last executing test programs: 4m40.961536968s ago: executing program 1 (id=2438): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000240)={{r1}, r2, 0xc, @unused=[0x10001, 0x3, 0x1200000, 0xce9], @subvolid=0x2}) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) r4 = syz_open_dev$vcsn(&(0x7f0000001240), 0x0, 0x40) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004004) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x30, r1, 0x6a133000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000013c0)={0x3, 0x1, 0xe4}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000001400)={0x80000001, 0x2, {0x0}, {0xee00}, 0x2, 0x8001}) fstat(r5, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r4, &(0x7f00000014c0)={0x130, 0xffffffffffffffda, 0x0, {0xfffffffffffffffb, 0x43a4, 0x0, '\x00', {0x800, 0x7, 0xff, 0x3, r7, r8, 0x8000, '\x00', 0xb, 0x6, 0x40, 0x49982ab6, {0x8c8b, 0x9}, {0x2, 0xe}, {0x800000000000, 0x80}, {0x2, 0x3}, 0x6, 0x0, 0x3, 0x7}}}, 0x130) prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x1, &(0x7f0000001600)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001640)={r4}) bind(r9, &(0x7f0000001680)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) ioctl$VHOST_VDPA_GET_AS_NUM(r4, 0x8004af7a, &(0x7f0000001700)) write$ublk_bdev(r4, &(0x7f0000001740)="1f43730ec15cdf457f9b4a57faa3523e575986b6", 0x14) shmctl$SHM_LOCK(r3, 0xb) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000001780)={0x2b, 0x9, '\x00', [@pad1, @ra={0x5, 0x2, 0x4783}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x5, 0x40, [0x6, 0x49a, 0x4, 0x8001, 0x8, 0x5]}}]}, 0x50) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x30, 0x8, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r10 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001940)=[@textreal={0x8, &(0x7f0000001900)="b8ff048ee866b90208000066b80600000066ba000000000f30de25660f646e5d0f01c464f30f5e22baa000b039ee660f3822c50f01df65660f382a13", 0x3c}], 0x1, 0x20, &(0x7f0000001980), 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) close(r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={r4, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001b00)={'syztnl2\x00', &(0x7f0000001a80)={'gre0\x00', r11, 0x80, 0x8000, 0x0, 0x1ff, {{0x14, 0x4, 0x3, 0x6, 0x50, 0x66, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@generic={0x86, 0x10, "c6c16b2d75d368672adb2825d195"}, @ssrr={0x89, 0xf, 0xce, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}]}, @ssrr={0x89, 0x1b, 0x25, [@private=0xa010102, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102]}]}}}}}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001bc0)={'syztnl2\x00', &(0x7f0000001b40)={'syztnl2\x00', r11, 0x7, 0x8000, 0x3, 0x9, {{0xf, 0x4, 0x2, 0x4, 0x3c, 0x68, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@rr={0x7, 0x1b, 0x54, [@empty, @empty, @remote, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}]}, @noop, @generic={0x1, 0xb, "23a883cfe1d8c9fd59"}]}}}}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c00)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 4m40.390293489s ago: executing program 1 (id=2440): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="940ccd", 0x3}], 0x1}, 0x4c810) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) close(0x3) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = dup2(r5, r5) readv(r6, 0x0, 0x0) write$P9_RREADLINK(r6, 0x0, 0x0) io_uring_setup(0xadc, 0x0) unshare(0x22020400) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r8, &(0x7f0000007700), 0x318, 0xfc0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$igmp(0x2, 0x3, 0x2) 4m37.617201336s ago: executing program 1 (id=2452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x100000, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac02}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 4m37.017861345s ago: executing program 1 (id=2453): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89802) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40048d0}, 0x40000) 4m35.88579946s ago: executing program 1 (id=2457): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000007c0)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) socketpair(0x1e, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000480)={0x24, 0x23, 0x400, 0x70bd28, 0x25dfdbff, "", [@typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x24}], 0x1, 0x0, 0x0, 0x55c2499837e1ced9}, 0x24000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4m34.944680707s ago: executing program 1 (id=2459): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x4000000) 4m33.87226366s ago: executing program 32 (id=2459): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x4000000) 8.684980531s ago: executing program 0 (id=3246): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000640)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = syz_usb_connect$uac2(0x2, 0xe3, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x499, 0x103e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x4, 0x0, 0xe2, {0x8, 0xb, 0x1, 0x2, 0x1, 0xa, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1000, 0x51cf673d6d534092, 0x32, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x9, 0x0, 0x10, 0x4, 0x1}, @multiply_unit={0x7, 0x24, 0xc, 0x4, 0x2, 0x9, 0x2}, @sample_rate={0xb, 0x24, 0xd, 0x2, 0x1, 0x6, [0x1, 0x1]}, @sample_rate={0xf, 0x24, 0xd, 0x1, 0x2, 0x2, [0x2, 0x2, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xb, 0x81, 0xb0, "9ab883dd12"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x1, 0x0, 0x8}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0x5, "bd02fd54caf566"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x800, 0x80, 0x6, "c060"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0xa9, 0x1, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x1, 0x3f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf, 0x4, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb, 0x6, 0x5, {0x8, 0x25, 0x1, 0x2, 0x0, 0x5, 0x3ff}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x3, 0x3, 0x9, 0x40, 0x1}, 0x28, &(0x7f0000000380)={0x5, 0xf, 0x28, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x81, 0x8, 0x7, 0xff}, @generic={0x15, 0x10, 0xb, "4a4606474153c3465d6eb7405d51b75c04f3"}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac2(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x20, 0xd, 0xcb, {0xcb, 0x2, "355285cb7bef6c7497a1cf9f86962348a4582024706f9aa68e0b04a690760b276242c0936093cb6aa2125fc72f4ad896caf5e28b8f9d4e1517e37b04f129c20fc86e6c612b8cb6e37397117987e58ec515257df55f3115715da91ba18407bc828c686c0ae7e09fd31fe126267f7b445133f13c25d5f1be59cdc480fcc67ffd4e6f575fa841b0b5e854c5e40db8988fc166833caef60db26809a9b319e88ad86a19982079c41712d3a808f6f0c560bb40f46fb13238b67801a0e4369cd28851d55c4ddcc71169613513"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000ac0)={0x20, 0x0, 0xfc, "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"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000c80)={0x20, 0x81, 0x2, "4ecb"}, &(0x7f0000000cc0)={0x20, 0x82, 0x2, "e937"}, &(0x7f0000000d00)={0x20, 0x83, 0x3, 'B\'X'}, &(0x7f0000000d40)={0x20, 0x84, 0x4, "4cdfbd51"}, &(0x7f0000000d80)={0x20, 0x85, 0x3, "fe4e55"}}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r2, 0xa43c}, {r1, 0x4221}], 0x2, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002240)={0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000017c0)={0x44, &(0x7f0000001500)={0x40, 0xc, 0x7, "c8db73e80b9d7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.682371118s ago: executing program 5 (id=3247): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x3000) close(r0) 7.629355623s ago: executing program 5 (id=3251): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002f00090025bd7000000000000c00000000000000", @ANYRES32=r1, @ANYBLOB, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20042814}, 0x4080040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000004c0)={0xfffffffc, 0x0, {0x3, 0x0, 0x1, 0x0, 0x4}, 0x3}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000001900)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}, {0x5, 0x4, 0xa, 0xaf, @time={0x8, 0x80006}, {0x1, 0xfa}, {0x5, 0xb}, @connect={{0xdd, 0x4}, {0xff, 0xa2}}}, {0x8, 0x0, 0x3, 0xd, @time={0x59, 0x4}, {0x6, 0x1}, {0x3, 0x81}, @quote={{0x2, 0xae}, 0x1ff, &(0x7f00000001c0)={0x0, 0x8, 0x2, 0xff, @tick=0x1, {0x1, 0x5}, {0xb, 0x1}, @control={0x5, 0x2ac9de70, 0x4}}}}, {0x91, 0x4, 0xc6, 0x1, @tick=0xe, {0x40, 0x80}, {0x6, 0x9}, @ext={0x1000, &(0x7f0000000880)="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"}}], 0x70) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_open_dev$loop(&(0x7f0000000040), 0x400000b, 0x161882) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x1c7d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2300000008000000020000000300000005"], 0x48) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400102, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)="b7bf585afe5146786ac3736cd9fad463d628ce0b7aaaa8df4d19f5a3ade13fe5fb518c84b50969e8c28b9e9a1ff8c0b4797c3208400a2cf117d02445957ec016389671991f138bbea543a4d61468635d6866f3ef08000000000000000ee7b5d95a95b52b562ce1977708139bce01002e6c0fbdf6171cb90b9dd5ea1e807c75fa38e398469a41874608652ad68d58bf64f7f2e4e01192a5c1864779ed8a3dc4bcbbc3042d7d17b52f3e31e0036c35d3f54b1ffee6475358a93d92d7885074ed3bbaf5c83ccd208794ce4619c55237ef38ed017c3c1551e49e084c8ae13ff1bf29c13369dc5267191ea5f27d5ff7b9fd0a37ccec7d5661d72c8725cd7dfd0f41e830c260ee6bd83fcdb3d3365bfc68aa921b174cc4d4b2300a9ce16ed9a08a7bda454bbdaa57de87c35cfd5738d94fce0bfa9447adeb1cfe598d8058478beffcd758b6b55e31fd878fb30e", &(0x7f0000000340), 0x4007ff, r6, 0x4}, 0x38) ioctl$FITHAW(r4, 0xc0045878) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r10, 0x0) 7.107526438s ago: executing program 4 (id=3253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0xfff, 0x5, '\x00', 0x13}) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000680)={{0x9, 0x5, 0xf7, 0x5, 'syz1\x00'}, 0x0, [0x7f, 0x4, 0x400, 0x2, 0x9, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x0, 0x7, 0xd11c, 0x0, 0x29, 0x1eff400000000000, 0xc127, 0x10000000003, 0x400, 0xa7e7, 0x0, 0x28, 0x22, 0x4, 0x2b, 0x0, 0x100000000, 0x10, 0x5, 0x3, 0x2, 0x3, 0xffffffff, 0xe6, 0x90, 0x7fffffff, 0x3, 0xa, 0xfff, 0x6, 0xb5a, 0x0, 0x2, 0x0, 0x80, 0xf, 0x8000000000000001, 0x0, 0xa, 0x5, 0xb40, 0x2, 0x3, 0x3, 0x71, 0x8, 0x1, 0x200000000, 0x0, 0x9, 0x9, 0x3, 0x7fe, 0x4, 0x0, 0x8c, 0xffffffffffffffff, 0x2, 0x7f, 0x2, 0x6, 0x3, 0x9, 0x1, 0x9, 0x3, 0x800, 0x5, 0x3, 0xb947, 0x2, 0x8, 0x80000001, 0x2, 0x54, 0x3c, 0x5, 0x4, 0x3, 0x7fffffff, 0x26c9, 0x9, 0x10001, 0x8, 0x400, 0xf, 0xfffffffffffffff6, 0x10001, 0x14, 0xffffffffffffffff, 0x6, 0x6, 0xcb26, 0xa, 0x100000001, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0xf2, 0x9, 0xffff, 0x5, 0x76, 0x8, 0x8, 0x1ff, 0x6, 0xffff, 0xbe6, 0x9, 0x3, 0x3, 0x5, 0x2, 0x401, 0x6, 0x5]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x1, r0}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rt_sigsuspend(&(0x7f0000000000)={[0xc0]}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/184}, 0x20) 6.550097484s ago: executing program 5 (id=3255): openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000300)}, 0x20) (fail_nth: 2) 5.838325236s ago: executing program 4 (id=3257): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="90"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (fail_nth: 14) 5.818157877s ago: executing program 0 (id=3258): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x7) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000180)=@other={0x20300002000006a5, 0x0}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 5.700542888s ago: executing program 4 (id=3259): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x58, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x3c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}]}]}, @CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000300)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)='=', 0x1}], 0x1, 0x0, 0x0, 0x80}, 0xc051) setsockopt$inet_int(r10, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r10, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) 5.431709852s ago: executing program 5 (id=3261): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x110000, 0x5, {0x77359400}, {0x2, 0x1, 0x0, 0x2, 0x0, 0xa, "75ff52b2"}, 0x6, 0x2, {0x0}, 0x7, 0x0, r7}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xffffffffffffff9e, 0x70411, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000000000000a00000000000002ff01000000000000000000000000000108faffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000020200000a004e240000000100000000000000000000000000000000000400"/200], 0x190) 5.291276768s ago: executing program 2 (id=3262): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x2, 0x2, @thr={&(0x7f0000000480)="bf007fb6d78ca86e3d5ea96b3a6cfb5f374011466bd42221a7f37aa7b04c85717fbf4bcf3914545bfead2ba607b1cf0616dd70aecfbf3fbbb5f9a0309453facd8592e80efc9ccc4df1a09bd1169091594ff5bdc1fb464de72648d8014e230ed4385b5ec332d884ed8250fffcc41d8a37cbee69a968843c2bdf5cd750bb70d98f9446cc86ab6862c2a20e0d09114fc3b901ca9b85058ce14c765d3ba60217f3dd8b97405b0fa4a2b68c372bf18cd9ce2e979623e75077e58ee20d6e0ac4081f21a1e40a8707504e48cdfc4e014ccf7183f02b337893f2004f4a4ead242b988701ec4834ea14a89a66a3c7e7a87554dab0dd9b54c8b5469d45ab1942e0f476c520a4915e6767a32e65aea7c401bd094297b3a401061eac50e37f390d634030ce9df70d5de3682987406fa126a51835dd3b8a05abf8140ce990c311ff8f3b57c0e76d0df0cba50112193599", &(0x7f0000000340)="fea6f2b9d1fbd3b48509c1b77f483b7ff7dc25464ccd68ec373deca327b62cb9bf246f9d1064ad7afc6381351fee770dd6c26e5679116c4b0cdd700c1bb6556b12b821703b0fa7c7b41424fec62c934a9e384503682a634e32b0bda8d652b38912e5591303fff81defe2886cb0e8f3e49f97c770f05d536329f4e97972fee7d3f3305ac431b0737cd4d8"}}, &(0x7f0000000440)=0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x11, 0x300, r7, 0x1, 0x0, 0x6, @local}, 0x14) timer_getoverrun(r1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000083000/0x2000)=nil, 0x2000, 0x1000002) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r9 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_create(0x5, &(0x7f0000000180)={0x0, 0x1c, 0x2, @tid=r9}, &(0x7f00000001c0)) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) writev(r10, &(0x7f0000000640)=[{&(0x7f00000006c0)='.', 0x1}], 0x1) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000080000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000001c0008800c0002400000000000007fff0c00014000000001000000000800054000000000140000001100010000"], 0xc8}}, 0x0) setsockopt$inet_tcp_TLS_RX(r11, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "d53804e20d88b80e", "9ac29ce32a4f55788cbe1895a35e4b38", "f21d519f", "4e8f40c22a2f63f5"}, 0x28) 4.937931099s ago: executing program 0 (id=3263): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="010d2bbd7000fddbdf2507000000080001007200000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x4000801}, 0x4004840) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x28, 0x4, 0x0, 0x3, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x7}, [@typed={0x8, 0xa3, 0x0, 0x0, @uid=r3}, @typed={0xc, 0xe0, 0x0, 0x0, @u64=0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x404c000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000300fed3000000000000000000200000003414000200febc"], 0x64}}, 0x4008000) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000f000000f2a71a2b74e1130548dad54644c441a7ff0ddecb72b7e6533556fab09e09f0aa9103b38f0c000000ba31a0696d8f52a49a1bfbeb4eccee38bbfab8204e5d01d9546618e519ae4bc8f09ce901b47fe4", @ANYRES32=r5, @ANYBLOB="0100820905000c0006000000080001007f0000010600060046220000"], 0x34}, 0x1, 0x0, 0x0, 0x18050}, 0x4040880) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="90"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 4.826522587s ago: executing program 4 (id=3264): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x882) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x3, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) socket$inet6(0xa, 0x4, 0x15278441) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmmsg(r5, &(0x7f0000000fc0)=[{{&(0x7f0000000340)=@ll={0x11, 0x1b, r3, 0x1, 0x42, 0x6, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="0745509fe994f535cb2c6ac903a33ad02d18775d883eea20575572f9b2a6c7f907f7853f886a79a9bf1b16", 0x2b}, {&(0x7f0000000500)="85b1022a41ee93c3db81e04cc75a5c84308a49c40ea22563e3f870051a0e2e96dc6baafe402923b0a1ae92f15484d5705b99ab6e6572c693f8f91a787c28a11d727886c8053a80cf995f603adc", 0x4d}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000029000000030000008398630077ff94ee48000000000000000600000088000000071e10fd8f80ca24d075e67d2f012fe289981258c8753f91ecc00f83bb2b6a248405408ee1660ced499a00b48181bf42f2021a21ce000000900000000000000009010000ff0100001b0b2b37932458c54b3004f689bff044190e4a5e2a7e993aef28ccba5207571461224c13d31e8625b1e4cf1fda90ca769ff7952c2885a09d755454ab01f75dd8776a2c130185bb13f48b170aa5fe9d1ef5a46378116cb2433e29f4284842be95132c073bc49e"], 0x1b8}}, {{&(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x1, 0x3, {0xa, 0x2, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="9afd048a611c07a1b3763584b037f8feb0fb8eccdc6846624d6081568848c21496d864000000000000f7cdfb992735118dcd95fd420868cb04d73c6d80c9f4c29be9f784d7b8250600000000000000a728f8a2526e0954bbbc5c3521849259b9af640caa2109d81aa2469756158d030249e08b772ffb6bc1ad758b2eafe3cbad8df0f952da6ba12c8b1dde73892e42e87e3b4a4693b976c446294f674600"/172, 0xac}, {&(0x7f0000000a80)="e4e9787972f604585c0738b0956174cf6baf8ad342a5b666a244bfa266a937aa8a10abb98da16080581e555490346f66e26bec97faf7acb3efb00548c2cec2be29226bf2ebf79e06ce414226edf1955aa9692e74b78688d83b30059352387258de0d1effff8cee9fb1c3397db9c3ef19e3e70d44006c5625ba005a2fc6dafd421a09beb388170bfa03d5ecd436c82d54ecf9eecc1fed39ea026294d9ae0f137f68cf717e01d106fafc09803f760d1ef38f55773d", 0xb4}, {&(0x7f0000000b80)="ac39fbe9a242dcf6376873f7d56bf1714974bea7940d310b", 0x18}, {&(0x7f0000000bc0)="3483746891710ef34af0f88d120366fd1412f15a6cdff251c3f9a45897d10e000aa2a0ea90b60f3caa2eeede0082b22192347bb0f91b1b769ae50d8d1765b636a22ff00b396fddf103c5c4d871ea5a00bca9c463bd69e1280407ffb0644e77c884d6a1c58b99424374b8d461e1fba8a2f0a1647cbbf0c0d6a511a900842aee025c37655b688aba686c9939690b3cb7b9aca377a8d1e7feb500933cc710132fd6b299749c707025f43655b632f508303a04d9fb5cd5b7c59e7078da5f3750e876d5ff802eaf391c46250b3b1ef7532e0c3dddf147f50a1479f271dd912879610e598308d31c17d9aaf4422eaaddefcab0b2c1550aa49d83f121207b", 0xfb}, {&(0x7f0000000cc0)="d8b9789ffd6394c4b7d81363516a672d101454ee33d8753c9217cb65933e246919f454165cd1e5e30eedbc84a719e3c580f1cbb73090e4e2907bded6b90bbd730ce0647ab3b7fb40afd4ec4d2b36dc7fab53e59213d983b2e1d3f55c22cc102280bc758c1574ee91ac86de6ba9436f06b421002f61b2714427e3a3f410f2b6358bdc125683d06852ebb88358005a06ccecbcc51a6187c65a76b20672677bab3129a94f064de0d6469f853ed8ce6ccca36567480b7881ba6f70b1e3d6077a6b72c2f42a1ebce26a19b832f49632dbb96617c27318198aed63c1", 0xd9}], 0x5, &(0x7f0000000e40)=[{0x100, 0x3a, 