioctl c0306201 200000000680 returned -14 [ 661.172069][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 661.172166][ T30] audit: type=1326 audit(1789186801.926:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.173998][ T30] audit: type=1326 audit(1789186801.926:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.174780][ T30] audit: type=1326 audit(1789186801.926:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.175028][ T30] audit: type=1326 audit(1789186801.926:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.177089][ T30] audit: type=1326 audit(1789186801.926:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.329121][ T30] audit: type=1326 audit(1789186802.086:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.347393][ T30] audit: type=1326 audit(1789186802.086:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.410191][ T30] audit: type=1326 audit(1789186802.166:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.412093][ T30] audit: type=1326 audit(1789186802.166:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.415160][ T30] audit: type=1326 audit(1789186802.166:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.3.2600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 661.623093][T15693] ip_tables: iptables: counters copy to user failed while replacing table [ 661.771958][T15697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.774002][T15697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.899434][T15660] kvm: pic: non byte write [ 662.889289][ T51] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 663.053824][T15715] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 663.056839][ T51] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 663.158654][ T51] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 663.158682][ T51] usb 2-1: Product: syz [ 663.158698][ T51] usb 2-1: SerialNumber: syz [ 663.189589][ T51] usb 2-1: config 0 descriptor?? [ 663.577967][T11539] IPVS: starting estimator thread 0... [ 663.614057][T15724] netlink: 'syz.5.2613': attribute type 1 has an invalid length. [ 663.634227][ T51] usb 2-1: USB disconnect, device number 15 [ 663.667423][T15725] IPVS: using max 34 ests per chain, 81600 per kthread [ 663.789118][T15730] kvm: pic: non byte write [ 663.877020][T15729] FAULT_INJECTION: forcing a failure. [ 663.877020][T15729] name failslab, interval 1, probability 0, space 0, times 0 [ 663.877057][T15729] CPU: 0 UID: 0 PID: 15729 Comm: syz.6.2614 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.877083][T15729] Tainted: [L]=SOFTLOCKUP [ 663.877095][T15729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.877107][T15729] Call Trace: [ 663.877116][T15729] [ 663.877126][T15729] dump_stack_lvl+0xe8/0x150 [ 663.877163][T15729] should_fail_ex+0x410/0x560 [ 663.877192][T15729] should_failslab+0xa8/0x100 [ 663.877221][T15729] __kmalloc_noprof+0xfe/0x720 [ 663.877241][T15729] ? __kmalloc_cache_noprof+0x14d/0x600 [ 663.877259][T15729] ? fuse_direct_io+0x359/0x2ad0 [ 663.877385][T15729] ? fuse_direct_io+0x359/0x2ad0 [ 663.877431][T15729] fuse_direct_io+0x359/0x2ad0 [ 663.877463][T15729] ? __lock_acquire+0x747/0x2de0 [ 663.877498][T15729] ? lock_acquire+0x115/0x350 [ 663.877535][T15729] ? __pfx_fuse_direct_io+0x10/0x10 [ 663.877564][T15729] ? down_write+0x16b/0x200 [ 663.877588][T15729] ? generic_write_checks_count+0x41a/0x520 [ 663.877626][T15729] fuse_file_write_iter+0x74e/0x11b0 [ 663.877678][T15729] ? aa_file_perm+0x18b/0x15f0 [ 663.877711][T15729] ? aa_file_perm+0x4ed/0x15f0 [ 663.877737][T15729] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 663.877809][T15729] do_iter_readv_writev+0x612/0x8c0 [ 663.877835][T15729] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 663.877874][T15729] vfs_writev+0x343/0x990 [ 663.877905][T15729] ? __pfx_vfs_writev+0x10/0x10 [ 663.877941][T15729] ? __fget_files+0x2a/0x420 [ 663.877971][T15729] ? __fget_files+0x3a2/0x420 [ 663.877997][T15729] ? __fget_files+0x2a/0x420 [ 663.878034][T15729] do_writev+0x154/0x2e0 [ 663.878063][T15729] ? __pfx_do_writev+0x10/0x10 [ 663.878098][T15729] do_syscall_64+0x166/0x520 [ 663.878122][T15729] ? trace_irq_disable+0x3b/0x140 [ 663.878143][T15729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.878165][T15729] ? clear_bhb_loop+0x70/0xc0 [ 663.878189][T15729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.878210][T15729] RIP: 0033:0x7f075df9e159 [ 663.878230][T15729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.878250][T15729] RSP: 002b:00007f075edf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 663.878272][T15729] RAX: ffffffffffffffda RBX: 00007f075e226090 RCX: 00007f075df9e159 [ 663.878289][T15729] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 663.878302][T15729] RBP: 00007f075edf0090 R08: 0000000000000000 R09: 0000000000000000 [ 663.878316][T15729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.878329][T15729] R13: 00007f075e226128 R14: 00007f075e226090 R15: 00007f075e34fa48 [ 663.878361][T15729] [ 664.937953][ T5696] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 665.095955][T15754] syzkaller0: entered promiscuous mode [ 665.095981][T15754] syzkaller0: entered allmulticast mode [ 665.120111][ T5696] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 665.121364][ T5696] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 665.121410][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 416, setting to 64 [ 665.126754][ T5696] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 665.126772][ T5696] usb 2-1: Manufacturer: syz [ 665.137593][ T5696] usb 2-1: config 0 descriptor?? [ 665.387403][ T5696] rc_core: IR keymap rc-hauppauge not found [ 665.387422][ T5696] Registered IR keymap rc-empty [ 665.388096][ T5696] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 665.390300][ T5696] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 665.982454][T15766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.984001][T15766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.061180][T15764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2623'. [ 666.348243][T11539] bond1: (slave gretap1): link status up again after 0 ms [ 666.368532][ T2989] bond1: (slave gretap1): link status up again after 0 ms [ 666.387349][ T2989] bond1: (slave gretap1): link status up again after 0 ms [ 666.409093][ T2989] bond1: (slave gretap1): link status up again after 0 ms [ 666.430683][T11539] bond1: (slave gretap1): link status up again after 0 ms [ 666.457632][ T7320] bond1: (slave gretap1): link status up again after 0 ms [ 666.477950][ T2989] bond1: (slave gretap1): link status up again after 0 ms [ 666.499499][ T2989] bond1: (slave gretap1): link status up again after 0 ms [ 666.499533][ T2989] bond1: (slave gretap1): failed to get link speed/duplex [ 666.733342][T11535] net_ratelimit: 1 callbacks suppressed [ 666.733357][T11535] bond1: (slave gretap1): failed to get link speed/duplex [ 666.838958][ T7320] bond1: (slave gretap1): failed to get link speed/duplex [ 666.948189][T11535] bond1: (slave gretap1): failed to get link speed/duplex [ 667.369851][ T7320] bond1: (slave gretap1): failed to get link speed/duplex [ 667.537568][ T42] bond1: (slave gretap1): failed to get link speed/duplex [ 667.647891][T11539] bond1: (slave gretap1): failed to get link speed/duplex [ 667.758963][ T42] bond1: (slave gretap1): failed to get link speed/duplex [ 667.862660][T15792] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2630'. [ 667.862687][T15792] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2630'. [ 667.886311][ T42] bond1: (slave gretap1): failed to get link speed/duplex [ 667.987384][ T42] bond1: (slave gretap1): failed to get link speed/duplex [ 668.097710][ T42] bond1: (slave gretap1): failed to get link speed/duplex [ 668.182172][T15795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.204466][T15795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.231100][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.231125][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.231141][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.231156][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.231190][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.231206][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.231221][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.231236][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.231250][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.231265][ T5696] hid-generic 009C:0008:0003.0028: unknown main item tag 0x0 [ 668.246242][ T5704] usb 2-1: USB disconnect, device number 16 [ 668.344549][ T5696] hid-generic 009C:0008:0003.0028: hidraw0: HID v0.05 Device [syz1] on syz0 [ 668.387027][T15799] fuse: Bad value for 'fd' [ 668.487088][T15801] fido_id[15801]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 668.516215][T15802] syz_tun: entered allmulticast mode [ 668.680878][T15809] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2635'. [ 668.709783][T12030] logitech-hidpp-device 0005:046D:B012.0029: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 668.750087][T15809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.771826][T15809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.799087][T15809] bond0 (unregistering): Released all slaves [ 668.865713][T15813] kvm: pic: non byte write [ 668.907740][T15814] fido_id[15814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 669.354995][T15827] FAULT_INJECTION: forcing a failure. [ 669.354995][T15827] name failslab, interval 1, probability 0, space 0, times 0 [ 669.355035][T15827] CPU: 1 UID: 0 PID: 15827 Comm: syz.5.2637 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.355063][T15827] Tainted: [L]=SOFTLOCKUP [ 669.355071][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.355083][T15827] Call Trace: [ 669.355092][T15827] [ 669.355101][T15827] dump_stack_lvl+0xe8/0x150 [ 669.355137][T15827] should_fail_ex+0x410/0x560 [ 669.355165][T15827] should_failslab+0xa8/0x100 [ 669.355192][T15827] __kmalloc_noprof+0xfe/0x720 [ 669.355213][T15827] ? __kmalloc_noprof+0x1ab/0x720 [ 669.355230][T15827] ? fuse_direct_io+0x97b/0x2ad0 [ 669.355258][T15827] ? fuse_direct_io+0x97b/0x2ad0 [ 669.355300][T15827] fuse_direct_io+0x97b/0x2ad0 [ 669.355364][T15827] ? __pfx_fuse_direct_io+0x10/0x10 [ 669.355391][T15827] ? down_write+0x16b/0x200 [ 669.355415][T15827] ? generic_write_checks_count+0x41a/0x520 [ 669.355451][T15827] fuse_file_write_iter+0x74e/0x11b0 [ 669.355471][T15827] ? aa_file_perm+0x18b/0x15f0 [ 669.355503][T15827] ? aa_file_perm+0x4ed/0x15f0 [ 669.355527][T15827] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 669.355584][T15827] do_iter_readv_writev+0x612/0x8c0 [ 669.355607][T15827] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 669.355644][T15827] vfs_writev+0x343/0x990 [ 669.355677][T15827] ? __pfx_vfs_writev+0x10/0x10 [ 669.355711][T15827] ? __fget_files+0x2a/0x420 [ 669.355742][T15827] ? __fget_files+0x3a2/0x420 [ 669.355768][T15827] ? __fget_files+0x2a/0x420 [ 669.355803][T15827] do_writev+0x154/0x2e0 [ 669.355829][T15827] ? __pfx_do_writev+0x10/0x10 [ 669.355864][T15827] do_syscall_64+0x166/0x520 [ 669.355885][T15827] ? trace_irq_disable+0x3b/0x140 [ 669.355905][T15827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.355926][T15827] ? clear_bhb_loop+0x70/0xc0 [ 