last executing test programs: 5m17.44131297s ago: executing program 2 (id=1776): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000140)="3e0f01d1b805000000b9dec700000f01c1c461605899e3dd0000c4a17c560f0fc738c422159f8e84000000d09dce0a000066baf80cb804859083ef66bafc0c66b8df5a66efc441f172d00364f22ef0013e", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m16.631484921s ago: executing program 2 (id=1778): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)={0x10c, 0x6, 0x0, {0x10000000008, 0x8000000001, 0xe3, 0x0, '/sys/\x06\xc0\xa4\x9eN\x00\x00\x00\x00\x00\x00\x00en\xdf\x00\x00\x00\x00\x80\x00\x01\x00\x00\x00\x00\x00\x8a\xde\xb5\x1a8\xc1T\xcc\xe9|8\x18\xf0\xb5\xb4X0\x92\n%EaFK\xea\xce\x86c9\xff6h\x8c$\xa2,\xc3\xa4\xc9\xf4\xc8\x1f\xa3\xc2wa\x8f\xc5G\xad\x15\x9b\xfd\xcc8G\xefP\xbd*\x98`\xeb]\xde\xd6\xd0W\xd3\x18\x93g\x18]\xe0\xfc\xd0\v{\xf6,\xd6\xa3\xb1\xfc\xbcG8u\x9bH\xb3;\x94\x891It\x0e\x9em\xad\x90\xd2\x92i)1LgS\x8f4z\xa4\xf7\x8f\x16\xeeCS;Kk\xdcE\xe0\x1f\x9b\xa4Y\x85\xd8\x80zS\f\xb7\xf2\xb2|\x88\x1b?\x8e\nu+\xe8\xbf\xdc>\xd5X\xe2\xfdR\xed\xc2\xc8_\xf0\x0f\x7f}\xc4\x91\xca?\x8a\x89x\xce\xd7u\x03\xe5\x88\x90\x9ck1!+|\x18\x82W[\x84\x05/\xccI\xff'}}, 0x10c) 5m15.311181925s ago: executing program 2 (id=1779): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xc00007c}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) dup(0xffffffffffffffff) openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m13.283390628s ago: executing program 2 (id=1787): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) write(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2185083, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 5m11.368797061s ago: executing program 2 (id=1791): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect$uac3(0x1, 0x114, &(0x7f0000001680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1503, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x3, 0x1, 0x8, 0x20, 0x0, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x3c, 0x5}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x400, 0x5, 0x2, 0x8001, 0x0, 0xdee, 0x3, 0xfffe}, @feature_unit={0x15, 0x24, 0x7, 0x6, 0x1, [0xff, 0x6, 0xd, 0x8]}, @extension_unit={0x9, 0x24, 0xa, 0x7f, 0x4, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x6, 0x2, 0x35}, @as_header={0x17, 0x24, 0x1, 0x6, 0xf, 0x6, 0x0, 0x1, 0x83, 0xf, 0x8}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0xfa, 0x9}, @as_header={0x17, 0x24, 0x1, 0x0, 0x4, 0x958, 0x1, 0x49, 0xff, 0x4, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x8, 0x9, 0x9, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x6, 0x3, {0xa, 0x25, 0x25, 0xc2600000, 0xc5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xfa}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x7, 0x5, 0x4, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x6, 0x5, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xfd, 0x4, 0x6, {0xa, 0x25, 0x25, 0x9, 0xa1, 0xf0}}}}}}}}]}}, &(0x7f0000001a40)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x310, 0xa, 0x3, 0x5, 0x20, 0x5a}, 0x25, &(0x7f0000001800)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x6, 0xf00, 0x4, [0x3f00, 0x0, 0x30, 0xc000, 0xff3f3f]}]}, 0x6, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x500a}}, {0x36, &(0x7f0000001880)=@string={0x36, 0x3, "a746f281b7d2c7cceddfd1696db75d282b4c21279a653dc60b310716d0508245d3f0549d7460c5dd50d296f675e9e2c1cec0c0d6"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x423}}, {0x42, &(0x7f0000001900)=@string={0x42, 0x3, "c174606400365e1dd2968490d6784d0bd74b753f40431ac4cb2ba0764ad47452ed806420bda4adbf7806af7c86d0e72c4b21bb753f6f8757fb09baa7f91b0f87"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x240a}}, {0x80, &(0x7f00000019c0)=@string={0x80, 0x3, "877f40d8394a403a4a3ec1a6e2277b0e2eabae8a437aff2bf2cbdb63abd0c73e678e64e64c09a30856a5c1a6a57a9d2975744e3877128daa5e1e07d01c104541bdc7ab70ae28b75f8409ef27492a3af2e8b8690dedddd9b3f39105509d5ce66c19c67adb3a91c757c651a5ccf8f3f750ad47a57704b1a930dcdb3d8485bf"}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)={0x40, 0x6, 0x5, "44d8df1fb5"}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000001640)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/53, 0x35}], 0x2) 5m7.522240323s ago: executing program 2 (id=1798): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="0000000000000000000000000005", 0x0, 0x7fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0xa, 0x200040) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000001c0)={0x5, 0x2f00000, 0x1}) 5m7.238566807s ago: executing program 32 (id=1798): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="0000000000000000000000000005", 0x0, 0x7fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0xa, 0x200040) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000001c0)={0x5, 0x2f00000, 0x1}) 4m12.985994199s ago: executing program 1 (id=1969): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5f, &(0x7f0000006680)) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r3, 0x29, 0x1f, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x2ec}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000080}, 0x4040080) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) syz_ublk_setup_queues(0xffffffffffffffff, r7, &(0x7f0000000040)={0x0, 0x8416, 0x1, 0x1, 0x123}, 0x0, 0x4, &(0x7f0000001d00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r6, '\x00', {0x2, 0x73, 0x0, 0x0}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x48, &(0x7f0000000280)=0xbdf6e5a, 0x4) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000040)={0x2, 0x9dc, 0x0, 0x0, 0xfffffffffffffcb2}) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r10, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000340)=[{0x3c, '\x00', @buffer={"2b9053c646adec80cb505c0537a87849ba764eb0a00b12e3f51b0f01a90c001c", 0x20}, 0xc}, {0x35, '\x00', @buffer={"1affe1ba1b497db164fbbfa28dbee2907a2252a194c3c5d8630dd694a849230c", 0x20}, 0x6447}, {0x29, '\x00', @st={0x4, [{0x3, @uvalue=0x6}, {0x2, @svalue=0x1}, {0x7ba518d52392617, @svalue=0xc}, {0x0, @uvalue=0x2}]}, 0x9b10}, {0x32, '\x00', @buffer={"9410768ce7c10c74c84d2f87556782d4f746b1965d0ec19e8ff88d0f29a848a3", 0x20}, 0x7}]}) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000280)="93a8b7bfd7fab01dd8488e4147bd361a48e11bf2121cd8a76b6d83190e208768ed565cd21d837303d733ae27066383df13a4baeed5e09b59cb29", 0x3a}, {0x0}], 0x2) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) truncate(&(0x7f00000001c0)='./file0\x00', 0x6) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 4m12.403768172s ago: executing program 1 (id=1972): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) (fail_nth: 4) 4m11.693330456s ago: executing program 1 (id=1974): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101", @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0", 0xa5}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='vlan1\x00', 0x10) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m10.143522186s ago: executing program 1 (id=1978): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) write(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2185083, 0x0) 4m8.729888699s ago: executing program 1 (id=1979): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14) 4m2.724164032s ago: executing program 1 (id=1987): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x4, 0x8, '\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400009c00000000e4e1e0fe80208c3abcd362ca885bdeff7a481c7ea0a803977359148a3c4e4bd4d9d8032d921910051d320efe752233d7e8b74eb6d43ab8bafdcad60165edc7b9528eac8b3b16fd310a059dc89a6699d0fce80a6bea4017ee279a144c0f6904c6d9082aab0a7b35a12775e92f18d569b42d4c3936b99106c3"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="182200000000006f36e581000000e0bf33aa00263cc7ba"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1f}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='-+\x00', r7) 4m2.11783224s ago: executing program 33 (id=1987): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x4, 0x8, '\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400009c00000000e4e1e0fe80208c3abcd362ca885bdeff7a481c7ea0a803977359148a3c4e4bd4d9d8032d921910051d320efe752233d7e8b74eb6d43ab8bafdcad60165edc7b9528eac8b3b16fd310a059dc89a6699d0fce80a6bea4017ee279a144c0f6904c6d9082aab0a7b35a12775e92f18d569b42d4c3936b99106c3"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="182200000000006f36e581000000e0bf33aa00263cc7ba"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1f}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='-+\x00', r7) 24.806740871s ago: executing program 4 (id=2492): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, 0x0, 0x0, 0x1f, 0x0, 0x0) 24.388684236s ago: executing program 4 (id=2494): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x11) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b4020000", @ANYRES16=r3, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x800}, 0x4000c0c0) r4 = fcntl$dupfd(r0, 0x0, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x38, &(0x7f0000000000)=0x36, 0x8) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x8e0f}], 0x1, 0x40010142, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x6, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0", 0x8f}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02", 0x3a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343", 0xa7}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d4", 0xa}, {&(0x7f0000001e00)}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2d6) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) r8 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r8, &(0x7f0000000040)=@l2={{0x10, 0x3a, 0x3, 0x3a, 0x4, 0x3a, 0x4, 0x3a, 0x5, 0x3a, 0x6, 0x3a, 0x0, 0x3a, 0xfffffffffffffe01}, 0x2f, 0xf, 0x20, '+)/('}, 0xb2) syz_open_procfs(r7, &(0x7f0000000140)='attr/fscreate\x00') close_range(r0, r1, 0x0) 23.566499825s ago: executing program 4 (id=2496): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pselect6(0x40, &(0x7f0000000100)={0x5, 0x3, 0x80000001, 0x1, 0x800, 0x2, 0x8000000000000000}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001340)=ANY=[@ANYBLOB="64000001", @ANYRES16=r0, @ANYBLOB="29b000000000000000002f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000500000006001600000000000500120000000000060011000000000008000b0000000000"], 0x64}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x5, 0x4, 0x8, 0x44}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'netdevsim0\x00', @local}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000098000000030a01020000000000000000020000060900010073797a300000000078000300fd1cb21edf8b721e23f25f47a7af07000000400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452fbea5fa0e0d5083a5cd3801400000011000100"], 0xe0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x200200d4}, 0x0) 22.944558495s ago: executing program 4 (id=2500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$unix(r3, &(0x7f0000000b40)={&(0x7f0000000180)=@file={0x1, './proc_mnt\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)="22494b60a3e2943ed55c29ab54a8dcaca0727957bd77449f752bc3c71fa7ba92bb3e0caf0b1c42ffec823ccfcfd30c2585e1a2201533f9b345b4adf466e88a7181e650efa34c7ec279654c3bdb84d344ee36ecb2185ed71d20e7538d5d26a527e88266dca4fce941200fb6deb8b444846211de109188547c03d81331694cc1c9ab6e72b3d95a6f0ff24fbc1f6c9fd7a589", 0x91}, {&(0x7f0000000080)="d81ae60482104ca0911053b88ba2b878c461899965a7ab48845c", 0x1a}, {&(0x7f00000005c0)="65ead29cde674d28da1024db0f61e28e9721cdced7c9b3ab4d51a98c01e079c0f254642514fe2b896108148b957567a689823a76d0cff67b1c18af39767f7bbc323418e1881fcdfb38f104236df22e39ecce75a8fc2462dbe56315ba8617aa556160356a9ab7f24bf4e17c9a47db562a75e2fd169d5e6d7b9ae7007091f2d0c0618021849dff813691f0da9bc25572bea299bb1558d63d79a5c8be5de2b135ef8c7c1e0cbf78cbff19509a09fc5f62ac02f92b5da825106dbfda55ae810a41e2d4a4659a6703c1aa15e12419a175ae2b38", 0xd1}, {&(0x7f00000006c0)="5d1da26c6a968039ac4abee1cc6c94cde9fde5f9dc9647a784166c0e2ba6ec187a7108ac82ff29379a8f423b577172fa5f15bfc6", 0x34}, {&(0x7f0000000700)="b164045223a80ea0441680277932a4d188508b69853b752bccb063b8ca6cdf92f306fbe16b1f8fe28a9e1a4de4169b9ab594840811cadb24f313e8b75472791fd7d4aeb5529f0b9e6ff0cfc0f45854de5830df0d7846b5d67ce5ca44b78c57d02d19de04a3a6", 0x66}, {&(0x7f0000000780)="4dc818e604038fbe6a89a49ea75c9319e6ba59164ea4591694", 0x19}, {&(0x7f00000007c0)="38765d76000fc03715b4ca87703670e5c70d197946", 0x15}], 0x7, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRESDEC, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES16, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRESDEC, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000cd52f1b57c9bc9d3a76b429829ac1e94c4f3f499032425b8b1f0bbfbbf6d19f23a898a64a04f1190145ac39713099d4268ef3cfc34b4c246169f974b85837c", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRESDEC=r1, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="1cfaea894a", @ANYRESOCT], 0xf0, 0xa0880}, 0x4000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 21.513720071s ago: executing program 4 (id=2504): r0 = syz_open_procfs(0x0, 0x0) io_setup(0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000004280)=[{{&(0x7f0000000200)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0}}], 0x1, 0x40000016) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d96000100000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 19.129951269s ago: executing program 4 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff40, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x0, 0x49, 0x10, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x86f1f894e6e47f62, 0x0, r2, 0x7f}, [@IFAL_LABEL={0x0, 0x2, 0x2}, @IFAL_LABEL={0x0, 0x2, 0xb}, @IFAL_LABEL={0x0, 0x2, 0xd}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c891}, 0x4c0d4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 9.83015494s ago: executing program 5 (id=2532): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@generic={0xa, "af324261eca4107c8f1758894edbf093bc1f07d80877cbb68a4b081cac2d502b0444f672c57e56441baa26d27a7c3cf8f5335158854c7e6c64b18f0c5eb185126db0ed4a4fb4527f4c9e756def9522d5dc81441b29f5a6ac360997af3df5167cc017ed48a06a2b5d81740cc2ae1f7ddb4287a4ca52fa43a768ab6227484e"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x54}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="91c3", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000061c0)={0x2, [0x0, 0x0]}, &(0x7f0000006200)=0xc) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in6=@private2}}}, &(0x7f0000000400)=0xe8) r3 = io_uring_setup(0x4611, &(0x7f0000000280)={0x0, 0xa4bf, 0x10000, 0x0, 0x2cb, 0x0, r2}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d000005240600"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) close(r3) sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000780)="0cbd", 0x2}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000001c0)={r6, 0x6}, 0x8) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 9.622918557s ago: executing program 3 (id=2533): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000000206010800000000000000000000000c050005000a00000c0900020073797a320000000005000100070000001400078008000840000000d30800064000000000050004000000000011000300686173683a69702c706f72740000000013000300686173683a6e65742c6966616365"], 0x74}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004500)=ANY=[@ANYBLOB="b41b00002f0009002abd700000000000040000009f1b1180811b4580730a2380ab759f44fd8f1f823faee1ae3d674537ad1f43d2244c44a7d08bc6a5949aaa7cc79d68c2225645510f6cd4240a4280a3003200deebbde8fc5808b4c4b5d026eab54c5b4a3dacf78edc4950b2a7e43d5420cad8215cd39f02ff310065e8bc19bfa4547b915fbf93cded7afa7b224cf9be7a86b4ee936636e6f630669ae785341d7a0059235dd520d13aa0f5240fc76e0327f62a80b50c799274ede3d68f9cb24a09c30e4607d3d7784e0810222a518444924c44c6bab55c8695c4a633368cddf7f11d8e9dc668b220cf49d8a7513543bf3b3600fde146be1629ce2cb33dc47437af804826f0946aabbcdda67554c0d1d7efe2dd93e77702672bda777a5682797207b018ea35a6dd6f56cb01bf5d90450764afdd4677b371c0ddca20fabac1f2e06571c2971a1385bd48f06804a05776ea4d30e95f05234d48e32a06e53151ed96c711c0c343e94c111e5b4b1918d215ce62359518cb2ef491617e2ab5f04c23f3251c1ccd482030d2878d523c902b08b490dc7dff14003500fe8000000000000000000000000000aa31ef6fddbf8f8476171cd6ae706119577e211381b14cd71d489e347df92ca1bb893dd065780fb7b580e8093bb00b634b69931055eff0d38f8553fd747c464c8e159948eefd12e5bdf14c4d89c0ae526dc1ffeac78c73cf9e759f31b8ad7145ff12de3277022541ed18a53f6cad2f72d2279e32d503be08ff4e304a4abdab4785df9190819588708e95901df81e8def1cffe782761b54cfc53fc5694fcfe45fdf6c678c07451d4be38cb26a1674ec90e2ccf09a9908509716f2f4c91d87527d5aa4188313b3bcd65aef76fd7c66328042d3df62b4af581f", @ANYRES32=r2, @ANYBLOB="0800c904", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="57b4d287efc73303d8f16550033bb8d13ace3793ccd2265d822fc98e2f59c3ad1d725f5ce4034c6f7c19bf1349bb791a5f86f7f36a3a7eea82caba740a62e0f2992008b77e044dc6f0aec78706b46d4c55346de51f97843354c4e8a85470627584a951623857f7f0034fb82efccd8942a56cc109b09040fb7ff8783618ec5d0a0429bb102e3c1fde791cf4e5ba74c3263278fe76685390aa3fa803fb5566040051800400f0800400018014007500fc000000000000000000000000000001080015", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="d519dbd6aaf52d3f5c0dd9f0bdcc0fcb549e771d4df8086a6ef74aedb16a00802384886934e6f02b41af49fc0fd78d6c1b9f6eadd9a2291c095f19eece3f02b4124db79377b157ea7b96411d302e20b29759c893cb8cb1593ff9304a89e4c242e1d99d6774473a2cd06a74d89a7b06a18d94ca8c8ae090802922356dd48e87331d2248dbbc86a87d24f79ae44a2f5a6cfa867098c19060d8b2bfde08b501fae7e38ee61296ea08397a05f205add52755941206f63508009b00", @ANYRES32=r3, @ANYBLOB="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"], 