0x3, "36c12a01b2dc74402601287021d9ecd8449a19aab0ef3f382b1d65d7cea550aa82e28ca5443795b753b694b15931dd6cfde21cc77a0a25940ba5d5f0c3f3d394dcb57dd4733598ebbcf82251ae11d53564876f85188f262963c9827fabed64493d1dde791e21b3af4326e603b5d06c24006fff5669fa7f37c25d7bdfd759faa54b92a52cc3edea35cf771f95ce66e68154e1e2707f83c341147d06bfc4a019f1688181d11292d3117569571d118e077cec83c8869e90e518bfbc028fecb5269af7a34b7a78ca4ad9660632e652146a0b4ab76ea38d3d8833bb446ce93eead1031bfdb2e469b838e87513"}], 0x100}}], 0x2, 0x4000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f40)=ANY=[@ANYRESHEX, @ANYRESHEX=r3, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES16=r3, @ANYRES64, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000804) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r7, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e1f, 0xfffffffe, 'sh\x00', 0x11, 0x10000004, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'sh\x00', 0x23, 0x81, 0x3e}, {@loopback, 0x4e23, 0x10000, 0x1cb, 0x12d65, 0x90c}}, 0x44) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000000)={0x30a32c0, 0x2, @ofdm={0x1, 0x1b, 0xc, 0x1e, 0x3, 0x6}}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.512035346s ago: executing program 0 (id=3265): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bfc, 0x1, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) r4 = dup(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES32=r5, @ANYRES16=r0, @ANYRESHEX=r5, @ANYRESHEX], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004000240"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x80) 3.764851532s ago: executing program 3 (id=3266): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c0006"], 0x34}}, 0x0) 3.701249362s ago: executing program 2 (id=3267): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xc8, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0x0, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x0, 0x7, 0x1, 0x0, 0x2b}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xfffffffffffffeaa, 0x1, 0x1, 0x0, 0x101}]}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000580)='yeah', 0xffffffffffffff70) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) shutdown(r2, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/notes', 0x82000, 0x0) getsockopt$inet6_int(r4, 0x29, 0x13, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x2, 0x0, r7}) 3.346085685s ago: executing program 3 (id=3268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4043, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e8133) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 3.080543434s ago: executing program 2 (id=3269): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x200, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xa, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x0, 0x2e, 0x9, 0x0, 0x0, 0x3, 0xf258, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) getdents(r2, &(0x7f00000000c0)=""/29, 0x1d) getdents(r2, 0xfffffffffffffffd, 0x58) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)="914c", 0x2}], 0x1, &(0x7f0000002380)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x40000}}], 0x1, 0x20000000) sendmsg$unix(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="cc", 0x1}], 0x1, &(0x7f00000011c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x840}, 0x4000011) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=0x41424344, @ANYRES32=r0, @ANYRES8], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000200)) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/124, 0x7c}], 0x1, &(0x7f00000005c0)=""/141, 0x8d}, 0x40000000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) r9 = getpgrp(0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0800b500", @ANYRES32=r9, @ANYBLOB="7207e97ceaa288ca94fc7bc44a29dce1f0233c00f60b6fe498e8d44e4d13dbfe780fff7c561a92346e50da0eff3b6101db912dbba5411c185ee89241cabd4d38898ea9dde4ce52603e36dc4b84741a82a1e94159f1b2e8a7a84a0b590b238c3a6359435be62a0f43d93550f03657aff0d248496781b3c6141e10395e794411b7dcb85d437067915b1c698ba09a0e07528f373942689bbf994a8c7da8dda88d4de9e03832ab7e20624601509570ebd028b0dc44fac97050000000000000000000"], 0x284}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) ptrace(0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x2, &(0x7f0000000980)="cd6fa1d1839978de85e2809882a3713be979d5a5a19255ba8ba7d5f1c72c1aa15f841a770a585c63dde13ba26d9d25ac268ea5ffde5fa73f6d5c55a15e6e2c1067e392a93b95bae460b21f50c300c95b181533923eee41cf97e991196ff47dad4dbbe69021b39181a0302186b10b68534993820f0cc22dde380727e5df927221db07061547219e17e7") ptrace$cont(0x20, 0x0, 0x200, 0x7) ptrace(0x21, 0x0) 3.04044565s ago: executing program 0 (id=3270): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x200}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000f0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000061c000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00007c8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newspdinfo={0x2c, 0x24, 0x1, 0x70bd25, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV6_HTHRESH, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x50}]}, 0x2c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvfrom(r5, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000000000000000119078000000000000000000090020000c907801400001"], 0x0) 2.869273265s ago: executing program 3 (id=3271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x3f}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x40004) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 2.612333545s ago: executing program 3 (id=3272): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x0, 0x3631564e, 0x500, 0x2cc, 0x1, @stepwise={{0x10001, 0x6}, {0xfffffff7, 0x8001}, {0x7ff, 0x9}}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x16) r5 = socket(0x18, 0x2, 0x5) setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f00000000c0), 0x4) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x0) tee(r7, r6, 0xff, 0x0) pipe(&(0x7f00000002c0)) write$P9_RRENAMEAT(r7, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1409, 0x720, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="929da2cf636d3a000000ff0f000000", @ANYRES32=0x0, @ANYBLOB="03000000000000005400128009000100766c616e0000000044000280280003800c0001009f000000070000000c00010002000000ffffff7f0c00010003000000ff0100000c0002000b0000000700000004000380060001000300000008000500", @ANYRES32=r8, @ANYBLOB], 0x7c}}, 0x0) 2.417536678s ago: executing program 4 (id=3273): syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x4, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a24010f3b00080000000d240706050a4000000700000013"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r2, &(0x7f0000002ec0)={0x2020}, 0x2020) pread64(r2, &(0x7f000001a240)=""/102385, 0x18ff1, 0x2a) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvfrom(r2, &(0x7f0000000000)=""/128, 0x80, 0x60, 0x0, 0x0) 1.961609156s ago: executing program 2 (id=3274): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x0, 0x2}, 0x1) 1.694524833s ago: executing program 0 (id=3275): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x3, 0x9, 0x1, 0x0, 0x9, 0x8, 0x9, 0x5, 0x6, 0x12, 0x81, 0xff, 0x0, 0x10001, 0x3ff, 0xfe, 0x7, 0x0, 0x1c, '\x00', 0x0, 0x7fff}) r2 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000600)={0x88000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/40, 0x28, &(0x7f0000000500)=""/192, &(0x7f00000005c0)=[r2], 0x1}, 0x58) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x80086303, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400280012800b00010062726964676500001800028005002a0000000002000023000800000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x0) 1.479963757s ago: executing program 3 (id=3276): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$can_raw(0x1d, 0x3, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8880) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x130, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0xde, 0xd, 0x1, 0x0, "afc11757d3eaaa2597bae1df03b6de2ac59ab527eca8f79233d6f0431a9d7bf57569bc1f2277e3148e711e7e7652163e573f793d06de636c4dbe3ec97724dfaea18ac9a24a6221605af996e5ce4afceac5dc4246906a7ac43fa382e36e33e40644c653c9b12fe77e7696a98cd40e3fa88a0920d42f15377c76e2010d8e21a56a0c72f51f45bf0d35e59f2df02742ba6c762c6f7c1e3b8ae4ade5c3d75789f8106b9d6f024bf03c542095f53a29289001da6c15bec195e2265cd345ba027d36b840a24bd7d47769181f35546b3a2362dbf718f1c93e3bc5695f8a"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x99cc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x178}}, 0x40) sched_setattr(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000040)=0x4, 0x4) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) socket$inet6(0xa, 0x1, 0x10000) 625.628398ms ago: executing program 2 (id=3277): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000000)={[0x7]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000cc0)={0x460, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfcd}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008081) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0xa, 0x0}, 0x18885) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) 625.246914ms ago: executing program 5 (id=3278): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c0006"], 0x34}}, 0x0) 307.894452ms ago: executing program 4 (id=3279): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd70f7ffdbdf25090067bd093e79dc7adf0680195105ddd5e8347b36e31942003946cef829255f351d7126d9d149c5ebd87e4f99a1b7be9dd6d8d6a7aa158239093dde10f37004909e"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @remote}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "4fef618ea18e8c888c1300b6c31a91bf543a5b210faa858bdc3ea5fd1a27e574", "60375bbe7299f0240a9ecd68e377309c973c805ad3847f4e37d2a04da9f684104ca7725eae1ac3386070bac85512f9dc", "985e745be72e228b5df586b02ebb6b25ca886c76ae9d4de8c7dd7650", {"e8682e634be5300755967a0b00d3193c", "8679e137108d41a6a3bf9b5b5e1cbe70"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf6ff) syz_usb_connect$uac2(0x3, 0xa2, &(0x7f0000000340)=ANY=[@ANYBLOB="120100030000002035121000400001020301090290000301000002080b0101010a20020904000000010120000924010700063000b2092407030300027f950b240606030900020004000c24030304040606038100801e240802"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fddbdf25010000000900010073797a31000000000900030073797a30000000000900010073797a320000000005000400010000000900010073797a32000000000900030073797a31000000004fd4fe0b6e5e55d765cd76982620aaaa1f98862aae5d2496a4312469fb22b8964e16d04f0d32680db9269d0aceffd262cd45ff"], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x801) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ptrace(0x10, 0x1) 200.553799ms ago: executing program 3 (id=3280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x84) unshare(0x6a040000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(0x0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0xfffffffa}, 0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000002c0)) keyctl$clear(0x7, 0xfffffffffffffffb) socket$inet6(0xa, 0x3, 0x88) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) 47.218395ms ago: executing program 5 (id=3281): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl(r10, 0x4048aec9, &(0x7f0000000200)="060000000000000000000000007f00"/72) ioctl(r10, 0x4048aec9, &(0x7f0000000300)="0600"/72) ioctl(r10, 0x400caed0, &(0x7f0000000100)="0100000000000000ffffffff") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 0s ago: executing program 2 (id=3282): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0xb8f5, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="a69dbe2bd072788347ead53d2dd059f78163cf36d28a302d54998cbd498286238ffe6e8a5e8f8d511c32c691f3da960649c8a6ac7906e00e824899c24902f3b37e50bdadbecb46f97709fb6a927b00bc8649", 0x52}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000002900000043000000020000000000000014000000000000002900000043000000f10000000000000014000000000000002900000043000000020000000000000070000000000000002900000004000000110b0000000000000001000750000000021200010006000000000000000b0000000000000006000000000000000001000000000000c80f000000000000b80000000000000005000000000000000500000000000000030000000000000000010014000000000000002900000034000000020000000000000024000000000000002900000032000000fc000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="000000001400000000000000290000000b00000000000d11000000003800000000000000001b04010800000000ff020000000000000000000000000001fe80000000000000000000000000000f1400000000000000290000000b0000008000000100000000"], 0x160}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)="7837dfb8d840513368fc7b1822b86530aefd9629808a6db43911cb0e445319a458ffa65a86f272f7d0d4c7428316c5f84d6e0a32978a3c6410d1c7fccb97886a3d14b3b0803489d0ab2bfcd91108526d9e298a245bc23dd2308878b4a1e7cb0675b68e6debb19c156e757fc86308889040250b243b6895895a12628b995b0c859fa603d15330cad65576023abe452dc8d73d2ea8bf97e680a4f7b1890de19cbe9568882fc62e7e894254e8c5a57bb60a74545ea714e6c852f710829bd7bd3c94abef70b3b3", 0xc5}, {&(0x7f00000007c0)="d4fb921f23a0fa30656110df2df1baacd9c97714a905bacda750da7f277094def4bee61450c9de7f3dfb925b271b90d6d3d3bd107d5371b209a4f534b5d55f526e96250049f461d0d23a6c338fe9d705c91c2d1d8eff92e9cbf566fa", 0x5c}, {&(0x7f0000000840)="ddc091e5805d7b219c82ab9b9de24799a59977add677dc4bddf6643d181177d8256899ab286e16bf909e363e5fa41a8c", 0x30}, {&(0x7f0000000880)="d9e74c4f50f46b03e94218ed56f58908f6277a1a15113828c7fd54886b89f7104737d2425b6029b351004472b4c941e9db429a917656dc56af4f2950496f8531bda3e8ff4ca19bf4d30da98bdb147c60dde735ca8857647a9a90", 0x5a}], 0x4, &(0x7f0000000940)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x1, 0x7a, 0x0, [@mcast2, @local, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x4, 0x6, 0x0, 0xad, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @private2, @rand_addr=' \x01\x00']}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a00)="9b0f2894033fb3a3731238c17614caee04cb25177a7a764a16ac04defc616d69bc12003a142ae0fdcdd7d78ef29306b17fe8e29e6bfb6be5aeea5c603619e1ee557511053679929f19cb3d6aab691d4f29aa2cdc37c87dee179ff64df4c0cd73fca0b27ffef2012c6acc86a2900755173a7a94be6d10df834eefc6803b5dbe52cb4d973aa8cf33e6e98a80d7c59b08e6a6d922fcb46b8f063083b321f49a810bceab3b6ceacb26182fd0e75d0b9df5147ecf00d1fe0ef3e886425a8116bcaae73e22d1f0c4303f4601dad7fedfe4f819dc6d3b7839a9e1fe3617b337bfd5c5506e0dcbebf3", 0xe5}, {&(0x7f0000000b00)="57e02790b53ab0f0fdacfc90f0bfc8b3918da05d180c79f0fba75171bfbc86336ad6105470ed8394bc594cbc40f2af67566604949572a6e911a5c5567ddb8a56770867b1b7c6d88212c1cdcee165055f253e6cb683b07a1a0249c661db678ec60dca7a32340ad6f26ba9e6c40fda6fc655ee2a90d9428e1e991e0bfdae7234b17d0177fc1710edeb02fc339b4af459fb8431fd636221ecd574b69c304119ac7c6596886c19b30a95caa89975300d0c4bf86162a6405e463155bd", 0xba}, {&(0x7f0000000bc0)="eaa9efab4b1076734f7469571efc30d7eeb468301c27dce713941c8f99e4120926d5f03d0fade3782604e2ba817d311a78823f8b748fa13fc9c03bb36de491548f593127876023bdf19368396d596d87e7cb4764e2bb3c0c16189826c83554f56b5a5971fc35e88836e894395b2b5da5e282f875de5be2ebfe3096c3aff2509a6dd5964fb8d06357ac226d8735c180618f73d3968718aab01eb6", 0x9a}, {&(0x7f0000000c80)="1c240f65306381f8142448ae07a6b568942f8968bc7e0e104257332cef7202933ee903c27de2d98dafa1a4a33193e9be35857725bd4b5d82df745d8479a9fe033647c62bf226d35cbff0f669d36cbd5754072bacff5b66c1f6bf85fba1600adbadcfefc3ad251735cb0e0f5dae70db8199d07b18d8c18fa198043641c2710a0a9efb22d91a1f35b6bfb7e33c2bcf9723575223e9a924e0038fe8413679cf3052bb26004e5f6bca0c4b543c48b06614d66998fce49689b5daa955bd3ffc621374d94438adfffa184c3fc6da012a9767269a3362e954e19ccb7d4ba5331e27b60a4cf08ee4", 0xe4}, {&(0x7f0000000d80)="4ddd3bc6e4170c03fe272cf97b6b0cad03f090391cfc907a5321b5789b4acab4be18cee5610fb44fdf750de4d819c1f122552d31c29f034e06d954ec109b26551e65b344b7c0abcb4e507edcb32ad448dd2145144a8c4339af15b261027b3453c433973a35078c6bcbd117accb8b17643f1342a17083d5b684b82f6eb9730d25e1f42ac95cee0d0af1a0bdaa5e8a021342c6a5519e7b478ee77f4843b0c956c2069eaf15242dc46d3ea6e8ef7bd59f50331a21d9d012a0853454986bcf650fba6970a99b4ccc4477c9c8eb340c9957cd2cb28b", 0xd3}], 0x5}}], 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8040480) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40942, 0x45) fallocate(r4, 0x0, 0x3, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) kernel console output (not intermixed with test programs): T7719] usb 1-1: Manufacturer: syz [ 915.004915][ T7719] usb 1-1: SerialNumber: syz [ 915.008413][ T7715] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 915.008466][ T7715] cdc_wdm 3-1:1.0: Unknown control protocol [ 915.159124][T16219] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 915.159158][T16219] tipc: Enabled bearer , priority 10 [ 915.291919][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 915.429442][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 915.476760][T16227] tipc: Enabled bearer , priority 0 [ 915.478487][T16227] syzkaller0: entered promiscuous mode [ 915.478510][T16227] syzkaller0: entered allmulticast mode [ 915.518076][T16227] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 915.532176][T16226] tipc: Resetting bearer [ 915.555211][T16226] tipc: Disabling bearer [ 915.577465][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 915.610096][ T7741] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 915.713316][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 915.771052][ T7741] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.775707][ T7741] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 915.775738][ T7741] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 915.775775][ T7741] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 915.775813][ T7741] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 915.775840][ T7741] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 915.778577][ T7741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.778601][ T7741] usb 6-1: Product: syz [ 915.778616][ T7741] usb 6-1: Manufacturer: syz [ 915.778631][ T7741] usb 6-1: SerialNumber: syz [ 915.849882][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 915.882122][T16225] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 915.937496][ T7719] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 915.937976][ T7719] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 915.989474][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 916.073856][ T7719] usb 1-1: USB disconnect, device number 50 [ 916.111296][T16225] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 916.129344][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 916.212625][T16231] udevd[16231]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 916.321307][T14495] usb 3-1: USB disconnect, device number 11 [ 916.331663][ T5698] tipc: Node number set to 1392533294 [ 916.409367][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 916.437254][T16184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 916.464194][T16184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 916.467597][T16184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 916.485719][T16184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 916.486401][T16184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 916.507996][T16184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 