669.355950][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.355970][T15827] RIP: 0033:0x7f3d38f9e159 [ 669.355989][T15827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.356006][T15827] RSP: 002b:00007f3d39e82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 669.356029][T15827] RAX: ffffffffffffffda RBX: 00007f3d39226090 RCX: 00007f3d38f9e159 [ 669.356044][T15827] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 669.356057][T15827] RBP: 00007f3d39e82090 R08: 0000000000000000 R09: 0000000000000000 [ 669.356070][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.356083][T15827] R13: 00007f3d39226128 R14: 00007f3d39226090 R15: 00007f3d3934fa48 [ 669.356115][T15827] [ 669.741720][T15835] FAULT_INJECTION: forcing a failure. [ 669.741720][T15835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.741757][T15835] CPU: 0 UID: 0 PID: 15835 Comm: syz.3.2643 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.741784][T15835] Tainted: [L]=SOFTLOCKUP [ 669.741792][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.741804][T15835] Call Trace: [ 669.741812][T15835] [ 669.741821][T15835] dump_stack_lvl+0xe8/0x150 [ 669.741855][T15835] should_fail_ex+0x410/0x560 [ 669.741892][T15835] _copy_from_user+0x2d/0xb0 [ 669.741918][T15835] ___sys_sendmsg+0x1c6/0x360 [ 669.741944][T15835] ? __lock_acquire+0x747/0x2de0 [ 669.741970][T15835] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.742029][T15835] ? __fget_files+0x2a/0x420 [ 669.742056][T15835] ? __fget_files+0x3a2/0x420 [ 669.742092][T15835] __x64_sys_sendmsg+0x1b1/0x290 [ 669.742121][T15835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.742163][T15835] do_syscall_64+0x166/0x520 [ 669.742185][T15835] ? trace_irq_disable+0x3b/0x140 [ 669.742204][T15835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.742225][T15835] ? clear_bhb_loop+0x70/0xc0 [ 669.742250][T15835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.742271][T15835] RIP: 0033:0x7f0e8519e159 [ 669.742290][T15835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.742308][T15835] RSP: 002b:00007f0e85fc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.742330][T15835] RAX: ffffffffffffffda RBX: 00007f0e85425fa0 RCX: 00007f0e8519e159 [ 669.742345][T15835] RDX: 0000000000000018 RSI: 0000200000000040 RDI: 0000000000000003 [ 669.742359][T15835] RBP: 00007f0e85fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 669.742372][T15835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.742385][T15835] R13: 00007f0e85426038 R14: 00007f0e85425fa0 R15: 00007f0e8554fa48 [ 669.742416][T15835] [ 669.983578][T15837] tipc: Started in network mode [ 669.983609][T15837] tipc: Node identity ac1414aa, cluster identity 4711 [ 669.991097][T15837] tipc: Enabled bearer , priority 10 [ 670.120401][T15848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.120855][T15848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.123380][T15848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.123766][T15848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.127034][T15850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.129949][T15850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.131120][T15850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.131503][T15850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.135993][T15850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.136379][T15850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.148599][T15850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.149041][T15850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.241071][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2648'. [ 670.311501][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 670.311522][ T30] audit: type=1326 audit(1789186811.066:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96f9e159 code=0x7ffc0000 [ 670.312549][ T30] audit: type=1326 audit(1789186811.066:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96f9e159 code=0x7ffc0000 [ 670.313198][ T30] audit: type=1326 audit(1789186811.066:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f96f9e159 code=0x7ffc0000 [ 670.316101][ T30] audit: type=1326 audit(1789186811.066:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96f9e159 code=0x7ffc0000 [ 670.316618][ T30] audit: type=1326 audit(1789186811.066:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96f9e159 code=0x7ffc0000 [ 670.316733][ T30] audit: type=1326 audit(1789186811.066:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f96f9e159 code=0x7ffc0000 [ 670.317086][ T30] audit: type=1326 audit(1789186811.066:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96f9e159 code=0x7ffc0000 [ 670.378997][ T30] audit: type=1326 audit(1789186811.136:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96f9e159 code=0x7ffc0000 [ 670.379049][ T30] audit: type=1326 audit(1789186811.136:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f96f5e98e code=0x7ffc0000 [ 670.379087][ T30] audit: type=1326 audit(1789186811.136:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f96f5e98e code=0x7ffc0000 [ 670.393282][T15859] FAULT_INJECTION: forcing a failure. [ 670.393282][T15859] name failslab, interval 1, probability 0, space 0, times 0 [ 670.393319][T15859] CPU: 0 UID: 0 PID: 15859 Comm: syz.1.2649 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.393346][T15859] Tainted: [L]=SOFTLOCKUP [ 670.393354][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 670.393366][T15859] Call Trace: [ 670.393374][T15859] [ 670.393382][T15859] dump_stack_lvl+0xe8/0x150 [ 670.393415][T15859] should_fail_ex+0x410/0x560 [ 670.393440][T15859] ? __alloc_skb+0x1db/0x7a0 [ 670.393463][T15859] should_failslab+0xa8/0x100 [ 670.393488][T15859] ? __alloc_skb+0x1db/0x7a0 [ 670.393508][T15859] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 670.393540][T15859] ? __alloc_skb+0x18d/0x7a0 [ 670.393561][T15859] ? __alloc_skb+0x1db/0x7a0 [ 670.393588][T15859] __alloc_skb+0x1db/0x7a0 [ 670.393613][T15859] audit_log_start+0x1b3/0xa10 [ 670.393646][T15859] ? __pfx_audit_log_start+0x10/0x10 [ 670.393674][T15859] ? stack_depot_save_flags+0x33/0x7f0 [ 670.393695][T15859] ? __lock_acquire+0x650/0x2de0 [ 670.393719][T15859] ? kasan_save_track+0x4f/0x80 [ 670.393745][T15859] ? kasan_save_track+0x3e/0x80 [ 670.393767][T15859] audit_seccomp+0x63/0x190 [ 670.393789][T15859] ? clear_bhb_loop+0x70/0xc0 [ 670.393808][T15859] ? clear_bhb_loop+0xe/0xc0 [ 670.393832][T15859] __seccomp_filter+0xd14/0x1de0 [ 670.393866][T15859] ? __pfx___seccomp_filter+0x10/0x10 [ 670.393905][T15859] ? kasan_quarantine_put+0xbb/0x1f0 [ 670.393937][T15859] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 670.393964][T15859] do_syscall_64+0x11f/0x520 [ 670.393985][T15859] ? trace_irq_disable+0x3b/0x140 [ 670.394004][T15859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.394023][T15859] ? clear_bhb_loop+0x70/0xc0 [ 670.394046][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.394066][T15859] RIP: 0033:0x7f6f96f5e98e [ 670.394084][T15859] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 670.394100][T15859] RSP: 002b:00007f6f97da9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 670.394120][T15859] RAX: ffffffffffffffda RBX: 00007f6f97daa6c0 RCX: 00007f6f96f5e98e [ 670.394135][T15859] RDX: 000000000000000f RSI: 00007f6f97daa0a0 RDI: 0000000000000005 [ 670.394148][T15859] RBP: 00007f6f97daa090 R08: 0000000000000000 R09: 0000000000000000 [ 670.394160][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 670.394171][T15859] R13: 00007f6f97226038 R14: 00007f6f97225fa0 R15: 00007f6f9734fa48 [ 670.394201][T15859] [ 671.110429][ T5696] tipc: Node number set to 2886997162 [ 671.377023][T15867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.390422][T15867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.430744][T15867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 671.618988][T15875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2655'. [ 671.749686][ T42] net_ratelimit: 38 callbacks suppressed [ 671.749703][ T42] bond1: (slave gretap1): failed to get link speed/duplex [ 671.868238][ T2989] bond1: (slave gretap1): failed to get link speed/duplex [ 671.979528][T11539] bond1: (slave gretap1): failed to get link speed/duplex [ 672.057344][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 672.088287][T11539] bond1: (slave gretap1): failed to get link speed/duplex [ 672.202417][T11535] bond1: (slave gretap1): failed to get link speed/duplex [ 672.350619][ T2989] bond1: (slave gretap1): failed to get link speed/duplex [ 672.376135][T15887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.376397][T15887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.457398][ T42] bond1: (slave gretap1): failed to get link speed/duplex [ 672.569255][ T7320] bond1: (slave gretap1): failed to get link speed/duplex [ 672.678411][ T42] bond1: (slave gretap1): failed to get link speed/duplex [ 673.217331][ T5696] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 673.357439][ T5696] usb 2-1: device descriptor read/64, error -71 [ 673.545654][T15923] binder: 15922:15923 ioctl 4008af00 200000000340 returned -22 [ 673.610126][ T5696] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 673.747847][ T5696] usb 2-1: device descriptor read/64, error -71 [ 673.803805][T15932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.807988][T15932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.858047][ T5696] usb usb2-port1: attempt power cycle [ 674.207343][ T5696] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 674.228082][ T5696] usb 2-1: device descriptor read/8, error -71 [ 674.482463][ T5696] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 674.508249][ T5696] usb 2-1: device descriptor read/8, error -71 [ 674.619744][ T5696] usb usb2-port1: unable to enumerate USB device [ 676.003518][T15958] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 676.118794][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.119253][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.334724][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.346566][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.599923][T15971] batman_adv: batadv0: Interface deactivated: dummy0 [ 676.599950][T15971] batman_adv: batadv0: Removing interface: dummy0 [ 676.604348][T15971] bridge_slave_0: left allmulticast mode [ 676.604373][T15971] bridge_slave_0: left promiscuous mode [ 676.604580][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.182359][T15981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 677.231100][T15971] bridge_slave_1: left allmulticast mode [ 677.231129][T15971] bridge_slave_1: left promiscuous mode [ 677.231333][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.266785][T15971] bond0: (slave bond_slave_0): Releasing backup interface [ 677.277410][ C0] net_ratelimit: 37 callbacks suppressed [ 677.277432][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.301769][T15971] bond0: (slave bond_slave_1): Releasing backup interface [ 677.325257][T15971] team0: Port device team_slave_0 removed [ 677.349238][T15971] team0: Port device team_slave_1 removed [ 677.351331][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.351357][T15971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.351520][T15969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2686'. [ 