last executing test programs: 23m32.778751037s ago: executing program 3 (id=2730): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) (fail_nth: 1) 23m32.151418181s ago: executing program 3 (id=2733): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYRES32, @ANYRESDEC, @ANYRES8=r2, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="1400", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23fd0635f55c59f50a4ea45a6a088601fbae2f9c14766de23884b7dd405"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x0) 23m31.814393808s ago: executing program 3 (id=2736): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000900000080000000c3b200000000000023e3860051b09329dc2143fa8b0192e8bfd58ed6b2dabf18f4c6860ee7d389f07e2868a684e53aaac2b083faa9d4c3f98dfc16bbbe008557b577f88d55e9ffcdfce3a483117d5612c4065b3797a01d0523d61c65be98abc2c173090d5c2b20c86e79f7df0c91eb872918b3b70aabd52dbbf30b80a8c684206cb4639316f9388497f353dcf1e2543abb3ba233ccbe1448b17010e2891fec07ecad9d829f4327df8d7efd29a1ce452ae1e76ef223f409b3c02ef8650e1dad6a8dbab07fb80ba99e10a12787608da76b7aac08e651"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32=r1, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e000000000000000000140002006970366772657461703000000000000030000180", @ANYRES8, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="140002", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23fd0635f55c59f50a4ea45a6a088601fbae2f9c14766de23884b7dd405"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 23m31.391831824s ago: executing program 3 (id=2740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x189840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0/file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000e0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x22, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x10, 0xd}, {0x0, 0xd}, {0x8, 0xf}}}, 0x24}}, 0x41814) 23m30.327113746s ago: executing program 3 (id=2744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 23m28.450620257s ago: executing program 3 (id=2752): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf250f00"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r3, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000005c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m28.166547062s ago: executing program 32 (id=2752): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf250f00"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r3, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000005c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m18.193065576s ago: executing program 5 (id=4549): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000900000080000000c3b200000000000023e3860051b09329dc2143fa8b0192e8bfd58ed6b2dabf18f4c6860ee7d389f07e2868a684e53aaac2b083faa9d4c3f98dfc16bbbe008557b577f88d55e9ffcdfce3a483117d5612c4065b3797a01d0523d61c65be98abc2c173090d5c2b20c86e79f7df0c91eb872918b3b70aabd52dbbf30b80a8c684206cb4639316f9388497f353dcf1e2543abb3ba233ccbe1448b17010e2891fec07ecad9d829f4327df8d7efd29a1ce452ae1e76ef223f409b3c02ef8650e1dad6a8dbab07fb80ba99e10a12787608da76b7aac08e651"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32=r1, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e000000000000000000140002006970366772657461703000000000000030000180", @ANYRES8, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="140002", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23fd0635f55c59f50a4ea45a6a088601fbae2f9c14766de23884b7dd405"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 13m17.532253318s ago: executing program 5 (id=4555): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0}, 0xcc840) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x70, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9be"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13m16.781318073s ago: executing program 5 (id=4562): r0 = socket(0x10, 0x80807, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4e328000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r5, &(0x7f00000007c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}, {{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @private=0xa010101}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@cipso={0x86, 0x54, 0x3, [{0x0, 0xa, "99eb3d4e688ca4f3"}, {0x7, 0xf, "a86e89c055ee2cf47bc49bbcae"}, {0x6, 0x4, "631f"}, {0x6, 0x8, "e074e1422f8b"}, {0x1, 0xc, "6403d904e65513407b77"}, {0x1, 0xd, "21c082fc289b93ef8f1b16"}, {0x5, 0x8, "dec2a59c7d0e"}, {0x1, 0x2}, {0x6, 0x6, "3ab56f6d"}]}, @cipso={0x86, 0x80, 0x2, [{0x2, 0xd, "83b2debc260d335b5e4bc3"}, {0x6, 0x6, "a64ec580"}, {0x0, 0xd, "45dd6b28ca63f956af1dea"}, {0x0, 0x5, "2ddcb9"}, {0x1, 0x7, "6d7cf51956"}, {0x5, 0xf, "a196cf356a3baea41c737eb300"}, {0x0, 0x10, "8116881b47d49259f7f2ab81b76f"}, {0x1, 0xf, "45131d6f8520d335f0b563c982"}, {0x2, 0x12, "6a6f9ffd14b0ec09c28c145aa8055f3a"}, {0x0, 0xe, "468636a7c74a8f5d753d9493"}]}, @timestamp={0x44, 0x10, 0x2d, 0x0, 0x0, [0x0, 0xfffff735, 0xd]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x1d0}}], 0x2, 0x50008000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 13m12.854126166s ago: executing program 5 (id=4585): r0 = socket$packet(0x11, 0x0, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2c280, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x5a, 0xf7, 0x5, '\x00', 0x2}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0xb1, 0x1f, 0x2, 0x119521a2}, {0x0, 0x8, 0x80, 0xfffffffd}, {0xfff9, 0x6, 0x6, 0x200}]}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1184, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) madvise(&(0x7f00004fe000/0x2000)=nil, 0x2000, 0x67) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x10001, 0xdffffffe, 0x0, [{0x0, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x4}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x9, '\x00', 0x4}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0x2f, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x8, '\x00', 0x8}, {0xcd, 0x3, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x6, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 13m10.558570677s ago: executing program 5 (id=4596): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0xfc}}, 0x20000000) 13m8.928558056s ago: executing program 5 (id=4605): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c1e82, 0x4) lseek(r0, 0x9, 0x4) (fail_nth: 1) 13m8.037726226s ago: executing program 33 (id=4605): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c1e82, 0x4) lseek(r0, 0x9, 0x4) (fail_nth: 1) 41.808190137s ago: executing program 4 (id=6532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24040004) 40.377871056s ago: executing program 4 (id=6537): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000380), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000140)={0x10, &(0x7f0000000180)=[{0x3d, '\x00', @buffer={"f0d132d5b7d6ea06d0ad9a58827762d3070d7e7ca943991780287b8f2209ffeb", 0x20}, 0x2}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 39.952459546s ago: executing program 4 (id=6538): syz_open_dev$admmidi(&(0x7f0000000140), 0x21c, 0x240400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e1f, 0xfffffffd, @mcast2, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0xf7277dbb2201513c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) recvmmsg(r0, &(0x7f00000079c0)=[{{&(0x7f0000002200)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002280)=""/130, 0x82}, {&(0x7f0000002340)=""/57, 0x39}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f00000023c0)=""/137, 0x89}, {&(0x7f0000002480)=""/200, 0xc8}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/224, 0xe0}], 0x7, &(0x7f0000003700)=""/115, 0x73}, 0x6}, {{&(0x7f0000003780)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003800)=""/160, 0xa0}, {&(0x7f00000038c0)=""/7, 0x7}, {&(0x7f0000003900)=""/238, 0xee}], 0x3}, 0x33a3a105}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000003a40)=""/1, 0x1}, {&(0x7f0000003a80)=""/107, 0x6b}, {&(0x7f0000003b00)=""/176, 0xb0}, {&(0x7f0000003bc0)=""/139, 0x8b}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/213, 0xd5}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/29, 0x1d}], 0x8, &(0x7f0000005e40)=""/51, 0x33}, 0x7}, {{&(0x7f0000005e80)=@pppol2tpv3in6, 0x80, &(0x7f0000006040), 0x0, &(0x7f0000006080)=""/55, 0x37}, 0x2}, {{&(0x7f00000060c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000006140)=""/4, 0x4}, {&(0x7f0000006180)=""/5, 0x5}], 0x2, &(0x7f0000006200)=""/5, 0x5}, 0x30000}, {{&(0x7f0000006240)=@isdn, 0x80, &(0x7f00000063c0)=[{&(0x7f00000062c0)=""/166, 0xa6}, {&(0x7f0000006380)=""/28, 0x1c}], 0x2, &(0x7f0000006400)=""/197, 0xc5}, 0x4}, {{0x0, 0x0, &(0x7f00000067c0)=[{&(0x7f0000006500)=""/162, 0xa2}, {&(0x7f00000066c0)=""/206, 0xce}], 0x2, &(0x7f0000006800)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000007880)=[{&(0x7f0000007800)=""/98, 0x62}], 0x1, &(0x7f00000078c0)=""/216, 0xd8}, 0x4}], 0x8, 0x40, &(0x7f0000007bc0)={0x77359400}) shmat(0x0, &(0x7f00004e1000/0x800000)=nil, 0xe000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000baf000/0x4000)=nil, 0x4000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000001c0)) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x1906) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x183383, 0x0) 38.229449124s ago: executing program 4 (id=6542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syslog(0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x8, 0x4) lseek(r2, 0x3ff, 0x1) getdents(0xffffffffffffffff, 0x0, 0x48) r3 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008000000fddbdf25090000001c000480040007801300010062726f6164636173742d6c696e1676"], 0x30}, 0x1, 0x0, 0x0, 0x64010}, 0x20000000) 36.931269025s ago: executing program 4 (id=6544): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 34.705172582s ago: executing program 4 (id=6545): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x2, 0x2, 0x0, @private=0xa010102, @local}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (fail_nth: 1) 10.520109759s ago: executing program 0 (id=6594): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xee}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 10.314265813s ago: executing program 6 (id=6596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd211e8434478f1d2aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7acaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x3, 0x7, 0x9, 0x6, 0x800004, 0x1, 0xffff8001, 0x3fd, 0x2, 0x2c, 0x5, 0x5, 0xc, 0x3, 0x8}}]}}]}, 0x170}}, 0x24008004) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b5950000f900000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200ff02000000000000000000000000000108000800020700"], 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x34c, 0x0, 0xf30, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x864627ba}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x20004004}, 0x200480c0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4042044}, 0x4000000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 9.273651753s ago: executing program 1 (id=6597): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) close(r0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x310) 6.884815967s ago: executing program 6 (id=6599): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0xe, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x100c8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000d0000000000000000000001000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000992d2856cca131e5000000000000000100000000000000d5a7567704ca1ab54f2adf0f0b74b65222f2ce19dd1854cdf317700f60b27b45d85cc0bf7d9c94b5c90fb39518f7e63e27d96c9d05bf9c7de9"], 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3800}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(0xffffffffffffffff, 0x8919, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x36, 0x0, &(0x7f0000000240)="e027429b49dcd4ff9782762f86dd21e91717c73f9ae529df2043ca50862bc9797b8fff68c17bd529bf996f5e3acc9c39914d6afb75cd", 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0xa605, 0x300) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) 6.508676215s ago: executing program 1 (id=6600): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x17, 0x3, 0xc}]}}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x62, 0x24, 0x5, @empty, @remote}}}}}}, 0x0) (fail_nth: 1) 6.507935263s ago: executing program 2 (id=6601): kexec_load(0x5, 0x5, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f6c59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add000000000000000000", 0x77, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e", 0xb3, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.778527035s ago: executing program 0 (id=6602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c0002800d000100980000003c0003800c00028005000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff01000000000000000000000000000c3c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 5.620932089s ago: executing program 6 (id=6603): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000dc3000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r0 = socket(0x28, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000100)={&(0x7f0000005480)=[{0x2, 0x8800, 0x1, &(0x7f0000003c80)='f'}, {0x6, 0x0, 0x0, 0x0}], 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x248, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xef, 0x4, "c513ccbee7a21b1870f5d8b19755fd66e3762fd94f2a3f349de2d9cfb5b5dcc845e474a3dd684c941832d5ca6a199e65d23abbb3ed998cbbf0b5efa5b97c9c465f7d1d8e2166dae7137d50b6b99d74b2d6e3bf17f146d3f4d455b9f23aa2d80069c44863933edba3dbc82856b409785bd237bfa1b0ed091a2b94dfca260f6222c2adcad712877b7a0aca3efbee077afe81e8512589d2112f338dedf1d33f6c6ac02442501294b5bb914b4fb7303ec42db977aa54ff857b398943e8a8af16d71de471994e30e80ad862f62f1087795a037654b5a1be674e4d65480a0388437931d685249ac05d4514786ef0"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20008080}, 0x40008d4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 5.537871019s ago: executing program 2 (id=6604): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="04000000000000000003000000050000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000009985"], 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES64=r1, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRESOCT=r3, @ANYRES8, @ANYRESOCT, @ANYRES64=r0], 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 5.220566297s ago: executing program 0 (id=6605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c0002800d000100980000003c0003800c00028005000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff01000000000000000000000000000c3c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 4.850061829s ago: executing program 0 (id=6606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) unshare(0x22020600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @multicast2}, &(0x7f0000000280)=0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x5}, 0x8) setrlimit(0x3, &(0x7f00000000c0)={0x7, 0x9}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@map, r5, 0x26, 0x10}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) shutdown(r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x1, 0x0, 0x0, 0x1, 0x5, 0x1}]}}, 0x0, 0x42}, 0x28) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11, 0x0, 0x5}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x4002, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f0009058202"], 0x0) 4.625801064s ago: executing program 1 (id=6607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c0002800d000100980000003c0003800c00028005000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff01000000000000000000000000000c3c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 4.471383937s ago: executing program 2 (id=6608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd211e8434478f1d2aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7acaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x3, 0x7, 0x9, 0x6, 0x800004, 0x1, 0xffff8001, 0x3fd, 0x2, 0x2c, 0x5, 0x5, 0xc, 0x3, 0x8}}]}}]}, 0x170}}, 0x24008004) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b5950000f900000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200ff02000000000000000000000000000108000800020700"], 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x34c, 0x0, 0xf30, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x864627ba}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x20004004}, 0x200480c0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4042044}, 0x4000000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 3.156643824s ago: executing program 0 (id=6609): r0 = io_uring_setup(0x170e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f00000000c0)='{\\[[,[#$@\a,\x00', 0x20001, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x2]}, {0x9, 0x1, 0x2, 0x21}}, 0xc82, &(0x7f0000000200), &(0x7f0000000340)=0x5}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x0, 0x4, 0x1, 0x8000}}, {0x4}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c840) getpeername$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @loopback}, &(0x7f0000000400)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$alg(r7, 0x0, 0x2c000044) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000740)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), 0xffffffffffffffff, 0x2}}, 0x18) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) r8 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x2178, 0x4) sendmmsg(r8, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) syz_usb_connect(0x3, 0x6a, &(0x7f000000b600)={{0x12, 0x1, 0x110, 0x65, 0x47, 0x67, 0x10, 0x2184, 0x57, 0xc99d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x2, 0x6, 0x8, 0x40, 0x4, "", [{{0x9, 0x4, 0x7, 0x5, 0x1, 0xd6, 0xda, 0xca, 0xef, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x0, 0x4, 0xa, [@generic={0x8, 0xb, "d4eccd56ffab"}]}}]}}, {{0x9, 0x4, 0x68, 0x8, 0x4, 0x1, 0x4a, 0x23, 0x7, [], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0xfd, 0x81, 0xff, [@generic={0x8, 0xb, "ffcc82041ba2"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x1, 0x1, 0x97}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x0, 0x8, 0x40}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x7, 0x5}}]}}]}}]}}, 0x0) 3.004162476s ago: executing program 6 (id=6610): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x10, 0x1, 0x1b, {{0x13, 0x4, 0x1, 0x2, 0x4c, 0x65, 0x2, 0x10, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0xc, 0x98, 0x3, 0xe, [{@loopback, 0x3}]}, @timestamp={0x44, 0x8, 0x84, 0x0, 0x0, [0x10001]}, @noop, @rr={0x7, 0x13, 0xf5, [@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop, @lsrr={0x83, 0xb, 0xa3, [@private=0xa010102, @empty]}, @noop]}}}}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_deladdr={0x88, 0x15, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x80, 0x2, 0xc8, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x13ca9475, 0x2, 0x0, 0xffffff00}}, @IFA_FLAGS={0x8, 0x8, 0x36}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa78}, @IFA_CACHEINFO={0x14, 0x6, {0xac06, 0x7ff, 0x0, 0xc6}}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2.849723706s ago: executing program 2 (id=6611): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6", 0xa3, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca15689", 0x77, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400b", 0xb5}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.764049123s ago: executing program 1 (id=6612): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0xe, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x100c8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000d0000000000000000000001000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000992d2856cca131e5000000000000000100000000000000d5a7567704ca1ab54f2adf0f0b74b65222f2ce19dd1854cdf317700f60b27b45d85cc0bf7d9c94b5c90fb39518f7e63e27d96c9d05bf9c7de9"], 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3800}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(0xffffffffffffffff, 0x8919, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x36, 0x0, &(0x7f0000000240)="e027429b49dcd4ff9782762f86dd21e91717c73f9ae529df2043ca50862bc9797b8fff68c17bd529bf996f5e3acc9c39914d6afb75cd", 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0xa605, 0x300) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) 2.51072252s ago: executing program 2 (id=6613): kexec_load(0x5, 0x5, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f6c59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add000000000000000000", 0x77, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.452310723s ago: executing program 6 (id=6614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) unshare(0x22020600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @multicast2}, &(0x7f0000000280)=0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x5}, 0x8) setrlimit(0x3, &(0x7f00000000c0)={0x7, 0x9}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@map=r7, r5, 0x26, 0x10}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) shutdown(r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x1, 0x0, 0x0, 0x1, 0x5, 0x1}]}}, 0x0, 0x42}, 0x28) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11, 0x0, 0x5}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x4002, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f0009058202"], 0x0) 1.802194254s ago: executing program 1 (id=6615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c0002800d000100980000003c0003800c00028005000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff01000000000000000000000000000c3c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 1.288616346s ago: executing program 2 (id=6616): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010411000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000008000014001280090001007866726d0000000004000280140003007866726d3000"/48], 0x48}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="e0000000120009050000000000000000", @ANYRES32=0x0, @ANYBLOB="24e24d108b06e53f9494c673beb8e92191382e7d25af450870f7acb4e505dff4d14b7e733bff84fea5a7e4"], 0xe0}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="08154d6e120cef462903067af5000000051104000000000000000001000005545ebfd5bb32d042d87c1a02019856de12c07a6b9a5225f34dbd0f60765e7189e07713b3"], 0x1508}}, 0x0) writev(r3, &(0x7f0000000040), 0x2) pread64(r0, &(0x7f00000005c0)=""/186, 0xba, 0x5) ftruncate(0xffffffffffffffff, 0x7000000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000007000000000000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000962667e87b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="0000000000000000200051229dc9", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, r7, 0x25, 0x0, @val=@tcx}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r4, @ANYBLOB="f4ee8212afdc47f0"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) mmap(&(0x7f000063d000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x53298000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) setreuid(r9, 0x0) mbind(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x8, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1.204728936s ago: executing program 0 (id=6617): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000500)="6792cd3c1601f450331cfa6cfd3b301d0f43cd723082837d2d977cca20cfa9a18addb589a88e153d77f81575401d0d056b160eb2ba3695b395d23f51e284571b4674434e9f09355a62f404d0456491a1d723543f4ea0517d0b5309717da311e34e98adec863620c90cd7f1b9bbeafa6be5928fed", &(0x7f0000000680)="2e81840e9b69052807b428c2682b9857f142149446a375a8f9da4de441a97dc2f27798f1d0a657a65700fc7eba5f81df8cd76f009991199fcf4e0793d83873744c796b1b8f1bb5bbc377653a"}}, &(0x7f0000000480)=0x0) r1 = syz_clone(0x24281000, &(0x7f0000000100)="96f01d0721b93d394b582c2afa49f4367bffc80e6ce56742cf185f852db5cd1ec2ec178ba669479daa166e6b3b1061eb2c2d85c81f5e4b5f5ea7ee54f0cc284dadd2adf5a04f039968aadfbea7a8052428cf630468b50b6ce992fcda0c1a862c6cf899542cc0c8e391ad80bb1f3ceaede91a85d896833a9d243bd71d35e3c1f434d31f12e79b4a0eefcebf024052fc78ffaf2451942452f2be647c188db17f4164e1abb496c53d24d0f0280ebc40ca786dcffd3d71a0a6f25d38a6bb1b684268adc1e8c7cf5003bd12aa59a9fcecc7e4fce5852f484ae50d83abfa7b1c4f1c9f7b1131b806f102", 0xe7, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000009c0)="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") r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x14940, 0x0) read$dsp(r2, &(0x7f0000000780)=""/211, 0xd3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) timer_delete(r0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000180)={&(0x7f00000005c0), 0x5, &(0x7f0000000140)={&(0x7f0000000200)=@can={{0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "f1a9480e2a5f8784"}, 0x10}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="0ab31fe6854c91f8a184f3df5b827d248509def384aa4e", 0x17}, {&(0x7f0000000380)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24605016d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118", 0x9f}], 0x2}}], 0x1, 0x400a090) sendto$inet(r3, &(0x7f0000000580)="17", 0xfffffffffffffe5d, 0x10008095, 0x0, 0xfffffffffffffeb2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x15, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f0000000340)=0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x385a1000) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) close_range(r6, 0xffffffffffffffff, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff}]}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000700)) timer_delete(r0) socket$tipc(0x1e, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 35.357075ms ago: executing program 6 (id=6618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x18, 0x1, 0x1) listen(r1, 0x5) ioctl$sock_inet_udp_SIOCINQ(r1, 0x894b, 0x0) write(r0, &(0x7f00000002c0)="207d519f72e7924e1aa88483e4d7f91772d77ff3741f911b3cbe3fe3a49dca1fb895670db8620ac2f64b96a302a8102c8c092d4de93a0595924db88109065f325b5da042811c59ff5a87242123f1034dc13d15f7483f4d507901af73c3f2b32469", 0x61) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000280)={@multicast2, @rand_addr=0x64010100, 0x0, "ea8183a83326c6ee672806e7dc060c3deb30c317a448f484342df850698125c8", 0x3, 0x9, 0x8001, 0x3ff}, 0x3c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00844c03369f9381be610a0ea30aa3c74223e5e9df010927bd60002000000002002000ff"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008090) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2180866, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r2}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r6, 0x0, 0x0, 0x4c040) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7303772fa93d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r7 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$char_usb(r7, 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/210, 0xd2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004040) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) clock_gettime(0x8, &(0x7f0000000340)) 0s ago: executing program 1 (id=6619): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000dc3000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r0 = socket(0x28, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000100)={&(0x7f0000005480)=[{0x2, 0x8800, 0x1, &(0x7f0000003c80)='f'}, {0x6, 0x0, 0x0, 0x0}], 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x248, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xef, 0x4, "c513ccbee7a21b1870f5d8b19755fd66e3762fd94f2a3f349de2d9cfb5b5dcc845e474a3dd684c941832d5ca6a199e65d23abbb3ed998cbbf0b5efa5b97c9c465f7d1d8e2166dae7137d50b6b99d74b2d6e3bf17f146d3f4d455b9f23aa2d80069c44863933edba3dbc82856b409785bd237bfa1b0ed091a2b94dfca260f6222c2adcad712877b7a0aca3efbee077afe81e8512589d2112f338dedf1d33f6c6ac02442501294b5bb914b4fb7303ec42db977aa54ff857b398943e8a8af16d71de471994e30e80ad862f62f1087795a037654b5a1be674e4d65480a0388437931d685249ac05d4514786ef0"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20008080}, 0x40008d4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): _bhb_loop+0x40/0x90 [ 2155.379332][T25264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2155.379348][T25264] RIP: 0033:0x7fa37413ce59 [ 2155.379363][T25264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2155.379377][T25264] RSP: 002b:00007fa372375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2155.379394][T25264] RAX: ffffffffffffffda RBX: 00007fa3743b6090 RCX: 00007fa37413ce59 [ 2155.379406][T25264] RDX: 0000200000000300 RSI: 00000000c01864cd RDI: 0000000000000007 [ 2155.379417][T25264] RBP: 00007fa372375090 R08: 0000000000000000 R09: 0000000000000000 [ 2155.379427][T25264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2155.379438][T25264] R13: 00007fa3743b6128 R14: 00007fa3743b6090 R15: 00007ffd95355898 [ 2155.379463][T25264] [ 2155.379533][T25264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2157.559188][T25279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6226'. [ 2157.663457][T25284] FAULT_INJECTION: forcing a failure. [ 2157.663457][T25284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.663483][T25284] CPU: 0 UID: 0 PID: 25284 Comm: syz.1.6227 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2157.663502][T25284] Tainted: [L]=SOFTLOCKUP [ 2157.663507][T25284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2157.663516][T25284] Call Trace: [ 2157.663521][T25284] [ 2157.663527][T25284] dump_stack_lvl+0xe8/0x150 [ 2157.663547][T25284] should_fail_ex+0x46b/0x600 [ 2157.663568][T25284] _copy_from_user+0x2d/0xb0 [ 2157.663586][T25284] ___sys_recvmsg+0x175/0x590 [ 2157.663607][T25284] ? get_pid_task+0x20/0x1f0 [ 2157.663625][T25284] ? get_pid_task+0x20/0x1f0 [ 2157.663645][T25284] ? __pfx____sys_recvmsg+0x10/0x10 [ 2157.663668][T25284] ? __fget_files+0x2a/0x420 [ 2157.663692][T25284] ? __fget_files+0x3a6/0x420 [ 2157.663711][T25284] __x64_sys_recvmsg+0x1c0/0x2a0 [ 2157.663733][T25284] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 2157.663760][T25284] ? __pfx_ksys_write+0x10/0x10 [ 2157.663781][T25284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2157.663796][T25284] do_syscall_64+0x15f/0xf80 [ 2157.663815][T25284] ? trace_irq_disable+0x3b/0x140 [ 2157.663831][T25284] ? clear_bhb_loop+0x40/0x90 [ 2157.663848][T25284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2157.663861][T25284] RIP: 0033:0x7fc84558ce59 [ 2157.663874][T25284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2157.663886][T25284] RSP: 002b:00007fc8437c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2157.663901][T25284] RAX: ffffffffffffffda RBX: 00007fc845806090 RCX: 00007fc84558ce59 [ 2157.663911][T25284] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 2157.663920][T25284] RBP: 00007fc8437c5090 R08: 0000000000000000 R09: 0000000000000000 [ 2157.663929][T25284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2157.663938][T25284] R13: 00007fc845806128 R14: 00007fc845806090 R15: 00007ffdc874a208 [ 2157.663959][T25284] [ 2158.538069][T12412] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2158.707178][T12412] usb 5-1: Using ep0 maxpacket: 8 [ 2158.709749][T12412] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.709812][T12412] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2158.712570][T12412] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 2158.712588][T12412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.712601][T12412] usb 5-1: Product: syz [ 2158.712610][T12412] usb 5-1: Manufacturer: syz [ 2158.712620][T12412] usb 5-1: SerialNumber: syz [ 2158.716644][T12412] usb 5-1: config 0 descriptor?? [ 2158.804602][T12412] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 2158.804639][T12412] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 2158.805183][T12412] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2158.874593][ T994] net_ratelimit: 26 callbacks suppressed [ 2158.874612][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2159.151020][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 2159.426131][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2159.427705][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2159.428874][T14544] bond1: (slave bridge1): failed to get link speed/duplex [ 2159.497250][T25293] tc_dump_action: action bad kind [ 2159.537263][T12412] usb 5-1: USB disconnect, device number 32 [ 2159.548499][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2159.689617][T25300] netlink: 'syz.0.6232': attribute type 1 has an invalid length. [ 2159.689639][T25300] netlink: 'syz.0.6232': attribute type 2 has an invalid length. [ 2159.701050][T19421] bond1: (slave bridge1): failed to get link speed/duplex [ 2159.819472][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2159.820547][T19421] bond1: (slave bridge1): failed to get link speed/duplex [ 2159.864707][T25305] netlink: 'syz.6.6234': attribute type 12 has an invalid length. [ 2159.935915][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 2160.730227][T25315] FAULT_INJECTION: forcing a failure. [ 2160.730227][T25315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2160.730264][T25315] CPU: 0 UID: 0 PID: 25315 Comm: syz.4.6237 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2160.730292][T25315] Tainted: [L]=SOFTLOCKUP [ 2160.730301][T25315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2160.730314][T25315] Call Trace: [ 2160.730322][T25315] [ 2160.730331][T25315] dump_stack_lvl+0xe8/0x150 [ 2160.730360][T25315] should_fail_ex+0x46b/0x600 [ 2160.730388][T25315] _copy_from_user+0x2d/0xb0 [ 2160.730414][T25315] ___sys_sendmsg+0x1c6/0x360 [ 2160.730444][T25315] ? __lock_acquire+0x6b5/0x2cf0 [ 2160.730478][T25315] ? __pfx____sys_sendmsg+0x10/0x10 [ 2160.730541][T25315] ? __fget_files+0x2a/0x420 [ 2160.730564][T25315] ? __fget_files+0x3a6/0x420 [ 2160.730593][T25315] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2160.730627][T25315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2160.730665][T25315] ? __pfx_ksys_write+0x10/0x10 [ 2160.730698][T25315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.730721][T25315] do_syscall_64+0x15f/0xf80 [ 2160.730750][T25315] ? trace_irq_disable+0x3b/0x140 [ 2160.730774][T25315] ? clear_bhb_loop+0x40/0x90 [ 2160.730799][T25315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.730819][T25315] RIP: 0033:0x7fa37413ce59 [ 2160.730838][T25315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2160.730856][T25315] RSP: 002b:00007fa372396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2160.730878][T25315] RAX: ffffffffffffffda RBX: 00007fa3743b5fa0 RCX: 00007fa37413ce59 [ 2160.730895][T25315] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000f [ 2160.730909][T25315] RBP: 00007fa372396090 R08: 0000000000000000 R09: 0000000000000000 [ 2160.730923][T25315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2160.730936][T25315] R13: 00007fa3743b6038 R14: 00007fa3743b5fa0 R15: 00007ffd95355898 [ 2160.730969][T25315] [ 2161.145934][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6239'. [ 2162.700569][T10251] Bluetooth: hci0: unexpected event for opcode 0x007f [ 2162.860318][T25344] veth0: entered promiscuous mode [ 2162.869499][T25344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6249'. [ 2163.132615][T25341] veth0: left promiscuous mode [ 2163.222237][T25349] netlink: 'syz.2.6251': attribute type 12 has an invalid length. [ 2164.195069][T25359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6255'. [ 2164.306693][ T1294] net_ratelimit: 31 callbacks suppressed [ 2164.306714][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2165.664200][T25365] [U] ^A [ 2165.728727][T19421] bond1: (slave bridge1): failed to get link speed/duplex [ 2165.747102][ T1294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.755514][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.855044][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2165.919720][T25371] FAULT_INJECTION: forcing a failure. [ 2165.919720][T25371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2165.919758][T25371] CPU: 1 UID: 0 PID: 25371 Comm: syz.6.6260 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2165.919787][T25371] Tainted: [L]=SOFTLOCKUP [ 2165.919795][T25371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2165.919808][T25371] Call Trace: [ 2165.919817][T25371] [ 2165.919826][T25371] dump_stack_lvl+0xe8/0x150 [ 2165.919856][T25371] should_fail_ex+0x46b/0x600 [ 2165.919887][T25371] _copy_from_user+0x2d/0xb0 [ 2165.919914][T25371] ___sys_sendmsg+0x1c6/0x360 [ 2165.919944][T25371] ? __lock_acquire+0x6b5/0x2cf0 [ 