916.508278][T16235] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2993'. [ 916.508293][T16235] veth0_to_bond: default FDB implementation only supports local addresses [ 916.527022][T16184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 916.554834][T16184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 916.591442][ T4936] Bluetooth: hci5: command tx timeout [ 916.679333][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 916.711223][T16184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.738177][T16184] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.747403][T16225] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 916.764424][ T3381] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.764509][ T3381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.808193][ T3381] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.808316][ T3381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.935949][T16184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.001418][T16246] netlink: 5664 bytes leftover after parsing attributes in process `syz.2.2994'. [ 917.060068][ T7741] cdc_ncm 6-1:1.0: bind() failure [ 917.152549][ T7741] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 917.154886][ T7741] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 917.176382][ T7741] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 917.210822][ T7741] usb 6-1: USB disconnect, device number 29 [ 917.245341][T16184] veth0_vlan: entered promiscuous mode [ 917.305246][T16184] veth1_vlan: entered promiscuous mode [ 917.415491][T16184] veth0_macvtap: entered promiscuous mode [ 917.428903][T16184] veth1_macvtap: entered promiscuous mode [ 917.455503][T16184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.487559][T16184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.549849][ T8402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.550096][ T8402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.550124][ T8402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.600500][T11228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.028985][ T8396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.029007][ T8396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.186812][ T8396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.186829][ T8396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.270958][T16266] FAULT_INJECTION: forcing a failure. [ 918.270958][T16266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.270984][T16266] CPU: 1 UID: 0 PID: 16266 Comm: syz.2.2999 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.271007][T16266] Tainted: [L]=SOFTLOCKUP [ 918.271012][T16266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.271021][T16266] Call Trace: [ 918.271027][T16266] [ 918.271034][T16266] dump_stack_lvl+0xe8/0x150 [ 918.271063][T16266] should_fail_ex+0x410/0x560 [ 918.271086][T16266] _copy_to_user+0x31/0xb0 [ 918.271107][T16266] video_usercopy+0xdf4/0x1430 [ 918.271130][T16266] ? __pfx___video_do_ioctl+0x10/0x10 [ 918.271145][T16266] ? __pfx_video_usercopy+0x10/0x10 [ 918.271166][T16266] ? __fget_files+0x2a/0x420 [ 918.271189][T16266] ? __fget_files+0x2a/0x420 [ 918.271208][T16266] ? __fget_files+0x3a2/0x420 [ 918.271230][T16266] v4l2_ioctl+0x18d/0x1e0 [ 918.271252][T16266] ? __pfx_v4l2_ioctl+0x10/0x10 [ 918.271277][T16266] __se_sys_ioctl+0xfc/0x170 [ 918.271294][T16266] do_syscall_64+0x166/0x520 [ 918.271314][T16266] ? trace_irq_disable+0x3b/0x140 [ 918.271330][T16266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.271347][T16266] ? clear_bhb_loop+0x70/0xc0 [ 918.271364][T16266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.271379][T16266] RIP: 0033:0x7f314af9e159 [ 918.271393][T16266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.271406][T16266] RSP: 002b:00007f314be42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.271422][T16266] RAX: ffffffffffffffda RBX: 00007f314b225fa0 RCX: 00007f314af9e159 [ 918.271434][T16266] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 918.271443][T16266] RBP: 00007f314be42090 R08: 0000000000000000 R09: 0000000000000000 [ 918.271453][T16266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.271462][T16266] R13: 00007f314b226038 R14: 00007f314b225fa0 R15: 00007f314b34fa48 [ 918.271484][T16266] [ 918.662715][ T4936] Bluetooth: hci5: command tx timeout [ 918.978840][T16289] program syz.2.3006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.249381][ T7715] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 919.382186][T16293] fuse: Bad value for 'fd' [ 919.433530][ T7715] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 919.462248][ T7715] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 919.462275][ T7715] usb 5-1: Product: syz [ 919.462291][ T7715] usb 5-1: SerialNumber: syz [ 919.490551][ T7715] usb 5-1: config 0 descriptor?? [ 919.829842][T14495] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 919.868299][ T7715] usb 5-1: USB disconnect, device number 47 [ 919.980244][T14495] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 919.985158][T14495] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 919.985184][T14495] usb 6-1: config 0 has no interface number 0 [ 919.985234][T14495] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 919.987225][T14495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.987248][T14495] usb 6-1: Product: syz [ 919.987264][T14495] usb 6-1: Manufacturer: syz [ 919.987279][T14495] usb 6-1: SerialNumber: syz [ 920.055134][T14495] usb 6-1: config 0 descriptor?? [ 920.080319][T14495] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 920.220749][ T7741] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 920.270925][T14495] usb 6-1: USB disconnect, device number 30 [ 920.291426][T14495] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 920.339378][ C0] net_ratelimit: 4 callbacks suppressed [ 920.339397][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 920.381207][ T7741] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 920.382504][ T7741] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.384696][ T7741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.384719][ T7741] usb 3-1: Product: syz [ 920.384734][ T7741] usb 3-1: Manufacturer: syz [ 920.384748][ T7741] usb 3-1: SerialNumber: syz [ 920.451026][ T7741] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 920.465898][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 920.506271][T16308] ipvlan2: entered allmulticast mode [ 920.618724][T16312] netlink: 'syz.0.3013': attribute type 11 has an invalid length. [ 920.740577][ T4936] Bluetooth: hci5: command tx timeout [ 920.840612][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 920.846965][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 920.867850][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 920.869493][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 920.886219][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 920.960432][ T7741] gspca_mr97310a: reg write [21] error -110 [ 920.960516][ T7741] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 921.079385][T16323] FAULT_INJECTION: forcing a failure. [ 921.079385][T16323] name failslab, interval 1, probability 0, space 0, times 0 [ 921.079420][T16323] CPU: 0 UID: 0 PID: 16323 Comm: syz.5.3017 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.079449][T16323] Tainted: [L]=SOFTLOCKUP [ 921.079457][T16323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 921.079470][T16323] Call Trace: [ 921.079479][T16323] [ 921.079489][T16323] dump_stack_lvl+0xe8/0x150 [ 921.079526][T16323] should_fail_ex+0x410/0x560 [ 921.079570][T16323] should_failslab+0xa8/0x100 [ 921.079599][T16323] ? skb_clone+0x212/0x3a0 [ 921.079623][T16323] kmem_cache_alloc_noprof+0xa1/0x600 [ 921.079647][T16323] ? skb_clone+0x212/0x3a0 [ 921.079672][T16323] skb_clone+0x212/0x3a0 [ 921.079696][T16323] __netlink_deliver_tap+0x413/0x860 [ 921.079728][T16323] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.079752][T16323] netlink_deliver_tap+0x19c/0x1b0 [ 921.079776][T16323] netlink_unicast+0x781/0x940 [ 921.079805][T16323] netlink_sendmsg+0x813/0xb40 [ 921.079825][T16323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.079844][T16323] ? apparmor_socket_sendmsg+0x18b/0x360 [ 921.079863][T16323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.079877][T16323] sock_sendmsg_nosec+0x13a/0x180 [ 921.079895][T16323] ____sys_sendmsg+0x54e/0x850 [ 921.079919][T16323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.079950][T16323] ? import_iovec+0x73/0xa0 [ 921.079972][T16323] ___sys_sendmsg+0x2a5/0x360 [ 921.079991][T16323] ? __lock_acquire+0x747/0x2de0 [ 921.080011][T16323] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.080055][T16323] ? __fget_files+0x2a/0x420 [ 921.080075][T16323] ? __fget_files+0x3a2/0x420 [ 921.080114][T16323] __x64_sys_sendmsg+0x1b1/0x290 [ 921.080135][T16323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 921.080167][T16323] do_syscall_64+0x166/0x520 [ 921.080185][T16323] ? trace_irq_disable+0x3b/0x140 [ 921.080199][T16323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.080213][T16323] ? clear_bhb_loop+0x70/0xc0 [ 921.080230][T16323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.080243][T16323] RIP: 0033:0x7f234d19e159 [ 921.080256][T16323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.080268][T16323] RSP: 002b:00007f234e132028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.080283][T16323] RAX: ffffffffffffffda RBX: 00007f234d425fa0 RCX: 00007f234d19e159 [ 921.080294][T16323] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000003 [ 921.080303][T16323] RBP: 00007f234e132090 R08: 0000000000000000 R09: 0000000000000000 [ 921.080312][T16323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.080320][T16323] R13: 00007f234d426038 R14: 00007f234d425fa0 R15: 00007f234d54fa48 [ 921.080340][T16323] [ 921.380879][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 921.964497][T16340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3020'. [ 922.429586][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 922.728961][T16332] [U]  [ 922.862228][T16321] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.862618][T16321] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.862753][T16321] bridge_slave_0: entered allmulticast mode [ 922.866402][T16321] bridge_slave_0: entered promiscuous mode [ 922.873118][T16321] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.874038][T16321] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.874373][T16321] bridge_slave_1: entered allmulticast mode [ 922.885423][T16321] bridge_slave_1: entered promiscuous mode [ 922.920174][ T7715] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 922.979929][ T4936] Bluetooth: hci2: command tx timeout [ 923.077110][T16339] fuse: Bad value for 'fd' [ 923.091999][ T7715] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 923.105049][ T7715] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 923.105116][ T7715] usb 6-1: config 0 has no interface number 0 [ 923.105236][ T7715] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 923.168702][ T7715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.168723][ T7715] usb 6-1: Product: syz [ 923.168733][ T7715] usb 6-1: Manufacturer: syz [ 923.168744][ T7715] usb 6-1: SerialNumber: syz [ 923.207376][ T7715] usb 6-1: config 0 descriptor?? [ 923.207906][T16321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.234098][T16321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.257033][ T5698] usb 3-1: USB disconnect, device number 12 [ 923.267883][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3027'. [ 923.296774][ T7715] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 923.439975][ T1227] usb 6-1: USB disconnect, device number 31 [ 923.444800][ T1227] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 923.469612][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 923.616262][T16321] team0: Port device team_slave_0 added [ 923.630143][T16321] team0: Port device team_slave_1 added [ 923.802984][T16321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.803004][T16321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.803218][T16321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.858764][T16321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.858783][T16321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.858812][T16321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.040920][ T1227] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 924.081297][T16321] hsr_slave_0: entered promiscuous mode [ 924.082706][T16321] hsr_slave_1: entered promiscuous mode [ 924.083438][T16321] debugfs: 'hsr0' already exists in 'hsr' [ 924.083456][T16321] Cannot create hsr debugfs directory [ 924.189384][ T1227] usb 3-1: Using ep0 maxpacket: 16 [ 924.190114][ T1227] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 924.194124][ T1227] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.194153][ T1227] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.194174][ T1227] usb 3-1: config 0 interface 0 has no altsetting 0 [ 924.194205][ T1227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.208603][ T1227] usb 3-1: config 0 descriptor?? [ 924.401455][ T5698] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 924.423824][T16376] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 924.509693][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 924.550620][ T5698] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 924.558560][ T5698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 924.558590][ T5698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 924.558625][ T5698] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 924.558694][ T5698] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 924.558722][ T5698] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 924.605470][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.605582][ T5698] usb 1-1: Product: syz [ 924.605621][ T5698] usb 1-1: Manufacturer: syz [ 924.605663][ T5698] usb 1-1: SerialNumber: syz [ 924.668092][T16373] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 924.693271][T16369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.693832][T16369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.740394][ T1227] hid_parser_main: 30 callbacks suppressed [ 924.740419][ T1227] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 924.740456][ T1227] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 924.740486][ T1227] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 924.740517][ T1227] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 924.740545][ T1227] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 924.741434][ T1227] mcp2221 0003:04D8:00DD.0020: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 924.872180][T16382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.878349][T16373] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 924.903163][T16369] FAULT_INJECTION: forcing a failure. [ 924.903163][T16369] name failslab, interval 1, probability 0, space 0, times 0 [ 924.903215][T16369] CPU: 0 UID: 0 PID: 16369 Comm: syz.2.3029 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.903237][T16369] Tainted: [L]=SOFTLOCKUP [ 924.903244][T16369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 924.903253][T16369] Call Trace: [ 924.903263][T16369] [ 924.903270][T16369] dump_stack_lvl+0xe8/0x150 [ 924.903298][T16369] should_fail_ex+0x410/0x560 [ 924.903321][T16369] should_failslab+0xa8/0x100 [ 924.903342][T16369] __kmalloc_noprof+0xfe/0x720 [ 924.903358][T16369] ? i2cdev_ioctl_rdwr+0xce/0x740 [ 924.903376][T16369] ? i2cdev_ioctl_rdwr+0xce/0x740 [ 924.903397][T16369] i2cdev_ioctl_rdwr+0xce/0x740 [ 924.903423][T16369] i2cdev_ioctl+0x6a5/0x880 [ 924.903439][T16369] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 924.903457][T16369] ? __fget_files+0x3a2/0x420 [ 924.903480][T16369] ? __fget_files+0x2a/0x420 [ 924.903504][T16369] ? bpf_lsm_file_ioctl+0x9/0x20 [ 924.903528][T16369] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 924.903544][T16369] __se_sys_ioctl+0xfc/0x170 [ 924.903563][T16369] do_syscall_64+0x166/0x520 [ 924.903584][T16369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.903606][T16369] ? clear_bhb_loop+0x70/0xc0 [ 924.903626][T16369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.903642][T16369] RIP: 0033:0x7f314af9e159 [ 924.903675][T16369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.903689][T16369] RSP: 002b:00007f314be42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.903706][T16369] RAX: ffffffffffffffda RBX: 00007f314b225fa0 RCX: 00007f314af9e159 [ 924.903719][T16369] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000008 [ 924.903729][T16369] RBP: 00007f314be42090 R08: 0000000000000000 R09: 0000000000000000 [ 924.903740][T16369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.903750][T16369] R13: 00007f314b226038 R14: 00007f314b225fa0 R15: 00007f314b34fa48 [ 924.903774][T16369] [ 924.907434][ T1227] usb 3-1: USB disconnect, device number 13 [ 925.073809][ T4936] Bluetooth: hci2: command tx timeout [ 925.364895][ T50] bridge_slave_1: left allmulticast mode [ 925.365120][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.372271][ T50] bridge_slave_0: left allmulticast mode [ 925.375599][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.539596][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 925.573436][T16373] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 925.816696][T16390] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3035'. [ 925.821815][T16392] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3035'. [ 925.865964][ T50] pimreg: left allmulticast mode [ 926.579357][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 926.675994][ T50] batman_adv: batadv0: Removing interface: gretap1 [ 927.139971][ T4936] Bluetooth: hci2: command tx timeout [ 927.167479][ T50] bond1 (unregistering): (slave bridge7): Releasing backup interface [ 927.326559][ T50] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 927.341341][ T50] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 927.342384][ T50] macvlan2 (unregistering): left allmulticast mode [ 927.395785][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.398260][ T50] bond0 (unregistering): Released all slaves [ 927.431854][ T50] bond1 (unregistering): Released all slaves [ 927.525145][ T50] bond2 (unregistering): Released all slaves [ 927.592317][ T50] bond3 (unregistering): Released all slaves [ 927.619333][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 927.756422][ T5698] cdc_ncm 1-1:1.0: bind() failure [ 927.805397][ T5698] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 927.807423][ T5698] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 927.812587][ T5698] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 927.856333][ T5698] usb 1-1: USB disconnect, device number 51 [ 927.874662][T16396] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 927.910673][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 928.178194][ T50] tipc: Left network