677.356100][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.356124][T15971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.362866][T15971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 677.466823][T15974] team0: Port device wg1 added [ 677.498094][ T97] bond1: (slave gretap1): failed to get link speed/duplex [ 677.827485][T11541] bond1: (slave gretap1): failed to get link speed/duplex [ 677.971068][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 677.971087][ T30] audit: type=1326 audit(1789186818.726:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 677.971301][ T30] audit: type=1326 audit(1789186818.726:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 677.972521][ T30] audit: type=1326 audit(1789186818.726:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 677.972565][ T30] audit: type=1326 audit(1789186818.726:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 677.972600][ T30] audit: type=1326 audit(1789186818.726:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 677.972853][ T30] audit: type=1326 audit(1789186818.726:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 677.973409][ T30] audit: type=1326 audit(1789186818.726:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 677.973648][ T30] audit: type=1326 audit(1789186818.726:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 677.973984][ T30] audit: type=1326 audit(1789186818.726:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 678.159805][ T30] audit: type=1326 audit(1789186818.916:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.3.2692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8519e159 code=0x7ffc0000 [ 678.234165][ T5704] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 678.317328][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 678.350236][ T97] bond1: (slave gretap1): failed to get link speed/duplex [ 678.357404][ T5704] usb 2-1: device descriptor read/64, error -71 [ 678.460067][ T2989] bond1: (slave gretap1): failed to get link speed/duplex [ 678.472693][ T5614] usb 6-1: USB disconnect, device number 79 [ 678.568095][T11541] bond1: (slave gretap1): failed to get link speed/duplex [ 678.598408][ T5704] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 678.677392][T11541] bond1: (slave gretap1): failed to get link speed/duplex [ 678.727329][ T5704] usb 2-1: device descriptor read/64, error -71 [ 678.797944][T11541] bond1: (slave gretap1): failed to get link speed/duplex [ 678.837732][ T5704] usb usb2-port1: attempt power cycle [ 679.082392][T13905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.096033][T13905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.097051][T13905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.116651][T13905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.125128][T13905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 679.188135][ T5704] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 679.218301][ T5704] usb 2-1: device descriptor read/8, error -71 [ 679.457364][ T5704] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 679.478134][ T5704] usb 2-1: device descriptor read/8, error -71 [ 679.532660][T16018] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.532766][T16018] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.532855][T16018] bridge_slave_0: entered allmulticast mode [ 679.534167][T16018] bridge_slave_0: entered promiscuous mode [ 679.536700][T16018] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.536871][T16018] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.537414][T16018] bridge_slave_1: entered allmulticast mode [ 679.539040][T16018] bridge_slave_1: entered promiscuous mode [ 679.581653][T16018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.584622][T16018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.609364][ T5704] usb usb2-port1: unable to enumerate USB device [ 679.629700][T16018] team0: Port device team_slave_0 added [ 679.631897][T16018] team0: Port device team_slave_1 added [ 679.657890][T16018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.657908][T16018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.657931][T16018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.659376][T16018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.659390][T16018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.659415][T16018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.710394][T16018] hsr_slave_0: entered promiscuous mode [ 679.713966][T16018] hsr_slave_1: entered promiscuous mode [ 679.714740][T16018] debugfs: 'hsr0' already exists in 'hsr' [ 679.714760][T16018] Cannot create hsr debugfs directory [ 680.040448][T16018] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.176791][T16018] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.304595][T16018] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.426371][T16018] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.796847][T16018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 680.813384][T16018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 680.814229][T16018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 680.827898][T16018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 680.828830][T16018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 680.839359][T16018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 680.840512][T16018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 680.862025][T16018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 