0x1bb4}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000200)={@hyper, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r5 = dup(r0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xffffffffffffffff, "8edeaec6169605c36caa7b3a6688cb0c73a00429fda1f08ac5de830392d72a14", 0x8, 0x2, 0x1, 0x6}, 0x3c) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="10000000000000000000000007000000"], 0x10}, 0x0) r7 = syz_open_dev$mtd(&(0x7f0000000040), 0x7, 0x109883) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000080)=0x6) 8.765652488s ago: executing program 3 (id=2536): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000040)='K', 0x1, 0x20000000, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x2400c024) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)={0x28, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}, [@typed={0x14, 0x11f, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040804}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x20}}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x64}, 0x28) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000cc0)={0x1, 0x0, [{0xdb, 0x4, 0x16c6dc95e4199ca, 0x0, @adapter={0xb73, 0x10001, 0x8, 0x800001, 0x5}}]}) 7.658598189s ago: executing program 5 (id=2538): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x21, 0xdc, {0xdc, 0x24, "71af0f85961b5b8ed72b6433762ba080b7024de3d3f171534b1b9c3ad9ae6cde240f02786a3893d9b79a30080c27f30355769b053bdfd0eeaed3282a10a64295476db41b5b581df9b6a2435d63ad0df20b9b802b3a74a456e28893f6be54dfa94a4d92bec1192bf0cffd0e325319141def6300e7fe9712c3f26fd6d2556c24222b99d4865f05442c1cf72bd335e5f784c38a5d9fac3db7792f7eb3d4befecd631ce82c1d81ecae802fb9e04940982670908b74ca36eb29c9060a12013d280cd7d25e298d4ca55fc9263ec9bd78589aaf3266c3d47f500d9254cd"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x105b}}}, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x20, 0x9, 0x6c, "292bcd878f66f3a03b8c28a0ca797d9678260d7a0881cbdf73878f9e4237ff12ed427c2f060d65e585c9312423355dcc2c58525b50b2f8864cc05501390f1c66345386fab88f2610b60e67c98996bb076d7e61ae0b81d640e6e23a7cbde27538b40e2c106fd31f9cd2a9e9a1"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "aa7882f1232c63dc08c79ed406028a761c6069d5318e4ecd1f0c65884f321cf88d856cf4526b0813311b6052033967"}}) 6.955058785s ago: executing program 3 (id=2539): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='workdir', &(0x7f0000000140)='\x00', 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 4.691788945s ago: executing program 3 (id=2544): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000037c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000000c0)="9d947af6072018e89c7261e32c8a6749058c93ed1672781e8e18e9dbd0dfe1fecd68d5f54075becb028f7899b0a4df041fc3629a22611fe4753aef51e1f92f0878920e100d339fcc1acfdcd79f41bfdff49306fa69725a2f9c97c46627616bea3053b8e2f22cbab1f63b3fd43a0792301d3dc4e0d9743dd0fec6ddbc52c0dc1d082d99", 0x83}, {&(0x7f0000000180)="5c3496af46885d3dcb14f473739655c9c1f8e6d29145779952afaa21519f4b2f279bff4952b1df7a620746a80376d4c64543e4b63873a2ebc9a93c3af1b76bd92ec769bf749dbc0b0a65ebb262cc0b32d30218fdd0f0558d8fbea8acbcb33f26a0750f3b7f05e89e037bd279b0613e0dd821b6d63cce410cdf80985f08a2fd", 0x7f}, {&(0x7f0000000200)="d157b6633c2cef79f6c4c94011db07bed9e4767faf30a21368670663f0ca9b44d4b9e91170a39854fe7779376331ecc876d70107058e0d40390fde8ededa1f49422e1ae0c09ec82f0c271b828fcbff526e826798f5239f0f56d8b8015df4633bf403e2e184a961263dfea8ac224c48000a97", 0x72}, {&(0x7f0000000280)="ac2817e463ed7d462be46c61d783db5aa5aa96ef02c1ac159e849fdb4e24e49888273fc1941fff367e7c9bb085ede21a57927d694c3e998e703bf1f55ad2c75f9709e5f37bf6e1b2f42436e27ab369197d5a459d95cb2a3bf9e76f1cfd773bcb41ec86f1530d01e6456a8d2cd33f0084572c3bafa3b80008db280aff7432acb03c95fcec7067c13303cbaaa1658884f35a5c923f54ea25d3383c50a298867cac7414488a6608cf395dfb042cf6fd6c855f915d991ff456", 0xb7}, {&(0x7f0000000340)="eccd64d0d8", 0x5}, {&(0x7f0000000380)="79ebc5297b1a441f2a1ef048fc5b632d58694f918df437912a63a94daa302e2265c4871d23a3a7b39bc4d06693235d6ca49be9c6ce73d513f254dddfb3c166a72e8f13f4e821e1174a8f8330ccdc97b147db47fe0fde651059a7502865d489ad2228fd12cfe0b56b9f6eb825c42557681bd3c88e887291ae193274ec15438641c3d0212f31c54921312c352e0dcff1c82722b85ccf56efc522fdbf37052af59a6272363ba5a9972d7d1f6285d4789655e0fa64e962", 0xb5}, {&(0x7f0000000440)="5160bd19b79ad607d75d0043042f2f772754522512261344dba5efe63c877847b060d9d82a6fbc0498cc310b56fe01ffa60f16354387b6d900faed321402", 0x3e}, {&(0x7f0000000480)="01fce753f9141d390a56d2347c3f4915274c69", 0x13}, {&(0x7f00000004c0)="2a87f29c276889f366d5005bbf89093be4c6b872f18ea70fa96382190c8ad620a7182a8ec82ffeaa658d7f3a5015c4c570d40ba14db6990f19e8ab3dee50575abaa6a5094a571a0eaa8d22918a365bead8ea57b9d5dceafeae5288c230e9049cb9ba494380a29adf07da21d5511be7c467bff48bc9eb7dd6cca21d15", 0x7c}, {&(0x7f0000000540)="a4ac7ec279ce527d0e492cc8486de6b9f709ac8b0f35a2fa3a5c26f9819b91abd48c8a6534e350442e3609cb44461d5d9fd616751a6420e14743eed74e9f330e2d5370239b99d2746a216d82261a84aa30f838579bd09930acaf2a2a1443f1a7c901a12e975b474fe6711ca386510084743dca5308ef19596d9a8ce741fd6baa2550cdddc256db10a44948895af91af50d7916f75a5d5a6c549d083a89dfb2e465cd241aa397c5c7e35f4bfb0996b9feeb69327f325e018cfaaf92837ca6", 0xbe}], 0xa, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3c}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x33}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_u8={{0x11}}], 0x108}}, {{&(0x7f0000000980)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="a2f84b721ec85aa72235404c81c4f6b9846ed30d4d5a3644f6b8dc8d49f6742ecaa91d9de36b47d1ae85a545649c2982c652fb8ba4141630c6258fa284faf63cd1933665e2383af844849b1379eebe6a3bf84a667e470f68fee91a8327e2bf3796a8861e28b5e800208395fdfdfdaf6297121a3bb1c4ea0f099d3f61d5ab7f5896310618ab34c941c4c437a2d18c20ca5d3f4c6811622d0d88a4609ee8d9052ca502e593d74bf689109a18333b5ceff60fe7a226adec78e88511e1717d7386f8612cf359004ecc8b503ac9ca2015ff41282600200d9d4434d365204b99227101ff313c", 0xe3}, {&(0x7f0000000ac0)="b4753a445c47590525b7288c706df34522ee112e3ed4c2b6431ac07838e36a496f6610ec52e0ed24ce703e0b08a0e3f96ea0381749f260717c25697e9ded4f82fe783f4bc6b5f70de17ec89cc016a2edbc3ea5fb42c24037b4d209bb7379ff89d648aebbe77124523765b995b5c4d75105e8f45933f3b5634e52a0661f3a5aeca1db24b557bfec30aee7d508c6b0f1713a2c391988789a2e5d65", 0x9a}, {&(0x7f0000000b80)="17fda8e5", 0x4}], 0x3, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xaf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x70, 0x0, 0x7, {[@rr={0x7, 0xb, 0x86, [@private=0xa010101, @loopback]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x28, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x40}, {@empty, 0x5}]}, @timestamp={0x44, 0x24, 0x24, 0x0, 0x1, [0x5, 0x10, 0x800, 0x9, 0xb, 0x9, 0x8, 0x4]}, @ssrr={0x89, 0x13, 0xf6, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xeaf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x108}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="4b176a97bebf030f853efef6a253d5d8b4c52c216420ca8278914252e3618ef23b8cc41106c8879d608519f226d0e4e1abe40d2722cda23fc4596ebba40152a69fbb2070d619dc3ed4c95def7b40070de0ce696eb0393db432f4c88b7ed2632892095214e9d9fe7f8e7e3ff4d3a3e70ceca7d287cceba71c608263e92f7dc913bc6ab86f1ebb67769b", 0x89}, {&(0x7f0000000e00)="fd7fa67b0d178fae44afd2e9fce3ffa940f51ef6e4379fca6e4dc3a9efc746e52541cb60aa13c6d8764600880988bc71b99e6fe8de73f0f7c76d0159f36d174650bc8fb1003b943bd024a7ce29dd879cbddc2e6fb677be3cda5970c780cf493a5d079f9e1c13d98a482c6701aab221eed03f7c743dc40b39", 0x78}, {&(0x7f0000000e80)="c1a9eed3d8deaf9b19a9b85513ad64b4c61fc2f4c0d5007965cf62e74a0542e9503d9c7e9d79db4f3e6969449322e77631b85193dee3165ef12ebf128f1ec92f28f833c98de4057c7b8a967df3a6d34357eb1a85c0a5908352eefa501745008e5e3d42234dad7f8325c74a99f911aa0851be6d717ee80127f4e5df3d686d433c9421339b5a91bc27f457fde0ff1ea65188ba386f34d6049e4329c04146a3cbc3b8c6546a8eeec172c2e8fbf9693adeef20873540aec0522de876884be88cc653cfaac9c89ce1dbcd679b55273281a5be0ac2b2e74466cd1d30", 0xd9}, {&(0x7f0000000f80)="3b7c53612fe000ca7bca2e09e0a7d8fe566963f6333b5d5e4d5777d9b9c3d281cf88b4a8d1bf86c0c873bc", 0x2b}], 0x4, &(0x7f0000001000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x38}}], 0x3, 0x40800) 4.561742927s ago: executing program 0 (id=2545): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e22, 0x2, @mcast2, 0xdb22}, {0xa, 0x4e21, 0x3, @mcast1, 0xd}, 0x1, {[0x5, 0x2, 0x7, 0x1, 0xfffffffd, 0x5, 0xb491, 0x5]}}, 0x5c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0xfda2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x68100) unshare(0x26020480) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0xd6e, 0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000000c0)={0x1, 0x5}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x28000, 0x40) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x13, 0x0, &(0x7f0000000b40)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) 4.278241613s ago: executing program 5 (id=2546): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='.'], 0x20) 4.23251403s ago: executing program 3 (id=2547): socket$unix(0x1, 0x1, 0x0) r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, 0x0) write$cgroup_pid(r2, &(0x7f00000003c0)=r3, 0x12) syz_usb_connect$cdc_ecm(0x2, 0x68, &(0x7f0000000e40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0xc, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x3, 0x1, 0x9}, [@mdlm_detail={0x6, 0x24, 0x13, 0x5, "e129"}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x40, 0x9, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x0, 0x9}}}}}]}}]}}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x6f9d, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x80, 0x3, 0x11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffee, 0x3a7ac9ad959089c6, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1011e1, 0x1000, 0xffeffffa, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10000, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x378}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f00000002c0)=0x1, 0x4) 4.066236258s ago: executing program 0 (id=2548): r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='-&/\\\x00', 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x36) keyctl$chown(0x4, r2, 0x0, 0x0) keyctl$instantiate_iov(0x14, r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="8bd5947faa20222dbc374514bf5e98103885e0a7733a657f35c6707a20d6163a44ac24f46a55674f0b5d3f14d064709c3b08d401a29d5fb63347971790b3864728351c7adce3845e196cd62274b88c2389", 0x51}, {&(0x7f0000000140)="8169cc4362b19c63cad38b7cd4b4dfb6ea58ffa67db854f9c1f1d9fea15c05560d26e6116b533198b6c808e2cc238425", 0x30}, {&(0x7f0000000180)="47c4763c98e1a078bffa5af6ff17e01ca3ed7a536781020b387ca974e0c23941b23cc0455adf264491f4d299dea640fc15fd6a17c3f032fc9f5833d3f99670a2c2e5ed0fdaf6652306389f706543e4044a8ed94aa635951c7d8044ac077b2b5a87b826e77a70e6a487499998f08a67e2765346dde39eab1b0e10e0f2e9e9608b3c16a1ec1f303afdeedd248656eb4be533832d3967b0803df3351291eea6078e821de3f0c2b17e1a212d1508099882303d31e2ae73919b94a1d931f130b09efa4a68a69c67eb875a52c43e8387613052688e12413e46209b48420715c8b18507614fd5d517ecd6f0c9cf97b89eda479ed6a2a679f7", 0xf5}, {&(0x7f0000000280)="3a5d8bed2f79ef0255f514af408454e381cf33fd4fa6eca5efbb032395ae5a8c85a132303ffcb7686b6d8f7e5bf5cfb3472e752af7e1e2a10d0c1754f67bd85df3f0eb19c6bab186997a3be06b49a702e8f1533f879862f2047706f08b3a4a803e3d323605d80c3d68e81dd24528b31f03d7332a026186f0421545734c4374a26b8337be7209f5606689312ec64213545f5e9de5c723e7405639e8e5cb3625cd1e791042afe2bfd0967a849ee277ad61c375f278ff5d22f771efb43912fcf737", 0xc0}, {&(0x7f0000000340)}, {&(0x7f0000000380)="68e2fd310a6cc07a2d467cd37fbfc0f42c82974b2fbda5fbc3d9e52758be2ea7835e0ea0d427019cdf30d4cd23", 0x2d}], 0x6, r2) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 3.954674237s ago: executing program 34 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff40, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x0, 0x49, 0x10, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x86f1f894e6e47f62, 0x0, r2, 0x7f}, [@IFAL_LABEL={0x0, 0x2, 0x2}, @IFAL_LABEL={0x0, 0x2, 0xb}, @IFAL_LABEL={0x0, 0x2, 0xd}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c891}, 0x4c0d4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.411845652s ago: executing program 0 (id=2550): socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) getcwd(&(0x7f0000001e00)=""/4096, 0x1000) 3.116423247s ago: executing program 5 (id=2551): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRESHEX=r0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x5040) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x5) close(r2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) syz_emit_ethernet(0x6f, &(0x7f0000000380)={@multicast, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0x54, "71cb", "6bf406", 0x9100, "8aef6a0a7c77a4728c4bde12a4ddd537271a358de9ab0a7335cd1ad85067070936fd63a8e30fd01644b561af9e71ec62b9485627cfc02ece687a5856fc858de82ed7364b8cbbf96c95f8d82ce34efa40"}}}}}, &(0x7f0000000400)={0x1, 0x3, [0xd9, 0x2ae, 0x5a, 0xd0f]}) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000003480)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000340)=[{0x0}, {&(0x7f00000001c0)="def8", 0x2}], 0x2}, 0x4) r5 = socket(0x9, 0x0, 0x0) mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) close(0x3) sendmmsg$inet_sctp(r5, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r7, 0x7}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x440a0) socket$alg(0x26, 0x5, 0x0) r8 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x4}, 0x20) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000080)=0x2) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000004c0)=0xc) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SNDCTL_DSP_GETOPTR(r10, 0x800c5012, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r10, 0xc040564b, &(0x7f00000002c0)={0x0, 0x0, 0x3005, 0x6cf658bc, 0x432, {0x10000, 0x9}}) 3.073582877s ago: executing program 0 (id=2552): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x200c08, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1812471, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="08010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880dc0008801400078008000600a200030008"], 0x108}}, 0x0) r7 = memfd_secret(0x80000) syz_genetlink_get_family_id$ipvs(0x0, r7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000005d80)={r7}) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000240)={0x4, "4c364b60fdd8035753cc106da14c816e71111c00a99d3e14093a932bdee41192", 0x5, 0x8, 0x5, 0x7ff, 0x2, 0x7, 0x1}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 2.374029887s ago: executing program 5 (id=2553): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x11) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b4020000", @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25080000006c0004804c0007800800010010000000080003000500000008000200fcffffff08000400010000800800010013000000080001001400000008000400040000000800010004000000d4fa08000100010000001c0007800800040009000000080001001f00000008000200018000002400038008000100070000000800010027000000080003000500000008000100f6a60000580007800c0003000200000000000000080002000100000008000200050000000c000300d7000000000000000c00030020000000000000000c0003002c0000000000000008000100030000000c0003000400000000000000a40001802c000280080002000400000008000300070000000800040002000000080001001700000008000300018000000d0001007564703a73797a30000000000d0001007564703a73797a32000000002c0004001400010002004e24ac14140d00000000000000001400020002004e20ac1e000100000000000000000e0001006574683a766c616e3100000008000300810000000d0001007564703a73797a32000000002c000780080001000100000004000300020000000000000008000200000800000c0004000000000000000000240009800800020005000000080001008af7ffff08000200e30e000008000200070000006800018044000280080001000f000000080004000400000008000300050000000800030000000000080003008100000008000200ef0900000800040000000000080003000000000008000300ffffffff08000300050000000d0001007564703a73797a30000000003c000180110001006574683a70696d36726567310000000008000300d2ba00001c000280080002000700000008000400020000000800030083f8ffff0c000380faff0100040000001400068004000200080001000000000004000200"], 0x2b4}, 0x1, 0x0, 0x0, 0x800}, 0x4000c0c0) r4 = fcntl$dupfd(r0, 0x0, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x38, &(0x7f0000000000)=0x36, 0x8) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x8e0f}], 0x1, 0x40010142, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x6, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0", 0x8f}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02", 0x3a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343", 0xa7}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d4", 