mode [ 928.231057][T16419] FAULT_INJECTION: forcing a failure. [ 928.231057][T16419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.231095][T16419] CPU: 0 UID: 0 PID: 16419 Comm: syz.5.3039 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.231124][T16419] Tainted: [L]=SOFTLOCKUP [ 928.231132][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.231146][T16419] Call Trace: [ 928.231155][T16419] [ 928.231164][T16419] dump_stack_lvl+0xe8/0x150 [ 928.231200][T16419] should_fail_ex+0x410/0x560 [ 928.231229][T16419] _copy_to_user+0x31/0xb0 [ 928.231259][T16419] simple_read_from_buffer+0xe1/0x170 [ 928.231294][T16419] proc_fail_nth_read+0x1bb/0x230 [ 928.231327][T16419] ? common_file_perm+0x20e/0x2b0 [ 928.231357][T16419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.231393][T16419] ? rw_verify_area+0x24a/0x4c0 [ 928.231426][T16419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.231458][T16419] vfs_read+0x213/0xa80 [ 928.231493][T16419] ? __pfx___mutex_lock+0x10/0x10 [ 928.231522][T16419] ? __pfx_vfs_read+0x10/0x10 [ 928.231563][T16419] ? __fget_files+0x2a/0x420 [ 928.231595][T16419] ? __fget_files+0x3a2/0x420 [ 928.231619][T16419] ? __fget_files+0x2a/0x420 [ 928.231662][T16419] ksys_read+0x150/0x270 [ 928.231696][T16419] ? __pfx_ksys_read+0x10/0x10 [ 928.231734][T16419] do_syscall_64+0x166/0x520 [ 928.231757][T16419] ? trace_irq_disable+0x3b/0x140 [ 928.231778][T16419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.231798][T16419] ? clear_bhb_loop+0x70/0xc0 [ 928.231822][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.231842][T16419] RIP: 0033:0x7f234d15e98e [ 928.231860][T16419] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 928.231878][T16419] RSP: 002b:00007f234e131fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 928.231899][T16419] RAX: ffffffffffffffda RBX: 00007f234e1326c0 RCX: 00007f234d15e98e [ 928.231914][T16419] RDX: 000000000000000f RSI: 00007f234e1320a0 RDI: 0000000000000004 [ 928.231927][T16419] RBP: 00007f234e132090 R08: 0000000000000000 R09: 0000000000000000 [ 928.231940][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.231952][T16419] R13: 00007f234d426038 R14: 00007f234d425fa0 R15: 00007f234d54fa48 [ 928.231983][T16419] [ 928.568273][T16423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3040'. [ 928.659379][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 929.100137][ T7747] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 929.219813][ T4936] Bluetooth: hci2: command tx timeout [ 929.261965][ T7747] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 929.263024][ T7747] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 929.263051][ T7747] usb 6-1: config 0 has no interface number 0 [ 929.263092][ T7747] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 929.269874][ T7747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.269940][ T7747] usb 6-1: Product: syz [ 929.269978][ T7747] usb 6-1: Manufacturer: syz [ 929.270015][ T7747] usb 6-1: SerialNumber: syz [ 929.333421][ T7747] usb 6-1: config 0 descriptor?? [ 929.361152][ T7747] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 929.482756][T16443] atomic_op ffff8880356551e0 conn xmit_atomic 0000000000000000 [ 929.607574][ T5698] usb 6-1: USB disconnect, device number 32 [ 929.622153][ T5698] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 929.709516][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 930.055191][T16455] usb usb7: usbfs: process 16455 (syz.0.3045) did not claim interface 0 before use [ 930.471808][ T7741] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 930.520717][ T5698] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 930.522271][ T32] kauditd_printk_skb: 60 callbacks suppressed [ 930.522289][ T32] audit: type=1400 audit(1789874265.273:2168): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=16461 comm="syz.2.3047" [ 930.620555][ T7741] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 930.622610][ T7741] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 930.622637][ T7741] usb 6-1: config 0 has no interface number 0 [ 930.622690][ T7741] usb 6-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 930.622718][ T7741] usb 6-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.622741][ T7741] usb 6-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 930.622783][ T7741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.677655][ T5698] usb 1-1: Using ep0 maxpacket: 32 [ 930.717903][ T7741] usb 6-1: config 0 descriptor?? [ 930.749373][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 930.773697][ T7747] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 930.902663][ T7747] usb 3-1: device descriptor read/64, error -71 [ 931.150212][ T7747] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 931.286617][ T7747] usb 3-1: device descriptor read/64, error -71 [ 931.399499][ T7747] usb usb3-port1: attempt power cycle [ 931.547134][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.547190][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.748954][ T7747] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 931.770828][ T7747] usb 3-1: device descriptor read/8, error -71 [ 931.789325][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 932.023675][ T7747] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 932.064599][ T7747] usb 3-1: device descriptor read/8, error -71 [ 932.178237][ T7747] usb usb3-port1: unable to enumerate USB device [ 932.819573][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 933.869581][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 933.949809][ T7719] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 934.118810][ T7719] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 934.130836][ T7719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 934.130896][ T7719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 934.130937][ T7719] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 934.130989][ T7719] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 934.131016][ T7719] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 934.135017][ T7719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.135040][ T7719] usb 3-1: Product: syz [ 934.135054][ T7719] usb 3-1: Manufacturer: syz [ 934.135068][ T7719] usb 3-1: SerialNumber: syz [ 934.229223][T16472] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 934.421176][ T7741] usbhid 6-1:0.34: can't add hid device: -71 [ 934.421284][ T7741] usbhid 6-1:0.34: probe with driver usbhid failed with error -71 [ 934.423931][ T7741] usb 6-1: USB disconnect, device number 33 [ 934.454683][T16472] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 934.645837][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.648217][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.648948][ T50] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 934.648969][ T50] batman_adv: batadv0: Removing interface: ipvlan2 [ 934.825287][T16476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.909643][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 934.993092][ T50] team0 (unregistering): Port device team_slave_1 removed [ 935.026657][ T50] team0 (unregistering): Port device team_slave_0 removed [ 935.076367][T16472] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 935.119523][T14495] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 935.280765][T14495] usb 4-1: Using ep0 maxpacket: 8 [ 935.282997][T14495] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 935.284453][T14495] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 935.284535][T14495] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 935.284558][T14495] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 935.284582][T14495] usb 4-1: config 150 has no interface number 0 [ 935.284614][T14495] usb 4-1: config 150 interface 204 has no altsetting 0 [ 935.348310][T14495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.348339][T14495] usb 4-1: Product: syz [ 935.348356][T14495] usb 4-1: Manufacturer: syz [ 935.348372][T14495] usb 4-1: SerialNumber: syz [ 935.544241][ T7719] cdc_ncm 3-1:1.0: bind() failure [ 935.562707][ T7719] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 935.563884][ T7719] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 935.567764][ T7719] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 935.621526][ T7719] usb 3-1: USB disconnect, device number 18 [ 935.657089][T14495] xr_serial 4-1:150.204: skipping garbage [ 935.681565][T14495] usb 4-1: USB disconnect, device number 71 [ 935.790153][ T5698] usb 1-1: unable to get BOS descriptor or descriptor too short [ 935.790204][ T5698] usb 1-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 935.795570][ T5698] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 935.795595][ T5698] usb 1-1: chopping to 0 config(s) [ 935.795620][ T5698] usb 1-1: can't read configurations, error -32 [ 935.929960][ T5698] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 935.941206][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 936.060041][ T5698] usb 1-1: device descriptor read/64, error -32 [ 936.082169][T16321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 936.082476][ T50] IPVS: stop unused estimator thread 0... [ 936.101739][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 936.138322][T16321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 936.165664][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.167038][T16321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 936.184155][ T5698] usb usb1-port1: attempt power cycle [ 936.210063][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 936.213724][T16321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 936.243278][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 936.676343][T16321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.698429][ T32] audit: type=1326 audit(1789874271.443:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.5.3054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f234d19e159 code=0x0 [ 936.784388][T16321] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.812845][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.812961][ T8396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.841838][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.841937][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.989425][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 937.019598][ T1227] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 937.134475][T16321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.170188][ T1227] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 937.171532][ T1227] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 937.171557][ T1227] usb 3-1: config 0 has no interface number 0 [ 937.171598][ T1227] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.173629][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.173654][ T1227] usb 3-1: Product: syz [ 937.173669][ T1227] usb 3-1: Manufacturer: syz [ 937.173684][ T1227] usb 3-1: SerialNumber: syz [ 937.187136][ T1227] usb 3-1: config 0 descriptor?? [ 937.264086][ T1227] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 937.333882][T16321] veth0_vlan: entered promiscuous mode [ 937.423056][T16321] veth1_vlan: entered promiscuous mode [ 937.440953][ T1227] usb 3-1: USB disconnect, device number 19 [ 937.467581][ T1227] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 937.585747][T16321] veth0_macvtap: entered promiscuous mode [ 937.613120][T16321] veth1_macvtap: entered promiscuous mode [ 937.668736][T16321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.698095][T16321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.749798][ T3350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.750938][ T3350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.750977][ T3350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.751010][ T3350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.949957][T11228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.949982][T11228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.019519][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 938.133865][ T8713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.133889][ T8713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.185729][T16545] usb usb7: usbfs: process 16545 (syz.5.3063) did not claim interface 0 before use [ 938.227255][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'. [ 938.730953][ T1227] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 938.832949][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.851528][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.858079][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.875596][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.876565][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.889815][ T1227] usb 6-1: Using ep0 maxpacket: 32 [ 938.999514][ T7741] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 939.069606][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 939.130532][ T7741] usb 5-1: device descriptor read/64, error -71 [ 939.369855][ T7741] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 939.499401][ T7741] usb 5-1: device descriptor read/64, error -71 [ 939.610062][ T7741] usb usb5-port1: attempt power cycle [ 939.949605][ T7741] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 939.975894][ T7741] usb 5-1: device descriptor read/8, error -71 [ 940.109445][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 940.211611][ T7741] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 940.230400][ T7741] usb 5-1: device descriptor read/8, error -71 [ 940.340902][ T7741] usb usb5-port1: unable to enumerate USB device [ 940.426831][T16562] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.427077][T16562] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.427182][T16562] bridge_slave_0: entered allmulticast mode [ 940.441385][T16562] bridge_slave_0: entered promiscuous mode [ 940.457229][T16562] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.457960][T16562] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.458083][T16562] bridge_slave_1: entered allmulticast mode [ 940.465236][T16562] bridge_slave_1: entered promiscuous mode [ 940.532463][T16562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.535004][ T7748] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 940.557472][T16562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.640862][T16562] team0: Port device team_slave_0 added [ 940.644304][T16562] team0: Port device team_slave_1 added [ 940.683854][ T7748] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 940.685963][ T7748] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 940.685981][ T7748] usb 4-1: config 0 has no interface number 0 [ 940.686007][ T7748] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 940.706319][ T7748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.706365][ T7748] usb 4-1: Product: syz [ 940.706440][ T7748] usb 4-1: Manufacturer: syz [ 940.706479][ T7748] usb 4-1: SerialNumber: syz [ 940.754801][ T7748] usb 4-1: config 0 descriptor?? [ 940.780825][ T7748] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 940.818757][T16562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.818775][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.818802][T16562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.875132][T16562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.875148][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.875174][T16562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.903069][ T5619] Bluetooth: hci1: command tx timeout [ 940.976065][ T7747] usb 4-1: USB disconnect, device number 72 [ 940.996840][ T7747] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 941.098905][T16562] hsr_slave_0: entered promiscuous mode [ 941.108033][T16562] hsr_slave_1: entered promiscuous mode [ 941.108590][T16562] debugfs: 'hsr0' already exists in 'hsr' [ 941.108604][T16562] Cannot create hsr debugfs directory [ 941.139514][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 941.234104][ T1227] usb 6-1: unable to get BOS descriptor or descriptor too short [ 941.234155][ T1227] usb 6-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 941.236125][ T1227] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 941.236149][ T1227] usb 6-1: can't read configurations, error -71 [ 941.291231][T16585] FAULT_INJECTION: forcing a failure. [ 941.291231][T16585] name failslab, interval 1, probability 0, space 0, times 0 [ 941.291259][T16585] CPU: 1 UID: 0 PID: 16585 Comm: syz.0.3075 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.291281][T16585] Tainted: [L]=SOFTLOCKUP [ 941.291287][T16585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 941.291298][T16585] Call Trace: [ 941.291304][T16585] [ 941.291311][T16585] dump_stack_lvl+0xe8/0x150 [ 941.291342][T16585] should_fail_ex+0x410/0x560 [ 941.291365][T16585] should_failslab+0xa8/0x100 [ 941.291386][T16585] ? skb_clone+0x212/0x3a0 [ 941.291410][T16585] kmem_cache_alloc_noprof+0xa1/0x600 [ 941.291438][T16585] ? skb_clone+0x212/0x3a0 [ 941.291466][T16585] skb_clone+0x212/0x3a0 [ 941.291499][T16585] __netlink_deliver_tap+0x413/0x860 [ 941.291534][T16585] ? netlink_deliver_tap+0x2e/0x1b0 [ 941.291561][T16585] netlink_deliver_tap+0x19c/0x1b0 [ 941.291587][T16585] netlink_sendskb+0x68/0x140 [ 941.291613][T16585] netlink_rcv_skb+0x2a4/0x4a0 [ 941.291639][T16585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 941.291660][T16585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 941.291696][T16585] ? down_read+0x2be/0x330 [ 941.291722][T16585] genl_rcv+0x28/0x40 [ 941.291741][T16585] netlink_unicast+0x7bd/0x940 [ 941.291772][T16585] netlink_sendmsg+0x813/0xb40 [ 941.291794][T16585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.291816][T16585] ? apparmor_socket_sendmsg+0x98/0x360 [ 941.291849][T16585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.291865][T16585] sock_sendmsg_nosec+0x13a/0x180 [ 941.291883][T16585] ____sys_sendmsg+0x54e/0x850 [ 941.291909][T16585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 941.291938][T16585] ? import_iovec+0x73/0xa0 [ 941.291960][T16585] ___sys_sendmsg+0x2a5/0x360 [ 941.291983][T16585] ? __lock_acquire+0x747/0x2de0 [ 941.292003][T16585] ? __pfx____sys_sendmsg+0x10/0x10 [ 941.292050][T16585] ? __fget_files+0x2a/0x420 [ 941.292072][T16585] ? __fget_files+0x3a2/0x420 [ 941.292101][T16585] __x64_sys_sendmsg+0x1b1/0x290 [ 941.292126][T16585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 941.292163][T16585] do_syscall_64+0x166/0x520 [ 941.292182][T16585] ? trace_irq_disable+0x3b/0x140 [ 941.292198][T16585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.292214][T16585] ? clear_bhb_loop+0x70/0xc0 [ 941.292233][T16585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.292248][T16585] RIP: 0033:0x7f739179e159 [ 941.292262][T16585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.292276][T16585] RSP: 002b:00007f73926c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.292293][T16585] RAX: ffffffffffffffda RBX: 00007f7391a25fa0 RCX: 