2165.919976][T25371] ? __pfx____sys_sendmsg+0x10/0x10 [ 2165.920037][T25371] ? __fget_files+0x2a/0x420 [ 2165.920056][T25371] ? __fget_files+0x3a6/0x420 [ 2165.920085][T25371] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2165.920117][T25371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2165.920158][T25371] ? __pfx_ksys_write+0x10/0x10 [ 2165.920189][T25371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.920212][T25371] do_syscall_64+0x15f/0xf80 [ 2165.920241][T25371] ? trace_irq_disable+0x3b/0x140 [ 2165.920265][T25371] ? clear_bhb_loop+0x40/0x90 [ 2165.920291][T25371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.920311][T25371] RIP: 0033:0x7f1013c9ce59 [ 2165.920343][T25371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2165.920385][T25371] RSP: 002b:00007f1011ef6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2165.920409][T25371] RAX: ffffffffffffffda RBX: 00007f1013f15fa0 RCX: 00007f1013c9ce59 [ 2165.920426][T25371] RDX: 0000000000000000 RSI: 00002000000047c0 RDI: 0000000000000003 [ 2165.920440][T25371] RBP: 00007f1011ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 2165.920455][T25371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2165.920468][T25371] R13: 00007f1013f16038 R14: 00007f1013f15fa0 R15: 00007ffe259be6a8 [ 2165.920503][T25371] [ 2165.964477][T19421] bond1: (slave bridge1): failed to get link speed/duplex [ 2166.067266][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.193118][ T55] bond1: (slave bridge1): failed to get link speed/duplex [ 2166.230712][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.286948][T25373] tc_dump_action: action bad kind [ 2166.315963][T19421] bond1: (slave bridge1): failed to get link speed/duplex [ 2166.773380][T25379] netlink: 'syz.2.6265': attribute type 12 has an invalid length. [ 2166.817852][T12412] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2166.980371][T12412] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2166.980404][T12412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.987379][T12412] usb 7-1: config 0 descriptor?? [ 2167.019921][T12412] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2167.145849][T25383] netlink: 840 bytes leftover after parsing attributes in process `syz.0.6267'. [ 2167.296757][T25389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6269'. [ 2167.346988][T25391] FAULT_INJECTION: forcing a failure. [ 2167.346988][T25391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2167.347036][T25391] CPU: 1 UID: 0 PID: 25391 Comm: syz.1.6268 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2167.347065][T25391] Tainted: [L]=SOFTLOCKUP [ 2167.347073][T25391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2167.347085][T25391] Call Trace: [ 2167.347093][T25391] [ 2167.347101][T25391] dump_stack_lvl+0xe8/0x150 [ 2167.347130][T25391] should_fail_ex+0x46b/0x600 [ 2167.347156][T25391] _copy_from_user+0x2d/0xb0 [ 2167.347182][T25391] __sys_sendto+0x2bc/0x710 [ 2167.347213][T25391] ? __pfx___sys_sendto+0x10/0x10 [ 2167.347274][T25391] ? rcu_is_watching+0x15/0xb0 [ 2167.347310][T25391] __x64_sys_sendto+0xde/0x100 [ 2167.347337][T25391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2167.347377][T25391] do_syscall_64+0x15f/0xf80 [ 2167.347404][T25391] ? trace_irq_disable+0x3b/0x140 [ 2167.347429][T25391] ? clear_bhb_loop+0x40/0x90 [ 2167.347455][T25391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2167.347476][T25391] RIP: 0033:0x7fc84558ce59 [ 2167.347495][T25391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2167.347513][T25391] RSP: 002b:00007fc8437e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2167.347535][T25391] RAX: ffffffffffffffda RBX: 00007fc845805fa0 RCX: 00007fc84558ce59 [ 2167.347551][T25391] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 2167.347565][T25391] RBP: 00007fc8437e6090 R08: 0000200000000240 R09: 000000000000001c [ 2167.347580][T25391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.347593][T25391] R13: 00007fc845806038 R14: 00007fc845805fa0 R15: 00007ffdc874a208 [ 2167.347626][T25391] [ 2167.682501][T12412] gspca_cpia1: usb_control_msg 01, error -71 [ 2167.682523][T12412] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 2167.725118][T12412] usb 7-1: USB disconnect, device number 68 [ 2169.224418][T25398] [U] ^A [ 2169.508082][T10251] Bluetooth: hci4: unexpected event for opcode 0x007f [ 2169.984928][ T68] net_ratelimit: 19 callbacks suppressed [ 2169.984950][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2170.739775][T12412] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 2170.952174][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2171.733029][T12412] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2171.733543][T12412] usb 7-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2171.733693][T12412] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2171.735461][T12412] usb 7-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.00 [ 2171.735714][T12412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.905711][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2171.930074][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.945740][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.958305][T12412] usb 7-1: config 0 descriptor?? [ 2171.967097][T25407] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2172.083454][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2172.128961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2172.130246][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2172.134508][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2172.196043][ T1447] bond1: (slave bridge1): failed to get link speed/duplex [ 2172.218567][T25419] FAULT_INJECTION: forcing a failure. [ 2172.218567][T25419] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.218606][T25419] CPU: 0 UID: 0 PID: 25419 Comm: syz.1.6280 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2172.218638][T25419] Tainted: [L]=SOFTLOCKUP [ 2172.218645][T25419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2172.218659][T25419] Call Trace: [ 2172.218668][T25419] [ 2172.218678][T25419] dump_stack_lvl+0xe8/0x150 [ 2172.218709][T25419] should_fail_ex+0x46b/0x600 [ 2172.218739][T25419] should_failslab+0xa8/0x100 [ 2172.218769][T25419] __kmalloc_noprof+0xdf/0x7b0 [ 2172.218792][T25419] ? kfree+0x4d/0x6c0 [ 2172.218812][T25419] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2172.218841][T25419] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2172.218867][T25419] ? tomoyo_domain+0xd7/0x130 [ 2172.218896][T25419] ? tomoyo_path_number_perm+0x219/0x630 [ 2172.218929][T25419] tomoyo_path_number_perm+0x246/0x630 [ 2172.218963][T25419] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2172.218992][T25419] ? __lock_acquire+0x6b5/0x2cf0 [ 2172.219025][T25419] ? do_raw_spin_lock+0x12b/0x2f0 [ 2172.219092][T25419] ? __fget_files+0x2a/0x420 [ 2172.219117][T25419] ? __fget_files+0x2a/0x420 [ 2172.219137][T25419] ? __fget_files+0x3a6/0x420 [ 2172.219157][T25419] ? __fget_files+0x2a/0x420 [ 2172.219182][T25419] security_file_ioctl+0xc3/0x2a0 [ 2172.219217][T25419] __se_sys_ioctl+0x47/0x170 [ 2172.219244][T25419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2172.219270][T25419] do_syscall_64+0x15f/0xf80 [ 2172.219300][T25419] ? trace_irq_disable+0x3b/0x140 [ 2172.219326][T25419] ? clear_bhb_loop+0x40/0x90 [ 2172.219353][T25419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2172.219376][T25419] RIP: 0033:0x7fc84558ce59 [ 2172.219396][T25419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2172.219415][T25419] RSP: 002b:00007fc8437e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2172.219440][T25419] RAX: ffffffffffffffda RBX: 00007fc845805fa0 RCX: 00007fc84558ce59 [ 2172.219457][T25419] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000003 [ 2172.219472][T25419] RBP: 00007fc8437e6090 R08: 0000000000000000 R09: 0000000000000000 [ 2172.219486][T25419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2172.219500][T25419] R13: 00007fc845806038 R14: 00007fc845805fa0 R15: 00007ffdc874a208 [ 2172.219536][T25419] [ 2172.219546][T25419] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2172.486714][T12412] hid (null): unknown global tag 0xc [ 2172.486737][T12412] hid (null): report_id 36175 is invalid [ 2172.503729][T12412] hid_parser_main: 30 callbacks suppressed [ 2172.503750][T12412] asus 0003:0B05:1869.0007: unknown main item tag 0x2 [ 2172.503839][T12412] asus 0003:0B05:1869.0007: unknown global tag 0xc [ 2172.503856][T12412] asus 0003:0B05:1869.0007: item 0 2 1 12 parsing failed [ 2172.509964][T12412] asus 0003:0B05:1869.0007: Asus hid parse failed: -22 [ 2172.510077][T12412] asus 0003:0B05:1869.0007: probe with driver asus failed with error -22 [ 2172.664955][ T1249] usb 7-1: USB disconnect, device number 69 [ 2173.030673][T12412] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2173.120026][T25427] ipvlan3: entered promiscuous mode [ 2173.150275][T25436] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6284'. [ 2173.197278][T12412] usb 5-1: Using ep0 maxpacket: 32 [ 2173.203639][T12412] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2173.203668][T12412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.203688][T12412] usb 5-1: Product: syz [ 2173.203701][T12412] usb 5-1: Manufacturer: syz [ 2173.203715][T12412] usb 5-1: SerialNumber: syz [ 2173.247244][T12412] usb 5-1: config 0 descriptor?? [ 2173.469934][T12412] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 033 [ 2174.000225][T12412] usb 5-1: USB disconnect, device number 33 [ 2175.390742][ T41] net_ratelimit: 13 callbacks suppressed [ 2175.390763][ T41] bond1: (slave bridge1): failed to get link speed/duplex [ 2175.444635][ T5835] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2175.506999][ T1562] bond1: (slave bridge1): failed to get link speed/duplex [ 2175.548878][ T1447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.557590][ T6689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.601598][ T5835] usb 7-1: Using ep0 maxpacket: 16 [ 2175.609572][ T5835] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2175.609592][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.609613][ T5835] usb 7-1: Product: syz [ 2175.609623][ T5835] usb 7-1: Manufacturer: syz [ 2175.609633][ T5835] usb 7-1: SerialNumber: syz [ 2175.629363][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2175.677922][ T5835] usb 7-1: config 0 descriptor?? [ 2175.740658][ T41] bond1: (slave bridge1): failed to get link speed/duplex [ 2175.858489][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2175.923189][ T5835] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 2175.975679][ T41] bond1: (slave bridge1): failed to get link speed/duplex [ 2175.982710][ T5835] usb 7-1: USB disconnect, device number 70 [ 2176.081336][T25461] FAULT_INJECTION: forcing a failure. [ 2176.081336][T25461] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.081363][T25461] CPU: 0 UID: 0 PID: 25461 Comm: syz.4.6292 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2176.081384][T25461] Tainted: [L]=SOFTLOCKUP [ 2176.081389][T25461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2176.081398][T25461] Call Trace: [ 2176.081404][T25461] [ 2176.081410][T25461] dump_stack_lvl+0xe8/0x150 [ 2176.081433][T25461] should_fail_ex+0x46b/0x600 [ 2176.081453][T25461] should_failslab+0xa8/0x100 [ 2176.081472][T25461] __kmalloc_noprof+0xdf/0x7b0 [ 2176.081488][T25461] ? kfree+0x4d/0x6c0 [ 2176.081501][T25461] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2176.081527][T25461] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2176.081544][T25461] ? tomoyo_domain+0xd7/0x130 [ 2176.081563][T25461] ? tomoyo_path_number_perm+0x219/0x630 [ 2176.081584][T25461] tomoyo_path_number_perm+0x246/0x630 [ 2176.081607][T25461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2176.081626][T25461] ? __lock_acquire+0x6b5/0x2cf0 [ 2176.081649][T25461] ? do_raw_spin_lock+0x12b/0x2f0 [ 2176.081688][T25461] ? __fget_files+0x2a/0x420 [ 2176.081704][T25461] ? __fget_files+0x2a/0x420 [ 2176.081716][T25461] ? __fget_files+0x3a6/0x420 [ 2176.081729][T25461] ? __fget_files+0x2a/0x420 [ 2176.081745][T25461] security_file_ioctl+0xc3/0x2a0 [ 2176.081769][T25461] __se_sys_ioctl+0x47/0x170 [ 2176.081950][T25461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.081968][T25461] do_syscall_64+0x15f/0xf80 [ 2176.081990][T25461] ? trace_irq_disable+0x3b/0x140 [ 2176.082008][T25461] ? clear_bhb_loop+0x40/0x90 [ 2176.082026][T25461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.082040][T25461] RIP: 0033:0x7fa37413ce59 [ 2176.082055][T25461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2176.082067][T25461] RSP: 002b:00007fa372396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2176.082083][T25461] RAX: ffffffffffffffda RBX: 00007fa3743b5fa0 RCX: 00007fa37413ce59 [ 2176.082094][T25461] RDX: 00002000000000c0 RSI: 000000004008af13 RDI: 0000000000000003 [ 2176.082103][T25461] RBP: 00007fa372396090 R08: 0000000000000000 R09: 0000000000000000 [ 2176.082157][T25461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2176.082170][T25461] R13: 00007fa3743b6038 R14: 00007fa3743b5fa0 R15: 00007ffd95355898 [ 2176.082201][T25461] [ 2176.082220][T25461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2176.113444][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2176.248017][ T41] bond1: (slave bridge1): failed to get link speed/duplex [ 2180.560780][T25495] FAULT_INJECTION: forcing a failure. [ 2180.560780][T25495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2180.560819][T25495] CPU: 1 UID: 0 PID: 25495 Comm: syz.6.6303 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2180.560848][T25495] Tainted: [L]=SOFTLOCKUP [ 2180.560856][T25495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2180.560870][T25495] Call Trace: [ 2180.560879][T25495] [ 2180.560888][T25495] dump_stack_lvl+0xe8/0x150 [ 2180.560916][T25495] should_fail_ex+0x46b/0x600 [ 2180.560944][T25495] _copy_from_user+0x2d/0xb0 [ 2180.560971][T25495] __sys_bpf+0x229/0x950 [ 2180.560999][T25495] ? __pfx___sys_bpf+0x10/0x10 [ 2180.561021][T25495] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2180.561062][T25495] ? ksys_write+0x248/0x270 [ 2180.561090][T25495] ? __pfx_ksys_write+0x10/0x10 [ 2180.561118][T25495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.561140][T25495] __x64_sys_bpf+0x7c/0x90 [ 2180.561164][T25495] do_syscall_64+0x15f/0xf80 [ 2180.561251][T25495] ? trace_irq_disable+0x3b/0x140 [ 2180.561274][T25495] ? clear_bhb_loop+0x40/0x90 [ 2180.561299][T25495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.561336][T25495] RIP: 0033:0x7f1013c9ce59 [ 2180.561356][T25495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2180.561378][T25495] RSP: 002b:00007f1011ef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2180.561401][T25495] RAX: ffffffffffffffda RBX: 00007f1013f15fa0 RCX: 00007f1013c9ce59 [ 2180.561427][T25495] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 2180.561441][T25495] RBP: 00007f1011ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 2180.561455][T25495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2180.561468][T25495] R13: 00007f1013f16038 R14: 00007f1013f15fa0 R15: 00007ffe259be6a8 [ 2180.561500][T25495] [ 2180.754554][T14544] net_ratelimit: 21 callbacks suppressed [ 2180.754579][T14544] bond1: (slave bridge1): failed to get link speed/duplex [ 2180.873811][T14544] bond1: (slave bridge1): failed to get link speed/duplex [ 2180.879048][T25498] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 2180.987417][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2181.104953][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2181.222442][T14544] bond1: (slave bridge1): failed to get link speed/duplex [ 2182.228225][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.251796][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2182.270965][T12412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.280438][ T5835] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 2182.367755][ T41] bond1: (slave bridge1): failed to get link speed/duplex [ 2182.454598][ T5835] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 2182.454627][ T5835] usb 5-1: config 0 has no interface number 0 [ 2182.457513][ T5835] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2182.457539][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.457559][ T5835] usb 5-1: Product: syz [ 2182.457573][ T5835] usb 5-1: Manufacturer: syz [ 2182.457587][ T5835] usb 5-1: SerialNumber: syz [ 2182.497540][ T41] bond1: (slave bridge1): failed to get link speed/duplex [ 2182.523613][ T5835] usb 5-1: config 0 descriptor?? [ 2182.524390][T25508] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2182.752143][ T5835] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 2182.756104][ T5835] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 2182.756161][ T5835] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 2182.756210][ T5835] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 2182.794134][ T5835] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2182.799506][ T5835] usb 5-1: USB disconnect, device number 34 [ 2182.870859][ T5835] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2182.871809][ T5835] keyspan 5-1:0.133: device disconnected [ 2183.579564][T25535] netlink: 'syz.4.6319': attribute type 1 has an invalid length. [ 2183.698170][T25535] bond2: (slave geneve3): making interface the new active one [ 2183.729284][T25538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6319'. [ 2183.730584][T25535] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 2183.730822][T14544] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2183.731973][T25538] bond2: entered promiscuous mode [ 2183.731991][T25538] geneve3: entered promiscuous mode [ 2183.732217][T25538] bond2: entered allmulticast mode [ 2183.732237][T25538] geneve3: entered allmulticast mode [ 2183.732672][T25538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2183.844328][T14544] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2183.844437][T14544] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2183.844478][T14544] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2185.507616][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2186.850909][ T55] net_ratelimit: 19 callbacks suppressed [ 2186.850930][ T55] bond1: (slave bridge1): failed to get link speed/duplex [ 2186.979444][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 2186.999476][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2187.069522][ T9] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 2187.069597][ T9] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2187.069649][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2187.069671][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.136875][T10251] Bluetooth: hci3: unexpected event for opcode 0x007f [ 2187.326955][ T1562] bond1: (slave bridge1): failed to get link speed/duplex [ 2187.970165][T25572] FAULT_INJECTION: forcing a failure. [ 2187.970165][T25572] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.970222][T25572] CPU: 0 UID: 0 PID: 25572 Comm: syz.4.6326 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2187.970250][T25572] Tainted: [L]=SOFTLOCKUP [ 2187.970258][T25572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2187.970269][T25572] Call Trace: [ 2187.970277][T25572] [ 2187.970286][T25572] dump_stack_lvl+0xe8/0x150 [ 2187.970312][T25572] should_fail_ex+0x46b/0x600 [ 2187.970332][T25572] should_failslab+0xa8/0x100 [ 2187.970350][T25572] __kmalloc_noprof+0xdf/0x7b0 [ 2187.970365][T25572] ? kfree+0x4d/0x6c0 [ 2187.970377][T25572] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2187.970396][T25572] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2187.970412][T25572] ? __srcu_check_read_flavor+0x93/0x250 [ 2187.970435][T25572] ? tomoyo_path_number_perm+0x219/0x630 [ 2187.970455][T25572] tomoyo_path_number_perm+0x246/0x630 [ 2187.970477][T25572] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2187.970500][T25572] ? preempt_schedule_thunk+0x16/0x30 [ 2187.970541][T25572] ? __rcu_read_unlock+0x83/0xe0 [ 2187.970558][T25572] ? __fget_files+0x2a/0x420 [ 2187.970570][T25572] ? __fget_files+0x3a6/0x420 [ 2187.970582][T25572] ? __fget_files+0x2a/0x420 [ 2187.970598][T25572] security_file_ioctl+0xc3/0x2a0 [ 2187.970620][T25572] __se_sys_ioctl+0x47/0x170 [ 2187.970637][T25572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.970652][T25572] do_syscall_64+0x15f/0xf80 [ 2187.970674][T25572] ? clear_bhb_loop+0x40/0x90 [ 2187.970692][T25572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.970705][T25572] RIP: 0033:0x7fa37413ce59 [ 2187.970718][T25572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2187.970730][T25572] RSP: 002b:00007fa372375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2187.970745][T25572] RAX: ffffffffffffffda RBX: 00007fa3743b6090 RCX: 00007fa37413ce59 [ 2187.970755][T25572] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000006 [ 2187.970765][T25572] RBP: 00007fa372375090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.970773][T25572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.970782][T25572] R13: 00007fa3743b6128 R14: 00007fa3743b6090 R15: 00007ffd95355898 [ 2187.970803][T25572] [ 2187.970860][T25572] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2188.808908][ T9] usb 5-1: string descriptor 0 read error: -71 [ 2188.841931][ T41] bond1: (slave bridge1): failed to get link speed/duplex [ 2188.888725][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.898686][ T9] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2189.051963][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2189.060207][ T9] usb 5-1: USB disconnect, device number 35 [ 2189.248025][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2189.248837][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2189.259731][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2192.274893][ T1294] net_ratelimit: 14 callbacks suppressed [ 2192.274914][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2192.283431][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2192.592828][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2192.677989][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2192.684138][ T9] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2192.684168][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.684191][ T9] usb 5-1: Product: syz [ 2192.684205][ T9] usb 5-1: Manufacturer: syz [ 2192.684291][ T9] usb 5-1: SerialNumber: syz [ 2192.722421][ T1562] bond1: (slave bridge1): failed to get link speed/duplex [ 2192.742613][ T9] usb 5-1: config 0 descriptor?? [ 2192.787829][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2192.838408][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2192.955944][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 2193.073430][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2193.202456][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 2193.378790][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2193.379117][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2193.407588][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.485066][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2193.486936][ T1294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.061996][ T9] gspca_topro: reg_w err -110 [ 2194.088589][ T9] gspca_topro: Sensor soi763a [ 2194.880101][T19825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2194.943544][T19825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2194.991268][T19825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2195.012673][ T1259] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2195.021634][T19825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2195.026893][T19825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2195.170959][ T1259] usb 7-1: Using ep0 maxpacket: 32 [ 2195.309146][ T1259] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2195.309179][ T1259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.309201][ T1259] usb 7-1: Product: syz [ 2195.309218][ T1259] usb 7-1: Manufacturer: syz [ 2195.309234][ T1259] usb 7-1: SerialNumber: syz [ 2195.353722][ T1259] usb 7-1: config 0 descriptor?? [ 2195.414091][ T1259] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2196.458163][ T5835] usb 5-1: USB disconnect, device number 36 [ 2196.842580][ T1259] gspca_topro: reg_w err -71 [ 2196.866816][ T1259] gspca_topro: Sensor soi763a [ 2196.891616][ T1259] usb 7-1: USB disconnect, device number 71 [ 2197.286145][ T5835] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2197.330713][T19421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.496697][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 2197.508805][ T5835] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 2197.508826][ T5835] usb 5-1: config 0 has no interface number 0 [ 2197.508870][ T5835] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2197.508886][ T5835] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2197.508905][ T5835] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 2197.508923][ T5835] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2197.513739][ T5835] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2197.513758][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.513777][ T5835] usb 5-1: Product: syz [ 2197.513786][ T5835] usb 5-1: Manufacturer: syz [ 2197.513796][ T5835] usb 5-1: SerialNumber: syz [ 2197.522272][T10251] Bluetooth: hci5: command tx timeout [ 2197.660713][ T5835] usb 5-1: config 0 descriptor?? [ 2197.661528][T25625] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2197.694688][ T5835] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input124 [ 2197.723897][ T4951] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 2198.163646][ T13] net_ratelimit: 20 callbacks suppressed [ 2198.163664][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2198.280392][T14544] bond1: (slave bridge1): failed to get link speed/duplex [ 2198.396216][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2198.513017][T14544] bond1: (slave bridge1): failed to get link speed/duplex [ 2198.628745][ C1] bcm5974 5-1:0.119: trackpad urb failed: -1 [ 2198.642229][ T1285] bond1: (slave bridge1): failed to get link speed/duplex [ 2198.717553][ T5835] usb 5-1: USB disconnect, device number 37 [ 2198.717637][ C0] bcm5974 5-1:0.119: trackpad urb failed: -19 [ 2198.770625][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2199.102588][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2199.342332][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 2199.530708][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2199.783522][T10251] Bluetooth: hci5: command tx timeout [ 2200.556501][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2201.724005][T19421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.808789][ T37] audit: type=1326 audit(1779625048.389:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25646 comm="syz.6.6353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1013c9ce59 code=0x0 [ 2201.965073][T10251] Bluetooth: hci5: command tx timeout [ 2202.042136][T25608] wg1 speed is unknown, defaulting to 1000 [ 2202.068153][T25650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6354'. [ 2202.068235][T25650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2202.068244][T25650] IPv6: NLM_F_CREATE should be set when creating new route [ 2202.069159][T25650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6354'. [ 2202.069245][T25650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2202.438683][ T4966] Dev loop2: unable to read RDB block 7 [ 2202.438720][ T4966] loop2: unable to read partition table [ 2202.438884][ T4966] loop2: partition table beyond EOD, truncated [ 2204.980732][T10251] Bluetooth: hci5: command tx timeout [ 2205.029378][ T1285] net_ratelimit: 10 callbacks suppressed [ 2205.029399][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.388456][T19421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.960116][T19421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.101868][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 2206.369828][ T5835] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2206.419329][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2206.434620][ T6689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2206.627928][T25675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2206.640662][T25675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.438683][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.440275][ T5835] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2207.440303][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.440323][ T5835] usb 7-1: Product: syz [ 2207.440336][ T5835] usb 7-1: Manufacturer: syz [ 2207.440350][ T5835] usb 7-1: SerialNumber: syz [ 2207.454615][ T5835] usb 7-1: config 0 descriptor?? [ 2207.488920][ T5835] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2207.500468][ T5835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2207.501259][ T5835] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2207.501305][ T5835] usb 7-1: media controller created [ 2207.561497][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2207.582589][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.674578][T25670] dvb-usb: bulk message failed: -22 (7/0) [ 2207.692396][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.696248][ T6689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.034557][ T5835] DVB: Unable to find symbol mt352_attach() [ 2208.282090][ T5835] DVB: Unable to find symbol nxt6000_attach() [ 2208.282103][ T5835] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2208.292283][ T5835] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input125 [ 2208.477529][ T5835] dvb-usb: schedule remote query interval to 1000 msecs. [ 2208.477553][ T5835] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2208.477572][ T5835] dvb-usb: bulk message failed: -22 (7/0) [ 2208.477589][ T5835] dvb-usb: bulk message failed: -22 (7/0) [ 2208.510186][ T5835] usb 7-1: USB disconnect, device number 72 [ 2209.115006][ T5835] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2209.550596][T25692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2209.550613][T25692] IPv6: NLM_F_CREATE should be set when creating new route [ 2209.607578][T25692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2210.192501][ T37] audit: type=1326 audit(1779625056.231:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25693 comm="syz.4.6366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa37413ce59 code=0x0 [ 2211.548404][ T58] net_ratelimit: 8 callbacks suppressed [ 2211.548423][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2211.653025][T10251] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 2212.027092][T25608] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.027209][T25608] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.027430][T25608] bridge_slave_0: entered allmulticast mode [ 2212.069663][T25608] bridge_slave_0: entered promiscuous mode [ 2212.127576][T25608] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.127780][T25608] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.127985][T25608] bridge_slave_1: entered allmulticast mode [ 2212.136464][T25608] bridge_slave_1: entered promiscuous mode [ 2212.231835][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6370'. [ 2212.711328][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2212.712064][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.163875][ T1537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.164371][ T1537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.164632][T12412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.167117][T19421] bridge_slave_1: left allmulticast mode [ 2213.167150][T19421] bridge_slave_1: left promiscuous mode [ 2213.167406][T19421] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.297502][T25722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.298207][T25722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.319877][T25722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.320524][T25722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.440102][T19421] bridge_slave_0: left allmulticast mode [ 2213.440127][T19421] bridge_slave_0: left promiscuous mode [ 2213.440322][T19421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.524637][T25725] tmpfs: Bad value for 'mpol' [ 2213.533811][T25725] 9p: Bad value for 'rfdno' [ 2217.980655][ T1285] net_ratelimit: 11 callbacks suppressed [ 2217.980671][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.167186][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.242580][T23738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.702358][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.702904][T23738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2219.319503][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2219.320164][T22740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2219.321198][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2219.699142][T19421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2219.778462][T19421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2219.818601][T25748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2219.819409][T25748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2219.846898][T19421] bond0 (unregistering): Released all slaves [ 2219.964311][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2219.964702][T25740] netlink: 'syz.0.6377': attribute type 6 has an invalid length. [ 2220.167668][T25746] macvlan0: left promiscuous mode [ 2220.167703][T25746] macvlan0: left allmulticast mode [ 2220.172117][T25746] netlink: 'syz.6.6378': attribute type 1 has an invalid length. [ 2220.172132][T25746] netlink: 'syz.6.6378': attribute type 2 has an invalid length. [ 2220.180397][T19625] wg1 speed is unknown, defaulting to 1000 [ 2220.183823][T19625] syz0: Port: 1 Link DOWN [ 2220.268272][T25608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2220.268700][T19421] : left promiscuous mode [ 2220.393506][T25608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2220.695219][T25608] team0: Port device team_slave_0 added [ 2220.698678][T14544] bond1: (slave bridge1): failed to get link speed/duplex [ 2221.545298][T25608] team0: Port device team_slave_1 added [ 2221.632360][ T37] audit: type=1326 audit(1779625066.927:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25756 comm="syz.2.6379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e3f5bce59 code=0x0 [ 2221.852013][T25761] netlink: 'syz.6.6381': attribute type 12 has an invalid length. [ 2221.945028][T25608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2221.945046][T25608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2221.945080][T25608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2222.231900][T25608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2222.231919][T25608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2222.231949][T25608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2222.662994][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2222.690058][T25608] hsr_slave_0: entered promiscuous mode [ 2222.691345][T25608] hsr_slave_1: entered promiscuous mode [ 2222.693062][T25608] debugfs: 'hsr0' already exists in 'hsr' [ 2222.693088][T25608] Cannot create hsr debugfs directory [ 2224.597674][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.598481][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.625094][ T6689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.789956][ T1447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.790730][ T6689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.811533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.939320][ T1447] bond1: (slave bridge1): failed to get link speed/duplex [ 2225.082020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.291906][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2225.475488][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.510361][T25788] tmpfs: Unknown parameter 'mpow' [ 2225.673141][T25793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6389'. [ 2225.673927][T25793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6389'. [ 2225.777642][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2227.011890][T25806] netlink: 