0xa}, {&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba272544c0b39ebbca7d1da95fc74f6010956a8bb3165ee8db3867d1f92176de044693fa090b97bcadedd59b7e509e0d60017b6a3b025aac6650826d7f3406d4206b4d714c620225b5797e60513988e244874ac2a0ac80d18c707edf4999d1beaf841f2b8dd9a3da66e193ef2ab6ddba5185b5fd322187b4ff2f9677ecd725eaf86412158b744e32abb8ee3c039cce34f129d6f2665630931a5e03fc6984278e20e320318b0aa676822c2f732337cc75a858a07ed8c17b323d52ee421e79cff1800d1da3f311699f5eb8792f6d67c035ea9348f7f6ff81b9143db4742618e5ffbe48865d787e0a31f8e4d9e7895eb15c36ba4a81355080818efd3cd792293ec3e8cdc577f5c42abbb74331b352f17772ea7cdab8bb640b11db772baa4b32069b99e4cc43118257afa8", 0x1d7}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2d6) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) r8 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r8, &(0x7f0000000040)=@l2={{0x10, 0x3a, 0x3, 0x3a, 0x4, 0x3a, 0x4, 0x3a, 0x5, 0x3a, 0x6, 0x3a, 0x0, 0x3a, 0xfffffffffffffe01}, 0x2f, 0xf, 0x20, '+)/('}, 0xb2) syz_open_procfs(r7, &(0x7f0000000140)='attr/fscreate\x00') close_range(r0, r1, 0x0) 2.182504081s ago: executing program 0 (id=2554): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008000100020000000800040001000000", 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x8000000, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f0000000080)={0x4, 0x3, 0x9, 0x2, 0x6, 0x80, 0x1, 0x9}, &(0x7f00000000c0)={0x9, 0xffffffffffffff24, 0xfffffffffffffff8, 0x800, 0x530, 0x400, 0x400, 0x8}, &(0x7f0000000100)={0x7, 0xfffffffffffffff8, 0xe, 0xd, 0x9, 0x69, 0xe4, 0x2c6}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xd]}, 0x8}) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000200)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, '\x00', 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0x3, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @broadcast}, [@dstopts={0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xdf}]}]}}}}}}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0xa}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0x1}, 0x0, 0x0) 21.756291ms ago: executing program 0 (id=2555): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x21, 0xdc, {0xdc, 0x24, "71af0f85961b5b8ed72b6433762ba080b7024de3d3f171534b1b9c3ad9ae6cde240f02786a3893d9b79a30080c27f30355769b053bdfd0eeaed3282a10a64295476db41b5b581df9b6a2435d63ad0df20b9b802b3a74a456e28893f6be54dfa94a4d92bec1192bf0cffd0e325319141def6300e7fe9712c3f26fd6d2556c24222b99d4865f05442c1cf72bd335e5f784c38a5d9fac3db7792f7eb3d4befecd631ce82c1d81ecae802fb9e04940982670908b74ca36eb29c9060a12013d280cd7d25e298d4ca55fc9263ec9bd78589aaf3266c3d47f500d9254cd"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x105b}}}, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x20, 0x9, 0x6c, "292bcd878f66f3a03b8c28a0ca797d9678260d7a0881cbdf73878f9e4237ff12ed427c2f060d65e585c9312423355dcc2c58525b50b2f8864cc05501390f1c66345386fab88f2610b60e67c98996bb076d7e61ae0b81d640e6e23a7cbde27538b40e2c106fd31f9cd2a9e9a1"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "aa7882f1232c63dc08c79ed406028a761c6069d5318e4ecd1f0c65884f321cf88d856cf4526b0813311b6052033967"}}) 20.813574ms ago: executing program 5 (id=2556): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000037c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000000c0)="9d947af6072018e89c7261e32c8a6749058c93ed1672781e8e18e9dbd0dfe1fecd68d5f54075becb028f7899b0a4df041fc3629a22611fe4753aef51e1f92f0878920e100d339fcc1acfdcd79f41bfdff49306fa69725a2f9c97c46627616bea3053b8e2f22cbab1f63b3fd43a0792301d3dc4e0d9743dd0fec6ddbc52c0dc1d082d99", 0x83}, {&(0x7f0000000180)="5c3496af46885d3dcb14f473739655c9c1f8e6d29145779952afaa21519f4b2f279bff4952b1df7a620746a80376d4c64543e4b63873a2ebc9a93c3af1b76bd92ec769bf749dbc0b0a65ebb262cc0b32d30218fdd0f0558d8fbea8acbcb33f26a0750f3b7f05e89e037bd279b0613e0dd821b6d63cce410cdf80985f08a2fd", 0x7f}, {&(0x7f0000000200)="d157b6633c2cef79f6c4c94011db07bed9e4767faf30a21368670663f0ca9b44d4b9e91170a39854fe7779376331ecc876d70107058e0d40390fde8ededa1f49422e1ae0c09ec82f0c271b828fcbff526e826798f5239f0f56d8b8015df4633bf403e2e184a961263dfea8ac224c48000a97", 0x72}, {&(0x7f0000000280)="ac2817e463ed7d462be46c61d783db5aa5aa96ef02c1ac159e849fdb4e24e49888273fc1941fff367e7c9bb085ede21a57927d694c3e998e703bf1f55ad2c75f9709e5f37bf6e1b2f42436e27ab369197d5a459d95cb2a3bf9e76f1cfd773bcb41ec86f1530d01e6456a8d2cd33f0084572c3bafa3b80008db280aff7432acb03c95fcec7067c13303cbaaa1658884f35a5c923f54ea25d3383c50a298867cac7414488a6608cf395dfb042cf6fd6c855f915d991ff456", 0xb7}, {&(0x7f0000000340)="eccd64d0d8", 0x5}, {&(0x7f0000000380)="79ebc5297b1a441f2a1ef048fc5b632d58694f918df437912a63a94daa302e2265c4871d23a3a7b39bc4d06693235d6ca49be9c6ce73d513f254dddfb3c166a72e8f13f4e821e1174a8f8330ccdc97b147db47fe0fde651059a7502865d489ad2228fd12cfe0b56b9f6eb825c42557681bd3c88e887291ae193274ec15438641c3d0212f31c54921312c352e0dcff1c82722b85ccf56efc522fdbf37052af59a6272363ba5a9972d7d1f6285d4789655e0fa64e962", 0xb5}, {&(0x7f0000000440)="5160bd19b79ad607d75d0043042f2f772754522512261344dba5efe63c877847b060d9d82a6fbc0498cc310b56fe01ffa60f16354387b6d900faed321402", 0x3e}, {&(0x7f0000000480)="01fce753f9141d390a56d2347c3f4915274c69", 0x13}, {&(0x7f00000004c0)="2a87f29c276889f366d5005bbf89093be4c6b872f18ea70fa96382190c8ad620a7182a8ec82ffeaa658d7f3a5015c4c570d40ba14db6990f19e8ab3dee50575abaa6a5094a571a0eaa8d22918a365bead8ea57b9d5dceafeae5288c230e9049cb9ba494380a29adf07da21d5511be7c467bff48bc9eb7dd6cca21d15", 0x7c}, {&(0x7f0000000540)="a4ac7ec279ce527d0e492cc8486de6b9f709ac8b0f35a2fa3a5c26f9819b91abd48c8a6534e350442e3609cb44461d5d9fd616751a6420e14743eed74e9f330e2d5370239b99d2746a216d82261a84aa30f838579bd09930acaf2a2a1443f1a7c901a12e975b474fe6711ca386510084743dca5308ef19596d9a8ce741fd6baa2550cdddc256db10a44948895af91af50d7916f75a5d5a6c549d083a89dfb2e465cd241aa397c5c7e35f4bfb0996b9feeb69327f325e018cfaaf92837ca6", 0xbe}], 0xa, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3c}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x33}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_u8={{0x11}}], 0x108}}, {{&(0x7f0000000980)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="a2f84b721ec85aa72235404c81c4f6b9846ed30d4d5a3644f6b8dc8d49f6742ecaa91d9de36b47d1ae85a545649c2982c652fb8ba4141630c6258fa284faf63cd1933665e2383af844849b1379eebe6a3bf84a667e470f68fee91a8327e2bf3796a8861e28b5e800208395fdfdfdaf6297121a3bb1c4ea0f099d3f61d5ab7f5896310618ab34c941c4c437a2d18c20ca5d3f4c6811622d0d88a4609ee8d9052ca502e593d74bf689109a18333b5ceff60fe7a226adec78e88511e1717d7386f8612cf359004ecc8b503ac9ca2015ff41282600200d9d4434d365204b99227101ff313c", 0xe3}, {&(0x7f0000000ac0)="b4753a445c47590525b7288c706df34522ee112e3ed4c2b6431ac07838e36a496f6610ec52e0ed24ce703e0b08a0e3f96ea0381749f260717c25697e9ded4f82fe783f4bc6b5f70de17ec89cc016a2edbc3ea5fb42c24037b4d209bb7379ff89d648aebbe77124523765b995b5c4d75105e8f45933f3b5634e52a0661f3a5aeca1db24b557bfec30aee7d508c6b0f1713a2c391988789a2e5d65", 0x9a}, {&(0x7f0000000b80)="17fda8e5", 0x4}], 0x3, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xaf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x70, 0x0, 0x7, {[@rr={0x7, 0xb, 0x86, [@private=0xa010101, @loopback]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x28, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x40}, {@empty, 0x5}]}, @timestamp={0x44, 0x24, 0x24, 0x0, 0x1, [0x5, 0x10, 0x800, 0x9, 0xb, 0x9, 0x8, 0x4]}, @ssrr={0x89, 0x13, 0xf6, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xeaf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x108}}], 0x2, 0x40800) 0s ago: executing program 3 (id=2557): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r2, 0x70, "384f5e64f040b5b11318d9293b79d13956dcaefcb80c8ad047bba89b06f103cebf1703f6ba86643d78181295ef10e4289fae894a2fb476e90e177a7fa6ea201882b128b0e46df04c6d6149968aa754523f205b793064bd5978994986f948c60d26f276c94abfa10bb008679435b1c75f"}, &(0x7f00000002c0)=0x78) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r4, 0x40049409, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) request_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, 0x0, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000008000000911142000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r7, 0xfffffe00, 0x20}, &(0x7f00000000c0)=0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r8, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000bb000007020000f8ffffffb703000008000000b70400000000000085000000150000009500000000000000fb4e238a76101f4ebb9847ff5673d40bf944788e28d392eacc65c18c0d211a80406b06c36ad069a72044c4e5e0f2ce6df67fcdc3672be9782db6c3409dabec9fb16ef5b4769ba4a6a6c58de54191d599ccfe2403496eba4429beeb70e095e57e26b95c89"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): : config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.505187][ T6008] usb 5-1: config 0 has no interfaces? [ 757.519271][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.519300][ T6008] usb 5-1: Product: syz [ 757.519323][ T6008] usb 5-1: Manufacturer: syz [ 757.519338][ T6008] usb 5-1: SerialNumber: syz [ 757.573646][ T6008] usb 5-1: config 0 descriptor?? [ 757.919723][ T5598] Bluetooth: hci2: command tx timeout [ 758.000955][ T5598] Bluetooth: hci3: command tx timeout [ 758.032301][T12380] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 758.064322][T12380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.143828][T12380] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 758.216418][T12380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.253869][T12380] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 758.281056][T12380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.307956][T12380] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 758.456121][T12380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 760.672934][ T5598] Bluetooth: hci2: command tx timeout [ 760.811175][T12058] usb 5-1: USB disconnect, device number 32 [ 761.202057][T12788] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.202199][T12788] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.202467][T12788] bridge_slave_0: entered allmulticast mode [ 761.230033][T12788] bridge_slave_0: entered promiscuous mode [ 761.668157][T12383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.794010][T12383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 761.824888][T12383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.839570][T12383] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.851858][T12383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 762.171092][T12788] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.171245][T12788] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.171502][T12788] bridge_slave_1: entered allmulticast mode [ 762.184551][T12788] bridge_slave_1: entered promiscuous mode [ 763.098947][T12788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.148337][T12788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.266039][T12822] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.266276][T12822] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.266506][T12822] bridge_slave_0: entered allmulticast mode [ 763.272271][T12822] bridge_slave_0: entered promiscuous mode [ 763.541899][T12822] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.542141][T12822] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.542374][T12822] bridge_slave_1: entered allmulticast mode [ 763.573963][T12822] bridge_slave_1: entered promiscuous mode [ 763.579168][T12788] team0: Port device team_slave_0 added [ 764.347247][ T5598] Bluetooth: hci0: command tx timeout [ 764.489156][T12788] team0: Port device team_slave_1 added [ 764.705966][T12822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.747510][T12822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.784882][T12788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.784901][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.784938][T12788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.855465][T12788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.855485][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.855515][T12788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.874264][T12822] team0: Port device team_slave_0 added [ 764.929563][T12822] team0: Port device team_slave_1 added [ 765.037184][T12822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.037197][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.037214][T12822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.133297][T12822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.133318][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.133348][T12822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.399029][T12788] hsr_slave_0: entered promiscuous mode [ 765.403707][T12788] hsr_slave_1: entered promiscuous mode [ 765.404347][T12788] debugfs: 'hsr0' already exists in 'hsr' [ 765.404364][T12788] Cannot create hsr debugfs directory [ 766.266345][T12822] hsr_slave_0: entered promiscuous mode [ 766.277628][T12822] hsr_slave_1: entered promiscuous mode [ 766.280877][T12822] debugfs: 'hsr0' already exists in 'hsr' [ 766.280907][T12822] Cannot create hsr debugfs directory [ 766.403469][ T5598] Bluetooth: hci0: command tx timeout [ 766.844632][T12992] FAULT_INJECTION: forcing a failure. [ 766.844632][T12992] name failslab, interval 1, probability 0, space 0, times 0 [ 766.844670][T12992] CPU: 1 UID: 0 PID: 12992 Comm: syz.4.2132 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.844698][T12992] Tainted: [L]=SOFTLOCKUP [ 766.844705][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.844716][T12992] Call Trace: [ 766.844724][T12992] [ 766.844733][T12992] dump_stack_lvl+0xe8/0x150 [ 766.844768][T12992] should_fail_ex+0x467/0x600 [ 766.844799][T12992] should_failslab+0xa8/0x100 [ 766.844820][T12992] kmem_cache_alloc_node_noprof+0xae/0x670 [ 766.844848][T12992] ? dup_task_struct+0x52/0x8f0 [ 766.844867][T12992] ? dup_task_struct+0x52/0x8f0 [ 766.844891][T12992] dup_task_struct+0x52/0x8f0 [ 766.844922][T12992] ? rt_spin_unlock+0x163/0x200 [ 766.844946][T12992] copy_process+0x820/0x4390 [ 766.845000][T12992] ? __pfx_copy_process+0x10/0x10 [ 766.845033][T12992] vhost_task_create+0x1f9/0x380 [ 766.845060][T12992] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 766.845080][T12992] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 766.845100][T12992] ? __pfx_vhost_task_create+0x10/0x10 [ 766.845137][T12992] ? __pfx_vhost_task_fn+0x10/0x10 [ 766.845167][T12992] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.845190][T12992] ? lockdep_hardirqs_on+0x7a/0x110 [ 766.845212][T12992] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 766.845236][T12992] ? mutex_lock_nested+0x152/0x1d0 [ 766.845257][T12992] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 766.845285][T12992] kvm_mmu_post_init_vm+0x147/0x2b0 [ 766.845312][T12992] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 766.845352][T12992] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 766.845373][T12992] ? do_raw_spin_lock+0x12b/0x2f0 [ 766.845411][T12992] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.845435][T12992] ? lockdep_hardirqs_on+0x7a/0x110 [ 766.845459][T12992] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 766.845483][T12992] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 766.845503][T12992] ? do_raw_spin_lock+0x12b/0x2f0 [ 766.845524][T12992] ? lock_acquire+0x106/0x350 [ 766.845543][T12992] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 766.845570][T12992] ? rt_write_unlock+0x19c/0x360 [ 766.845594][T12992] ? rt_write_unlock+0x1a8/0x360 [ 766.845616][T12992] kvm_vcpu_ioctl+0xa64/0xfe0 [ 766.845642][T12992] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 766.845658][T12992] ? hook_file_ioctl+0x1f3/0x600 [ 766.845687][T12992] ? __asan_memset+0x22/0x50 [ 766.845714][T12992] ? smack_file_ioctl+0x331/0x360 [ 766.845743][T12992] ? __pfx_smack_file_ioctl+0x10/0x10 [ 766.845779][T12992] ? __fget_files+0x2a/0x420 [ 766.845797][T12992] ? __fget_files+0x3a8/0x420 [ 766.845814][T12992] ? __fget_files+0x2a/0x420 [ 766.845835][T12992] ? bpf_lsm_file_ioctl+0x9/0x20 [ 766.845860][T12992] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 766.845879][T12992] __se_sys_ioctl+0xff/0x170 [ 766.845900][T12992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.845933][T12992] do_syscall_64+0x174/0x580 [ 766.845958][T12992] ? clear_bhb_loop+0x70/0xc0 [ 766.845980][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.845998][T12992] RIP: 0033:0x7f4f8003e0d9 [ 766.846015][T12992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.846031][T12992] RSP: 002b:00007f4f7e296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.846051][T12992] RAX: ffffffffffffffda RBX: 00007f4f802c5fa0 RCX: 00007f4f8003e0d9 [ 766.846065][T12992] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 766.846076][T12992] RBP: 00007f4f7e296090 R08: 0000000000000000 R09: 0000000000000000 [ 766.846087][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.846097][T12992] R13: 00007f4f802c6038 R14: 00007f4f802c5fa0 R15: 00007ffdd3d57f98 [ 766.846127][T12992] [ 767.578950][ T5598] Bluetooth: hci4: connection err: -111 [ 767.579071][ T5598] Bluetooth: hci4: connection err: -111 [ 767.579173][ T5598] Bluetooth: hci4: connection err: -111 [ 767.579272][ T5598] Bluetooth: hci4: connection err: -111 [ 767.579370][ T5598] Bluetooth: hci4: connection err: -111 [ 767.579468][ T5598] Bluetooth: hci4: connection err: -111 [ 767.583511][ T5598] Bluetooth: hci4: connection err: -111 [ 767.583618][ T5598] Bluetooth: hci4: connection err: -111 [ 767.583714][ T5598] Bluetooth: hci4: connection err: -111 [ 767.583820][ T5598] Bluetooth: hci4: connection err: -111 [ 767.583916][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584010][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584090][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584145][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584198][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584250][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584312][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584369][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584425][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584476][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584529][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584581][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584633][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584685][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584736][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584788][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584850][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584903][ T5598] Bluetooth: hci4: connection err: -111 [ 767.584955][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585014][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585067][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585118][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585169][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585223][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585274][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585325][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585376][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585428][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585479][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585531][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585583][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585634][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585685][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585737][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585797][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585854][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585906][ T5598] Bluetooth: hci4: connection err: -111 [ 767.585957][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586008][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586058][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586109][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586160][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586214][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586266][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586317][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586367][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586419][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586473][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586525][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586576][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586626][ T5598] Bluetooth: hci4: connection err: -111 [ 767.586948][ T5598] Bluetooth: hci4: connection err: -111 [ 767.587049][ T5598] Bluetooth: hci4: connection err: -111 [ 767.587151][ T5598] Bluetooth: hci4: connection err: -111 [ 767.587257][ T5598] Bluetooth: hci4: connection err: -111 [ 768.233325][ T37] audit: type=1326 audit(1786286501.081:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.233392][ T37] audit: type=1326 audit(1786286501.081:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.234186][ T37] audit: type=1326 audit(1786286501.081:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.234239][ T37] audit: type=1326 audit(1786286501.081:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.234795][ T37] audit: type=1326 audit(1786286501.081:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.234847][ T37] audit: type=1326 audit(1786286501.081:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.235410][ T37] audit: type=1326 audit(1786286501.081:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.236059][ T37] audit: type=1326 audit(1786286501.081:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.236104][ T37] audit: type=1326 audit(1786286501.081:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.238306][ T37] audit: type=1326 audit(1786286501.091:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13008 comm="syz.0.2140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 768.476981][ T5598] Bluetooth: hci0: command tx timeout [ 770.564496][ T5598] Bluetooth: hci0: command tx timeout [ 771.969637][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 772.017752][T12938] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.019066][T12938] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.019350][T12938] bridge_slave_0: entered allmulticast mode [ 772.027882][T12938] bridge_slave_0: entered promiscuous mode [ 772.052388][T12938] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.061496][T12938] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.061809][T12938] bridge_slave_1: entered allmulticast mode [ 772.066120][T12938] bridge_slave_1: entered promiscuous mode [ 772.153821][T12938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.163391][T12938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.212495][T12938] team0: Port device team_slave_0 added [ 772.219019][T12938] team0: Port device team_slave_1 added [ 772.295570][T12938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.295589][T12938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.295618][T12938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.325288][T12938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.325308][T12938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.325340][T12938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.590437][T13053] FAULT_INJECTION: forcing a failure. [ 772.590437][T13053] name failslab, interval 1, probability 0, space 0, times 0 [ 772.590473][T13053] CPU: 1 UID: 0 PID: 13053 Comm: syz.4.2146 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 772.590498][T13053] Tainted: [L]=SOFTLOCKUP [ 772.590504][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.590515][T13053] Call Trace: [ 772.590522][T13053] [ 772.590530][T13053] dump_stack_lvl+0xe8/0x150 [ 772.590562][T13053] should_fail_ex+0x467/0x600 [ 772.590597][T13053] should_failslab+0xa8/0x100 [ 772.590622][T13053] __kmalloc_noprof+0xfe/0x780 [ 772.590645][T13053] ? tomoyo_encode+0x2ad/0x570 [ 772.590669][T13053] ? tomoyo_encode+0x2ad/0x570 [ 772.590696][T13053] tomoyo_encode+0x2ad/0x570 [ 772.590728][T13053] tomoyo_realpath_from_path+0x5fa/0x640 [ 772.590764][T13053] ? tomoyo_path_number_perm+0x219/0x5f0 [ 772.590798][T13053] tomoyo_path_number_perm+0x246/0x5f0 [ 772.590836][T13053] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 772.590868][T13053] ? __lock_acquire+0x683/0x2ce0 [ 772.590903][T13053] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 772.590933][T13053] ? hook_file_ioctl+0x1f3/0x600 [ 772.590964][T13053] ? lockdep_hardirqs_on+0x7a/0x110 [ 772.591017][T13053] ? __fget_files+0x2a/0x420 [ 772.591041][T13053] ? __fget_files+0x2a/0x420 [ 772.591061][T13053] ? __fget_files+0x3a8/0x420 [ 772.591081][T13053] ? __fget_files+0x2a/0x420 [ 772.591105][T13053] security_file_ioctl+0xc3/0x2a0 [ 772.591132][T13053] __se_sys_ioctl+0x47/0x170 [ 772.591160][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.591185][T13053] do_syscall_64+0x174/0x580 [ 772.591214][T13053] ? trace_irq_disable+0x3b/0x140 [ 772.591248][T13053] ? clear_bhb_loop+0x70/0xc0 [ 772.591282][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.591304][T13053] RIP: 0033:0x7f4f8003e0d9 [ 772.591325][T13053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.591344][T13053] RSP: 002b:00007f4f7e296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.591369][T13053] RAX: ffffffffffffffda RBX: 00007f4f802c5fa0 RCX: 00007f4f8003e0d9 [ 772.591386][T13053] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000007 [ 772.591400][T13053] RBP: 00007f4f7e296090 R08: 0000000000000000 R09: 0000000000000000 [ 772.591414][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.591427][T13053] R13: 00007f4f802c6038 R14: 00007f4f802c5fa0 R15: 00007ffdd3d57f98 [ 772.591463][T13053] [ 772.591599][T13053] ERROR: Out of memory at tomoyo_realpath_from_path. [ 773.261763][T12938] hsr_slave_0: entered promiscuous mode [ 773.268925][T12938] hsr_slave_1: entered promiscuous mode [ 773.273499][T12938] debugfs: 'hsr0' already exists in 'hsr' [ 773.273524][T12938] Cannot create hsr debugfs directory [ 775.137765][ T5250] 8021q: adding VLAN 0 to HW filter on device eth10 [ 776.194352][T13097] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2154'. [ 776.431102][ T8080] bridge_slave_1: left allmulticast mode [ 776.431144][ T8080] bridge_slave_1: left promiscuous mode [ 776.431546][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.600110][ T8080] bridge_slave_0: left allmulticast mode [ 776.600152][ T8080] bridge_slave_0: left promiscuous mode [ 776.600447][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.916967][ T8080] bridge_slave_1: left allmulticast mode [ 776.917007][ T8080] bridge_slave_1: left promiscuous mode [ 776.917274][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.090159][ T8080] bridge_slave_0: left allmulticast mode [ 777.090199][ T8080] bridge_slave_0: left promiscuous mode [ 777.090460][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.366115][ T37] kauditd_printk_skb: 484 callbacks suppressed [ 777.366130][ T37] audit: type=1326 audit(1786286510.211:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 777.366424][ T37] audit: type=1326 audit(1786286510.211:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 777.367308][ T37] audit: type=1326 audit(1786286510.211:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 777.368441][ T37] audit: type=1326 audit(1786286510.221:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 777.368487][ T37] audit: type=1326 audit(1786286510.221:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 777.368534][ T37] audit: type=1326 audit(1786286510.221:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 777.368575][ T37] audit: type=1326 audit(1786286510.221:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 777.368617][ T37] audit: type=1326 audit(1786286510.221:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 777.368893][ T37] audit: type=1326 audit(1786286510.221:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 777.369692][ T37] audit: type=1326 audit(1786286510.221:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13120 comm="syz.0.2158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 778.137549][ T8080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.217394][ T8080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.308639][ T8080] bond0 (unregistering): Released all slaves [ 778.587510][ T8080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.668232][ T8080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.729270][ T8080] bond0 (unregistering): Released all slaves [ 779.515854][T13138] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2162'. [ 781.188295][ T8080] hsr_slave_0: left promiscuous mode [ 781.211981][ T8080] hsr_slave_1: left promiscuous mode [ 781.214797][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.248509][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.396871][ T5594] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 781.397242][ T8080] hsr_slave_0: left promiscuous mode [ 781.421301][ T8080] hsr_slave_1: left promiscuous mode [ 781.422031][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.458542][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.558862][ T5594] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 781.561733][ T5594] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 781.561761][ T5594] usb 5-1: Product: syz [ 781.561777][ T5594] usb 5-1: SerialNumber: syz [ 781.580680][ T5594] usb 5-1: config 0 descriptor?? [ 781.824360][ T5594] hso 5-1:0.0: Can't find BULK endpoints [ 782.043683][T12058] usb 5-1: USB disconnect, device number 33 [ 782.179539][ T8080] team0 (unregistering): Port device team_slave_1 removed [ 782.230484][ T8080] team0 (unregistering): Port device team_slave_0 removed [ 782.769954][ T8080] team0 (unregistering): Port device team_slave_1 removed [ 782.817410][ T8080] team0 (unregistering): Port device team_slave_0 removed [ 783.199049][T13163] MTD: Couldn't look up './dev/mtdblock0': -2 [ 783.727399][T13175] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2173'. [ 785.011555][T13190] overlayfs: failed to clone upperpath [ 786.639757][T13201] MTD: Couldn't look up './dev/mtdblock0': -2 [ 786.675313][ T5250] 8021q: adding VLAN 0 to HW filter on device eth11 [ 787.244987][T13215] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2181'. [ 791.272163][T13248] fuse: fd is not a fuse device [ 791.447019][ T5594] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 791.643447][ T5594] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 791.645008][ T5594] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 791.645067][ T5594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.661700][T13259] MTD: Couldn't look up './dev/mtdblock0': -2 [ 791.701689][ T5594] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 792.148808][T13266] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2189'. [ 792.820346][ T5594] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 792.820371][ T5594] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 792.821253][ T5594] stv0680 5-1:4.0: last error: 29, command = 0xd5 [ 794.208814][ T6008] usb 5-1: USB disconnect, device number 34 [ 795.742146][T13315] MTD: Couldn't look up './dev/mtdblock0': -2 [ 796.288510][T13327] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2197'. [ 797.222727][T13337] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 799.656844][T12058] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 799.694934][T13381] MTD: Couldn't look up './dev/mtdblock0': -2 [ 799.776008][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 799.807654][T12058] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 799.810987][T12058] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 799.811015][T12058] usb 5-1: Product: syz [ 799.811048][T12058] usb 5-1: SerialNumber: syz [ 799.824851][T12058] usb 5-1: config 0 descriptor?? [ 800.053828][T12058] hso 5-1:0.0: Can't find BULK endpoints [ 800.268547][ T6008] usb 5-1: USB disconnect, device number 35 [ 800.797155][ T8080] bridge_slave_1: left allmulticast mode [ 800.797183][ T8080] bridge_slave_1: left promiscuous mode [ 800.797363][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.945860][T13402] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2208'. [ 800.960084][ T8080] bridge_slave_0: left allmulticast mode [ 800.960124][ T8080] bridge_slave_0: left promiscuous mode [ 800.970731][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.004727][T13407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2208'. [ 802.838787][T13423] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2210'. [ 805.827662][ T8080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.947843][ T8080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.035722][ T8080] bond0 (unregistering): Released all slaves [ 806.095849][T13402] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 806.123204][T13407] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 806.130105][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 806.371189][T13440] jffs2: notice: (13440) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 807.266059][T13456] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2218'. [ 808.096169][T13454] FAULT_INJECTION: forcing a failure. [ 808.096169][T13454] name failslab, interval 1, probability 0, space 0, times 0 [ 808.096217][T13454] CPU: 0 UID: 0 PID: 13454 Comm: syz.4.2217 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 808.096250][T13454] Tainted: [L]=SOFTLOCKUP [ 808.096259][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.096273][T13454] Call Trace: [ 808.096282][T13454] [ 808.096294][T13454] dump_stack_lvl+0xe8/0x150 [ 808.096333][T13454] should_fail_ex+0x467/0x600 [ 808.096373][T13454] should_failslab+0xa8/0x100 [ 808.096402][T13454] __kmalloc_cache_noprof+0xa0/0x6b0 [ 808.096427][T13454] ? kvm_vcpu_ioctl+0x411/0xfe0 [ 808.096449][T13454] ? kvm_vcpu_ioctl+0x411/0xfe0 [ 808.096480][T13454] kvm_vcpu_ioctl+0x411/0xfe0 [ 808.096511][T13454] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 808.096533][T13454] ? hook_file_ioctl+0x1f3/0x600 [ 808.096562][T13454] ? handle_mm_fault+0xe8/0x13f0 [ 808.096601][T13454] ? __asan_memset+0x22/0x50 [ 808.096632][T13454] ? smack_file_ioctl+0x331/0x360 [ 808.096669][T13454] ? __pfx_smack_file_ioctl+0x10/0x10 [ 808.096711][T13454] ? __fget_files+0x2a/0x420 [ 808.096732][T13454] ? __fget_files+0x3a8/0x420 [ 808.096752][T13454] ? __fget_files+0x2a/0x420 [ 808.096778][T13454] ? bpf_lsm_file_ioctl+0x9/0x20 [ 