00007f739179e159 [ 941.292304][T16585] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 941.292313][T16585] RBP: 00007f73926c4090 R08: 0000000000000000 R09: 0000000000000000 [ 941.292323][T16585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.292332][T16585] R13: 00007f7391a26038 R14: 00007f7391a25fa0 R15: 00007f7391b4fa48 [ 941.292356][T16585] [ 941.764514][T16589] usb usb7: usbfs: process 16589 (syz.5.3076) did not claim interface 0 before use [ 942.189464][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 942.460685][T16606] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 942.599413][ T7741] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 942.751156][ T7741] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 942.779970][ T7741] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 942.779990][ T7741] usb 5-1: Product: syz [ 942.780001][ T7741] usb 5-1: SerialNumber: syz [ 942.831182][ T7741] usb 5-1: config 0 descriptor?? [ 942.973434][T16619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.980041][ T5619] Bluetooth: hci1: command tx timeout [ 943.098440][ T8713] IPVS: starting estimator thread 0... [ 943.219578][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 943.220046][T16621] IPVS: using max 31 ests per chain, 74400 per kthread [ 943.250044][T16612] syz.0.3084 (16612): drop_caches: 2 [ 943.287411][ T7741] usb 5-1: USB disconnect, device number 52 [ 943.500127][ T7719] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 943.702364][ T7719] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 943.707863][ T7719] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 943.707893][ T7719] usb 4-1: Product: syz [ 943.707904][ T7719] usb 4-1: SerialNumber: syz [ 943.738011][ T7719] usb 4-1: config 0 descriptor?? [ 944.140939][T11228] IPVS: starting estimator thread 0... [ 944.190188][ T7719] usb 4-1: USB disconnect, device number 73 [ 944.216548][T16106] udevd[16106]: setting mode of /dev/bus/usb/004/073 to 020664 failed: No such file or directory [ 944.216630][T16106] udevd[16106]: setting owner of /dev/bus/usb/004/073 to uid=0, gid=0 failed: No such file or directory [ 944.246420][T16624] IPVS: using max 44 ests per chain, 105600 per kthread [ 944.259618][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 944.447088][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3086'. [ 944.719964][ T1227] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 944.896190][ T1227] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 944.899823][ T1227] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 944.899851][ T1227] usb 6-1: config 0 has no interface number 0 [ 944.899890][ T1227] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 944.951710][ T1227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.951756][ T1227] usb 6-1: Product: syz [ 944.951772][ T1227] usb 6-1: Manufacturer: syz [ 944.951789][ T1227] usb 6-1: SerialNumber: syz [ 944.952495][T16562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 944.969148][ T1227] usb 6-1: config 0 descriptor?? [ 945.035853][T16562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 945.036777][T16562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 945.058245][ T1227] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 945.059552][ T5619] Bluetooth: hci1: command tx timeout [ 945.082933][T16631] FAULT_INJECTION: forcing a failure. [ 945.082933][T16631] name failslab, interval 1, probability 0, space 0, times 0 [ 945.082971][T16631] CPU: 1 UID: 0 PID: 16631 Comm: syz.4.3088 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.083002][T16631] Tainted: [L]=SOFTLOCKUP [ 945.083010][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.083024][T16631] Call Trace: [ 945.083034][T16631] [ 945.083043][T16631] dump_stack_lvl+0xe8/0x150 [ 945.083082][T16631] should_fail_ex+0x410/0x560 [ 945.083123][T16631] should_failslab+0xa8/0x100 [ 945.083155][T16631] __kmalloc_cache_noprof+0xa3/0x600 [ 945.083179][T16631] ? nfnetlink_rcv+0x1021/0x28c0 [ 945.083212][T16631] ? nfnetlink_rcv+0x1021/0x28c0 [ 945.083249][T16631] nfnetlink_rcv+0x1021/0x28c0 [ 945.083314][T16631] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 945.083362][T16631] ? ref_tracker_free+0x689/0x830 [ 945.083411][T16631] ? skb_clone+0x246/0x3a0 [ 945.083446][T16631] ? __netlink_deliver_tap+0x811/0x860 [ 945.083488][T16631] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.083521][T16631] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.083561][T16631] netlink_unicast+0x7bd/0x940 [ 945.083604][T16631] netlink_sendmsg+0x813/0xb40 [ 945.083635][T16631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.083665][T16631] ? apparmor_socket_sendmsg+0x98/0x360 [ 945.083694][T16631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.083714][T16631] sock_sendmsg_nosec+0x13a/0x180 [ 945.083740][T16631] ____sys_sendmsg+0x54e/0x850 [ 945.083777][T16631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.083824][T16631] ? import_iovec+0x73/0xa0 [ 945.083875][T16631] ___sys_sendmsg+0x2a5/0x360 [ 945.083910][T16631] ? __lock_acquire+0x747/0x2de0 [ 945.083939][T16631] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.084009][T16631] ? __fget_files+0x2a/0x420 [ 945.084039][T16631] ? __fget_files+0x3a2/0x420 [ 945.084082][T16631] __x64_sys_sendmsg+0x1b1/0x290 [ 945.084124][T16631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 945.084180][T16631] do_syscall_64+0x166/0x520 [ 945.084210][T16631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.084234][T16631] ? clear_bhb_loop+0x70/0xc0 [ 945.084263][T16631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.084286][T16631] RIP: 0033:0x7f062d59e159 [ 945.084307][T16631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.084327][T16631] RSP: 002b:00007f062e509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.084353][T16631] RAX: ffffffffffffffda RBX: 00007f062d825fa0 RCX: 00007f062d59e159 [ 945.084371][T16631] RDX: 0000000000000010 RSI: 0000200000009b40 RDI: 0000000000000003 [ 945.084386][T16631] RBP: 00007f062e509090 R08: 0000000000000000 R09: 0000000000000000 [ 945.084401][T16631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.084415][T16631] R13: 00007f062d826038 R14: 00007f062d825fa0 R15: 00007f062d94fa48 [ 945.084451][T16631] [ 945.303975][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 945.432420][T16562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 945.433194][T16562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 945.439911][ T1227] usb 6-1: USB disconnect, device number 36 [ 945.473153][ T1227] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 945.495893][T16562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 945.496774][T16562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 945.519703][ T7719] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 945.563344][T16562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 945.669385][ T7719] usb 1-1: Using ep0 maxpacket: 8 [ 945.670153][ T7719] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 945.671239][ T7719] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 945.671273][ T7719] usb 1-1: config 0 interface 0 has no altsetting 0 [ 945.671299][ T7719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.726815][ T7719] usb 1-1: config 0 descriptor?? [ 945.776296][T16562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.814060][T16562] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.847824][ T3381] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.847922][ T3381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.877885][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.878011][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.978640][T16562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 945.991485][T14495] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 946.074446][T16562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.119964][ T32] audit: type=1326 audit(1789874280.863:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.120025][ T32] audit: type=1326 audit(1789874280.863:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.128795][ T32] audit: type=1326 audit(1789874280.873:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.128845][ T32] audit: type=1326 audit(1789874280.873:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.129062][ T32] audit: type=1326 audit(1789874280.873:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.158398][ T32] audit: type=1326 audit(1789874280.903:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.158527][ T32] audit: type=1326 audit(1789874280.903:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.210211][ T32] audit: type=1326 audit(1789874280.963:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.254306][T14495] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 946.340055][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 946.356572][ T32] audit: type=1326 audit(1789874281.103:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.384868][T14495] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 946.384899][T14495] usb 4-1: config 1 has no interface number 0 [ 946.384940][T14495] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 946.384998][T14495] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 946.385491][T14495] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 946.387736][ T32] audit: type=1326 audit(1789874281.133:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.4.3091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 946.438080][T14495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.438101][T14495] usb 4-1: Product: syz [ 946.438112][T14495] usb 4-1: Manufacturer: syz [ 946.438123][T14495] usb 4-1: SerialNumber: syz [ 946.501077][ T7719] logitech-djreceiver 0003:046D:C534.0021: unknown main item tag 0x2 [ 946.501116][ T7719] logitech-djreceiver 0003:046D:C534.0021: unknown main item tag 0x7 [ 946.608388][ T1227] usb 1-1: USB disconnect, device number 55 [ 946.686795][T16562] veth0_vlan: entered promiscuous mode [ 946.732586][T16562] veth1_vlan: entered promiscuous mode [ 946.874733][T16562] veth0_macvtap: entered promiscuous mode [ 946.894883][T16562] veth1_macvtap: entered promiscuous mode [ 946.997174][T16562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.054641][T16562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.069663][ T7748] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 947.139686][ T5619] Bluetooth: hci1: command tx timeout [ 947.193987][T11228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.195187][ T8713] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.214943][ T8713] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.231099][ T7748] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 947.249188][ T7748] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 947.249215][ T7748] usb 6-1: Product: syz [ 947.285091][ T7748] usb 6-1: SerialNumber: syz [ 947.310240][ T8396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.318548][ T7748] usb 6-1: config 0 descriptor?? [ 947.389493][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 947.717147][ T7748] usb 6-1: USB disconnect, device number 37 [ 948.056206][ T8402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.056230][ T8402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.314200][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.314222][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.419875][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 948.793353][T14495] usb 4-1: 1:0 : does not exist [ 948.793440][T14495] usb 4-1: BAAD HEADPHONE p_chmask mismatch [ 948.902017][T16661] FAULT_INJECTION: forcing a failure. [ 948.902017][T16661] name failslab, interval 1, probability 0, space 0, times 0 [ 948.902055][T16661] CPU: 1 UID: 0 PID: 16661 Comm: syz.5.3096 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.902083][T16661] Tainted: [L]=SOFTLOCKUP [ 948.902091][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.902104][T16661] Call Trace: [ 948.902113][T16661] [ 948.902123][T16661] dump_stack_lvl+0xe8/0x150 [ 948.902159][T16661] should_fail_ex+0x410/0x560 [ 948.902188][T16661] should_failslab+0xa8/0x100 [ 948.902216][T16661] __kmalloc_noprof+0xfe/0x720 [ 948.902235][T16661] ? __kasan_kmalloc+0x93/0xb0 [ 948.902266][T16661] ? nla_strdup+0x9d/0x140 [ 948.902291][T16661] ? nla_strdup+0x9d/0x140 [ 948.902318][T16661] ? __kmalloc_cache_noprof+0x14d/0x600 [ 948.902342][T16661] nla_strdup+0x9d/0x140 [ 948.902372][T16661] nf_tables_newtable+0x49a/0x1990 [ 948.902419][T16661] nfnetlink_rcv+0x1288/0x28c0 [ 948.902480][T16661] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 948.902525][T16661] ? ref_tracker_free+0x689/0x830 [ 948.902573][T16661] ? skb_clone+0x246/0x3a0 [ 948.902606][T16661] ? __netlink_deliver_tap+0x811/0x860 [ 948.902646][T16661] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.902677][T16661] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.902715][T16661] netlink_unicast+0x7bd/0x940 [ 948.902753][T16661] netlink_sendmsg+0x813/0xb40 [ 948.902782][T16661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.902810][T16661] ? apparmor_socket_sendmsg+0x98/0x360 [ 948.902836][T16661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.902856][T16661] sock_sendmsg_nosec+0x13a/0x180 [ 948.902880][T16661] ____sys_sendmsg+0x54e/0x850 [ 948.902912][T16661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.902955][T16661] ? import_iovec+0x73/0xa0 [ 948.902985][T16661] ___sys_sendmsg+0x2a5/0x360 [ 948.903012][T16661] ? __lock_acquire+0x747/0x2de0 [ 948.903039][T16661] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.903102][T16661] ? __fget_files+0x2a/0x420 [ 948.903131][T16661] ? __fget_files+0x3a2/0x420 [ 948.903169][T16661] __x64_sys_sendmsg+0x1b1/0x290 [ 948.903202][T16661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.903258][T16661] do_syscall_64+0x166/0x520 [ 948.903283][T16661] ? trace_irq_disable+0x3b/0x140 [ 948.903304][T16661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.903326][T16661] ? clear_bhb_loop+0x70/0xc0 [ 948.903352][T16661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.903374][T16661] RIP: 0033:0x7f234d19e159 [ 948.903393][T16661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.903412][T16661] RSP: 002b:00007f234e132028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.903435][T16661] RAX: ffffffffffffffda RBX: 00007f234d425fa0 RCX: 00007f234d19e159 [ 948.903452][T16661] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 948.903466][T16661] RBP: 00007f234e132090 R08: 0000000000000000 R09: 0000000000000000 [ 948.903480][T16661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.903493][T16661] R13: 00007f234d426038 R14: 00007f234d425fa0 R15: 00007f234d54fa48 [ 948.903525][T16661] [ 949.294604][T14495] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 949.341771][T14495] usb 4-1: USB disconnect, device number 74 [ 949.460803][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 949.491310][T16106] udevd[16106]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.499438][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 950.755914][T16677] syz.3.3099 (16677): drop_caches: 2 [ 951.183180][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3101'. [ 951.251844][T16686] ipvlan2: entered allmulticast mode [ 951.251869][T16686] veth0_virt_wifi: entered allmulticast mode [ 951.365231][T16691] netlink: 'syz.4.3101': attribute type 11 has an invalid length. [ 951.539443][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 952.579436][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 952.696344][T16701] netlink: 'syz.4.3106': attribute type 4 has an invalid length. [ 952.696344][T16699] netlink: 'syz.4.3106': attribute type 4 has an invalid length. [ 953.103032][ T4936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 953.123134][ T4936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 953.125654][ T4936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 953.147511][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 953.150103][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 953.619563][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 954.353804][T16716] cifs: Unknown parameter 'f,' [ 954.627947][T16721] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 954.659423][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 955.185751][T16717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.302346][ T5619] Bluetooth: hci3: command tx timeout [ 955.481537][T16727] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3112'. [ 955.699452][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 955.951858][T16743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.267447][ T8398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.739425][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 956.970880][ T8398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.095262][T14495] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 957.285630][T14495] usb 4-1: unable to get BOS descriptor or descriptor too short [ 957.285674][T14495] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 957.294401][T14495] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 957.317236][T14495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.317300][T14495] usb 4-1: Product: syz [ 957.317334][T14495] usb 4-1: Manufacturer: syz [ 957.317369][T14495] usb 4-1: SerialNumber: syz [ 957.379423][ T5619] Bluetooth: hci3: command tx timeout [ 957.384229][ T8398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.653601][T14495] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 957.705472][T16705] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.705606][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.705761][T16705] bridge_slave_0: entered allmulticast mode [ 957.708478][T16771] usb usb7: usbfs: process 16771 (syz.4.3121) did not claim interface 0 before use [ 957.742539][T16705] bridge_slave_0: entered promiscuous mode [ 957.779526][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 957.876674][T16765] syz.2.3120 (16765): drop_caches: 2 [ 958.044489][ T8398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.151410][T16705] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.151590][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.151772][T16705] bridge_slave_1: entered allmulticast mode [ 958.154096][T16705] bridge_slave_1: entered promiscuous mode [ 958.269398][ T7741] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 958.342217][T16705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.432984][ T7741] usb 5-1: Using ep0 maxpacket: 32 [ 958.601214][T16705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.819435][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 959.145600][T16705] team0: Port device team_slave_0 added [ 959.273941][T14495] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 959.356377][T16705] team0: Port device team_slave_1 added [ 959.383935][T16780] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 959.469558][ T5619] Bluetooth: hci3: command tx timeout [ 