'syz.6.6391': attribute type 1 has an invalid length. [ 2227.011912][T25806] netlink: 'syz.6.6391': attribute type 2 has an invalid length. [ 2228.393579][T10251] Bluetooth: hci4: unexpected event for opcode 0x007f [ 2228.551984][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2228.796836][T25829] nbd6: detected capacity change from 0 to 63 [ 2228.809983][T25830] block nbd6: NBD_DISCONNECT [ 2228.920967][T25830] block nbd6: Disconnected due to user request. [ 2228.974629][T25830] block nbd6: shutting down sockets [ 2229.005513][T25762] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.036465][T25762] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2229.037931][T25762] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.037962][T25762] Buffer I/O error on dev nbd6, logical block 1, async page read [ 2229.083218][T25762] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.083245][T25762] Buffer I/O error on dev nbd6, logical block 2, async page read [ 2229.083353][T25762] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.083385][T25762] Buffer I/O error on dev nbd6, logical block 3, async page read [ 2229.120425][T25762] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.120463][T25762] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2229.120604][T25762] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.120628][T25762] Buffer I/O error on dev nbd6, logical block 1, async page read [ 2229.120774][T25762] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.120799][T25762] Buffer I/O error on dev nbd6, logical block 2, async page read [ 2229.120934][T25762] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.120958][T25762] Buffer I/O error on dev nbd6, logical block 3, async page read [ 2229.121121][T25762] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.121146][T25762] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2229.121287][T25762] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2229.121311][T25762] Buffer I/O error on dev nbd6, logical block 1, async page read [ 2229.493226][T25762] ldm_validate_partition_table(): Disk read failed. [ 2229.616775][T25762] Dev nbd6: unable to read RDB block 0 [ 2229.672748][T25762] nbd6: unable to read partition table [ 2230.003224][T25762] ldm_validate_partition_table(): Disk read failed. [ 2230.047294][T25762] Dev nbd6: unable to read RDB block 0 [ 2230.063050][T25841] FAULT_INJECTION: forcing a failure. [ 2230.063050][T25841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2230.063150][T25841] CPU: 1 UID: 0 PID: 25841 Comm: syz.6.6398 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2230.063235][T25841] Tainted: [L]=SOFTLOCKUP [ 2230.063256][T25841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2230.063288][T25841] Call Trace: [ 2230.063315][T25841] [ 2230.063337][T25841] dump_stack_lvl+0xe8/0x150 [ 2230.063414][T25841] should_fail_ex+0x46b/0x600 [ 2230.063498][T25841] copy_fpstate_to_sigframe+0xaab/0xd60 [ 2230.063574][T25841] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 2230.063642][T25841] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 2230.063705][T25841] ? rt_spin_lock+0x1e0/0x400 [ 2230.063769][T25841] ? rt_spin_lock+0x1e0/0x400 [ 2230.063846][T25841] ? fpu__alloc_mathframe+0xac/0x130 [ 2230.063916][T25841] get_sigframe+0x5f7/0x820 [ 2230.064041][T25841] ? __pfx_get_sigframe+0x10/0x10 [ 2230.064105][T25841] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 2230.064160][T25841] ? reacquire_held_locks+0x104/0x190 [ 2230.064224][T25841] x64_setup_rt_frame+0x160/0xcb0 [ 2230.064310][T25841] ? rt_spin_unlock+0x14f/0x200 [ 2230.064374][T25841] ? rt_spin_unlock+0x160/0x200 [ 2230.064455][T25841] ? get_signal+0x114f/0x1330 [ 2230.064541][T25841] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 2230.064654][T25841] arch_do_signal_or_restart+0x442/0x840 [ 2230.064745][T25841] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2230.064849][T25841] ? do_readv+0x2b7/0x2e0 [ 2230.064944][T25841] exit_to_user_mode_loop+0x8c/0x4d0 [ 2230.065011][T25841] ? rcu_is_watching+0x15/0xb0 [ 2230.065089][T25841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2230.065167][T25841] do_syscall_64+0x33e/0xf80 [ 2230.065248][T25841] ? trace_irq_disable+0x3b/0x140 [ 2230.065316][T25841] ? clear_bhb_loop+0x40/0x90 [ 2230.065386][T25841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2230.065438][T25841] RIP: 0033:0x7f1013c9ce57 [ 2230.065484][T25841] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 2230.065530][T25841] RSP: 002b:00007f1011ef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2230.065583][T25841] RAX: 0000000000000013 RBX: 00007f1013f15fa0 RCX: 00007f1013c9ce59 [ 2230.065619][T25841] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 2230.065654][T25841] RBP: 00007f1011ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 2230.065682][T25841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.065723][T25841] R13: 00007f1013f16038 R14: 00007f1013f15fa0 R15: 00007ffe259be6a8 [ 2230.065796][T25841] [ 2230.178066][T25762] nbd6: unable to read partition table [ 2231.503896][ T1537] net_ratelimit: 11 callbacks suppressed [ 2231.503912][ T1537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.504230][ T1537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.512873][T19625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.581233][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.582249][ T6689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.632627][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.633324][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.736014][T18061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2232.071896][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6399'. [ 2232.072768][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6399'. [ 2232.405351][ T4966] Dev loop2: unable to read RDB block 7 [ 2232.405391][ T4966] loop2: unable to read partition table [ 2232.405609][ T4966] loop2: partition table beyond EOD, truncated [ 2232.410908][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2234.018575][T25864] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2234.021387][T25864] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2234.029715][T25864] vhci_hcd vhci_hcd.0: Device attached [ 2234.241766][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2234.241788][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2234.267717][T25867] vhci_hcd: connection closed [ 2234.310767][ T12] vhci_hcd vhci_hcd.4: stop threads [ 2234.310805][ T12] vhci_hcd vhci_hcd.4: release socket [ 2234.310842][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 2234.338855][T25863] netlink: 'syz.6.6403': attribute type 1 has an invalid length. [ 2234.338877][T25863] netlink: 'syz.6.6403': attribute type 2 has an invalid length. [ 2234.422081][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 2234.721020][T25877] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6404'. [ 2234.740125][T19421] hsr_slave_0: left promiscuous mode [ 2234.781198][T19421] hsr_slave_1: left promiscuous mode [ 2234.782194][T19421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2234.782221][T19421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2234.933566][T19421] batman_adv: batadv0: Removing interface: vlan2 [ 2235.003518][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6405'. [ 2235.018315][T19421] veth1_macvtap: left promiscuous mode [ 2235.018404][T19421] veth0_macvtap: left promiscuous mode [ 2235.018526][T19421] veth1_vlan: left promiscuous mode [ 2235.018643][T19421] veth0_vlan: left promiscuous mode [ 2235.055538][T25884] tmpfs: Bad value for 'mpol' [ 2235.787080][T19421] team0 (unregistering): Port device team_slave_1 removed [ 2235.840889][T19421] team0 (unregistering): Port device team_slave_0 removed [ 2236.725995][ T6689] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2238.537240][ T58] net_ratelimit: 5 callbacks suppressed [ 2238.537260][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 2238.560200][ T1537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2238.560953][T12412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2238.561325][ T1447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2238.586091][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2238.587211][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2238.587676][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2238.590500][T12412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2238.590534][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2238.660267][ T6689] usb 5-1: Using ep0 maxpacket: 16 [ 2238.666060][ T6689] usb 5-1: config 6 has an invalid interface number: 7 but max is 1 [ 2238.666084][ T6689] usb 5-1: config 6 has an invalid interface number: 104 but max is 1 [ 2238.666105][ T6689] usb 5-1: config 6 has no interface number 0 [ 2238.666122][ T6689] usb 5-1: config 6 has no interface number 1 [ 2238.666178][ T6689] usb 5-1: config 6 interface 7 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2238.666220][ T6689] usb 5-1: config 6 interface 104 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 2238.666243][ T6689] usb 5-1: config 6 interface 104 altsetting 8 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2238.666269][ T6689] usb 5-1: config 6 interface 7 has no altsetting 0 [ 2238.666288][ T6689] usb 5-1: config 6 interface 104 has no altsetting 0 [ 2238.767956][ T6689] usb 5-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=c9.9d [ 2238.767987][ T6689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.768007][ T6689] usb 5-1: Product: syz [ 2238.768022][ T6689] usb 5-1: Manufacturer: syz [ 2238.768036][ T6689] usb 5-1: SerialNumber: syz [ 2238.825455][ T41] smbdirect: ib_dev[syz0] removed [ 2241.289010][ T1537] bond1: (slave bridge1): failed to get link speed/duplex [ 2241.517738][T10251] Bluetooth: hci4: unexpected event for opcode 0x007f [ 2242.525470][T25927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6414'. [ 2243.101662][T25932] loop8: detected capacity change from 0 to 8 [ 2243.190062][T25932] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 2243.190098][T25932] loop8: partition table partially beyond EOD, truncated [ 2243.227786][T25932] loop8: p1 size 877688686 extends beyond EOD, truncated [ 2244.235533][ T6689] ch341 5-1:6.7: ch341-uart converter detected [ 2244.293854][ T6689] usb 5-1: failed to receive control message: -32 [ 2244.293912][ T6689] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 2244.355277][ T6689] ch341 5-1:6.104: ch341-uart converter detected [ 2244.365467][T19421] IPVS: stop unused estimator thread 0... [ 2244.383268][ T13] net_ratelimit: 2 callbacks suppressed [ 2244.383282][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2244.426402][ T6689] usb 5-1: failed to receive control message: -32 [ 2244.430223][ T6689] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -32 [ 2244.494617][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2244.497077][T25849] udevd[25849]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 2244.623312][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2244.623892][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2244.624143][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2244.624783][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2244.625020][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2244.625789][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2244.626223][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2244.626705][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2245.077565][T25608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2245.137048][T25954] netlink: 'syz.2.6421': attribute type 12 has an invalid length. [ 2245.141382][T25608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2245.143080][T25608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2245.384547][T25608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2245.414230][T25608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2245.478937][T25608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2245.483401][T25608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2245.599052][T25608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2246.003278][T25608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2247.793727][T25608] 8021q: adding VLAN 0 to HW filter on device team0 [ 2247.831540][ T6689] usb 5-1: USB disconnect, device number 38 [ 2247.855534][ T6689] ch341 5-1:6.7: device disconnected [ 2247.888731][ T6689] ch341 5-1:6.104: device disconnected [ 2247.936867][T19421] bridge0: port 1(bridge_slave_0) entered blocking state [ 2247.939598][T19421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2248.021709][ T1537] bridge0: port 2(bridge_slave_1) entered blocking state [ 2248.021901][ T1537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2248.140107][T10251] Bluetooth: hci4: unexpected event for opcode 0x007f [ 2249.762854][ T13] net_ratelimit: 10 callbacks suppressed [ 2249.762876][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2249.887293][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2250.111783][T26000] ipvlan3: entered promiscuous mode [ 2250.187557][ T1537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2250.188885][ T41] bond1: (slave bridge1): failed to get link speed/duplex [ 2250.224542][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2250.227984][T19421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2250.300832][ T1447] bond1: (slave bridge1): failed to get link speed/duplex [ 2250.416212][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2250.479360][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2250.576584][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2252.013986][T25608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2252.159012][T26025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6432'. [ 2252.261486][T25608] veth0_vlan: entered promiscuous mode [ 2252.293735][T25608] veth1_vlan: entered promiscuous mode [ 2252.400590][T25608] veth0_macvtap: entered promiscuous mode [ 2252.411841][T25608] veth1_macvtap: entered promiscuous mode [ 2252.460657][ T4966] Dev loop2: unable to read RDB block 7 [ 2252.460694][ T4966] loop2: unable to read partition table [ 2252.460897][ T4966] loop2: partition table beyond EOD, truncated [ 2252.463560][T25608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2252.508777][T25608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2252.526581][ T1447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.527358][ T1447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.527398][ T1447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.527433][ T1447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.727432][ T5835] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2252.920257][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 2252.922353][ T5835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2252.922377][ T5835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2252.924882][ T5835] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2252.924906][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.924925][ T5835] usb 5-1: Product: syz [ 2252.924937][ T5835] usb 5-1: Manufacturer: syz [ 2252.924950][ T5835] usb 5-1: SerialNumber: syz [ 2253.005867][ T5835] usb 5-1: 0:2 : does not exist [ 2253.254478][ T5835] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2253.626484][ T5835] usb 5-1: USB disconnect, device number 39 [ 2253.665605][ T8420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2253.665624][ T8420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2255.334976][T26041] syz.6.6436 (26041): drop_caches: 2 [ 2255.626429][T25849] udevd[25849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2255.750576][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2255.750596][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2255.791371][ T994] net_ratelimit: 10 callbacks suppressed [ 2255.791385][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2256.854319][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2256.854749][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2256.856058][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2256.892729][ T994] bond1: (slave bridge1): failed to get link speed/duplex [ 2256.914359][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2256.980763][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2256.981215][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2257.036881][ T41] bond1: (slave bridge1): failed to get link speed/duplex [ 2257.066630][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2259.568506][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2259.568582][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2259.853820][T26059] fuse: Bad value for 'fd' [ 2260.299346][T23738] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 2260.462796][T23738] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 2260.462836][T23738] usb 5-1: config 0 has no interface number 0 [ 2260.467101][T23738] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2260.467130][T23738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.467164][T23738] usb 5-1: Product: syz [ 2260.467178][T23738] usb 5-1: Manufacturer: syz [ 2260.467192][T23738] usb 5-1: SerialNumber: syz [ 2260.550230][T23738] usb 5-1: config 0 descriptor?? [ 2260.567183][T26062] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2260.805164][T19825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2260.818523][T19825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2260.839032][T19825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2260.887580][T23738] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 2260.894966][T23738] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 2260.895039][T23738] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 2260.895096][T23738] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 2260.902459][T19825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2260.945865][T19825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2260.996279][T23738] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2261.158843][ T1285] net_ratelimit: 18 callbacks suppressed [ 2261.158865][ T1285] bond1: (slave bridge1): failed to get link speed/duplex [ 2261.197999][T23738] usb 5-1: USB disconnect, device number 40 [ 2261.282685][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2261.330016][T23738] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2261.381341][T23738] keyspan 5-1:0.133: device disconnected [ 2261.403534][ T1285] bond1: (slave bridge1): failed to get link speed/duplex [ 2261.517549][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2261.635924][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2261.752989][ T1285] bond1: (slave bridge1): failed to get link speed/duplex [ 2261.756731][T26075] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6446'. [ 2261.831902][T26077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2261.879405][ T1537] bond1: (slave bridge1): failed to get link speed/duplex [ 2261.897455][T26077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2261.898180][T26077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2262.030583][T18061] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2262.245709][T18061] usb 5-1: Using ep0 maxpacket: 8 [ 2262.259432][T18061] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 2262.270136][T18061] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2262.270182][T18061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.270208][T18061] usb 5-1: Product: syz [ 2262.270219][T18061] usb 5-1: Manufacturer: syz [ 2262.270241][T18061] usb 5-1: SerialNumber: syz [ 2262.283249][T18061] usb 5-1: config 0 descriptor?? [ 2262.353831][T18061] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2262.353923][T18061] usb 5-1: setting power ON [ 2262.353944][T18061] dvb-usb: bulk message failed: -22 (2/0) [ 2262.367341][T18061] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2262.377503][T18061] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2262.377649][T18061] usb 5-1: media controller created [ 2262.491544][T18061] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2262.687844][T18061] usb 5-1: selecting invalid altsetting 6 [ 2262.687866][T18061] usb 5-1: digital interface selection failed (-22) [ 2262.687883][T18061] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2262.688732][T18061] usb 5-1: setting power OFF [ 2262.688761][T18061] dvb-usb: bulk message failed: -22 (2/0) [ 2262.688781][T18061] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2262.688796][T18061] (NULL device *): no alternate interface [ 2263.351453][T19825] Bluetooth: hci2: command tx timeout [ 2263.513419][T18061] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2263.543774][T18061] usb 5-1: USB disconnect, device number 41 [ 2263.586535][T26063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.595019][T26063] bridge0: port 1(bridge_slave_0) entered disabled state [ 2263.595563][T26063] bridge_slave_0: entered allmulticast mode [ 2263.629368][T26063] bridge_slave_0: entered promiscuous mode [ 2264.776338][T26105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6450'. [ 2265.596555][T19825] Bluetooth: hci2: command tx timeout [ 2267.372036][ T1537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.415865][T26113] [U] ^A [ 2268.693678][T19825] Bluetooth: hci2: command tx timeout [ 2269.338029][ T1285] net_ratelimit: 134 callbacks suppressed [ 2269.338050][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2269.339656][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2269.364603][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2269.365913][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2269.394999][T12412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2269.395685][T12412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2269.399384][T12412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2270.714375][T26063] bridge0: port 2(bridge_slave_1) entered blocking state [ 2270.714505][T26063] bridge0: port 2(bridge_slave_1) entered disabled state [ 2270.714767][T26063] bridge_slave_1: entered allmulticast mode [ 2270.872214][T19825] Bluetooth: hci2: command tx timeout [ 2270.872370][T26063] bridge_slave_1: entered promiscuous mode [ 2270.905520][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2271.127217][T19825] Bluetooth: min 0 < 6 [ 2271.144481][T26063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2271.164912][T26063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2271.296379][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2271.662334][ T1537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.780853][T26063] team0: Port device team_slave_0 added [ 2271.795551][T26063] team0: Port device team_slave_1 added [ 2271.980374][T26063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2271.980394][T26063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2271.980426][T26063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2271.982737][T26063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2271.982760][T26063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2271.982791][T26063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2272.267667][T14544] bond1: (slave bridge1): failed to get link speed/duplex [ 2272.729328][ T1537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2273.007041][T26146] block nbd6: NBD_DISCONNECT [ 2274.129238][T19825] Bluetooth: hci3: command 0x0405 tx timeout [ 2274.461382][ T1537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.528873][T26063] hsr_slave_0: entered promiscuous mode [ 2274.535648][T26063] hsr_slave_1: entered promiscuous mode [ 2274.538450][T26063] debugfs: 'hsr0' already exists in 'hsr' [ 2274.538520][T26063] Cannot create hsr debugfs directory [ 2274.558235][T26153] veth0_vlan: entered allmulticast mode [ 2274.960657][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2276.240661][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.241467][T19389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.241663][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.242339][T23738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.269272][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.315268][T26163] [U] ^A [ 2276.789021][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.827906][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.928592][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2277.063768][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6468'. [ 2277.063793][T26168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6468'. [ 2277.063819][T26168] netlink: 'syz.0.6468': attribute type 11 has an invalid length. [ 2277.152489][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2278.258103][T26173] FAULT_INJECTION: forcing a failure. [ 2278.258103][T26173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2278.258133][T26173] CPU: 0 UID: 0 PID: 26173 Comm: syz.6.6469 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2278.258155][T26173] Tainted: [L]=SOFTLOCKUP [ 2278.258161][T26173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2278.258171][T26173] Call Trace: [ 2278.258178][T26173] [ 2278.258184][T26173] dump_stack_lvl+0xe8/0x150 [ 2278.258208][T26173] should_fail_ex+0x46b/0x600 [ 2278.258229][T26173] _copy_from_user+0x2d/0xb0 [ 2278.258250][T26173] __sys_sendto+0x2bc/0x710 [ 2278.258277][T26173] ? __pfx___sys_sendto+0x10/0x10 [ 2278.258323][T26173] ? ksys_write+0x248/0x270 [ 2278.258344][T26173] ? __pfx_ksys_write+0x10/0x10 [ 2278.258370][T26173] __x64_sys_sendto+0xde/0x100 [ 2278.258392][T26173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.258410][T26173] do_syscall_64+0x15f/0xf80 [ 2278.258433][T26173] ? trace_irq_disable+0x3b/0x140 [ 2278.258453][T26173] ? clear_bhb_loop+0x40/0x90 [ 2278.258473][T26173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.258489][T26173] RIP: 0033:0x7f1013c9ce59 [ 2278.258504][T26173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2278.258519][T26173] RSP: 002b:00007f1011ef6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2278.258536][T26173] RAX: ffffffffffffffda RBX: 00007f1013f15fa0 RCX: 00007f1013c9ce59 [ 2278.258549][T26173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2278.258559][T26173] RBP: 00007f1011ef6090 R08: 0000200000000100 R09: 0000000000000010 [ 2278.258570][T26173] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 2278.258580][T26173] R13: 00007f1013f16038 R14: 00007f1013f15fa0 R15: 00007ffe259be6a8 [ 2278.258605][T26173] [ 2279.738480][T26192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6466'. [ 2280.098375][ T1537] bridge_slave_1: left allmulticast mode [ 2280.098429][ T1537] bridge_slave_1: left promiscuous mode [ 2280.116712][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.298189][ T1537] bridge_slave_0: left allmulticast mode [ 2280.298225][ T1537] bridge_slave_0: left promiscuous mode [ 2280.298605][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.239566][ T189] net_ratelimit: 3 callbacks suppressed [ 2282.239599][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.243413][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.244266][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.368507][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2282.431070][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2282.476372][ T1537] bond0 (unregistering): Released all slaves [ 2282.924060][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.924991][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.926001][T19625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2283.385879][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2283.421301][ T1562] bond1: (slave bridge1): failed to get link speed/duplex [ 2283.576740][ T1562] bond1: (slave bridge1): failed to get link speed/duplex [ 2283.699651][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2283.809376][ T189] bond1: (slave bridge1): failed to get link speed/duplex [ 2284.694560][T19389] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 2285.029851][T19389] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 2285.029932][T19389] usb 5-1: config 0 has no interface number 0 [ 2285.067792][T19389] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2285.067870][T19389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.067915][T19389] usb 5-1: Product: syz [ 2285.067955][T19389] usb 5-1: Manufacturer: syz [ 2285.067993][T19389] usb 5-1: SerialNumber: syz [ 2285.240710][T19389] usb 5-1: config 0 descriptor?? [ 2285.241597][T26231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2285.508154][T19389] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 2285.539016][T19389] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 2285.539110][T19389] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 2285.539196][T19389] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 2285.576791][T19389] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2285.594502][T19389] usb 5-1: USB disconnect, device number 42 [ 2285.692115][T19389] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2285.694044][T19389] keyspan 5-1:0.133: device disconnected [ 2285.824197][T19825] Bluetooth: hci4: unexpected event for opcode 0x007f [ 2287.324491][T26257] FAULT_INJECTION: forcing a failure. [ 2287.324491][T26257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2287.324538][T26257] CPU: 0 UID: 0 PID: 26257 Comm: syz.4.6485 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2287.324567][T26257] Tainted: [L]=SOFTLOCKUP [ 2287.324575][T26257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2287.324588][T26257] Call Trace: [ 2287.324596][T26257] [ 2287.324605][T26257] dump_stack_lvl+0xe8/0x150 [ 2287.324645][T26257] should_fail_ex+0x46b/0x600 [ 2287.324671][T26257] _copy_from_user+0x2d/0xb0 [ 2287.324696][T26257] __sys_bpf+0x229/0x950 [ 2287.324722][T26257] ? __pfx___sys_bpf+0x10/0x10 [ 2287.324751][T26257] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2287.324789][T26257] ? ksys_write+0x248/0x270 [ 2287.324814][T26257] ? __pfx_ksys_write+0x10/0x10 [ 2287.324839][T26257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2287.324861][T26257] __x64_sys_bpf+0x7c/0x90 [ 2287.324883][T26257] do_syscall_64+0x15f/0xf80 [ 2287.324911][T26257] ? trace_irq_disable+0x3b/0x140 [ 2287.324934][T26257] ? clear_bhb_loop+0x40/0x90 [ 2287.324958][T26257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2287.324978][T26257] RIP: 0033:0x7fa37413ce59 [ 2287.324996][T26257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2287.325013][T26257] RSP: 002b:00007fa372396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2287.325035][T26257] RAX: ffffffffffffffda RBX: 00007fa3743b5fa0 RCX: 00007fa37413ce59 [ 2287.325050][T26257] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 2287.325063][T26257] RBP: 00007fa372396090 R08: 0000000000000000 R09: 0000000000000000 [ 2287.325076][T26257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2287.325088][T26257] R13: 00007fa3743b6038 R14: 00007fa3743b5fa0 R15: 00007ffd95355898 [ 2287.325118][T26257] [ 2287.612265][ T68] net_ratelimit: 1 callbacks suppressed [ 2287.612286][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2287.711712][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2287.712444][T26112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2288.214291][ T37] audit: type=1326 audit(1779625129.251:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26266 comm="syz.6.6488" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1013c9ce59 code=0x7ffc0000 [ 2288.215898][ T37] audit: type=1326 audit(1779625129.251:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26266 comm="syz.6.6488" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f1013c9ce59 code=0x7ffc0000 [ 2288.216224][ T37] audit: type=1326 audit(1779625129.251:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26266 comm="syz.6.6488" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1013c9ce59 code=0x7ffc0000 [ 2288.219816][ T37] audit: type=1326 audit(1779625129.251:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26266 comm="syz.6.6488" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1013c9ce59 code=0x7ffc0000 [ 2288.395938][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2290.054739][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2290.286869][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2290.286908][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2291.119281][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2291.314966][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2291.674259][ T1537] hsr_slave_0: left promiscuous mode [ 2291.723429][ T1537] hsr_slave_1: left promiscuous mode [ 2291.724499][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2291.724524][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2291.739045][T26302] block nbd4: NBD_DISCONNECT [ 2291.758317][T26303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6494'. [ 2291.781941][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2291.781968][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2291.813814][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2291.882060][ T1537] veth1_macvtap: left promiscuous mode [ 2291.882125][ T1537] veth0_macvtap: left promiscuous mode [ 2291.882277][ T1537] veth1_vlan: left promiscuous mode [ 2291.882389][ T1537] veth0_vlan: left promiscuous mode [ 2292.721856][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 2292.754464][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 2293.222486][T14544] net_ratelimit: 3 callbacks suppressed [ 2293.222505][T14544] bond1: (slave bridge1): failed to get link speed/duplex [ 2293.272026][T26312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6495'. [ 2293.330266][ T189] bond1: (slave bridge1): failed to get link speed/duplex [ 2293.937614][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2293.985397][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2294.001256][T23738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2294.355750][ T1030] bond1: (slave bridge1): failed to get link speed/duplex [ 2294.474907][ T1030] bond1: (slave bridge1): failed to get link speed/duplex [ 2294.836739][ T189] bond1: (slave bridge1): failed to get link speed/duplex [ 2295.117767][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2295.134564][T26063] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2295.197537][T26063] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2295.274200][T26063] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2295.304189][T26063] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2295.305240][T26063] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2295.469856][T26063] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2295.473181][T26063] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2295.593860][T26063] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2295.755796][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 2297.196298][T26063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2297.250298][T26063] 8021q: adding VLAN 0 to HW filter on device team0 [ 2297.313302][T14544] bridge0: port 1(bridge_slave_0) entered blocking state [ 2297.313811][T14544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2297.341623][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 2297.342171][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2297.842969][T26370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6506'. [ 2298.032623][T18061] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2298.192687][T18061] usb 7-1: Using ep0 maxpacket: 16 [ 2298.194908][T18061] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.194932][T18061] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2298.198576][T18061] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2298.198605][T18061] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.198627][T18061] usb 7-1: Product: syz [ 2298.198643][T18061] usb 7-1: Manufacturer: syz [ 2298.198658][T18061] usb 7-1: SerialNumber: syz [ 2298.278103][T18061] usb 7-1: 0:2 : does not exist [ 2298.427226][T26063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2298.518601][T26063] veth0_vlan: entered promiscuous mode [ 