808.096810][T13454] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 808.096834][T13454] __se_sys_ioctl+0xff/0x170 [ 808.096862][T13454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.096887][T13454] do_syscall_64+0x174/0x580 [ 808.096918][T13454] ? trace_irq_disable+0x3b/0x140 [ 808.096951][T13454] ? clear_bhb_loop+0x70/0xc0 [ 808.096980][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.097002][T13454] RIP: 0033:0x7f4f8003dd6b [ 808.097023][T13454] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 808.097042][T13454] RSP: 002b:00007f4f7e294450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.097066][T13454] RAX: ffffffffffffffda RBX: 0000200000fe8000 RCX: 00007f4f8003dd6b [ 808.097083][T13454] RDX: 00007f4f7e294a90 RSI: 000000008138ae83 RDI: 0000000000000005 [ 808.097107][T13454] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000000000006 [ 808.097122][T13454] R10: ffffffffffffffff R11: 0000000000000246 R12: 00000000fec00000 [ 808.097139][T13454] R13: 00007f4f7e294bd0 R14: 0000200001000000 R15: 0000000000000018 [ 808.097176][T13454] [ 808.226850][ T8080] hsr_slave_0: left promiscuous mode [ 808.399418][ T8080] hsr_slave_1: left promiscuous mode [ 808.400127][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.516886][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.516967][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.939772][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.015368][T13466] netlink: 'syz.0.2221': attribute type 3 has an invalid length. [ 810.142988][ T10] IPVS: starting estimator thread 0... [ 810.226921][T13470] IPVS: using max 10 ests per chain, 24000 per kthread [ 810.238162][T12383] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 810.281716][T12383] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 810.294286][T12383] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 810.304145][T12383] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 810.304959][T12383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 810.742403][ T8080] team0 (unregistering): Port device team_slave_1 removed [ 810.797826][ T8080] team0 (unregistering): Port device team_slave_0 removed [ 811.003438][T12383] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 811.009441][T12383] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 811.030795][T12383] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 811.047968][T12383] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 811.049872][T12383] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 811.591444][T13489] jffs2: notice: (13489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 813.321268][T12383] Bluetooth: hci5: command tx timeout [ 813.324993][T12383] Bluetooth: hci6: command tx timeout [ 815.358508][ T5598] Bluetooth: hci6: command tx timeout [ 815.358573][ T5598] Bluetooth: hci5: command tx timeout [ 816.644691][T13536] FAULT_INJECTION: forcing a failure. [ 816.644691][T13536] name failslab, interval 1, probability 0, space 0, times 0 [ 816.644731][T13536] CPU: 1 UID: 0 PID: 13536 Comm: syz.4.2229 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 816.644772][T13536] Tainted: [L]=SOFTLOCKUP [ 816.644780][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.644793][T13536] Call Trace: [ 816.644803][T13536] [ 816.644813][T13536] dump_stack_lvl+0xe8/0x150 [ 816.644852][T13536] should_fail_ex+0x467/0x600 [ 816.644891][T13536] should_failslab+0xa8/0x100 [ 816.644916][T13536] kmem_cache_alloc_noprof+0xa4/0x650 [ 816.644948][T13536] ? ep_insert+0x53b/0x1990 [ 816.645071][T13536] ? ep_insert+0x53b/0x1990 [ 816.645100][T13536] ep_insert+0x53b/0x1990 [ 816.645142][T13536] ? __pfx_ep_insert+0x10/0x10 [ 816.645177][T13536] ? lockdep_hardirqs_on+0x7a/0x110 [ 816.645205][T13536] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 816.645235][T13536] ? mutex_lock_nested+0x152/0x1d0 [ 816.645256][T13536] ? do_epoll_ctl_file+0x3ff/0xf00 [ 816.645284][T13536] do_epoll_ctl_file+0x8d5/0xf00 [ 816.645317][T13536] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 816.645347][T13536] ? __fget_files+0x3a8/0x420 [ 816.645373][T13536] ? __fget_files+0x2a/0x420 [ 816.645402][T13536] __se_sys_epoll_ctl+0x162/0x230 [ 816.645431][T13536] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 816.645466][T13536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.645490][T13536] do_syscall_64+0x174/0x580 [ 816.645518][T13536] ? trace_irq_disable+0x3b/0x140 [ 816.645552][T13536] ? clear_bhb_loop+0x70/0xc0 [ 816.645579][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.645602][T13536] RIP: 0033:0x7f4f8003e0d9 [ 816.645625][T13536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.645645][T13536] RSP: 002b:00007f4f7e275028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 816.645670][T13536] RAX: ffffffffffffffda RBX: 00007f4f802c6090 RCX: 00007f4f8003e0d9 [ 816.645688][T13536] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 816.645702][T13536] RBP: 00007f4f7e275090 R08: 0000000000000000 R09: 0000000000000000 [ 816.645716][T13536] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 816.645731][T13536] R13: 00007f4f802c6128 R14: 00007f4f802c6090 R15: 00007ffdd3d57f98 [ 816.645778][T13536] [ 817.034554][T13542] MTD: Couldn't look up './dev/mtdblock0': -2 [ 817.521465][ T5598] Bluetooth: hci6: command tx timeout [ 817.521577][T12383] Bluetooth: hci5: command tx timeout [ 818.787199][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 818.997617][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 819.020677][ T10] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 819.020708][ T10] usb 5-1: Product: syz [ 819.020724][ T10] usb 5-1: SerialNumber: syz [ 819.036375][ T10] usb 5-1: config 0 descriptor?? [ 819.282753][ T10] hso 5-1:0.0: Failed to find BULK eps [ 819.515522][ T10] usb 5-1: USB disconnect, device number 36 [ 819.596868][ T5598] Bluetooth: hci6: command tx timeout [ 819.596929][T12383] Bluetooth: hci5: command tx timeout [ 819.867139][T13595] MTD: Couldn't look up './dev/mtdblock0': -2 [ 820.030127][ T37] kauditd_printk_skb: 483 callbacks suppressed [ 820.030149][ T37] audit: type=1326 audit(1786286552.881:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 820.030213][ T37] audit: type=1326 audit(1786286552.881:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 820.030717][ T37] audit: type=1326 audit(1786286552.881:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 820.030772][ T37] audit: type=1326 audit(1786286552.881:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 820.031497][ T37] audit: type=1326 audit(1786286552.881:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 820.086765][ T37] audit: type=1326 audit(1786286552.901:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 820.086821][ T37] audit: type=1326 audit(1786286552.901:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 820.086865][ T37] audit: type=1326 audit(1786286552.901:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 820.086908][ T37] audit: type=1326 audit(1786286552.901:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 820.086952][ T37] audit: type=1326 audit(1786286552.911:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13598 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff332aae0d9 code=0x7ffc0000 [ 822.099934][T13471] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.100169][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.100374][T13471] bridge_slave_0: entered allmulticast mode [ 822.104424][T13471] bridge_slave_0: entered promiscuous mode [ 822.201037][T13478] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.201192][T13478] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.201397][T13478] bridge_slave_0: entered allmulticast mode [ 822.206113][T13478] bridge_slave_0: entered promiscuous mode [ 822.248491][T13471] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.248682][T13471] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.248941][T13471] bridge_slave_1: entered allmulticast mode [ 822.255304][T13471] bridge_slave_1: entered promiscuous mode [ 822.288601][T13478] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.288732][T13478] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.288931][T13478] bridge_slave_1: entered allmulticast mode [ 822.302681][T13478] bridge_slave_1: entered promiscuous mode [ 822.451109][T13471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.485485][T13478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.489715][T13471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.532947][T13478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.690830][T13471] team0: Port device team_slave_0 added [ 823.152025][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 823.164079][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 823.278804][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 823.467667][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 823.469709][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 823.808348][T13471] team0: Port device team_slave_1 added [ 823.855121][T13478] team0: Port device team_slave_0 added [ 824.677441][T13478] team0: Port device team_slave_1 added [ 825.453933][T13667] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 825.468817][T13471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.468838][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.468870][T13471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.542106][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2254'. [ 825.573081][T13471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.573100][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.573130][T13471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.585087][T13478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.585105][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.585131][T13478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.703545][T13478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.703574][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.703604][T13478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.766930][T12383] Bluetooth: hci3: command tx timeout [ 826.977669][T13690] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 827.310349][T13703] FAULT_INJECTION: forcing a failure. [ 827.310349][T13703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.310389][T13703] CPU: 0 UID: 0 PID: 13703 Comm: syz.4.2268 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 827.310420][T13703] Tainted: [L]=SOFTLOCKUP [ 827.310428][T13703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 827.310442][T13703] Call Trace: [ 827.310450][T13703] [ 827.310461][T13703] dump_stack_lvl+0xe8/0x150 [ 827.310499][T13703] should_fail_ex+0x467/0x600 [ 827.310537][T13703] _copy_from_user+0x2d/0xb0 [ 827.310563][T13703] kstrtouint_from_user+0xd6/0x180 [ 827.310597][T13703] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 827.310624][T13703] ? __lock_acquire+0x683/0x2ce0 [ 827.310661][T13703] proc_fail_nth_write+0x8e/0x210 [ 827.310687][T13703] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 827.310721][T13703] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 827.310745][T13703] vfs_write+0x29f/0xbb0 [ 827.310782][T13703] ? __pfx_vfs_write+0x10/0x10 [ 827.310810][T13703] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 827.310848][T13703] ? lockdep_hardirqs_on+0x7a/0x110 [ 827.310880][T13703] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 827.310911][T13703] ? mutex_lock_nested+0x152/0x1d0 [ 827.310935][T13703] ? fdget_pos+0x252/0x320 [ 827.310967][T13703] ksys_write+0x156/0x270 [ 827.310996][T13703] ? __pfx_ksys_write+0x10/0x10 [ 827.311031][T13703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.311056][T13703] do_syscall_64+0x174/0x580 [ 827.311085][T13703] ? trace_irq_disable+0x3b/0x140 [ 827.311117][T13703] ? clear_bhb_loop+0x70/0xc0 [ 827.311143][T13703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.311174][T13703] RIP: 0033:0x7f4f7fffe90e [ 827.311193][T13703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 827.311212][T13703] RSP: 002b:00007f4f7e295fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 827.311237][T13703] RAX: ffffffffffffffda RBX: 00007f4f7e2966c0 RCX: 00007f4f7fffe90e [ 827.311255][T13703] RDX: 0000000000000001 RSI: 00007f4f7e2960a0 RDI: 0000000000000003 [ 827.311269][T13703] RBP: 00007f4f7e296090 R08: 0000000000000000 R09: 0000000000000000 [ 827.311283][T13703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.311298][T13703] R13: 00007f4f802c6038 R14: 00007f4f802c5fa0 R15: 00007ffdd3d57f98 [ 827.311334][T13703] [ 827.630330][T13471] hsr_slave_0: entered promiscuous mode [ 827.632168][T13471] hsr_slave_1: entered promiscuous mode [ 827.740623][T13478] hsr_slave_0: entered promiscuous mode [ 827.741646][T13478] hsr_slave_1: entered promiscuous mode [ 827.742361][T13478] debugfs: 'hsr0' already exists in 'hsr' [ 827.742379][T13478] Cannot create hsr debugfs directory [ 827.841233][T12383] Bluetooth: hci3: command tx timeout [ 827.894004][T13710] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 829.917474][T12383] Bluetooth: hci3: command tx timeout [ 830.040304][T13730] FAULT_INJECTION: forcing a failure. [ 830.040304][T13730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.040347][T13730] CPU: 0 UID: 0 PID: 13730 Comm: syz.4.2277 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 830.040380][T13730] Tainted: [L]=SOFTLOCKUP [ 830.040389][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.040404][T13730] Call Trace: [ 830.040413][T13730] [ 830.040424][T13730] dump_stack_lvl+0xe8/0x150 [ 830.040463][T13730] should_fail_ex+0x467/0x600 [ 830.040502][T13730] _copy_to_user+0x31/0xb0 [ 830.040533][T13730] simple_read_from_buffer+0xe1/0x170 [ 830.040564][T13730] proc_fail_nth_read+0x1be/0x230 [ 830.040594][T13730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.040628][T13730] ? rw_verify_area+0x250/0x4d0 [ 830.040657][T13730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.040680][T13730] vfs_read+0x219/0xa90 [ 830.040716][T13730] ? __pfx_vfs_read+0x10/0x10 [ 830.040745][T13730] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 830.040778][T13730] ? lockdep_hardirqs_on+0x7a/0x110 [ 830.040809][T13730] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 830.040841][T13730] ? mutex_lock_nested+0x152/0x1d0 [ 830.040864][T13730] ? fdget_pos+0x252/0x320 [ 830.040896][T13730] ksys_read+0x156/0x270 [ 830.040925][T13730] ? __pfx_ksys_read+0x10/0x10 [ 830.040951][T13730] ? __pfx_v4l2_ioctl+0x10/0x10 [ 830.041050][T13730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.041075][T13730] do_syscall_64+0x174/0x580 [ 830.041106][T13730] ? trace_irq_disable+0x3b/0x140 [ 830.041156][T13730] ? clear_bhb_loop+0x70/0xc0 [ 830.041184][T13730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.041206][T13730] RIP: 0033:0x7f4f7fffe90e [ 830.041227][T13730] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 830.041247][T13730] RSP: 002b:00007f4f7e295fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 830.041272][T13730] RAX: ffffffffffffffda RBX: 00007f4f7e2966c0 RCX: 00007f4f7fffe90e [ 830.041289][T13730] RDX: 000000000000000f RSI: 00007f4f7e2960a0 RDI: 0000000000000004 [ 830.041303][T13730] RBP: 00007f4f7e296090 R08: 0000000000000000 R09: 0000000000000000 [ 830.041318][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.041332][T13730] R13: 00007f4f802c6038 R14: 00007f4f802c5fa0 R15: 00007ffdd3d57f98 [ 830.041368][T13730] [ 830.685511][T13739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2281'. [ 831.832789][ T37] kauditd_printk_skb: 321 callbacks suppressed [ 831.832812][ T37] audit: type=1326 audit(1786286564.681:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 831.833014][ T37] audit: type=1326 audit(1786286564.681:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 831.833173][ T37] audit: type=1326 audit(1786286564.681:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 831.833337][ T37] audit: type=1326 audit(1786286564.681:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 831.833482][ T37] audit: type=1326 audit(1786286564.681:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 831.857732][ T37] audit: type=1326 audit(1786286564.681:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 831.857793][ T37] audit: type=1326 audit(1786286564.711:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 831.857836][ T37] audit: type=1326 audit(1786286564.711:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 831.858229][ T37] audit: type=1326 audit(1786286564.711:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 831.859135][ T37] audit: type=1326 audit(1786286564.711:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.4.