681.045511][T16018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.070438][T16018] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.082443][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.082571][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.106576][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.106634][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.198120][ T5621] Bluetooth: hci0: command tx timeout [ 681.329298][T16018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.436004][T16018] veth0_vlan: entered promiscuous mode [ 681.493462][T16018] veth1_vlan: entered promiscuous mode [ 681.653799][T16018] veth0_macvtap: entered promiscuous mode [ 681.671585][T16018] veth1_macvtap: entered promiscuous mode [ 681.733372][T16018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.756458][T16018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.798231][ T2989] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.798379][ T2989] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.798414][ T2989] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.798447][ T2989] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.799037][ T5614] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 681.941545][ T5614] usb 2-1: device descriptor read/64, error -71 [ 682.096891][T16063] loop3: detected capacity change from 0 to 7 [ 682.105755][T16063] Dev loop3: unable to read RDB block 7 [ 682.105804][T16063] loop3: unable to read partition table [ 682.106020][T16063] loop3: partition table beyond EOD, truncated [ 682.106061][T16063] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 682.150817][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.150840][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.197379][ T5614] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 682.300214][T11532] net_ratelimit: 24 callbacks suppressed [ 682.300228][T11532] bond1: (slave gretap1): failed to get link speed/duplex [ 682.311333][T11535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.311355][T11535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.337388][ T5614] usb 2-1: device descriptor read/64, error -71 [ 682.430663][T11535] bond1: (slave gretap1): failed to get link speed/duplex [ 682.457776][ T5614] usb usb2-port1: attempt power cycle [ 682.477334][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 682.541848][T11535] bond1: (slave gretap1): failed to get link speed/duplex [ 682.648266][T11532] bond1: (slave gretap1): failed to get link speed/duplex [ 682.757701][T11532] bond1: (slave gretap1): failed to get link speed/duplex [ 682.797583][ T5614] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 682.827966][ T5614] usb 2-1: device descriptor read/8, error -71 [ 682.842486][T16077] netlink: Conntrack attr has 4 unknown bytes [ 682.842520][T16077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.867491][T11535] bond1: (slave gretap1): failed to get link speed/duplex [ 682.998265][T11532] bond1: (slave gretap1): failed to get link speed/duplex [ 683.068086][ T5614] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 683.088019][ T5614] usb 2-1: device descriptor read/8, error -71 [ 683.207812][ T5614] usb usb2-port1: unable to enumerate USB device [ 683.277902][ T5621] Bluetooth: hci0: command tx timeout [ 683.811712][T16102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.812975][T16102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.914441][T16085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.259024][T16111] loop3: detected capacity change from 0 to 7 [ 684.259774][T16111] Dev loop3: unable to read RDB block 7 [ 684.259815][T16111] loop3: unable to read partition table [ 684.260046][T16111] loop3: partition table beyond EOD, truncated [ 684.260063][T16111] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 684.630107][T16121] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 684.630126][T16121] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 684.803016][T16127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.826697][T16127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.879826][T16121] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 684.879930][T16121] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 684.984110][T16121] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 684.984138][T16121] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 685.023357][T16121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 685.023380][T16121] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 685.340566][T16121] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 685.340619][T16121] Bluetooth: hci0: Error wh ** replaying previous printk message ** [ 685.340619][T16121] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 685.357493][ C1] ------------[ cut here ]------------ [ 685.357509][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 685.357624][ C1] WARNING: kernel/workqueue.c:2353 at __queue_work+0xd83/0x10d0, CPU#1: syz.3.2726/16127 [ 685.392143][ C1] Modules linked in: [ 685.396049][ C1] CPU: 1 UID: 0 PID: 16127 Comm: syz.3.2726 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.406999][ C1] Tainted: [L]=SOFTLOCKUP [ 685.411339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.421407][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 685.426809][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 2d cc ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 fb 8f a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 685.446434][ C1] RSP: 0018:ffffc90000a18bc0 EFLAGS: 00010046 [ 685.452504][ C1] RAX: 1ffff11010cf494e RBX: dffffc0000000000 RCX: ffff888042adbe80 [ 685.460468][ C1] RDX: ffff88807ba4a970 RSI: ffffffff8ad5a1e0 RDI: ffffffff907d0770 [ 685.468440][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f464f [ 685.476405][ C1] R10: dffffc0000000000 R11: ffffffff818e4260 R12: 0000000000000008 [ 685.484370][ C1] R13: ffff8880867a4a58 R14: ffffffff907d0770 R15: ffff88807ba4a970 [ 685.492337][ C1] FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 685.501269][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.507862][ C1] CR2: 0000200000109000 CR3: 000000007ff6c000 CR4: 00000000003526f0 [ 685.515841][ C1] Call Trace: [ 685.519118][ C1] [ 685.521971][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 685.527359][ C1] call_timer_fn+0x18d/0x5f0 [ 685.531982][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 685.537786][ C1] ? call_timer_fn+0xd5/0x5f0 [ 685.542467][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 685.547598][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 685.552723][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 685.558534][ C1] __run_timer_base+0x67e/0x8b0 [ 685.563402][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 685.568772][ C1] ? ktime_get+0x1f5/0x220 [ 685.573211][ C1] ? lapic_next_event+0x11/0x20 [ 685.578096][ C1] run_timer_softirq+0xb7/0x170 [ 685.582945][ C1] handle_softirqs+0x226/0x860 [ 685.587710][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 685.592478][ C1] __irq_exit_rcu+0xcb/0x220 [ 685.597063][ C1] irq_exit_rcu+0x9/0x30 [ 685.601299][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 685.606930][ C1] [ 685.609851][ C1] [ 685.612771][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.618743][ C1] RIP: 0010:lock_release+0x7f/0x3c0 [ 685.623929][ C1] Code: 86 08 d7 0e 00 0f 84 26 02 00 00 65 8b 05 b1 c9 f1 11 85 c0 0f 85 17 02 00 00 65 4c 8b 3d f1 84 f1 11 41 83 bf a4 0b 00 00 00 <0f> 85 01 02 00 00 49 81 3e e0 94 56 94 0f 84 f4 01 00 00 9c 5b fa [ 685.643525][ C1] RSP: 0018:ffffc900065972b0 EFLAGS: 00000246 [ 685.649587][ C1] RAX: 0000000000000000 RBX: ffffffff8243c37a RCX: 8000000000000003 [ 685.657543][ C1] RDX: 0000000000000000 RSI: ffffffff8c6d9c60 RDI: ffffffff8c6d9c20 [ 685.665503][ C1] RBP: 0000000000000001 R08: ffffffff8243c37a R09: 0000000000000000 [ 685.673483][ C1] R10: dffffc0000000000 R11: fffff940002d1b91 R12: dffffc0000000000 [ 685.681449][ C1] R13: ffffffff8243c37a R14: ffffffff8ed5c960 R15: ffff888042adbe80 [ 685.689413][ C1] ? pfn_valid+0xba/0x490 [ 685.693740][ C1] ? pfn_valid+0xba/0x490 [ 685.698060][ C1] ? pfn_valid+0xba/0x490 [ 685.702386][ C1] ? pfn_valid+0xba/0x490 [ 685.706703][ C1] ? pfn_valid+0xba/0x490 [ 685.711027][ C1] pfn_valid+0x3bb/0x490 [ 685.715260][ C1] page_table_check_clear+0x21/0x500 [ 685.720542][ C1] ? vm_normal_page+0x13c/0x2b0 [ 685.725382][ C1] __zap_vma_range+0x3a12/0x4f80 [ 685.730347][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 685.735629][ C1] ? mas_find+0x6d6/0xcb0 [ 685.740053][ C1] unmap_vmas+0x390/0x550 [ 685.744387][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 685.749223][ C1] ? mas_next_slot+0xc91/0xd70 [ 685.753997][ C1] exit_mmap+0x293/0x9f0 [ 685.758239][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 685.763019][ C1] ? __pfx_exit_aio+0x10/0x10 [ 685.767725][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 685.772934][ C1] __mmput+0x118/0x420 [ 685.777003][ C1] exit_mm+0x221/0x2d0 [ 685.781065][ C1] do_exit+0x6cd/0x2360 [ 685.785216][ C1] ? __pfx_do_exit+0x10/0x10 [ 685.789799][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 685.794836][ C1] do_group_exit+0x22d/0x2f0 [ 685.799423][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 685.804622][ C1] get_signal+0x121b/0x12c0 [ 685.809131][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 685.814677][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 685.820839][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 685.826199][ C1] ? rcu_is_watching+0x16/0xb0 [ 685.830955][ C1] do_syscall_64+0x328/0x520 [ 685.835536][ C1] ? trace_irq_disable+0x3b/0x140 [ 685.840549][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.846609][ C1] ? clear_bhb_loop+0x70/0xc0 [ 685.851279][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.857161][ C1] RIP: 0033:0x7f0e8519e159 [ 685.861568][ C1] Code: Unable to access opcode bytes at 0x7f0e8519e12f. [ 685.868633][ C1] RSP: 002b:00007f0e85fc90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 685.877053][ C1] RAX: fffffffffffffe00 RBX: 00007f0e85425fa8 RCX: 00007f0e8519e159 [ 685.885031][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0e85425fa8 [ 685.893000][ C1] RBP: 00007f0e85425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 685.900961][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.908923][ C1] R13: 00007f0e85426038 R14: 00007f0e8554f960 R15: 00007f0e8554fa48 [ 685.917108][ C1] [ 685.920130][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 685.927402][ C1] CPU: 1 UID: 0 PID: 16127 Comm: syz.3.2726 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.938326][ C1] Tainted: [L]=SOFTLOCKUP [ 685.942636][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.952685][ C1] Call Trace: [ 685.955974][ C1] [ 685.958822][ C1] vpanic+0x56d/0xa60 [ 685.962848][ C1] ? __pfx__printk+0x10/0x10 [ 685.967433][ C1] ? __pfx_vpanic+0x10/0x10 [ 685.971929][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 685.977206][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 685.982410][ C1] panic+0xc5/0xd0 [ 685.986127][ C1] ? __pfx_panic+0x10/0x10 [ 685.990553][ C1] __warn+0x315/0x4c0 [ 685.994533][ C1] ? __queue_work+0xd83/0x10d0 [ 685.999293][ C1] ? __queue_work+0xd83/0x10d0 [ 686.004048][ C1] __report_bug+0x276/0x570 [ 686.008618][ C1] ? __queue_work+0xd83/0x10d0 [ 686.013383][ C1] ? __pfx___report_bug+0x10/0x10 [ 686.018394][ C1] ? exit_mmap+0x293/0x9f0 [ 