2298.545649][T18061] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2298.564728][T26063] veth1_vlan: entered promiscuous mode [ 2298.817201][T18061] usb 7-1: USB disconnect, device number 73 [ 2300.086690][ T1447] net_ratelimit: 17 callbacks suppressed [ 2300.086733][ T1447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2300.167444][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2300.995344][T26112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2301.370090][T26063] veth0_macvtap: entered promiscuous mode [ 2301.440156][T26063] veth1_macvtap: entered promiscuous mode [ 2301.696348][T26063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2301.733016][T26063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2301.752983][ T1030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.754749][ T1030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.756560][ T1030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.758018][ T1030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.870333][T26175] udevd[26175]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2302.091161][T19421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2302.091541][T19421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2302.140727][T19389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2302.324763][ T1537] bond1: (slave bridge1): failed to get link speed/duplex [ 2302.633507][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2302.633533][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2302.648134][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2302.880731][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2302.880752][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2303.544371][T26403] 8021q: VLANs not supported on lo [ 2303.594138][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2303.716791][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 2303.998331][T26411] tmpfs: Unknown parameter 'mpow' [ 2305.057428][T26424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6519'. [ 2305.437309][ T5835] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2305.533597][ T12] net_ratelimit: 15 callbacks suppressed [ 2305.533617][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 2305.618871][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 2305.622726][ T5835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2305.622742][ T5835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2305.729107][ T5835] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2305.729139][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.729160][ T5835] usb 5-1: Product: syz [ 2305.729175][ T5835] usb 5-1: Manufacturer: syz [ 2305.729190][ T5835] usb 5-1: SerialNumber: syz [ 2305.750385][ T1285] bond1: (slave bridge1): failed to get link speed/duplex [ 2305.828213][ T5835] usb 5-1: 0:2 : does not exist [ 2305.864613][ T1030] bond1: (slave bridge1): failed to get link speed/duplex [ 2305.983462][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2306.035766][ T5835] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2306.099765][ T1562] bond1: (slave bridge1): failed to get link speed/duplex [ 2306.145779][ T5835] usb 5-1: USB disconnect, device number 43 [ 2306.175658][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2306.176085][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2306.176815][T19625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2306.234395][ T1562] bond1: (slave bridge1): failed to get link speed/duplex [ 2306.345463][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2306.436119][T26175] udevd[26175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2309.285761][T26457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2309.291834][T26457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2310.833637][ T5835] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2310.919120][T26112] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 2310.951466][ T1030] net_ratelimit: 28 callbacks suppressed [ 2310.951492][ T1030] bond1: (slave bridge1): failed to get link speed/duplex [ 2310.994305][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 2310.997886][ T5835] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2310.997902][ T5835] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2311.000621][ T5835] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2311.000658][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.000678][ T5835] usb 2-1: Product: syz [ 2311.000688][ T5835] usb 2-1: Manufacturer: syz [ 2311.000698][ T5835] usb 2-1: SerialNumber: syz [ 2311.070213][ T189] bond1: (slave bridge1): failed to get link speed/duplex [ 2311.079453][T26112] usb 7-1: Using ep0 maxpacket: 8 [ 2311.102570][T26112] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 2311.106655][ T5835] usb 2-1: 0:2 : does not exist [ 2311.107780][T26112] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2311.107807][T26112] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.107833][T26112] usb 7-1: Product: syz [ 2311.107846][T26112] usb 7-1: Manufacturer: syz [ 2311.107864][T26112] usb 7-1: SerialNumber: syz [ 2311.168097][T26112] usb 7-1: config 0 descriptor?? [ 2311.184267][T26112] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2311.184319][T26112] usb 7-1: setting power ON [ 2311.184340][T26112] dvb-usb: bulk message failed: -22 (2/0) [ 2311.186392][ T1030] bond1: (slave bridge1): failed to get link speed/duplex [ 2311.246525][T26112] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2311.252436][T26112] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2311.252510][T26112] usb 7-1: media controller created [ 2311.298635][ T5835] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2311.316732][ T189] bond1: (slave bridge1): failed to get link speed/duplex [ 2311.355761][T26112] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2311.432150][ T1030] bond1: (slave bridge1): failed to get link speed/duplex [ 2311.438616][ T5835] usb 2-1: USB disconnect, device number 25 [ 2311.570987][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2311.784884][ T1562] bond1: (slave bridge1): failed to get link speed/duplex [ 2311.991518][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 2312.105537][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 2312.149595][T26112] usb 7-1: selecting invalid altsetting 6 [ 2312.149620][T26112] usb 7-1: digital interface selection failed (-22) [ 2312.149636][T26112] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2312.223378][ T1030] bond1: (slave bridge1): failed to get link speed/duplex [ 2312.420513][T26112] usb 7-1: setting power OFF [ 2312.420544][T26112] dvb-usb: bulk message failed: -22 (2/0) [ 2312.420562][T26112] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2312.420576][T26112] (NULL device *): no alternate interface [ 2312.553405][T26481] udevd[26481]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2312.761035][T26112] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2312.801958][T26112] usb 7-1: USB disconnect, device number 74 [ 2314.103562][ T6689] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2314.534219][ T6689] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2314.538238][ T6689] usb 7-1: config 114 has an invalid interface number: 69 but max is 0 [ 2314.538264][ T6689] usb 7-1: config 114 has no interface number 0 [ 2314.538305][ T6689] usb 7-1: config 114 interface 69 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 2314.538331][ T6689] usb 7-1: config 114 interface 69 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 1023 [ 2314.538362][ T6689] usb 7-1: config 114 interface 69 has no altsetting 0 [ 2315.503995][ T6689] usb 7-1: New USB device found, idVendor=06a3, idProduct=ff04, bcdDevice=a5.d8 [ 2315.504025][ T6689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.504043][ T6689] usb 7-1: Product: syz [ 2315.504057][ T6689] usb 7-1: Manufacturer: syz [ 2315.504071][ T6689] usb 7-1: SerialNumber: syz [ 2315.694306][T26495] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2315.866675][T23738] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2316.053506][T23738] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2316.055627][T23738] usb 2-1: config 114 has an invalid interface number: 69 but max is 0 [ 2316.055655][T23738] usb 2-1: config 114 has no interface number 0 [ 2316.055700][T23738] usb 2-1: config 114 interface 69 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 2316.055728][T23738] usb 2-1: config 114 interface 69 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 1023 [ 2316.056586][T23738] usb 2-1: config 114 interface 69 has no altsetting 0 [ 2316.069134][T23738] usb 2-1: New USB device found, idVendor=06a3, idProduct=ff04, bcdDevice=a5.d8 [ 2316.069420][T23738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.069453][T23738] usb 2-1: Product: syz [ 2316.069468][T23738] usb 2-1: Manufacturer: syz [ 2316.069484][T23738] usb 2-1: SerialNumber: syz [ 2316.247452][T26507] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2316.413220][ T1294] net_ratelimit: 22 callbacks suppressed [ 2316.413235][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2316.436720][ T1294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2316.438525][T18061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2316.530414][ T1285] bond1: (slave bridge1): failed to get link speed/duplex [ 2316.575026][T26513] FAULT_INJECTION: forcing a failure. [ 2316.575026][T26513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2316.575050][T26513] CPU: 1 UID: 0 PID: 26513 Comm: syz.4.6545 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2316.575070][T26513] Tainted: [L]=SOFTLOCKUP [ 2316.575075][T26513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2316.575086][T26513] Call Trace: [ 2316.575092][T26513] [ 2316.575097][T26513] dump_stack_lvl+0xe8/0x150 [ 2316.575118][T26513] should_fail_ex+0x46b/0x600 [ 2316.575139][T26513] _copy_from_user+0x2d/0xb0 [ 2316.575156][T26513] ___sys_sendmsg+0x1c6/0x360 [ 2316.575177][T26513] ? __lock_acquire+0x6b5/0x2cf0 [ 2316.575198][T26513] ? __pfx____sys_sendmsg+0x10/0x10 [ 2316.575240][T26513] ? __fget_files+0x2a/0x420 [ 2316.575252][T26513] ? __fget_files+0x3a6/0x420 [ 2316.575271][T26513] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2316.575293][T26513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2316.575319][T26513] ? __pfx_ksys_write+0x10/0x10 [ 2316.575340][T26513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2316.575355][T26513] do_syscall_64+0x15f/0xf80 [ 2316.575374][T26513] ? trace_irq_disable+0x3b/0x140 [ 2316.575397][T26513] ? clear_bhb_loop+0x40/0x90 [ 2316.575414][T26513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2316.575428][T26513] RIP: 0033:0x7fa37413ce59 [ 2316.575440][T26513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2316.575452][T26513] RSP: 002b:00007fa372396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2316.575466][T26513] RAX: ffffffffffffffda RBX: 00007fa3743b5fa0 RCX: 00007fa37413ce59 [ 2316.575476][T26513] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 2316.575486][T26513] RBP: 00007fa372396090 R08: 0000000000000000 R09: 0000000000000000 [ 2316.575495][T26513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2316.575503][T26513] R13: 00007fa3743b6038 R14: 00007fa3743b5fa0 R15: 00007ffd95355898 [ 2316.575523][T26513] [ 2316.648503][ T1294] bond1: (slave bridge1): failed to get link speed/duplex [ 2316.775552][T13381] bond1: (slave bridge1): failed to get link speed/duplex [ 2316.895978][ T1285] bond1: (slave bridge1): failed to get link speed/duplex [ 2317.027394][T13381] bond1: (slave bridge1): failed to get link speed/duplex [ 2317.378178][ T1447] bond1: (slave bridge1): failed to get link speed/duplex [ 2317.491199][T13381] bond1: (slave bridge1): failed to get link speed/duplex [ 2317.820209][T23738] usb 2-1: USB disconnect, device number 26 [ 2317.941441][T26481] udevd[26481]: setting owner of /dev/bus/usb/002/026 to uid=0, gid=0 failed: No such file or directory [ 2318.053872][ T6689] usb 7-1: USB disconnect, device number 75 [ 2318.414977][T26522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6548'. [ 2318.514557][T10251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2318.576837][T10251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2318.578352][T10251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2318.615933][T10251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2318.619310][T10251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2319.014241][T26534] tipc: Enabling of bearer rejected, failed to enable media [ 2319.032385][T26534] netlink: 'syz.2.6550': attribute type 21 has an invalid length. [ 2319.032513][T26534] netlink: 'syz.2.6550': attribute type 1 has an invalid length. [ 2319.032528][T26534] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6550'. [ 2319.630395][T19825] Bluetooth: hci3: unexpected event for opcode 0x007f [ 2321.114933][T19825] Bluetooth: hci5: command tx timeout [ 2321.911907][ T8420] net_ratelimit: 20 callbacks suppressed [ 2321.911927][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2321.946006][T18061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2323.258959][T19825] Bluetooth: min 0 < 6 [ 2323.273643][T19825] Bluetooth: hci5: command tx timeout [ 2323.367901][ T994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2323.367940][ T994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2323.785670][T26565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6560'. [ 2323.956501][T13381] bond1: (slave bridge1): failed to get link speed/duplex [ 2324.497588][ T994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2324.497613][ T994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2324.665719][T26570] ipvlan5: entered promiscuous mode [ 2324.781020][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2324.781089][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2324.877121][T26572] netlink: 'syz.1.6562': attribute type 32 has an invalid length. [ 2325.040245][T19825] Bluetooth: hci4: unexpected event for opcode 0x007f [ 2325.409355][T19825] Bluetooth: hci2: command tx timeout [ 2325.490983][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6565'. [ 2325.496954][T19825] Bluetooth: hci5: command tx timeout [ 2326.254434][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2326.442356][ T994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.442398][ T994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2327.344541][ T994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2327.344568][ T994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2327.375922][T19421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2327.376772][T19625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2327.377712][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2327.557253][ T189] bond1: (slave bridge1): failed to get link speed/duplex [ 2328.647506][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2328.698008][T19625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2328.698264][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2328.737264][T19825] Bluetooth: hci5: command tx timeout [ 2328.818324][ T189] bond1: (slave bridge1): failed to get link speed/duplex [ 2328.852679][T19421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2328.853329][T26112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2329.925079][T26520] bridge0: port 1(bridge_slave_0) entered blocking state [ 2329.925299][T26520] bridge0: port 1(bridge_slave_0) entered disabled state [ 2329.990097][T26520] bridge_slave_0: entered allmulticast mode [ 2330.011623][T26520] bridge_slave_0: entered promiscuous mode [ 2330.071963][T19825] Bluetooth: hci3: unexpected event for opcode 0x007f [ 2330.795318][T26520] bridge0: port 2(bridge_slave_1) entered blocking state [ 2330.795432][T26520] bridge0: port 2(bridge_slave_1) entered disabled state [ 2330.795656][T26520] bridge_slave_1: entered allmulticast mode [ 2330.837148][T26520] bridge_slave_1: entered promiscuous mode [ 2331.118457][T26520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2331.165506][T26520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2331.571551][T26520] team0: Port device team_slave_0 added [ 2331.582445][T26520] team0: Port device team_slave_1 added [ 2332.102475][ T994] bridge_slave_1: left allmulticast mode [ 2332.102510][ T994] bridge_slave_1: left promiscuous mode [ 2332.102774][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 2332.283465][ T994] bridge_slave_0: left allmulticast mode [ 2332.283491][ T994] bridge_slave_0: left promiscuous mode [ 2332.283674][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 2333.532147][T14544] net_ratelimit: 7 callbacks suppressed [ 2333.532160][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2333.532530][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2333.532780][T18061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2334.221551][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2334.223327][T12412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2334.419522][ T994] bond2 (unregistering): (slave geneve3): Releasing active interface [ 2334.419544][ T994] geneve3 (unregistering): left promiscuous mode [ 2334.419563][ T994] geneve3 (unregistering): left allmulticast mode [ 2334.909976][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2334.910626][T18061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2335.000593][T26667] nbd6: detected capacity change from 0 to 63 [ 2335.003006][T26669] block nbd6: NBD_DISCONNECT [ 2335.003117][T26669] block nbd6: Disconnected due to user request. [ 2335.003135][T26669] block nbd6: shutting down sockets [ 2335.003325][T26481] blk_print_req_error: 137 callbacks suppressed [ 2335.003335][T26481] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2335.003353][T26481] buffer_io_error: 138 callbacks suppressed [ 2335.003360][T26481] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2335.070770][ T1044] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 2335.070802][ T1044] Buffer I/O error on dev nbd6, logical block 1, async page read [ 2335.070848][ T1044] Buffer I/O error on dev nbd6, logical