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8003e0d9 code=0x7ffc0000 [ 832.007048][T12383] Bluetooth: hci3: command tx timeout [ 834.037000][ T8096] bridge_slave_1: left allmulticast mode [ 834.037043][ T8096] bridge_slave_1: left promiscuous mode [ 834.037349][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.203653][ T8096] bridge_slave_0: left allmulticast mode [ 834.203693][ T8096] bridge_slave_0: left promiscuous mode [ 834.205679][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.810837][T13782] netlink: 'syz.0.2293': attribute type 5 has an invalid length. [ 834.878955][ T8096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.979264][ T8096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.039572][ T8096] bond0 (unregistering): Released all slaves [ 836.589938][ T8096] hsr_slave_0: left promiscuous mode [ 836.626964][ T8096] hsr_slave_1: left promiscuous mode [ 836.628308][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.679011][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.069258][ T8096] team0 (unregistering): Port device team_slave_1 removed [ 837.118340][ T8096] team0 (unregistering): Port device team_slave_0 removed [ 840.035535][T13640] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.035683][T13640] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.035966][T13640] bridge_slave_0: entered allmulticast mode [ 840.039278][T13640] bridge_slave_0: entered promiscuous mode [ 840.941632][ T6008] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 840.955565][T13640] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.955689][T13640] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.955918][T13640] bridge_slave_1: entered allmulticast mode [ 840.959116][T13640] bridge_slave_1: entered promiscuous mode [ 841.096765][T13640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.111309][ T6008] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 841.115380][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.115408][ T6008] usb 5-1: Product: syz [ 841.115423][ T6008] usb 5-1: Manufacturer: syz [ 841.115437][ T6008] usb 5-1: SerialNumber: syz [ 841.124936][T13640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.207956][ T5811] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 841.649970][T13640] team0: Port device team_slave_0 added [ 841.673082][T13640] team0: Port device team_slave_1 added [ 841.889854][T13640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.889868][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.889886][T13640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.916186][T13640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.916204][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.916306][T13640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.118955][T13825] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 842.556757][ T5811] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 842.637035][ T5811] ath9k_htc: Failed to initialize the device [ 842.933856][ T5811] usb 5-1: ath9k_htc: USB layer deinitialized [ 843.375261][T13640] hsr_slave_0: entered promiscuous mode [ 843.391472][T13640] hsr_slave_1: entered promiscuous mode [ 843.392607][T13640] debugfs: 'hsr0' already exists in 'hsr' [ 843.392633][T13640] Cannot create hsr debugfs directory [ 844.584067][ T10] usb 5-1: USB disconnect, device number 37 [ 844.999120][ T6008] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 845.079818][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2308'. [ 845.108176][T13835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.136194][ T6008] usb 5-1: device descriptor read/64, error -71 [ 845.161797][T13835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.366953][ T6008] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 845.503501][ T6008] usb 5-1: device descriptor read/64, error -71 [ 845.608561][ T6008] usb usb5-port1: attempt power cycle [ 845.989945][ T6008] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 846.016287][ T6008] usb 5-1: device descriptor read/8, error -71 [ 846.265683][ T6008] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 846.294804][ T6008] usb 5-1: device descriptor read/8, error -71 [ 846.398707][ T6008] usb usb5-port1: unable to enumerate USB device [ 846.429382][T13471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 846.463418][T13471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.470152][T13471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 846.542464][T13471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.729726][T13471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 846.786011][T13471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.829650][T13471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 846.969766][T13471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 847.793743][ T8096] bridge_slave_1: left allmulticast mode [ 847.793784][ T8096] bridge_slave_1: left promiscuous mode [ 847.794065][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.950575][ T8096] bridge_slave_0: left allmulticast mode [ 847.950616][ T8096] bridge_slave_0: left promiscuous mode [ 847.951002][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.226979][ T8096] bridge_slave_1: left allmulticast mode [ 848.227016][ T8096] bridge_slave_1: left promiscuous mode [ 848.227278][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.246945][ T197] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 848.358072][ T8096] bridge_slave_0: left allmulticast mode [ 848.358101][ T8096] bridge_slave_0: left promiscuous mode [ 848.358288][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.408753][ T197] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 848.414005][ T197] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 848.414056][ T197] usb 5-1: Product: syz [ 848.414071][ T197] usb 5-1: SerialNumber: syz [ 848.419208][ T197] usb 5-1: config 0 descriptor?? [ 848.698219][ T197] hso 5-1:0.0: Can't find BULK endpoints [ 848.815480][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'. [ 848.895828][ T10] usb 5-1: USB disconnect, device number 42 [ 849.017535][ T8096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.107672][ T8096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.179816][ T8096] bond0 (unregistering): Released all slaves [ 849.469058][ T8096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.599241][ T8096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.658480][ T8096] bond0 (unregistering): Released all slaves [ 849.695100][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 850.787316][T13471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.899587][T13471] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.999786][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.048184][ T8087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.106604][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.107579][ T8080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.823004][T13907] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 851.866935][ T8096] hsr_slave_0: left promiscuous mode [ 851.906899][ T8096] hsr_slave_1: left promiscuous mode [ 851.908042][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.957948][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.166833][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 852.326861][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 852.327806][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 852.332098][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.332127][ T10] usb 5-1: Product: syz [ 852.332143][ T10] usb 5-1: Manufacturer: syz [ 852.332158][ T10] usb 5-1: SerialNumber: syz [ 852.375182][ T10] usb 5-1: config 0 descriptor?? [ 852.898986][ T10] airspy 5-1:0.0: usb_control_msg() failed -32 request 09 [ 852.899026][ T10] airspy 5-1:0.0: Could not detect board [ 852.899147][ T10] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 852.933464][ T8096] hsr_slave_0: left promiscuous mode [ 852.967488][ T8096] hsr_slave_1: left promiscuous mode [ 852.968482][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.034846][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.980748][ T8096] team0 (unregistering): Port device team_slave_1 removed [ 854.027408][ T8096] team0 (unregistering): Port device team_slave_0 removed [ 854.497390][ T8096] team0 (unregistering): Port device team_slave_1 removed [ 854.527935][ T8096] team0 (unregistering): Port device team_slave_0 removed [ 854.701693][ T5250] 8021q: adding VLAN 0 to HW filter on device eth10 [ 855.169415][ T6008] usb 5-1: USB disconnect, device number 43 [ 855.952554][T13948] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 856.510024][ T10] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 856.704536][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 856.706105][ T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 856.706134][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.708428][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 856.708454][ T10] usb 5-1: SerialNumber: syz [ 856.743987][ T10] usb 5-1: 0:2 : does not exist [ 856.744083][ T10] usb 5-1: unit 255 not found! [ 857.954834][T13471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.199034][ T197] usb 5-1: USB disconnect, device number 44 [ 858.547358][T13992] syz.0.2337 uses obsolete (PF_INET,SOCK_PACKET) [ 859.114467][T13478] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 859.365115][T13478] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.394407][T13478] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 859.480362][T13478] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.544692][T14013] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 859.561888][T13478] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 859.747657][T14017] FAULT_INJECTION: forcing a failure. [ 859.747657][T14017] name failslab, interval 1, probability 0, space 0, times 0 [ 859.747696][T14017] CPU: 0 UID: 0 PID: 14017 Comm: syz.4.2341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 859.747727][T14017] Tainted: [L]=SOFTLOCKUP [ 859.747735][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.747748][T14017] Call Trace: [ 859.747757][T14017] [ 859.747767][T14017] dump_stack_lvl+0xe8/0x150 [ 859.747807][T14017] should_fail_ex+0x467/0x600 [ 859.747846][T14017] should_failslab+0xa8/0x100 [ 859.747874][T14017] __kmalloc_noprof+0xfe/0x780 [ 859.747898][T14017] ? kvm_io_bus_unregister_dev+0x271/0x580 [ 859.747993][T14017] ? kvm_io_bus_unregister_dev+0x271/0x580 [ 859.748026][T14017] kvm_io_bus_unregister_dev+0x271/0x580 [ 859.748056][T14017] ? mutex_lock_nested+0x152/0x1d0 [ 859.748089][T14017] kvm_deassign_ioeventfd_idx+0x3c1/0x520 [ 859.748158][T14017] kvm_ioeventfd+0xde/0x330 [ 859.748183][T14017] ? kvm_vm_ioctl+0xa1e/0xd30 [ 859.748223][T14017] kvm_vm_ioctl+0xa29/0xd30 [ 859.748258][T14017] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 859.748313][T14017] ? kasan_quarantine_put+0xbb/0x1f0 [ 859.748357][T14017] ? tomoyo_path_number_perm+0x219/0x5f0 [ 859.748405][T14017] ? tomoyo_path_number_perm+0x219/0x5f0 [ 859.748444][T14017] ? do_vfs_ioctl+0x1184/0x1550 [ 859.748478][T14017] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 859.748510][T14017] ? vfs_write+0x9e0/0xbb0 [ 859.748545][T14017] ? hook_file_ioctl+0x1f3/0x600 [ 859.748581][T14017] ? __asan_memset+0x22/0x50 [ 859.748613][T14017] ? smack_file_ioctl+0x331/0x360 [ 859.748649][T14017] ? __pfx_smack_file_ioctl+0x10/0x10 [ 859.748695][T14017] ? ksys_write+0x202/0x270 [ 859.748729][T14017] ? bpf_lsm_file_ioctl+0x9/0x20 [ 859.748764][T14017] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 859.748796][T14017] __se_sys_ioctl+0xff/0x170 [ 859.748824][T14017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.748851][T14017] do_syscall_64+0x174/0x580 [ 859.748882][T14017] ? trace_irq_disable+0x3b/0x140 [ 859.748918][T14017] ? clear_bhb_loop+0x70/0xc0 [ 859.748946][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.748969][T14017] RIP: 0033:0x7f4f8003e0d9 [ 859.748991][T14017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.749011][T14017] RSP: 002b:00007f4f7e296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.749036][T14017] RAX: ffffffffffffffda RBX: 00007f4f802c5fa0 RCX: 00007f4f8003e0d9 [ 859.749053][T14017] RDX: 0000200000000040 RSI: 000000004040ae79 RDI: 0000000000000004 [ 859.749069][T14017] RBP: 00007f4f7e296090 R08: 0000000000000000 R09: 0000000000000000 [ 859.749084][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.749097][T14017] R13: 00007f4f802c6038 R14: 00007f4f802c5fa0 R15: 00007ffdd3d57f98 [ 859.749134][T14017] [ 859.766390][T13478] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.802196][T14017] kvm: failed to shrink bus, removing it completely [ 860.482982][T13478] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 860.950236][T13478] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 861.783947][T14054] netlink: 'syz.4.2347': attribute type 10 has an invalid length. [ 861.809499][T14054] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.809740][T14054] bridge0: port 1(bridge_slave_0) entered listening state [ 861.822661][T14054] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 861.823915][T14054] FAULT_INJECTION: forcing a failure. [ 861.823915][T14054] name failslab, interval 1, probability 0, space 0, times 0 [ 861.823950][T14054] CPU: 1 UID: 0 PID: 14054 Comm: syz.4.2347 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 861.823977][T14054] Tainted: [L]=SOFTLOCKUP [ 861.823985][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 861.823997][T14054] Call Trace: [ 861.824013][T14054] [ 861.824021][T14054] dump_stack_lvl+0xe8/0x150 [ 861.824057][T14054] should_fail_ex+0x467/0x600 [ 861.824089][T14054] should_failslab+0xa8/0x100 [ 861.824113][T14054] kmem_cache_alloc_node_noprof+0xae/0x670 [ 861.824144][T14054] ? __alloc_skb+0x1d7/0x7a0 [ 861.824167][T14054] ? __alloc_skb+0x1d7/0x7a0 [ 861.824193][T14054] __alloc_skb+0x1d7/0x7a0 [ 861.824217][T14054] netlink_sendmsg+0x5d4/0xb40 [ 861.824241][T14054] ? _parse_integer_limit+0x192/0x1e0 [ 861.824277][T14054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.824303][T14054] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 861.824338][T14054] ? get_pid_task+0x20/0x1f0 [ 861.824370][T14054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.824393][T14054] sock_sendmsg_nosec+0x13a/0x180 [ 861.824425][T14054] sock_write_iter+0x2e4/0x3f0 [ 861.824454][T14054] ? __pfx_sock_write_iter+0x10/0x10 [ 861.824489][T14054] ? bpf_lsm_file_permission+0x9/0x20 [ 861.824515][T14054] ? security_file_permission+0x75/0x260 [ 861.824544][T14054] vfs_write+0x61e/0xbb0 [ 861.824575][T14054] ? __pfx_vfs_write+0x10/0x10 [ 861.824616][T14054] ? __fget_files+0x2a/0x420 [ 861.824644][T14054] ksys_write+0x156/0x270 [ 861.824669][T14054] ? __pfx_ksys_write+0x10/0x10 [ 861.824699][T14054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.824721][T14054] do_syscall_64+0x174/0x580 [ 861.824747][T14054] ? trace_irq_disable+0x3b/0x140 [ 861.824786][T14054] ? clear_bhb_loop+0x70/0xc0 [ 861.824810][T14054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.824830][T14054] RIP: 0033:0x7f4f8003e0d9 [ 861.824849][T14054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.824866][T14054] RSP: 002b:00007f4f7e296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 861.824887][T14054] RAX: ffffffffffffffda RBX: 00007f4f802c5fa0 RCX: 00007f4f8003e0d9 [ 861.824902][T14054] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000004 [ 861.824915][T14054] RBP: 00007f4f7e296090 R08: 0000000000000000 R09: 0000000000000000 [ 861.824927][T14054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.824939][T14054] R13: 00007f4f802c6038 R14: 00007f4f802c5fa0 R15: 00007ffdd3d57f98 [ 861.824970][T14054] [ 861.911163][T13640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 861.955583][T13640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.961428][T13640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 862.014193][T13640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.014986][T13471] veth0_vlan: entered promiscuous mode [ 862.038053][T13640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 862.132870][T13640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.139207][T13640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 862.169334][T13640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.204066][T13471] veth1_vlan: entered promiscuous mode [ 862.377839][T14062] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 862.384614][T13471] veth0_macvtap: entered promiscuous mode [ 862.430304][T13478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.484054][T13471] veth1_macvtap: entered promiscuous mode [ 863.165782][T13478] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.214682][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.214922][ T8080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.237245][T13471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.504669][T13471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.519626][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.519867][ T8085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.631340][T13640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.832829][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2355'. [ 863.902563][T13640] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.021131][T14090] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 864.132843][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.132942][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.360731][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.370031][ T8096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.492630][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'. [ 866.515842][T10482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.515866][T10482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.946083][T10495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.946108][T10495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.020431][T14122] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 867.038277][ T8085] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.038667][ T8085] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.038908][ T8085] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.039117][ T8085] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.786849][ T5594] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 867.937633][ T5594] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 867.942282][ T5594] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 867.942313][ T5594] usb 5-1: Product: syz [ 867.942330][ T5594] usb 5-1: SerialNumber: syz [ 867.986370][ T5594] usb 5-1: config 0 descriptor?? [ 868.056577][T13478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.261222][ T5594] hso 5-1:0.0: Can't find BULK endpoints [ 868.561210][ T197] usb 5-1: USB disconnect, device number 45 [ 868.872804][T14158] netlink: 'syz.5.2373': attribute type 10 has an invalid length. [ 868.914128][T14158] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.075308][T14159] input: syz1 as /devices/virtual/input/input12 [ 869.081283][T14158] bond0: (slave team0): Enslaving as an active interface with an up link [ 869.145287][T14162] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 869.210025][T13640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.123439][T13640] veth0_vlan: entered promiscuous mode [ 870.268343][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.268422][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.332200][T13640] veth1_vlan: entered promiscuous mode [ 870.348009][T13478] veth0_vlan: entered promiscuous mode [ 870.513247][T13478] veth1_vlan: entered promiscuous mode [ 870.651164][T13640] veth0_macvtap: entered promiscuous mode [ 870.704809][T13640] veth1_macvtap: entered promiscuous mode [ 870.782712][T13640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.812543][T13478] veth0_macvtap: entered promiscuous mode [ 870.838699][T13640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.875853][T13478] veth1_macvtap: entered promiscuous mode [ 870.990013][ T8080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.992362][ T149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.992454][ T149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.992495][ T149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.122486][T14196] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 871.641445][ T4904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 871.718775][ T4904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 871.723837][ T4904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 871.734094][ T4904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 871.734933][ T4904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 872.446810][ T5600] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 872.648685][ T5600] usb 5-1: Using ep0 maxpacket: 8 [ 872.658796][ T5600] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 872.703367][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.744334][ T5600] usb 5-1: config 0 descriptor?? [ 872.784122][ T8068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.784138][ T8068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.874888][ T5600] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 872.936305][T14221] FAULT_INJECTION: forcing a failure. [ 872.936305][T14221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.936355][T14221] CPU: 1 UID: 0 PID: 14221 Comm: syz.5.2391 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 872.936385][T14221] Tainted: [L]=SOFTLOCKUP [ 872.936393][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.936407][T14221] Call Trace: [ 872.936416][T14221] [ 872.936425][T14221] dump_stack_lvl+0xe8/0x150 [ 872.936464][T14221] should_fail_ex+0x467/0x600 [ 872.936501][T14221] _copy_to_user+0x31/0xb0 [ 872.936527][T14221] simple_read_from_buffer+0xe1/0x170 [ 872.936557][T14221] proc_fail_nth_read+0x1be/0x230 [ 872.936586][T14221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.936617][T14221] ? rw_verify_area+0x250/0x4d0 [ 872.936645][T14221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.936668][T14221] vfs_read+0x219/0xa90 [ 872.936702][T14221] ? __pfx_vfs_read+0x10/0x10 [ 872.936731][T14221] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 872.936762][T14221] ? lockdep_hardirqs_on+0x7a/0x110 [ 872.936791][T14221] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 872.936822][T14221] ? mutex_lock_nested+0x152/0x1d0 [ 872.936842][T14221] ? fdget_pos+0x252/0x320 [ 872.936873][T14221] ksys_read+0x156/0x270 [ 872.936902][T14221] ? __pfx_ksys_read+0x10/0x10 [ 872.936935][T14221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.936960][T14221] do_syscall_64+0x174/0x580 [ 872.936990][T14221] ? trace_irq_disable+0x3b/0x140 [ 872.937022][T14221] ? clear_bhb_loop+0x70/0xc0 [ 872.937048][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.937070][T14221] RIP: 0033:0x7f39ae56e90e [ 872.937091][T14221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 872.937109][T14221] RSP: 002b:00007f39ac805fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 872.937132][T14221] RAX: ffffffffffffffda RBX: 00007f39ac8066c0 RCX: 00007f39ae56e90e [ 872.937149][T14221] RDX: 000000000000000f RSI: 00007f39ac8060a0 RDI: 0000000000000004 [ 872.937164][T14221] RBP: 00007f39ac806090 R08: 0000000000000000 R09: 0000000000000000 [ 872.937178][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.937192][T14221] R13: 00007f39ae836038 R14: 00007f39ae835fa0 R15: 00007ffd966a4df8 [ 872.937229][T14221] [ 873.163247][T14222] usb 5-1: USB disconnect, device number 46 [ 873.320107][ T2360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.324988][ T2360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.423370][T14228] sg_write: data in/out 39264/136 bytes for SCSI command 0x0-- guessing data in; [ 873.423370][T14228] program syz.5.2393 not setting count and/or reply_len properly [ 873.465578][T14229] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2394'. [ 873.466022][T14229] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2394'. [ 873.813816][T14237] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 873.935031][T12383] Bluetooth: hci0: command tx timeout [ 874.186772][ T5811] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 874.400942][ T5811] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 874.410768][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 874.410801][ T5811] usb 5-1: Product: syz [ 874.410817][ T5811] usb 5-1: SerialNumber: syz [ 874.479968][ T5811] usb 5-1: config 0 descriptor?? [ 874.618896][ T5930] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 874.710224][ T5811] hso 5-1:0.0: Failed to find INT IN ep [ 874.749569][ T5930] usb 4-1: device descriptor read/64, error -71 [ 874.911644][ T197] usb 5-1: USB disconnect, device number 47 [ 874.978120][ T5594] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 874.999074][ T5930] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 875.148272][ T5930] usb 4-1: device descriptor read/64, error -71 [ 875.162443][ T5594] usb 6-1: unable to get BOS descriptor or descriptor too short [ 875.164449][ T5594] usb 6-1: not running at top speed; connect to a high speed hub [ 875.164489][ T5594] usb 6-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 875.170153][ T5594] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1088, setting to 64 [ 875.179403][ T5594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.179431][ T5594] usb 6-1: Product: syz [ 875.179445][ T5594] usb 6-1: Manufacturer: syz [ 875.179461][ T5594] usb 6-1: SerialNumber: syz [ 875.185944][T14267] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 875.268686][ T5930] usb usb4-port1: attempt power cycle [ 875.503887][ T5594] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 875.686109][ T5930] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 875.701091][ T5930] usb 4-1: device descriptor read/8, error -71 [ 876.041201][ T5594] usb 6-1: USB disconnect, device number 2 [ 876.120339][T12383] Bluetooth: hci0: command tx timeout [ 876.209798][ T5930] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 876.259100][ T5930] usb 4-1: device descriptor read/8, error -71 [ 876.378397][ T5930] usb usb4-port1: unable to enumerate USB device [ 876.840780][T14281] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2408'. [ 877.589552][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 878.051127][T14289] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 878.156790][T12383] Bluetooth: hci0: command tx timeout [ 878.893741][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'. [ 878.935065][T14300] dummy0: entered allmulticast mode [ 879.182409][T14298] dummy0: left allmulticast mode [ 879.496850][T14222] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 879.515070][T14311] FAULT_INJECTION: forcing a failure. [ 879.515070][T14311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.515114][T14311] CPU: 1 UID: 0 PID: 14311 Comm: syz.5.2417 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 879.515146][T14311] Tainted: [L]=SOFTLOCKUP [ 879.515154][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.515168][T14311] Call Trace: [ 879.515178][T14311] [ 879.515188][T14311] dump_stack_lvl+0xe8/0x150 [ 879.515228][T14311] should_fail_ex+0x467/0x600 [ 879.515272][T14311] _copy_from_user+0x2d/0xb0 [ 879.515299][T14311] restore_altstack+0xae/0x4f0 [ 879.515335][T14311] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 879.515367][T14311] ? __pfx_restore_altstack+0x10/0x10 [ 879.515398][T14311] ? rt_spin_unlock+0x157/0x200 [ 879.515428][T14311] ? rt_spin_unlock+0x163/0x200 [ 879.515455][T14311] __ia32_sys_rt_sigreturn+0x2bd/0x8c0 [ 879.515496][T14311] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 879.515526][T14311] ? signal_setup_done+0x22f/0x310 [ 879.515556][T14311] ? arch_do_signal_or_restart+0x4f9/0x860 [ 879.515589][T14311] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 879.515615][T14311] ? usbdev_ioctl+0x9b5/0x2100 [ 879.515770][T14311] ? __fget_files+0x2a/0x420 [ 879.515796][T14311] ? rcu_is_watching+0x15/0xb0 [ 879.515833][T14311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.515858][T14311] do_syscall_64+0x174/0x580 [ 879.515897][T14311] ? trace_irq_disable+0x3b/0x140 [ 879.515932][T14311] ? clear_bhb_loop+0x70/0xc0 [ 879.515959][T14311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.515981][T14311] RIP: 0033:0x7f39ae54f459 [ 879.516003][T14311] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 879.516023][T14311] RSP: 002b:00007f39ac805a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 879.516049][T14311] RAX: ffffffffffffffda RBX: 00007f39ae835fa0 RCX: 00007f39ae54f459 [ 879.516066][T14311] RDX: 00007f39ac805a80 RSI: 00007f39ac805bb0 RDI: 0000000000000011 [ 879.516081][T14311] RBP: 00007f39ac806090 R08: 0000000000000000 R09: 0000000000000000 [ 879.516096][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.516109][T14311] R13: 00007f39ae836038 R14: 00007f39ae835fa0 R15: 00007ffd966a4df8 [ 879.516144][T14311] [ 879.768629][T14222] usb 5-1: device descriptor read/64, error -71 [ 880.248837][T12383] Bluetooth: hci0: command tx timeout [ 880.325183][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 880.386826][T14222] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 880.796441][T14324] FAULT_INJECTION: forcing a failure. [ 880.796441][T14324] name failslab, interval 1, probability 0, space 0, times 0 [ 880.796506][T14324] CPU: 0 UID: 0 PID: 14324 Comm: syz.3.2416 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 880.796537][T14324] Tainted: [L]=SOFTLOCKUP [ 880.796545][T14324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.796558][T14324] Call Trace: [ 880.796566][T14324] [ 880.796575][T14324] dump_stack_lvl+0xe8/0x150 [ 880.796601][T14324] should_fail_ex+0x467/0x600 [ 880.796639][T14324] should_failslab+0xa8/0x100 [ 880.796665][T14324] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 880.796688][T14324] ? __get_vm_area_node+0x136/0x300 [ 880.796718][T14324] ? __get_vm_area_node+0x136/0x300 [ 880.796748][T14324] __get_vm_area_node+0x136/0x300 [ 880.796769][T14324] __vmalloc_node_range_noprof+0x358/0x1730 [ 880.796788][T14324] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 880.796804][T14324] ? __pfx___schedule+0x10/0x10 [ 880.796829][T14324] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.796848][T14324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 880.796880][T14324] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 880.796897][T14324] __vmalloc_noprof+0xd2/0x120 [ 880.796915][T14324] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 880.796929][T14324] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 880.796941][T14324] ? bpf_prog_alloc+0x2a/0x1a0 [ 880.796955][T14324] bpf_prog_alloc+0x3c/0x1a0 [ 880.796968][T14324] bpf_prog_load+0x7f8/0x1c00 [ 880.796988][T14324] ? __pfx_bpf_prog_load+0x10/0x10 [ 880.797014][T14324] __sys_bpf+0xd0d/0xd90 [ 880.797031][T14324] ? __pfx___sys_bpf+0x10/0x10 [ 880.797064][T14324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.797080][T14324] __x64_sys_bpf+0xba/0xd0 [ 880.797098][T14324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.797111][T14324] do_syscall_64+0x174/0x580 [ 880.797134][T14324] ? clear_bhb_loop+0x70/0xc0 [ 880.797150][T14324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.797162][T14324] RIP: 0033:0x7fd8518fe0d9 [ 880.797175][T14324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.797186][T14324] RSP: 002b:00007fd84fb14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.797202][T14324] RAX: ffffffffffffffda RBX: 00007fd851b86180 RCX: 00007fd8518fe0d9 [ 880.797212][T14324] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 880.797220][T14324] RBP: 00007fd84fb14090 R08: 0000000000000000 R09: 0000000000000000 [ 880.797228][T14324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.797236][T14324] R13: 00007fd851b86218 R14: 00007fd851b86180 R15: 00007fffb0fc0348 [ 880.797255][T14324] [ 880.797342][T14324] syz.3.2416: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 880.801082][T14324] CPU: 0 UID: 0 PID: 14324 Comm: syz.3.2416 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 880.801113][T14324] Tainted: [L]=SOFTLOCKUP [ 880.801120][T14324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.801132][T14324] Call Trace: [ 880.801137][T14324] [ 880.801144][T14324] dump_stack_lvl+0xe8/0x150 [ 880.801166][T14324] warn_alloc+0x24c/0x270 [ 880.801184][T14324] ? __pfx_warn_alloc+0x10/0x10 [ 880.801202][T14324] ? __get_vm_area_node+0x2af/0x300 [ 880.801224][T14324] __vmalloc_node_range_noprof+0x37d/0x1730 [ 880.801245][T14324] ? __pfx___schedule+0x10/0x10 [ 880.801271][T14324] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.801290][T14324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 880.801315][T14324] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 880.801327][T14324] __vmalloc_noprof+0xd2/0x120 [ 880.801345][T14324] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 880.801358][T14324] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 880.801369][T14324] ? bpf_prog_alloc+0x2a/0x1a0 [ 880.801382][T14324] bpf_prog_alloc+0x3c/0x1a0 [ 880.801395][T14324] bpf_prog_load+0x7f8/0x1c00 [ 880.801414][T14324] ? __pfx_bpf_prog_load+0x10/0x10 [ 880.801441][T14324] __sys_bpf+0xd0d/0xd90 [ 880.801457][T14324] ? __pfx___sys_bpf+0x10/0x10 [ 880.801490][T14324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.801506][T14324] __x64_sys_bpf+0xba/0xd0 [ 880.801523][T14324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.801537][T14324] do_syscall_64+0x174/0x580 [ 880.801555][T14324] ? clear_bhb_loop+0x70/0xc0 [ 880.801570][T14324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.801583][T14324] RIP: 0033:0x7fd8518fe0d9 [ 880.801596][T14324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.801607][T14324] RSP: 002b:00007fd84fb14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.801621][T14324] RAX: ffffffffffffffda RBX: 00007fd851b86180 RCX: 00007fd8518fe0d9 [ 880.801630][T14324] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 880.801639][T14324] RBP: 00007fd84fb14090 R08: 0000000000000000 R09: 0000000000000000 [ 880.801647][T14324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.801654][T14324] R13: 00007fd851b86218 R14: 00007fd851b86180 R15: 00007fffb0fc0348 [ 880.801681][T14324] [ 880.801707][T14324] Mem-Info: [ 880.801717][T14324] active_anon:232 inactive_anon:15504 isolated_anon:0 [ 880.801717][T14324] active_file:24609 inactive_file:37499 isolated_file:0 [ 880.801717][T14324] unevictable:0 dirty:121 writeback:0 [ 880.801717][T14324] slab_reclaimable:12417 slab_unreclaimable:109679 [ 880.801717][T14324] mapped:39074 shmem:9574 pagetables:1595 [ 880.801717][T14324] sec_pagetables:0 bounce:0 [ 880.801717][T14324] kernel_misc_reclaimable:0 [ 