686.022803][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 686.028097][ C1] ? look_up_lock_class+0x57/0x110 [ 686.033201][ C1] ? register_lock_class+0x31/0x2e0 [ 686.038392][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 686.043415][ C1] report_bug_entry+0x19b/0x290 [ 686.048265][ C1] ? __queue_work+0xd9f/0x10d0 [ 686.053020][ C1] ? __queue_work+0xda4/0x10d0 [ 686.057774][ C1] handle_bug+0xce/0x200 [ 686.062024][ C1] exc_invalid_op+0x1a/0x50 [ 686.066545][ C1] asm_exc_invalid_op+0x1a/0x20 [ 686.071399][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 686.076779][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 2d cc ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 fb 8f a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 686.096378][ C1] RSP: 0018:ffffc90000a18bc0 EFLAGS: 00010046 [ 686.102441][ C1] RAX: 1ffff11010cf494e RBX: dffffc0000000000 RCX: ffff888042adbe80 [ 686.110402][ C1] RDX: ffff88807ba4a970 RSI: ffffffff8ad5a1e0 RDI: ffffffff907d0770 [ 686.118364][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f464f [ 686.126323][ C1] R10: dffffc0000000000 R11: ffffffff818e4260 R12: 0000000000000008 [ 686.134286][ C1] R13: ffff8880867a4a58 R14: ffffffff907d0770 R15: ffff88807ba4a970 [ 686.142255][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 686.148065][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 686.153366][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 686.158740][ C1] call_timer_fn+0x18d/0x5f0 [ 686.163329][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 686.169136][ C1] ? call_timer_fn+0xd5/0x5f0 [ 686.173806][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 686.178917][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 686.184021][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 686.189825][ C1] __run_timer_base+0x67e/0x8b0 [ 686.194682][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 686.200052][ C1] ? ktime_get+0x1f5/0x220 [ 686.204461][ C1] ? lapic_next_event+0x11/0x20 [ 686.209315][ C1] run_timer_softirq+0xb7/0x170 [ 686.214176][ C1] handle_softirqs+0x226/0x860 [ 686.218937][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 686.223698][ C1] __irq_exit_rcu+0xcb/0x220 [ 686.228282][ C1] irq_exit_rcu+0x9/0x30 [ 686.232521][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 686.238146][ C1] [ 686.241063][ C1] [ 686.243981][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 686.249950][ C1] RIP: 0010:lock_release+0x7f/0x3c0 [ 686.255139][ C1] Code: 86 08 d7 0e 00 0f 84 26 02 00 00 65 8b 05 b1 c9 f1 11 85 c0 0f 85 17 02 00 00 65 4c 8b 3d f1 84 f1 11 41 83 bf a4 0b 00 00 00 <0f> 85 01 02 00 00 49 81 3e e0 94 56 94 0f 84 f4 01 00 00 9c 5b fa [ 686.274731][ C1] RSP: 0018:ffffc900065972b0 EFLAGS: 00000246 [ 686.280790][ C1] RAX: 0000000000000000 RBX: ffffffff8243c37a RCX: 8000000000000003 [ 686.288753][ C1] RDX: 0000000000000000 RSI: ffffffff8c6d9c60 RDI: ffffffff8c6d9c20 [ 686.296734][ C1] RBP: 0000000000000001 R08: ffffffff8243c37a R09: 0000000000000000 [ 686.304697][ C1] R10: dffffc0000000000 R11: fffff940002d1b91 R12: dffffc0000000000 [ 686.312663][ C1] R13: ffffffff8243c37a R14: ffffffff8ed5c960 R15: ffff888042adbe80 [ 686.320632][ C1] ? pfn_valid+0xba/0x490 [ 686.324961][ C1] ? pfn_valid+0xba/0x490 [ 686.329285][ C1] ? pfn_valid+0xba/0x490 [ 686.333622][ C1] ? pfn_valid+0xba/0x490 [ 686.337943][ C1] ? pfn_valid+0xba/0x490 [ 686.342262][ C1] pfn_valid+0x3bb/0x490 [ 686.346497][ C1] page_table_check_clear+0x21/0x500 [ 686.351771][ C1] ? vm_normal_page+0x13c/0x2b0 [ 686.356614][ C1] __zap_vma_range+0x3a12/0x4f80 [ 686.361580][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 686.366861][ C1] ? mas_find+0x6d6/0xcb0 [ 686.371184][ C1] unmap_vmas+0x390/0x550 [ 686.375510][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 686.380345][ C1] ? mas_next_slot+0xc91/0xd70 [ 686.385115][ C1] exit_mmap+0x293/0x9f0 [ 686.389357][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 686.394135][ C1] ? __pfx_exit_aio+0x10/0x10 [ 686.398823][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 686.404023][ C1] __mmput+0x118/0x420 [ 686.408088][ C1] exit_mm+0x221/0x2d0 [ 686.412149][ C1] do_exit+0x6cd/0x2360 [ 686.416300][ C1] ? __pfx_do_exit+0x10/0x10 [ 686.420885][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 686.425912][ C1] do_group_exit+0x22d/0x2f0 [ 686.430491][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 686.435690][ C1] get_signal+0x121b/0x12c0 [ 686.440213][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 686.445768][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 686.451934][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 686.457301][ C1] ? rcu_is_watching+0x16/0xb0 [ 686.462079][ C1] do_syscall_64+0x328/0x520 [ 686.466658][ C1] ? trace_irq_disable+0x3b/0x140 [ 686.471672][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.477727][ C1] ? clear_bhb_loop+0x70/0xc0 [ 686.482397][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.488282][ C1] RIP: 0033:0x7f0e8519e159 [ 686.492700][ C1] Code: Unable to access opcode bytes at 0x7f0e8519e12f. [ 686.499705][ C1] RSP: 002b:00007f0e85fc90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 686.508242][ C1] RAX: fffffffffffffe00 RBX: 00007f0e85425fa8 RCX: 00007f0e8519e159 [ 686.516223][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0e85425fa8 [ 686.524198][ C1] RBP: 00007f0e85425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 686.532172][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.540153][ C1] R13: 00007f0e85426038 R14: 00007f0e8554f960 R15: 00007f0e8554fa48 [ 686.548141][ C1] [ 686.551437][ C1] Kernel Offset: disabled [ 686.555765][ C1] Rebooting in 86400 seconds..