block 2, async page read [ 2335.070882][ T1044] Buffer I/O error on dev nbd6, logical block 3, async page read [ 2335.071425][T26481] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2335.071452][T26481] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2335.071592][T26481] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2335.071616][T26481] Buffer I/O error on dev nbd6, logical block 1, async page read [ 2335.073232][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6584'. [ 2335.076047][T26481] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2335.076074][T26481] Buffer I/O error on dev nbd6, logical block 2, async page read [ 2335.077170][T26481] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2335.077191][T26481] Buffer I/O error on dev nbd6, logical block 3, async page read [ 2335.077308][T26481] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2335.077325][T26481] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2335.077415][T26481] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2335.077431][T26481] Buffer I/O error on dev nbd6, logical block 1, async page read [ 2335.077552][T26481] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2335.077665][T26481] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2335.256763][T26481] ldm_validate_partition_table(): Disk read failed. [ 2335.258968][T26481] Dev nbd6: unable to read RDB block 0 [ 2335.278760][T26481] nbd6: unable to read partition table [ 2335.289657][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2335.338651][T26481] ldm_validate_partition_table(): Disk read failed. [ 2335.344527][T26481] Dev nbd6: unable to read RDB block 0 [ 2335.360462][T26481] nbd6: unable to read partition table [ 2335.391161][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2335.435224][ T994] bond0 (unregistering): Released all slaves [ 2335.443054][ T994] bond1 (unregistering): Released all slaves [ 2335.457095][ T994] bond2 (unregistering): Released all slaves [ 2335.617028][T26648] ipvlan2: entered promiscuous mode [ 2336.185236][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2336.232827][T26520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2336.232846][T26520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2336.232877][T26520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2336.318970][ T994] : left promiscuous mode [ 2336.363480][T26671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2336.383389][T26671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2336.392572][T26671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2336.649868][T26520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2336.649885][T26520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2336.649912][T26520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2338.393171][T26112] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 2338.402183][T26520] hsr_slave_0: entered promiscuous mode [ 2338.420004][T26520] hsr_slave_1: entered promiscuous mode [ 2338.423383][T26520] debugfs: 'hsr0' already exists in 'hsr' [ 2338.423402][T26520] Cannot create hsr debugfs directory [ 2338.955795][ T1285] net_ratelimit: 7 callbacks suppressed [ 2338.955814][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2339.229925][ T1285] bond1: (slave bridge1): failed to get link speed/duplex [ 2339.686768][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2339.724697][T23738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2339.739414][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2339.948871][ T1030] bond1: (slave bridge1): failed to get link speed/duplex [ 2340.057889][T26112] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2340.059276][T26112] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2340.059313][T26112] usb 7-1: can't read configurations, error -71 [ 2340.119679][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 2340.154159][T26696] binder: 26695:26696 ioctl 4018620d 0 returned -22 [ 2340.373497][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2340.375312][T23738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2340.426440][ T1562] bond1: (slave bridge1): failed to get link speed/duplex [ 2341.364216][T26707] tmpfs: Unknown parameter 'mpow' [ 2341.938935][T26715] ipvlan6: entered promiscuous mode [ 2342.364241][T26617] [U] ^A [ 2344.099984][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2344.511241][T14544] net_ratelimit: 7 callbacks suppressed [ 2344.511259][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2344.631604][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2345.201045][T19825] Bluetooth: hci4: unexpected event for opcode 0x007f [ 2345.317889][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2345.438554][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2345.562520][T26743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6602'. [ 2345.564213][ T8420] bond1: (slave bridge1): failed to get link speed/duplex [ 2345.755912][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2345.756522][T23738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2345.852073][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2345.852621][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2345.988272][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6605'. [ 2346.003178][ T1259] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 2346.186629][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 2346.216664][ T1259] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2346.216694][ T1259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.216714][ T1259] usb 7-1: Product: syz [ 2346.216728][ T1259] usb 7-1: Manufacturer: syz [ 2346.216742][ T1259] usb 7-1: SerialNumber: syz [ 2346.222970][ T1259] usb 7-1: config 0 descriptor?? [ 2346.271765][ T1259] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2346.298444][ T1259] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2346.303703][ T1259] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2346.303812][ T1259] usb 7-1: media controller created [ 2346.374219][ T1259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2346.469663][T26746] dvb-usb: bulk message failed: -22 (7/0) [ 2346.793667][ T1259] DVB: Unable to find symbol mt352_attach() [ 2347.097703][ T1259] DVB: Unable to find symbol nxt6000_attach() [ 2347.097720][ T1259] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2347.129417][ T1259] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input126 [ 2347.153954][ T1259] dvb-usb: schedule remote query interval to 1000 msecs. [ 2347.153979][ T1259] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2347.153996][ T1259] dvb-usb: bulk message failed: -22 (7/0) [ 2347.154013][ T1259] dvb-usb: bulk message failed: -22 (7/0) [ 2347.251938][ T1259] usb 7-1: USB disconnect, device number 78 [ 2347.312065][T26773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6607'. [ 2347.317260][T26768] nbd1: detected capacity change from 0 to 63 [ 2347.318466][T26769] block nbd1: NBD_DISCONNECT [ 2347.360010][T26769] block nbd1: Disconnected due to user request. [ 2347.360032][T26769] block nbd1: shutting down sockets [ 2347.456906][ T32] blk_print_req_error: 136 callbacks suppressed [ 2347.456925][ T32] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 2347.456952][ T32] buffer_io_error: 138 callbacks suppressed [ 2347.456964][ T32] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2347.457460][ T32] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2347.458869][ T32] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2347.458958][ T32] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2347.460024][T26174] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2347.460057][T26174] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2347.460219][T26174] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2347.460246][T26174] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2347.460391][T26174] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2347.460417][T26174] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2347.460560][T26174] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2347.460586][T26174] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2347.460741][T26174] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2347.460768][T26174] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2347.460933][T26174] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2347.460959][T26174] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2347.461113][T26174] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2347.461258][T26174] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2347.461451][T26174] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2347.525444][T26174] ldm_validate_partition_table(): Disk read failed. [ 2347.536714][T26174] Dev nbd1: unable to read RDB block 0 [ 2347.548419][T26174] nbd1: unable to read partition table [ 2347.763514][T26174] ldm_validate_partition_table(): Disk read failed. [ 2347.772550][T26174] Dev nbd1: unable to read RDB block 0 [ 2347.785930][T26174] nbd1: unable to read partition table [ 2347.948539][ T1259] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2348.285669][T19825] Bluetooth: hci4: unexpected event for opcode 0x007f [ 2349.487090][T19825] Bluetooth: hci4: unexpected event for opcode 0x007f [ 2349.777037][T26112] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 2349.947574][T19421] net_ratelimit: 11 callbacks suppressed [ 2349.947596][T19421] bond1: (slave bridge1): failed to get link speed/duplex [ 2349.950799][T26112] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 2349.950826][T26112] usb 7-1: config 0 has no interface number 0 [ 2349.953712][T26112] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2349.953739][T26112] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2349.953758][T26112] usb 7-1: Product: syz [ 2349.953771][T26112] usb 7-1: Manufacturer: syz [ 2349.953785][T26112] usb 7-1: SerialNumber: syz [ 2349.999956][T26811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6615'. [ 2350.013859][T26112] usb 7-1: config 0 descriptor?? [ 2350.015471][T26803] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2350.036293][T26808] nbd1: detected capacity change from 0 to 63 [ 2350.037141][T26810] block nbd1: NBD_DISCONNECT [ 2350.037250][T26810] block nbd1: Disconnected due to user request. [ 2350.037266][T26810] block nbd1: shutting down sockets [ 2350.086475][T26175] ldm_validate_partition_table(): Disk read failed. [ 2350.088209][T26175] Dev nbd1: unable to read RDB block 0 [ 2350.090170][T26175] nbd1: unable to read partition table [ 2350.166775][T26175] ldm_validate_partition_table(): Disk read failed. [ 2350.183259][T26175] Dev nbd1: unable to read RDB block 0 [ 2350.189466][T26175] nbd1: unable to read partition table [ 2350.249931][T26112] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 2350.252926][ T37] audit: type=1326 audit(1779625190.296:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26815 comm="syz.0.6617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb78ec3ce59 code=0x0 [ 2350.291452][T26112] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 2350.291536][T26112] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 2350.291612][T26112] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 2350.373843][T26820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6616'. [ 2350.384145][T26112] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2350.399817][ T994] hsr_slave_0: left promiscuous mode [ 2350.400876][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2350.400905][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2350.436205][T26112] usb 7-1: USB disconnect, device number 79 [ 2350.455514][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2350.455543][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2350.502742][ T994] batman_adv: batadv0: Removing interface: vlan2 [ 2350.549362][T26112] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2350.576287][T26112] keyspan 7-1:0.133: device disconnected [ 2350.632129][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2350.632529][T14544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2350.672119][T26481] udevd[26481]: setting owner of /dev/bus/usb/007/079 to uid=0, gid=0 failed: No such file or directory [ 2350.697991][ T994] veth1_macvtap: left promiscuous mode [ 2350.698082][ T994] veth0_macvtap: left promiscuous mode [ 2350.735556][ T994] veth1_vlan: left promiscuous mode [ 2350.735734][ T994] veth0_vlan: left promiscuous mode [ 2350.926633][ T41] ------------[ cut here ]------------ [ 2350.926652][ T41] in_task() && kcov_mode_enabled(mode) [ 2350.926665][ T41] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/u8:2/41 [ 2350.926698][ T41] Modules linked in: [ 2350.926714][ T41] CPU: 0 UID: 0 PID: 41 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2350.926736][ T41] Tainted: [L]=SOFTLOCKUP [ 2350.926741][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2350.926752][ T41] Workqueue: events_unbound cfg80211_wiphy_work [ 2350.926774][ T41] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 2350.926813][ T41] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 32 dd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ca 25 59 09 89 c0 48 c7 c7 10 94 6b [ 2350.926833][ T41] RSP: 0018:ffffc90000b279d8 EFLAGS: 00010202 [ 2350.926851][ T41] RAX: 0000000000000002 RBX: ffff88801feebd80 RCX: 0000000000000000 [ 2350.926866][ T41] RDX: 0000000000000000 RSI: ffffffff8ba759c0 RDI: ffffffff8ba75980 [ 2350.926882][ T41] RBP: ffff88803d8b4140 R08: ffffffff8b1fd8e0 R09: ffffffff8dfc8080 [ 2350.926912][ T41] R10: dffffc0000000000 R11: fffffbfff1f1223f R12: ffff888064b11dc8 [ 2350.926930][ T41] R13: ffff88805ec107c0 R14: 0000000000000000 R15: ffff888064b11de0 [ 2350.926945][ T41] FS: 0000000000000000(0000) GS:ffff888126170000(0000) knlGS:0000000000000000 [ 2350.926965][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2350.926976][ T41] CR2: 000055556e05f4e8 CR3: 0000000052edc000 CR4: 00000000003526f0 [ 2350.926990][ T41] Call Trace: [ 2350.926996][ T41] [ 2350.927006][ T41] ieee80211_iface_work+0x211/0x1390 [ 2350.927043][ T41] cfg80211_wiphy_work+0x2cf/0x460 [ 2350.927082][ T41] ? process_scheduled_works+0xa70/0x1860 [ 2350.927101][ T41] process_scheduled_works+0xb5d/0x1860 [ 2350.927141][ T41] ? __pfx_process_scheduled_works+0x10/0x10 [ 2350.927163][ T41] ? assign_work+0x3d5/0x5e0 [ 2350.927194][ T41] worker_thread+0xa53/0xfc0 [ 2350.927247][ T41] kthread+0x388/0x470 [ 2350.927297][ T41] ? __pfx_worker_thread+0x10/0x10 [ 2350.927313][ T41] ? __pfx_kthread+0x10/0x10 [ 2350.927336][ T41] ret_from_fork+0x514/0xb70 [ 2350.927373][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 2350.927390][ T41] ? __switch_to+0xc79/0x1410 [ 2350.927415][ T41] ? __pfx_kthread+0x10/0x10 [ 2350.927435][ T41] ret_from_fork_asm+0x1a/0x30 [ 2350.927475][ T41] [ 2350.927497][ T41] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2350.927516][ T41] CPU: 0 UID: 0 PID: 41 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2350.927544][ T41] Tainted: [L]=SOFTLOCKUP [ 2350.927551][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2350.927564][ T41] Workqueue: events_unbound cfg80211_wiphy_work [ 2350.927591][ T41] Call Trace: [ 2350.927599][ T41] [ 2350.927607][ T41] vpanic+0x56c/0xa60 [ 2350.927633][ T41] ? __pfx__printk+0x10/0x10 [ 2350.927661][ T41] ? __pfx_vpanic+0x10/0x10 [ 2350.927684][ T41] ? is_bpf_text_address+0x292/0x2b0 [ 2350.927712][ T41] ? is_bpf_text_address+0x26/0x2b0 [ 2350.927747][ T41] panic+0xc5/0xd0 [ 2350.927765][ T41] ? __pfx_panic+0x10/0x10 [ 2350.927790][ T41] ? ret_from_fork_asm+0x1a/0x30 [ 2350.927812][ T41] __warn+0x315/0x4c0 [ 2350.927829][ T41] ? kcov_remote_start+0x5d8/0x710 [ 2350.927846][ T41] ? kcov_remote_start+0x5d8/0x710 [ 2350.927863][ T41] __report_bug+0x29a/0x540 [ 2350.927888][ T41] ? kcov_remote_start+0x5d8/0x710 [ 2350.927904][ T41] ? __pfx___report_bug+0x10/0x10 [ 2350.927925][ T41] ? do_raw_spin_lock+0x12b/0x2f0 [ 2350.927942][ T41] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 2350.927985][ T41] ? rt_spin_lock+0x1e0/0x400 [ 2350.928009][ T41] ? rt_spin_lock+0x1e0/0x400 [ 2350.928034][ T41] ? kcov_remote_start+0x5d8/0x710 [ 2350.928058][ T41] report_bug+0x16a/0x220 [ 2350.928086][ T41] ? kcov_remote_start+0x5d8/0x710 [ 2350.928101][ T41] ? kcov_remote_start+0x5da/0x710 [ 2350.928116][ T41] handle_bug+0x9c/0x200 [ 2350.928130][ T41] exc_invalid_op+0x1a/0x50 [ 2350.928144][ T41] asm_exc_invalid_op+0x1a/0x20 [ 2350.928158][ T41] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 2350.928174][ T41] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 32 dd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ca 25 59 09 89 c0 48 c7 c7 10 94 6b [ 2350.928187][ T41] RSP: 0018:ffffc90000b279d8 EFLAGS: 00010202 [ 2350.928200][ T41] RAX: 0000000000000002 RBX: ffff88801feebd80 RCX: 0000000000000000 [ 2350.928210][ T41] RDX: 0000000000000000 RSI: ffffffff8ba759c0 RDI: ffffffff8ba75980 [ 2350.928220][ T41] RBP: ffff88803d8b4140 R08: ffffffff8b1fd8e0 R09: ffffffff8dfc8080 [ 2350.928232][ T41] R10: dffffc0000000000 R11: fffffbfff1f1223f R12: ffff888064b11dc8 [ 2350.928243][ T41] R13: ffff88805ec107c0 R14: 0000000000000000 R15: ffff888064b11de0 [ 2350.928259][ T41] ? rt_spin_lock+0x1e0/0x400 [ 2350.928280][ T41] ? kcov_remote_start+0xe0/0x710 [ 2350.928297][ T41] ieee80211_iface_work+0x211/0x1390 [ 2350.928320][ T41] cfg80211_wiphy_work+0x2cf/0x460 [ 2350.928341][ T41] ? process_scheduled_works+0xa70/0x1860 [ 2350.928363][ T41] process_scheduled_works+0xb5d/0x1860 [ 2350.928401][ T41] ? __pfx_process_scheduled_works+0x10/0x10 [ 2350.928422][ T41] ? assign_work+0x3d5/0x5e0 [ 2350.928458][ T41] worker_thread+0xa53/0xfc0 [ 2350.928499][ T41] kthread+0x388/0x470 [ 2350.928522][ T41] ? __pfx_worker_thread+0x10/0x10 [ 2350.928539][ T41] ? __pfx_kthread+0x10/0x10 [ 2350.928563][ T41] ret_from_fork+0x514/0xb70 [ 2350.928584][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 2350.928603][ T41] ? __switch_to+0xc79/0x1410 [ 2350.928633][ T41] ? __pfx_kthread+0x10/0x10 [ 2350.928656][ T41] ret_from_fork_asm+0x1a/0x30 [ 2350.928691][ T41] [ 2350.929392][ T41] Kernel Offset: disabled