959.614546][T14495] usb 4-1: USB disconnect, device number 75 [ 959.855681][T16106] udevd[16106]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 959.859738][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 960.194449][T16705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.194465][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.194498][T16705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.488426][T16705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.488446][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.488491][T16705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.899582][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 961.039595][T16794] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 961.205509][ T8398] veth0: left allmulticast mode [ 961.205537][ T8398] veth0: left promiscuous mode [ 961.205752][ T8398] bridge0: port 3(veth0) entered disabled state [ 961.243382][ T8398] bridge_slave_1: left allmulticast mode [ 961.243402][ T8398] bridge_slave_1: left promiscuous mode [ 961.243763][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.276957][ T8398] bridge_slave_0: left allmulticast mode [ 961.276987][ T8398] bridge_slave_0: left promiscuous mode [ 961.283417][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.426328][ T8398] lo: left allmulticast mode [ 961.459016][T16808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.549539][ T5619] Bluetooth: hci3: command tx timeout [ 961.780018][T16813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.939430][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 962.197128][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.212411][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.214157][ T8398] bond0 (unregistering): Released all slaves [ 962.225904][ T8398] bond1 (unregistering): Released all slaves [ 962.257412][ T8398] bond2 (unregistering): Released all slaves [ 962.288503][ T8398] bond3 (unregistering): Released all slaves [ 962.342378][T16705] hsr_slave_0: entered promiscuous mode [ 962.348492][T16705] hsr_slave_1: entered promiscuous mode [ 962.352114][T16705] debugfs: 'hsr0' already exists in 'hsr' [ 962.352177][T16705] Cannot create hsr debugfs directory [ 962.586059][ T8398] tipc: Left network mode [ 962.708480][ T7741] usb 5-1: unable to get BOS descriptor or descriptor too short [ 962.708522][ T7741] usb 5-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 962.710198][ T7741] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 962.710223][ T7741] usb 5-1: can't read configurations, error -71 [ 962.909858][ T7748] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 962.979536][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 963.070136][ T7748] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 963.071423][ T7748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.071473][ T7748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.115629][ T7748] usb 4-1: config 0 descriptor?? [ 963.129218][ T7748] pwc: Askey VC010 type 2 USB webcam detected. [ 963.341295][ T32] kauditd_printk_skb: 53 callbacks suppressed [ 963.341315][ T32] audit: type=1326 audit(1789874298.093:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.341360][ T32] audit: type=1326 audit(1789874298.093:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.344617][ T32] audit: type=1326 audit(1789874298.093:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.344693][ T32] audit: type=1326 audit(1789874298.093:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.449868][ T5698] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 963.465597][ T32] audit: type=1326 audit(1789874298.213:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.465873][ T32] audit: type=1326 audit(1789874298.213:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.466142][ T32] audit: type=1326 audit(1789874298.213:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.524856][ T8396] IPVS: starting estimator thread 0... [ 963.558717][ T32] audit: type=1326 audit(1789874298.303:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.558971][ T32] audit: type=1326 audit(1789874298.303:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.559333][ T32] audit: type=1326 audit(1789874298.303:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 963.606387][ T5698] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 963.609463][T16840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3135'. [ 963.647815][T16841] IPVS: using max 27 ests per chain, 64800 per kthread [ 963.652221][ T5698] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 963.652301][ T5698] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 963.652393][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.019420][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 964.088321][ T7748] pwc: recv_control_msg error -32 req 02 val 2b00 [ 964.265077][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 964.346268][T16817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.346787][T16817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.768049][ T5698] pegasus 6-1:1.0: probe with driver pegasus failed with error -32 [ 964.843980][ T1227] usb 6-1: USB disconnect, device number 38 [ 964.886588][ T7748] pwc: recv_control_msg error -71 req 02 val 2c00 [ 964.889643][ T7748] pwc: recv_control_msg error -71 req 04 val 1000 [ 964.895920][ T7748] pwc: recv_control_msg error -71 req 04 val 1300 [ 964.906493][ T7748] pwc: recv_control_msg error -71 req 04 val 1400 [ 964.911725][ T7748] pwc: recv_control_msg error -71 req 02 val 2000 [ 964.976355][ T7748] pwc: recv_control_msg error -71 req 02 val 2100 [ 964.978348][ T7748] pwc: recv_control_msg error -71 req 04 val 1500 [ 964.982376][ T7748] pwc: recv_control_msg error -71 req 02 val 2500 [ 964.983329][ T7748] pwc: recv_control_msg error -71 req 02 val 2400 [ 964.986044][ T7748] pwc: recv_control_msg error -71 req 02 val 2600 [ 964.990213][ T7748] pwc: recv_control_msg error -71 req 02 val 2900 [ 964.994074][ T7748] pwc: recv_control_msg error -71 req 02 val 2800 [ 964.996393][ T7748] pwc: recv_control_msg error -71 req 04 val 1100 [ 964.998772][ T7748] pwc: recv_control_msg error -71 req 04 val 1200 [ 965.015056][ T8398] hsr_slave_0: left promiscuous mode [ 965.026299][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.026356][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.060441][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.060505][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.063548][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 965.145593][ T8398] veth1_macvtap: left promiscuous mode [ 965.145633][ T8398] veth0_macvtap: left promiscuous mode [ 965.145738][ T8398] veth1_vlan: left promiscuous mode [ 965.145865][ T8398] veth0_vlan: left promiscuous mode [ 965.195927][ T7748] pwc: Registered as video103. [ 965.218744][ T7748] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input75 [ 965.267440][ T7748] usb 4-1: USB disconnect, device number 76 [ 965.280349][T16869] FAULT_INJECTION: forcing a failure. [ 965.280349][T16869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.280382][T16869] CPU: 0 UID: 0 PID: 16869 Comm: syz.4.3140 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.280410][T16869] Tainted: [L]=SOFTLOCKUP [ 965.280418][T16869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 965.280431][T16869] Call Trace: [ 965.280439][T16869] [ 965.280449][T16869] dump_stack_lvl+0xe8/0x150 [ 965.280484][T16869] should_fail_ex+0x410/0x560 [ 965.280513][T16869] _copy_to_user+0x31/0xb0 [ 965.280542][T16869] simple_read_from_buffer+0xe1/0x170 [ 965.280576][T16869] proc_fail_nth_read+0x1bb/0x230 [ 965.280608][T16869] ? common_file_perm+0x20e/0x2b0 [ 965.280650][T16869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 965.280683][T16869] ? rw_verify_area+0x24a/0x4c0 [ 965.280714][T16869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 965.280744][T16869] vfs_read+0x213/0xa80 [ 965.280795][T16869] ? __pfx___mutex_lock+0x10/0x10 [ 965.280832][T16869] ? __pfx_vfs_read+0x10/0x10 [ 965.280864][T16869] ? __fget_files+0x2a/0x420 [ 965.280897][T16869] ? __fget_files+0x3a2/0x420 [ 965.280924][T16869] ? __fget_files+0x2a/0x420 [ 965.280961][T16869] ksys_read+0x150/0x270 [ 965.280995][T16869] ? __pfx_ksys_read+0x10/0x10 [ 965.281038][T16869] do_syscall_64+0x166/0x520 [ 965.281064][T16869] ? trace_irq_disable+0x3b/0x140 [ 965.281086][T16869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.281107][T16869] ? clear_bhb_loop+0x70/0xc0 [ 965.281134][T16869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.281155][T16869] RIP: 0033:0x7f062d55e98e [ 965.281174][T16869] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 965.281192][T16869] RSP: 002b:00007f062e508fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 965.281215][T16869] RAX: ffffffffffffffda RBX: 00007f062e5096c0 RCX: 00007f062d55e98e [ 965.281231][T16869] RDX: 000000000000000f RSI: 00007f062e5090a0 RDI: 0000000000000004 [ 965.281245][T16869] RBP: 00007f062e509090 R08: 0000000000000000 R09: 0000000000000000 [ 965.281257][T16869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 965.281270][T16869] R13: 00007f062d826038 R14: 00007f062d825fa0 R15: 00007f062d94fa48 [ 965.281301][T16869] [ 965.837592][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3143'. [ 965.894155][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3143'. [ 966.100061][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 966.151116][ T8398] team0 (unregistering): Port device team_slave_1 removed [ 966.167300][ T8398] team0 (unregistering): Port device team_slave_0 removed [ 966.331290][T16889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.949436][ T7748] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 967.074164][T16911] netlink: 'syz.2.3150': attribute type 10 has an invalid length. [ 967.098550][T16705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 967.105294][ T7748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 967.105408][ T7748] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 967.108319][ T7748] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.108381][ T7748] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 967.125376][ T7748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.125446][ T7748] usb 4-1: Product: syz [ 967.125492][ T7748] usb 4-1: Manufacturer: syz [ 967.125533][ T7748] usb 4-1: SerialNumber: syz [ 967.143662][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 967.212212][ T7748] usb 4-1: selecting invalid altsetting 1 [ 967.212783][ T7748] usb 4-1: unit 6 not found! [ 967.220938][T16705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 967.244447][T16705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 967.248882][ T8398] IPVS: stop unused estimator thread 0... [ 967.271060][T16705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 967.286004][T16705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 967.339730][T16705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 967.343057][T16705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 967.379164][T16705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 967.593668][T16932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.597975][T16932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.820227][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.901087][T16705] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.931723][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.931836][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.990853][ T3381] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.990970][ T3381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.179395][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 968.237297][ T7748] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 968.330779][T16705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.447991][ T7748] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 968.487002][ T7748] usb 4-1: USB disconnect, device number 77 [ 968.614601][T16106] udevd[16106]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 968.672744][T16705] veth0_vlan: entered promiscuous mode [ 968.724734][T16705] veth1_vlan: entered promiscuous mode [ 968.817403][T16705] veth0_macvtap: entered promiscuous mode [ 968.847939][T16705] veth1_macvtap: entered promiscuous mode [ 968.961860][T16705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.013669][T16705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.119365][ T3350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.119422][ T3350] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.119456][ T3350] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.119510][ T3350] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.146367][T16972] input: syz1 as /devices/virtual/input/input76 [ 969.219385][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 969.428806][ T8398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.428829][ T8398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.559210][T16982] usb usb7: usbfs: process 16982 (syz.3.3158) did not claim interface 0 before use [ 969.582490][ T3381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.582513][ T3381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.069478][ T7715] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 970.073587][ T32] kauditd_printk_skb: 61 callbacks suppressed [ 970.073604][ T32] audit: type=1326 audit(1789874304.823:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.076509][ T32] audit: type=1326 audit(1789874304.823:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.187394][ T32] audit: type=1326 audit(1789874304.933:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.187440][ T32] audit: type=1326 audit(1789874304.933:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.238990][ T7715] usb 4-1: Using ep0 maxpacket: 32 [ 970.252091][ T32] audit: type=1326 audit(1789874305.003:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.252159][ T32] audit: type=1326 audit(1789874305.003:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.252204][ T32] audit: type=1326 audit(1789874305.003:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.259578][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 970.274435][ T32] audit: type=1326 audit(1789874305.013:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.274605][ T32] audit: type=1326 audit(1789874305.013:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.274741][ T32] audit: type=1326 audit(1789874305.013:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.4.3159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 970.450204][ T1227] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 971.137164][T17003] bridge0: port 3(vlan2) entered blocking state [ 971.146427][T17003] bridge0: port 3(vlan2) entered disabled state [ 971.158179][T17003] vlan2: entered allmulticast mode [ 971.158608][T17003] geneve0: entered allmulticast mode [ 971.195835][T17003] vlan2: entered promiscuous mode [ 971.195858][T17003] geneve0: entered promiscuous mode [ 971.309744][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 971.529181][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 971.552202][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.089480][ T7747] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 972.244276][ T7747] usb 5-1: unable to get BOS descriptor or descriptor too short [ 972.244328][ T7747] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 972.248147][ T7747] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.248171][ T7747] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 972.288599][ T7747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.288622][ T7747] usb 5-1: Product: syz [ 972.288640][ T7747] usb 5-1: Manufacturer: syz [ 972.288649][ T7747] usb 5-1: SerialNumber: syz [ 972.339637][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 972.378851][ T7747] usb 5-1: selecting invalid altsetting 1 [ 972.393753][ T7747] usb 5-1: unit 6 not found! [ 972.676149][ T7715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 972.676220][ T7715] usb 4-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 972.678300][T17018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.679200][ T7715] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 972.697190][T17018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.714921][ T7715] usb 4-1: can't read configurations, error -71 [ 973.369609][ T7747] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 973.379547][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 973.594065][ T7747] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 973.628291][ T7747] usb 5-1: USB disconnect, device number 55 [ 973.713461][T16106] udevd[16106]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.854857][T17043] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 974.119416][ T7715] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 974.251356][T17043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.278903][ T7715] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 974.313603][ T7715] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 974.313631][ T7715] usb 6-1: Product: syz [ 974.313646][ T7715] usb 6-1: SerialNumber: syz [ 974.350404][ T7715] usb 6-1: config 0 descriptor?? [ 974.419559][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 974.711210][ T7715] usb 6-1: USB disconnect, device number 39 [ 975.340052][T17069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3179'. [ 975.459506][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 975.659448][ T1227] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 975.761335][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 975.761353][ T32] audit: type=1326 audit(1789874310.513:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17074 comm="syz.2.3183" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e6839e159 code=0x0 [ 975.817696][ T1227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 975.818265][ T1227] usb 5-1: not running at top speed; connect to a high speed hub [ 975.818296][ T1227] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 975.825844][ T1227] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 975.825922][ T1227] usb 5-1: config 5 interface 0 has no altsetting 1 [ 975.849732][ T7741] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 975.882001][ T1227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.882029][ T1227] usb 5-1: Product: syz [ 975.882046][ T1227] usb 5-1: Manufacturer: syz [ 975.882062][ T1227] usb 5-1: SerialNumber: syz [ 975.999346][ T5698] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 976.024054][ T7741] usb 1-1: unable to get BOS descriptor or descriptor too short [ 976.024089][ T7741] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 976.025276][ T7741] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.025293][ T7741] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 976.055602][ T7741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.055724][ T7741] usb 1-1: Product: syz [ 976.055764][ T7741] usb 1-1: Manufacturer: syz [ 976.055803][ T7741] usb 1-1: SerialNumber: syz [ 976.123210][ T7741] usb 1-1: selecting invalid altsetting 1 [ 976.123768][ T7741] usb 1-1: unit 6 not found! [ 976.156001][T17073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.156348][T17073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.180781][ T5698] usb 6-1: unable to get BOS descriptor or descriptor too short [ 976.180825][ T5698] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 976.186550][ T5698] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.186576][ T5698] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 976.230512][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.230538][ T5698] usb 6-1: Product: syz [ 976.230551][ T5698] usb 6-1: Manufacturer: syz [ 976.230564][ T5698] usb 6-1: SerialNumber: syz [ 976.280311][ T5698] usb 6-1: selecting invalid altsetting 1 [ 976.451248][T17095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.451735][T17095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.499619][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 976.556275][T17087] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 976.573648][T17087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.574050][T17087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.648000][ T32] audit: type=1326 audit(1789874311.393:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.4.3182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 976.666476][ T32] audit: type=1326 audit(1789874311.413:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.4.3182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 976.715072][ T32] audit: type=1326 audit(1789874311.463:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.4.3182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 976.715127][ T32] audit: type=1326 audit(1789874311.463:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.4.3182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 976.715156][ T32] audit: type=1326 audit(1789874311.463:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.4.3182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 976.717330][ T32] audit: type=1326 audit(1789874311.463:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.4.3182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 976.717370][ T32] audit: type=1326 audit(1789874311.463:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.4.3182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 976.717400][ T32] audit: type=1326 audit(1789874311.463:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.4.3182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 976.744245][ T32] audit: type=1326 audit(1789874311.463:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.4.3182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 977.323394][ T7741] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 977.495822][ T7741] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 977.496414][ T5698] usb 6-1: unit 6 not found! [ 977.524984][ T7741] usb 1-1: USB disconnect, device number 57 [ 977.550432][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 977.645524][T17101] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 977.645594][T17101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.681163][T16231] udevd[16231]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 977.747656][ T5698] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 977.894988][ T5698] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 977.917104][ T5698] usb 6-1: USB disconnect, device number 40 [ 977.970347][T16231] udevd[16231]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.180958][ T1227] usb 5-1: USB disconnect, device number 56 [ 978.236647][T16106] udevd[16106]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.381194][T17111] usb usb9: usbfs: process 17111 (syz.0.3192) did not claim interface 0 before use [ 978.545592][T17114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.589565][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 979.619578][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 980.023935][T17105] bridge0: port 3(gretap0) entered blocking state [ 980.024003][T17105] bridge0: port 3(gretap0) entered disabled state [ 980.047251][T17105] gretap0: entered allmulticast mode [ 980.048419][T17105] gretap0: entered promiscuous mode [ 980.064242][T17105] bridge0: port 3(gretap0) entered blocking state [ 980.064367][T17105] bridge0: port 3(gretap0) entered forwarding state [ 980.176114][T17122] FAULT_INJECTION: forcing a failure. [ 980.176114][T17122] name failslab, interval 1, probability 0, space 0, times 0 [ 980.176152][T17122] CPU: 0 UID: 0 PID: 17122 Comm: syz.3.3196 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.176180][T17122] Tainted: [L]=SOFTLOCKUP [ 980.176188][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 980.176201][T17122] Call Trace: [ 980.176210][T17122] [ 980.176220][T17122] dump_stack_lvl+0xe8/0x150 [ 980.176256][T17122] should_fail_ex+0x410/0x560 [ 980.176287][T17122] should_failslab+0xa8/0x100 [ 980.176315][T17122] __kmalloc_cache_noprof+0xa3/0x600 [ 980.176339][T17122] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 980.176445][T17122] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 980.176485][T17122] snd_pcm_hw_param_near+0x80/0x4d0 [ 980.176516][T17122] ? snd_pcm_oss_change_params_locked+0xf73/0x3c80 [ 980.176548][T17122] ? snd_interval_refine+0x5f8/0xa40 [ 980.176623][T17122] snd_pcm_oss_change_params_locked+0xfc5/0x3c80 [ 980.176678][T17122] ? snd_pcm_oss_get_active_substream+0x1ec/0x280 [ 980.176703][T17122] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 980.176744][T17122] ? __mutex_unlock_slowpath+0x731/0x900 [ 980.176779][T17122] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 980.176807][T17122] ? snd_pcm_oss_get_active_substream+0x16d/0x280 [ 980.176833][T17122] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 980.176861][T17122] snd_pcm_oss_set_format+0x10d/0x510 [ 980.176900][T17122] snd_pcm_oss_ioctl+0xbe9/0xdf0 [ 980.176932][T17122] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 980.176964][T17122] __se_sys_ioctl+0xfc/0x170 [ 980.176991][T17122] do_syscall_64+0x166/0x520 [ 980.177024][T17122] ? trace_irq_disable+0x3b/0x140 [ 980.177046][T17122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.177068][T17122] ? clear_bhb_loop+0x70/0xc0 [ 980.177094][T17122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.177115][T17122] RIP: 0033:0x7fbe99d9e159 [ 980.177135][T17122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.177153][T17122] RSP: 002b:00007fbe9acaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.177176][T17122] RAX: ffffffffffffffda RBX: 00007fbe9a025fa0 RCX: 00007fbe99d9e159 [ 980.177192][T17122] RDX: 0000200000000040 RSI: 00000000c0045005 RDI: 0000000000000003 [ 980.177210][T17122] RBP: 00007fbe9acaa090 R08: 0000000000000000 R09: 0000000000000000 [ 980.177224][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 980.177237][T17122] R13: 00007fbe9a026038 R14: 00007fbe9a025fa0 R15: 00007fbe9a14fa48 [ 980.177271][T17122] [ 980.659567][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 980.969496][ T7741] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 980.998229][T17142] syz.5.3203 (17142): drop_caches: 2 [ 981.147897][ T7741] usb 5-1: unable to get BOS descriptor or descriptor too short [ 981.147957][ T7741] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 981.149032][ T7741] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 981.149056][ T7741] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.187993][ T7741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.188052][ T7741] usb 5-1: Product: syz [ 981.188090][ T7741] usb 5-1: Manufacturer: syz [ 981.188127][ T7741] usb 5-1: SerialNumber: syz [ 981.253090][ T7741] usb 5-1: selecting invalid altsetting 1 [ 981.257415][ T7741] usb 5-1: unit 6 not found! [ 981.476664][T17135] FAULT_INJECTION: forcing a failure. [ 981.476664][T17135] name failslab, interval 1, probability 0, space 0, times 0 [ 981.476702][T17135] CPU: 1 UID: 0 PID: 17135 Comm: syz.2.3201 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.476745][T17135] Tainted: [L]=SOFTLOCKUP [ 981.476754][T17135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 981.476766][T17135] Call Trace: [ 981.476775][T17135] [ 981.476785][T17135] dump_stack_lvl+0xe8/0x150 [ 981.476825][T17135] should_fail_ex+0x410/0x560 [ 981.476855][T17135] should_failslab+0xa8/0x100 [ 981.476884][T17135] __kmalloc_cache_noprof+0xa3/0x600 [ 981.476915][T17135] ? __kmalloc_cache_noprof+0x14d/0x600 [ 981.476936][T17135] ? snd_mixer_oss_put_volume1_sw+0x14d/0x400 [ 981.476965][T17135] ? snd_mixer_oss_put_volume1_sw+0x14d/0x400 [ 981.477003][T17135] snd_mixer_oss_put_volume1_sw+0x14d/0x400 [ 981.477041][T17135] snd_mixer_oss_put_recsrc1_sw+0x65/0x90 [ 981.477072][T17135] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 981.477101][T17135] snd_mixer_oss_set_recsrc+0x275/0x420 [ 981.477136][T17135] ? __pfx_snd_mixer_oss_set_recsrc+0x10/0x10 [ 981.477168][T17135] ? __might_fault+0xaf/0x130 [ 981.477201][T17135] snd_mixer_oss_ioctl1+0xf00/0x1960 [ 981.477234][T17135] ? hook_file_ioctl+0x1f2/0x600 [ 981.477260][T17135] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 981.477305][T17135] ? __fget_files+0x2a/0x420 [ 981.477337][T17135] ? __fget_files+0x2a/0x420 [ 981.477365][T17135] ? __fget_files+0x3a2/0x420 [ 981.477392][T17135] ? __fget_files+0x2a/0x420 [ 981.477423][T17135] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 981.477452][T17135] snd_mixer_oss_ioctl+0x45/0x60 [ 981.477481][T17135] __se_sys_ioctl+0xfc/0x170 [ 981.477523][T17135] do_syscall_64+0x166/0x520 [ 981.477561][T17135] ? trace_irq_disable+0x3b/0x140 [ 981.477584][T17135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.477607][T17135] ? clear_bhb_loop+0x70/0xc0 [ 981.477635][T17135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.477658][T17135] RIP: 0033:0x7f3e6839e159 [ 981.477678][T17135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.477697][T17135] RSP: 002b:00007f3e6927e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.477722][T17135] RAX: ffffffffffffffda RBX: 00007f3e68625fa0 RCX: 00007f3e6839e159 [ 981.477739][T17135] RDX: 0000200000004000 RSI: 00000000c0044dff RDI: 0000000000000008 [ 981.477772][T17135] RBP: 00007f3e6927e090 R08: 0000000000000000 R09: 0000000000000000 [ 981.477788][T17135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.477802][T17135] R13: 00007f3e68626038 R14: 00007f3e68625fa0 R15: 00007f3e6874fa48 [ 981.477837][T17135] [ 981.596379][T17155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.613759][T17155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.706717][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 982.399841][ T7741] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 982.404909][T17162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.591066][ T7741] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 982.614972][ T7741] usb 5-1: USB disconnect, device number 57 [ 982.692447][T16106] udevd[16106]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.741384][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 983.162661][T17177] syzkaller0: entered promiscuous mode [ 983.162687][T17177] syzkaller0: entered allmulticast mode [ 983.191035][T17177] tipc: Started in network mode [ 983.191067][T17177] tipc: Node identity 1624dc9086cf, cluster identity 4711 [ 983.196418][T17177] tipc: Enabled bearer , priority 0 [ 983.240233][T17176] tipc: Resetting bearer [ 983.365379][T17176] tipc: Disabling bearer [ 983.657668][T17190] tipc: Enabling of bearer rejected, already enabled [ 983.748077][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 983.779479][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 984.219380][ T7748] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 984.374262][ T7748] usb 3-1: unable to get BOS descriptor or descriptor too short [ 984.374314][ T7748] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 984.381223][ T7748] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.381289][ T7748] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 984.429342][ T7717] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 984.431618][ T7748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.431644][ T7748] usb 3-1: Product: syz [ 984.431658][ T7748] usb 3-1: Manufacturer: syz [ 984.431673][ T7748] usb 3-1: SerialNumber: syz [ 984.503949][ T7748] usb 3-1: selecting invalid altsetting 1 [ 984.505782][ T7748] usb 3-1: unit 6 not found! [ 984.584109][ T7717] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 984.606530][ T7717] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 984.606557][ T7717] usb 5-1: Product: syz [ 984.606573][ T7717] usb 5-1: SerialNumber: syz [ 984.632985][ T7717] usb 5-1: config 0 descriptor?? [ 984.821643][T17197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.825839][T17197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.829492][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 984.995939][ T7717] usb 5-1: USB disconnect, device number 58 [ 985.495218][ T7748] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 985.660860][ T7748] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 985.677698][ T7748] usb 3-1: USB disconnect, device number 20 [ 985.764189][T16106] udevd[16106]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 985.859505][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 986.353935][T17223] usb usb7: usbfs: process 17223 (syz.2.3236) did not claim interface 0 before use [ 986.749375][ T7717] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 986.849440][ T5698] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 986.879800][ T7717] usb 4-1: device descriptor read/64, error -71 [ 986.899491][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 987.009955][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 987.119448][ T7717] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 987.276393][ T7717] usb 4-1: device descriptor read/64, error -71 [ 987.389971][ T7717] usb usb4-port1: attempt power cycle [ 987.459575][ T1227] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 987.610657][ T1227] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 987.637366][ T1227] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 987.637392][ T1227] usb 6-1: Product: syz [ 987.637406][ T1227] usb 6-1: SerialNumber: syz [ 987.665534][ T1227] usb 6-1: config 0 descriptor?? [ 987.729353][ T7717] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 987.752644][ T7717] usb 4-1: device descriptor read/8, error -71 [ 987.939477][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 987.990425][ T7717] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 988.012007][ T7717] usb 4-1: device descriptor read/8, error -71 [ 988.068037][ T1227] usb 6-1: USB disconnect, device number 41 [ 988.119755][ T7717] usb usb4-port1: unable to enumerate USB device [ 988.979513][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 989.330233][ T7715] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 989.484369][ T7715] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 989.518484][ T7715] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 989.518502][ T7715] usb 5-1: Product: syz [ 989.518512][ T7715] usb 5-1: SerialNumber: syz [ 989.624085][ T5698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 989.624146][ T5698] usb 3-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 989.641218][ T5698] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 989.641247][ T5698] usb 3-1: can't read configurations, error -71 [ 989.693669][ T7715] usb 5-1: config 0 descriptor?? [ 989.963431][ T7715] usb 5-1: USB disconnect, device number 59 [ 989.979957][T17269] xt_limit: Overflow, try lower: 0/0 [ 990.013728][T17272] FAULT_INJECTION: forcing a failure. [ 990.013728][T17272] name failslab, interval 1, probability 0, space 0, times 0 [ 990.013764][T17272] CPU: 0 UID: 0 PID: 17272 Comm: syz.2.3249 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.013793][T17272] Tainted: [L]=SOFTLOCKUP [ 990.013801][T17272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 990.013815][T17272] Call Trace: [ 990.013825][T17272] [ 990.013835][T17272] dump_stack_lvl+0xe8/0x150 [ 990.013873][T17272] should_fail_ex+0x410/0x560 [ 990.013906][T17272] should_failslab+0xa8/0x100 [ 990.013934][T17272] ? ptlock_alloc+0x20/0x70 [ 990.013966][T17272] kmem_cache_alloc_noprof+0xa1/0x600 [ 990.014003][T17272] ? ptlock_alloc+0x20/0x70 [ 990.014041][T17272] ptlock_alloc+0x20/0x70 [ 990.014072][T17272] pte_alloc_one+0x7a/0x370 [ 990.014112][T17272] __pte_alloc+0x25/0x1a0 [ 990.014143][T17272] do_pte_missing+0x2db7/0x34b0 [ 990.014171][T17272] ? do_raw_spin_unlock+0xf5/0x200 [ 990.014208][T17272] ? __pmd_alloc+0x40a/0x5c0 [ 990.014242][T17272] handle_mm_fault+0x1a53/0x3750 [ 990.014283][T17272] ? mt_find+0x186/0x630 [ 990.014321][T17272] ? handle_mm_fault+0xf1/0x3750 [ 990.014360][T17272] ? __pfx_handle_mm_fault+0x10/0x10 [ 990.014414][T17272] __get_user_pages+0x1675/0x2750 [ 990.014472][T17272] get_user_pages_remote+0x307/0xb10 [ 990.014509][T17272] ? __pfx_get_user_pages_remote+0x10/0x10 [ 990.014539][T17272] ? mmap_read_lock_maybe_expand+0xd7/0x3b0 [ 990.014576][T17272] copy_string_kernel+0x2f9/0x5f0 [ 990.014619][T17272] ? __pfx_copy_string_kernel+0x10/0x10 [ 990.014646][T17272] ? do_raw_spin_unlock+0xf5/0x200 [ 990.014679][T17272] ? alloc_bprm+0x582/0x640 [ 990.014701][T17272] do_execveat_common+0x373/0x670 [ 990.014729][T17272] __x64_sys_execve+0x97/0xc0 [ 990.014763][T17272] do_syscall_64+0x166/0x520 [ 990.014788][T17272] ? trace_irq_disable+0x3b/0x140 [ 990.014809][T17272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.014841][T17272] ? clear_bhb_loop+0x70/0xc0 [ 990.014866][T17272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.014885][T17272] RIP: 0033:0x7f3e6839e159 [ 990.014904][T17272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.014921][T17272] RSP: 002b:00007f3e6927e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 990.014942][T17272] RAX: ffffffffffffffda RBX: 00007f3e68625fa0 RCX: 00007f3e6839e159 [ 990.014957][T17272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 990.014969][T17272] RBP: 00007f3e6927e090 R08: 0000000000000000 R09: 0000000000000000 [ 990.014982][T17272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.014995][T17272] R13: 00007f3e68626038 R14: 00007f3e68625fa0 R15: 00007f3e6874fa48 [ 990.015025][T17272] [ 990.019495][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 990.109799][ T7718] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 990.320879][ T7718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 990.320930][ T7718] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 990.321871][ T7718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.321894][ T7718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 990.323786][ T7718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.323808][ T7718] usb 1-1: Product: syz [ 990.323822][ T7718] usb 1-1: Manufacturer: syz [ 990.323836][ T7718] usb 1-1: SerialNumber: syz [ 990.426286][ T7718] usb 1-1: selecting invalid altsetting 1 [ 990.435801][ T7718] usb 1-1: unit 6 not found! [ 990.467449][T17269] input: syz0 as /devices/virtual/input/input78 [ 990.853392][T17274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.853724][T17274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.982138][T17280] netlink: 'syz.3.3252': attribute type 10 has an invalid length. [ 991.059543][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 991.296748][T17282] kvm: pic: single mode not supported [ 991.528980][ T7718] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 991.623884][ T32] kauditd_printk_skb: 16 callbacks suppressed [ 991.623900][ T32] audit: type=1326 audit(1789874326.373:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 991.663520][ T32] audit: type=1326 audit(1789874326.423:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 991.716589][ T32] audit: type=1326 audit(1789874326.463:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 991.716923][ T32] audit: type=1326 audit(1789874326.463:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 991.717162][ T32] audit: type=1326 audit(1789874326.463:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 991.806665][ T32] audit: type=1326 audit(1789874326.553:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 991.806867][ T32] audit: type=1326 audit(1789874326.553:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 991.864360][ T32] audit: type=1326 audit(1789874326.613:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f062d55e98e code=0x7ffc0000 [ 991.867278][ T32] audit: type=1326 audit(1789874326.613:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f062d53f4d9 code=0x7ffc0000 [ 991.867757][ T32] audit: type=1326 audit(1789874326.613:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.4.3253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062d59e159 code=0x7ffc0000 [ 992.109578][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 992.224303][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3256'. [ 992.251926][ T7718] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 992.287704][ T7718] usb 1-1: USB disconnect, device number 58 [ 992.374014][T17299] openvswitch: netlink: Message has 1 unknown bytes. [ 992.374056][T17299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.441923][T17297] netlink: 'syz.2.3256': attribute type 11 has an invalid length. [ 992.461806][T17296] ipvlan2: entered allmulticast mode [ 992.461827][T17296] veth0_virt_wifi: entered allmulticast mode [ 992.686375][T16106] udevd[16106]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.980764][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.980834][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.139494][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 993.421106][T17319] ip6tnl1: entered allmulticast mode [ 993.439911][ T8402] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 993.440091][ T8402] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 993.469591][ T7717] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 993.469843][ T7719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 993.508086][T17319] openvswitch: netlink: Message has 1 unknown bytes. [ 993.508121][T17319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.919615][ T7719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 994.098919][T17330] openvswitch: netlink: Duplicate or invalid key (type 0). [ 994.098946][T17330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.179573][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 994.186287][ T7719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 994.296845][ T1227] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 994.332051][T17335] tipc: Started in network mode [ 994.332081][T17335] tipc: Node identity ac14140f, cluster identity 4711 [ 994.336092][T17335] tipc: New replicast peer: 255.255.255.255 [ 994.356396][T17335] tipc: Enabled bearer , priority 10 [ 994.515628][ T1227] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 994.541017][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 994.541044][ T1227] usb 5-1: Product: syz [ 994.541064][ T1227] usb 5-1: SerialNumber: syz [ 994.543113][ T1227] usb 5-1: config 0 descriptor?? [ 994.620546][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 994.717310][T17340] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3267'. [ 994.872003][ T1227] usb 5-1: USB disconnect, device number 60 [ 994.939546][T16106] udevd[16106]: setting mode of /dev/bus/usb/005/060 to 020664 failed: No such file or directory [ 994.939671][T16106] udevd[16106]: setting owner of /dev/bus/usb/005/060 to uid=0, gid=0 failed: No such file or directory [ 995.219535][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 995.449438][ T7717] tipc: Node number set to 2886997007 [ 996.259528][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 996.579443][ T7717] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 996.729431][ T7717] usb 5-1: Using ep0 maxpacket: 8 [ 996.730265][ T7717] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 996.731403][ T7717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.731425][ T7717] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 996.734034][ T7717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.734051][ T7717] usb 5-1: Product: syz [ 996.734061][ T7717] usb 5-1: Manufacturer: syz [ 996.734071][ T7717] usb 5-1: SerialNumber: syz [ 996.973392][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3275'. [ 997.299498][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 997.302541][ T7717] usb 5-1: USB disconnect, device number 61 [ 997.379484][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 997.381911][T16106] udevd[16106]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 998.182841][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3279'. [ 998.210302][T17377] ip_tables: iptables: counters copy to user failed while replacing table [ 998.285511][T17377] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16321] was attempted by ""[17377] [ 998.334957][ T32] kauditd_printk_skb: 95 callbacks suppressed [ 998.334976][ T32] audit: type=1326 audit(1789874333.083:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.3.3280" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 998.335109][ T32] audit: type=1326 audit(1789874333.083:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.3.3280" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe99d9e159 code=0x7ffc0000 [ 998.339625][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 998.709576][ T7748] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 998.915664][ T7748] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 998.930451][ T7748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.930473][ T7748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.930489][ T7748] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 998.930517][ T7748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.988757][ T7748] usb 4-1: ** replaying previous printk message ** [ 998.988757][ T7748] usb 4-1: config 0 descriptor?? [ 998.995478][T17388] ------------[ cut here ]------------ [ 998.995514][T17388] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 998.995550][T17388] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.5.3281/17388 [ 999.029890][T17388] Modules linked in: [ 999.033805][T17388] CPU: 0 UID: 0 PID: 17388 Comm: syz.5.3281 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.044868][T17388] Tainted: [L]=SOFTLOCKUP [ 999.049289][T17388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 999.059400][T17388] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 999.065419][T17388] Code: c6 05 4b df 22 0f 01 48 c7 c7 6b a7 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 2b aa 62 00 e9 81 ee ff ff e8 01 02 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 999.085168][T17388] RSP: 0018:ffffc900067571c0 EFLAGS: 00010287 [ 999.091289][T17388] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 999.099297][T17388] RDX: ffffc900147fe000 RSI: 00000000000003b0 RDI: 00000000000003b1 [ 999.107292][T17388] RBP: ffffc90006757350 R08: ffffffff907a4e7f R09: 1ffffffff20f49cf [ 999.115329][T17388] R10: dffffc0000000000 R11: fffffbfff20f49d0 R12: 1ffff92000ceae4c [ 999.123353][T17388] R13: ffff88805730dd60 R14: ffff888000000000 R15: ffffffffffffff01 [ 999.131375][T17388] FS: 00007f234e0136c0(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 999.140526][T17388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 999.147143][T17388] CR2: 0000001b3160fffc CR3: 0000000044ee8000 CR4: 00000000003526f0 [ 999.155252][T17388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 999.163272][T17388] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 999.171470][T17388] Call Trace: [ 999.174766][T17388] [ 999.177700][T17388] ? lock_acquire+0x115/0x350 [ 999.182411][T17388] ? kvm_gpc_refresh+0x31/0x110 [ 999.187282][T17388] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 999.192859][T17388] ? lock_acquire+0x115/0x350 [ 999.197542][T17388] ? lock_acquire+0x115/0x350 [ 999.202301][T17388] kvm_gpc_refresh+0xe1/0x110 [ 999.207030][T17388] ? kvm_xen_set_evtchn+0x11e/0x220 [ 999.212266][T17388] kvm_xen_set_evtchn+0x14f/0x220 [ 999.217348][T17388] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 999.222879][T17388] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 999.227929][T17388] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 999.233479][T17388] ? __lock_acquire+0x747/0x2de0 [ 999.238424][T17388] ? __lock_acquire+0x747/0x2de0 [ 999.243439][T17388] ? lock_acquire+0x115/0x350 [ 999.248133][T17388] ? lock_acquire+0x115/0x350 [ 999.252849][T17388] ? is_bpf_text_address+0x26/0x2b0 [ 999.258067][T17388] ? is_bpf_text_address+0x292/0x2b0 [ 999.263405][T17388] ? kernel_text_address+0xa5/0xe0 [ 999.268679][T17388] ? __kernel_text_address+0xd/0x30 [ 999.273946][T17388] ? unwind_get_return_address+0x4d/0x90 [ 999.279608][T17388] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 999.285762][T17388] ? arch_stack_walk+0xfb/0x150 [ 999.290665][T17388] ? stack_trace_save+0xa9/0x100 [ 999.295636][T17388] ? __pfx_stack_trace_save+0x10/0x10 [ 999.301103][T17388] ? kasan_save_track+0x4f/0x80 [ 999.306011][T17388] ? stack_depot_save_flags+0x33/0x7f0 [ 999.312328][T17388] ? __lock_acquire+0x747/0x2de0 [ 999.317277][T17388] ? kasan_save_track+0x4f/0x80 [ 999.322192][T17388] ? kasan_save_track+0x3e/0x80 [ 999.327052][T17388] ? kasan_save_free_info+0x40/0x50 [ 999.332349][T17388] ? __kasan_slab_free+0x5c/0x80 [ 999.337299][T17388] ? kfree+0x1c5/0x650 [ 999.341406][T17388] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 999.347038][T17388] ? security_file_ioctl+0xc3/0x2a0 [ 999.352258][T17388] ? __se_sys_ioctl+0x47/0x170 [ 999.357021][T17388] ? do_syscall_64+0x166/0x520 [ 999.361813][T17388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.367894][T17388] kvm_vm_ioctl+0x8f7/0xd30 [ 999.372559][T17388] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 999.377618][T17388] ? kasan_quarantine_put+0xbb/0x1f0 [ 999.384371][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 999.393532][T17388] ? tomoyo_path_number_perm+0x219/0x5f0 [ 999.399181][T17388] ? tomoyo_path_number_perm+0x219/0x5f0 [ 999.404974][T17388] ? do_vfs_ioctl+0x116f/0x1530 [ 999.409863][T17388] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 999.414899][T17388] ? hook_file_ioctl+0x1f2/0x600 [ 999.419901][T17388] ? __fget_files+0x2a/0x420 [ 999.424522][T17388] ? __fget_files+0x2a/0x420 [ 999.429132][T17388] ? __fget_files+0x3a2/0x420 [ 999.433852][T17388] ? __fget_files+0x2a/0x420 [ 999.438470][T17388] ? bpf_lsm_file_ioctl+0x9/0x20 [ 999.443439][T17388] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 999.448483][T17388] __se_sys_ioctl+0xfc/0x170 [ 999.453220][T17388] do_syscall_64+0x166/0x520 [ 999.457819][T17388] ? trace_irq_disable+0x3b/0x140 [ 999.462944][T17388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.469011][T17388] ? clear_bhb_loop+0x70/0xc0 [ 999.473846][T17388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.480149][T17388] RIP: 0033:0x7f234d19e159 [ 999.484582][T17388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.504236][T17388] RSP: 002b:00007f234e013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.512690][T17388] RAX: ffffffffffffffda RBX: 00007f234d426180 RCX: 00007f234d19e159 [ 999.520702][T17388] RDX: 0000200000000100 RSI: 00000000400caed0 RDI: 0000000000000009 [ 999.528672][T17388] RBP: 00007f234d23506b R08: 0000000000000000 R09: 0000000000000000 [ 999.536672][T17388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.545136][T17388] R13: 00007f234d426218 R14: 00007f234d426180 R15: 00007f234d54fa48 [ 999.553265][T17388] [ 999.556298][T17388] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 999.563571][T17388] CPU: 0 UID: 0 PID: 17388 Comm: syz.5.3281 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.574501][T17388] Tainted: [L]=SOFTLOCKUP [ 999.578816][T17388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 999.588868][T17388] Call Trace: [ 999.592149][T17388] [ 999.595076][T17388] vpanic+0x56d/0xa60 [ 999.599090][T17388] ? __pfx__printk+0x10/0x10 [ 999.603692][T17388] ? __pfx_vpanic+0x10/0x10 [ 999.608194][T17388] ? is_bpf_text_address+0x292/0x2b0 [ 999.613486][T17388] ? is_bpf_text_address+0x26/0x2b0 [ 999.618712][T17388] panic+0xc5/0xd0 [ 999.622435][T17388] ? __pfx_panic+0x10/0x10 [ 999.626861][T17388] __warn+0x315/0x4c0 [ 999.630851][T17388] ? __kvm_gpc_refresh+0x1510/0x1710 [ 999.636140][T17388] ? __kvm_gpc_refresh+0x1510/0x1710 [ 999.641442][T17388] __report_bug+0x276/0x570 [ 999.646006][T17388] ? __kvm_gpc_refresh+0x1510/0x1710 [ 999.651332][T17388] ? __pfx___report_bug+0x10/0x10 [ 999.656374][T17388] ? irqentry_exit+0x218/0x910 [ 999.661142][T17388] ? __kvm_gpc_refresh+0x1510/0x1710 [ 999.666438][T17388] report_bug+0x16b/0x220 [ 999.670774][T17388] ? __kvm_gpc_refresh+0x1510/0x1710 [ 999.676068][T17388] ? __kvm_gpc_refresh+0x1512/0x1710 [ 999.681357][T17388] handle_bug+0x9c/0x200 [ 999.685606][T17388] exc_invalid_op+0x1a/0x50 [ 999.690116][T17388] asm_exc_invalid_op+0x1a/0x20 [ 999.694959][T17388] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 999.700853][T17388] Code: c6 05 4b df 22 0f 01 48 c7 c7 6b a7 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 2b aa 62 00 e9 81 ee ff ff e8 01 02 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 999.720451][T17388] RSP: 0018:ffffc900067571c0 EFLAGS: 00010287 [ 999.726521][T17388] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 999.734487][T17388] RDX: ffffc900147fe000 RSI: 00000000000003b0 RDI: 00000000000003b1 [ 999.742474][T17388] RBP: ffffc90006757350 R08: ffffffff907a4e7f R09: 1ffffffff20f49cf [ 999.750469][T17388] R10: dffffc0000000000 R11: fffffbfff20f49d0 R12: 1ffff92000ceae4c [ 999.758434][T17388] R13: ffff88805730dd60 R14: ffff888000000000 R15: ffffffffffffff01 [ 999.766404][T17388] ? __kvm_gpc_refresh+0x150f/0x1710 [ 999.771709][T17388] ? lock_acquire+0x115/0x350 [ 999.776384][T17388] ? kvm_gpc_refresh+0x31/0x110 [ 999.781235][T17388] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 999.786719][T17388] ? lock_acquire+0x115/0x350 [ 999.791397][T17388] ? lock_acquire+0x115/0x350 [ 999.796077][T17388] kvm_gpc_refresh+0xe1/0x110 [ 999.800759][T17388] ? kvm_xen_set_evtchn+0x11e/0x220 [ 999.806102][T17388] kvm_xen_set_evtchn+0x14f/0x220 [ 999.811167][T17388] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 999.816666][T17388] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 999.821729][T17388] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 999.827198][T17388] ? __lock_acquire+0x747/0x2de0 [ 999.832321][T17388] ? __lock_acquire+0x747/0x2de0 [ 999.837278][T17388] ? lock_acquire+0x115/0x350 [ 999.841954][T17388] ? lock_acquire+0x115/0x350 [ 999.846638][T17388] ? is_bpf_text_address+0x26/0x2b0 [ 999.851856][T17388] ? is_bpf_text_address+0x292/0x2b0 [ 999.857161][T17388] ? kernel_text_address+0xa5/0xe0 [ 999.862309][T17388] ? __kernel_text_address+0xd/0x30 [ 999.867549][T17388] ? unwind_get_return_address+0x4d/0x90 [ 999.873227][T17388] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 999.879418][T17388] ? arch_stack_walk+0xfb/0x150 [ 999.884343][T17388] ? stack_trace_save+0xa9/0x100 [ 999.889354][T17388] ? __pfx_stack_trace_save+0x10/0x10 [ 999.894752][T17388] ? kasan_save_track+0x4f/0x80 [ 999.899634][T17388] ? stack_depot_save_flags+0x33/0x7f0 [ 999.905125][T17388] ? __lock_acquire+0x747/0x2de0 [ 999.910108][T17388] ? kasan_save_track+0x4f/0x80 [ 999.914975][T17388] ? kasan_save_track+0x3e/0x80 [ 999.919841][T17388] ? kasan_save_free_info+0x40/0x50 [ 999.925062][T17388] ? __kasan_slab_free+0x5c/0x80 [ 999.930015][T17388] ? kfree+0x1c5/0x650 [ 999.934105][T17388] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 999.939751][T17388] ? security_file_ioctl+0xc3/0x2a0 [ 999.944968][T17388] ? __se_sys_ioctl+0x47/0x170 [ 999.949737][T17388] ? do_syscall_64+0x166/0x520 [ 999.954521][T17388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.960624][T17388] kvm_vm_ioctl+0x8f7/0xd30 [ 999.965158][T17388] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 999.970235][T17388] ? kasan_quarantine_put+0xbb/0x1f0 [ 999.975547][T17388] ? tomoyo_path_number_perm+0x219/0x5f0 [ 999.981213][T17388] ? tomoyo_path_number_perm+0x219/0x5f0 [ 999.986877][T17388] ? do_vfs_ioctl+0x116f/0x1530 [ 999.991744][T17388] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 999.996797][T17388] ? hook_file_ioctl+0x1f2/0x600 [ 1000.001761][T17388] ? __fget_files+0x2a/0x420 [ 1000.006373][T17388] ? __fget_files+0x2a/0x420 [ 1000.011014][T17388] ? __fget_files+0x3a2/0x420 [ 1000.015755][T17388] ? __fget_files+0x2a/0x420 [ 1000.020371][T17388] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1000.025337][T17388] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1000.030381][T17388] __se_sys_ioctl+0xfc/0x170 [ 1000.034992][T17388] do_syscall_64+0x166/0x520 [ 1000.039617][T17388] ? trace_irq_disable+0x3b/0x140 [ 1000.044659][T17388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.050740][T17388] ? clear_bhb_loop+0x70/0xc0 [ 1000.055433][T17388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.061365][T17388] RIP: 0033:0x7f234d19e159 [ 1000.065807][T17388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.085452][T17388] RSP: 002b:00007f234e013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1000.093896][T17388] RAX: ffffffffffffffda RBX: 00007f234d426180 RCX: 00007f234d19e159 [ 1000.101884][T17388] RDX: 0000200000000100 RSI: 00000000400caed0 RDI: 0000000000000009 [ 1000.109869][T17388] RBP: 00007f234d23506b R08: 0000000000000000 R09: 0000000000000000 [ 1000.117873][T17388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.125849][T17388] R13: 00007f234d426218 R14: 00007f234d426180 R15: 00007f234d54fa48 [ 1000.133841][T17388] [ 1000.137549][T17388] Kernel Offset: disabled [ 1000.141884][T17388] Rebooting in 86400 seconds..