880.801717][T14324] free:1286301 free_pcp:4601 free_cma:0 [ 880.801797][T14324] Node 0 active_anon:928kB inactive_anon:62016kB active_file:98232kB inactive_file:149996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156296kB dirty:480kB writeback:0kB shmem:38296kB kernel_stack:13660kB pagetables:6236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 880.801874][T14324] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 880.801981][T14324] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 880.802067][T14324] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 880.802283][T14324] Node 0 DMA32 free:1185484kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:928kB inactive_anon:62016kB active_file:98232kB inactive_file:149996kB unevictable:0kB writepending:480kB zspages:0kB present:3129332kB managed:2560652kB mlocked:0kB bounce:0kB free_pcp:18396kB local_pcp:11268kB free_cma:0kB [ 880.802398][T14324] lowmem_reserve[]: 0 0 1 1 1 [ 880.802428][T14324] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1856kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 880.802478][T14324] lowmem_reserve[]: 0 0 0 0 0 [ 880.802692][T14324] Node 1 Normal free:3944360kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 880.802804][T14324] lowmem_reserve[]: 0 0 0 0 0 [ 880.803031][T14324] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 880.803696][T14324] Node 0 DMA32: 764*4kB (UE) 866*8kB (UE) 214*16kB (UE) 10*32kB (UE) 203*64kB (UME) 176*128kB (ME) 112*256kB (UM) 37*512kB (UME) 25*1024kB (UME) 11*2048kB (UME) 254*4096kB (UME) = 1185376kB [ 880.804592][T14324] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 880.805234][T14324] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 3*16kB (UM) 3*32kB (UM) 12*64kB (UM) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944360kB [ 880.806253][T14324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 880.806295][T14324] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 880.806336][T14324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 880.806376][T14324] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 880.806425][T14324] 71679 total pagecache pages [ 880.806460][T14324] 1 pages in swap cache [ 880.806495][T14324] Free swap = 124992kB [ 880.806530][T14324] Total swap = 124996kB [ 880.806566][T14324] 2097051 pages RAM [ 880.806600][T14324] 0 pages HighMem/MovableOnly [ 880.806654][T14324] 424809 pages reserved [ 880.806689][T14324] 0 pages cma reserved [ 882.100000][T14222] usb 5-1: device descriptor read/64, error -71 [ 882.207173][T14222] usb usb5-port1: attempt power cycle [ 882.515279][T14328] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 882.568701][T14318] bridge_slave_1: left allmulticast mode [ 882.568739][T14318] bridge_slave_1: left promiscuous mode [ 882.569023][T14318] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.041564][T14318] bridge_slave_0: left promiscuous mode [ 883.041776][T14318] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.029077][T14353] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2430'. [ 886.488840][T14364] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 886.646420][ T5594] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 888.196746][ T5594] usb 4-1: Using ep0 maxpacket: 8 [ 888.197521][ T5594] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 888.244149][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 888.244182][ T5594] usb 4-1: Product: syz [ 888.244199][ T5594] usb 4-1: Manufacturer: syz [ 888.244215][ T5594] usb 4-1: SerialNumber: syz [ 888.393712][ T5594] usb 4-1: config 0 descriptor?? [ 888.423740][ T5594] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 889.433740][ T5594] gspca_sn9c2028: read1 error -71 [ 889.494059][ T5594] gspca_sn9c2028: read1 error -71 [ 889.494152][ T5594] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 889.501843][ T5594] usb 4-1: USB disconnect, device number 18 [ 889.893195][T14387] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 889.893317][T14387] overlayfs: failed to clone lowerpath [ 890.633622][T14395] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2442'. [ 891.858903][T14407] FAULT_INJECTION: forcing a failure. [ 891.858903][T14407] name failslab, interval 1, probability 0, space 0, times 0 [ 891.858945][T14407] CPU: 1 UID: 0 PID: 14407 Comm: syz.3.2447 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 891.858976][T14407] Tainted: [L]=SOFTLOCKUP [ 891.858985][T14407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.858999][T14407] Call Trace: [ 891.859008][T14407] [ 891.859019][T14407] dump_stack_lvl+0xe8/0x150 [ 891.859057][T14407] should_fail_ex+0x467/0x600 [ 891.859093][T14407] should_failslab+0xa8/0x100 [ 891.859121][T14407] __kmalloc_noprof+0xfe/0x780 [ 891.859141][T14407] ? rcu_is_watching+0x15/0xb0 [ 891.859166][T14407] ? tomoyo_realpath_from_path+0xef/0x640 [ 891.859191][T14407] ? tomoyo_realpath_from_path+0xef/0x640 [ 891.859224][T14407] tomoyo_realpath_from_path+0xef/0x640 [ 891.859259][T14407] ? tomoyo_path_number_perm+0x219/0x5f0 [ 891.859294][T14407] tomoyo_path_number_perm+0x246/0x5f0 [ 891.859330][T14407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 891.859362][T14407] ? __lock_acquire+0x683/0x2ce0 [ 891.859401][T14407] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 891.859433][T14407] ? hook_file_ioctl+0x1f3/0x600 [ 891.859461][T14407] ? lockdep_hardirqs_on+0x7a/0x110 [ 891.859508][T14407] ? __fget_files+0x2a/0x420 [ 891.859535][T14407] ? __fget_files+0x2a/0x420 [ 891.859552][T14407] ? __fget_files+0x3a8/0x420 [ 891.859566][T14407] ? __fget_files+0x2a/0x420 [ 891.859584][T14407] security_file_ioctl+0xc3/0x2a0 [ 891.859603][T14407] __se_sys_ioctl+0x47/0x170 [ 891.859629][T14407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.859653][T14407] do_syscall_64+0x174/0x580 [ 891.859682][T14407] ? trace_irq_disable+0x3b/0x140 [ 891.859716][T14407] ? clear_bhb_loop+0x70/0xc0 [ 891.859751][T14407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.859774][T14407] RIP: 0033:0x7fd8518fe0d9 [ 891.859793][T14407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.859809][T14407] RSP: 002b:00007fd84fb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.859829][T14407] RAX: ffffffffffffffda RBX: 00007fd851b85fa0 RCX: 00007fd8518fe0d9 [ 891.859843][T14407] RDX: 0000200000000040 RSI: 00000000c10c5541 RDI: 0000000000000003 [ 891.859856][T14407] RBP: 00007fd84fb56090 R08: 0000000000000000 R09: 0000000000000000 [ 891.859868][T14407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.859881][T14407] R13: 00007fd851b86038 R14: 00007fd851b85fa0 R15: 00007fffb0fc0348 [ 891.859912][T14407] [ 891.861159][T14407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 891.887979][T14408] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 892.428016][T14413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2449'. [ 892.428055][T14413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2449'. [ 892.640193][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.641730][ C1] bridge0: topology change detected, propagating [ 892.875485][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 893.546553][T14434] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2453'. [ 895.019208][T14444] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 895.036934][ T4904] Bluetooth: hci0: command 0x0405 tx timeout [ 895.078832][ T5688] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 895.239064][ T5688] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 895.243227][ T5688] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 895.243270][ T5688] usb 6-1: config 0 has no interface number 0 [ 895.247025][T14206] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.248195][T14206] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.248455][T14206] bridge_slave_0: entered allmulticast mode [ 895.282065][T14206] bridge_slave_0: entered promiscuous mode [ 895.313282][T14206] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.314355][T14206] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.315210][T14206] bridge_slave_1: entered allmulticast mode [ 895.323997][T14206] bridge_slave_1: entered promiscuous mode [ 895.325639][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.325666][ T5688] usb 6-1: Product: syz [ 895.325680][ T5688] usb 6-1: Manufacturer: syz [ 895.325695][ T5688] usb 6-1: SerialNumber: syz [ 895.388026][ T5688] usb 6-1: config 0 descriptor?? [ 895.603469][T14477] netlink: 'syz.4.2459': attribute type 9 has an invalid length. [ 895.603499][T14477] netlink: 'syz.4.2459': attribute type 7 has an invalid length. [ 895.603513][T14477] netlink: 'syz.4.2459': attribute type 8 has an invalid length. [ 895.775322][ T149] bridge_slave_1: left allmulticast mode [ 895.775362][ T149] bridge_slave_1: left promiscuous mode [ 895.775651][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.012078][ T149] bridge_slave_0: left allmulticast mode [ 896.012122][ T149] bridge_slave_0: left promiscuous mode [ 896.012976][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.446752][ T5811] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 896.600457][ T5811] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 896.604944][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 896.604964][ T5811] usb 5-1: Product: syz [ 896.604973][ T5811] usb 5-1: SerialNumber: syz [ 896.669843][ T5811] usb 5-1: config 0 descriptor?? [ 896.933899][ T5811] hso 5-1:0.0: Failed to find BULK eps [ 897.139735][T14222] usb 5-1: USB disconnect, device number 51 [ 898.935606][ T5688] asix 6-1:0.251: probe with driver asix failed with error -71 [ 899.035006][ T5688] usb 6-1: USB disconnect, device number 3 [ 899.279344][T14500] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 899.309968][T14502] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 899.309968][T14502] program syz.4.2468 not setting count and/or reply_len properly [ 899.326722][ T5594] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 899.649772][ T5594] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 899.666939][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.666970][ T5594] usb 4-1: Product: syz [ 899.666986][ T5594] usb 4-1: Manufacturer: syz [ 899.667001][ T5594] usb 4-1: SerialNumber: syz [ 899.774439][T13629] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 899.807879][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.889935][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.940256][ T149] bond0 (unregistering): Released all slaves [ 900.239958][T14510] batadv_slave_1: entered promiscuous mode [ 900.245822][T14206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.266997][T14505] batadv_slave_1: left promiscuous mode [ 900.336548][T14206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.655647][T14522] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 900.656124][T14522] overlayfs: overlapping lowerdir path [ 900.885257][T13629] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 900.971737][T13629] ath9k_htc: Failed to initialize the device [ 901.060989][ T149] hsr_slave_0: left promiscuous mode [ 901.131991][ T149] hsr_slave_1: left promiscuous mode [ 901.214028][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.340790][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.554705][T13629] usb 4-1: ath9k_htc: USB layer deinitialized [ 901.709673][T14222] usb 4-1: USB disconnect, device number 19 [ 901.739921][ T149] veth1_macvtap: left promiscuous mode [ 901.739994][ T149] veth0_macvtap: left promiscuous mode [ 901.740155][ T149] veth1_vlan: left promiscuous mode [ 902.707811][ T149] veth0_vlan: left promiscuous mode [ 902.840907][T14547] FAULT_INJECTION: forcing a failure. [ 902.840907][T14547] name failslab, interval 1, probability 0, space 0, times 0 [ 902.840947][T14547] CPU: 0 UID: 0 PID: 14547 Comm: syz.5.2477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 902.840979][T14547] Tainted: [L]=SOFTLOCKUP [ 902.840987][T14547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.841001][T14547] Call Trace: [ 902.841010][T14547] [ 902.841020][T14547] dump_stack_lvl+0xe8/0x150 [ 902.841059][T14547] should_fail_ex+0x467/0x600 [ 902.841101][T14547] should_failslab+0xa8/0x100 [ 902.841129][T14547] __kmalloc_cache_noprof+0xa0/0x6b0 [ 902.841153][T14547] ? vgem_gem_create_object+0x4c/0xb0 [ 902.841287][T14547] ? vgem_gem_create_object+0x4c/0xb0 [ 902.841319][T14547] vgem_gem_create_object+0x4c/0xb0 [ 902.841346][T14547] __drm_gem_shmem_create+0x7e/0x2e0 [ 902.841425][T14547] drm_gem_shmem_dumb_create+0x72/0x120 [ 902.841460][T14547] drm_mode_create_dumb_ioctl+0x214/0x2a0 [ 902.841557][T14547] drm_ioctl_kernel+0x2e2/0x3b0 [ 902.841628][T14547] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 902.841663][T14547] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 902.841710][T14547] drm_ioctl+0x713/0xba0 [ 902.841747][T14547] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 902.841780][T14547] ? __pfx_drm_ioctl+0x10/0x10 [ 902.841818][T14547] ? __fget_files+0x2a/0x420 [ 902.841844][T14547] ? bpf_lsm_file_ioctl+0x9/0x20 [ 902.841884][T14547] ? __pfx_drm_ioctl+0x10/0x10 [ 902.841911][T14547] __se_sys_ioctl+0xff/0x170 [ 902.841947][T14547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.841972][T14547] do_syscall_64+0x174/0x580 [ 902.842002][T14547] ? trace_irq_disable+0x3b/0x140 [ 902.842037][T14547] ? clear_bhb_loop+0x70/0xc0 [ 902.842065][T14547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.842087][T14547] RIP: 0033:0x7f39ae5ae0d9 [ 902.842110][T14547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.842130][T14547] RSP: 002b:00007f39ac806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 902.842155][T14547] RAX: ffffffffffffffda RBX: 00007f39ae835fa0 RCX: 00007f39ae5ae0d9 [ 902.842179][T14547] RDX: 00002000000002c0 RSI: 00000000c02064b2 RDI: 0000000000000004 [ 902.842194][T14547] RBP: 00007f39ac806090 R08: 0000000000000000 R09: 0000000000000000 [ 902.842209][T14547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.842223][T14547] R13: 00007f39ae836038 R14: 00007f39ae835fa0 R15: 00007ffd966a4df8 [ 902.842259][T14547] [ 903.026151][T14549] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 903.899602][T14567] netlink: 'syz.5.2485': attribute type 21 has an invalid length. [ 903.899629][T14567] netlink: 'syz.5.2485': attribute type 7 has an invalid length. [ 904.229134][ T149] team0 (unregistering): Port device team_slave_1 removed [ 904.277417][ T149] team0 (unregistering): Port device team_slave_0 removed [ 904.482393][T14206] team0: Port device team_slave_0 added [ 904.525601][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 904.565551][T14206] team0: Port device team_slave_1 added [ 904.844049][T14575] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 905.977242][T14206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.977264][T14206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.977294][T14206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.983519][T14206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.983537][T14206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.983562][T14206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.116886][T14222] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 906.423553][T14222] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 906.495264][T14222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.495296][T14222] usb 4-1: Product: syz [ 906.495312][T14222] usb 4-1: Manufacturer: syz [ 906.495327][T14222] usb 4-1: SerialNumber: syz [ 906.734008][T12058] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 907.012699][T14206] hsr_slave_0: entered promiscuous mode [ 907.014512][T14206] hsr_slave_1: entered promiscuous mode [ 907.069023][T14206] debugfs: 'hsr0' already exists in 'hsr' [ 907.069099][T14206] Cannot create hsr debugfs directory [ 907.381275][T14593] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 907.501916][T14593] overlayfs: overlapping lowerdir path [ 907.963894][T12058] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 908.068526][T12058] ath9k_htc: Failed to initialize the device [ 908.118034][T12058] usb 4-1: ath9k_htc: USB layer deinitialized [ 908.586823][T14222] usb 4-1: USB disconnect, device number 20 [ 908.904541][T14607] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2495'. [ 909.381401][T14626] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 911.960584][ T5250] 8021q: adding VLAN 0 to HW filter on device eth10 [ 914.002557][T13629] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 914.166822][T13629] usb 6-1: device descriptor read/64, error -71 [ 914.275906][T14690] FAULT_INJECTION: forcing a failure. [ 914.275906][T14690] name failslab, interval 1, probability 0, space 0, times 0 [ 914.275946][T14690] CPU: 1 UID: 0 PID: 14690 Comm: syz.3.2514 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 914.275977][T14690] Tainted: [L]=SOFTLOCKUP [ 914.275985][T14690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.276000][T14690] Call Trace: [ 914.276009][T14690] [ 914.276019][T14690] dump_stack_lvl+0xe8/0x150 [ 914.276057][T14690] should_fail_ex+0x467/0x600 [ 914.276097][T14690] should_failslab+0xa8/0x100 [ 914.276124][T14690] __kmalloc_noprof+0xfe/0x780 [ 914.276149][T14690] ? tomoyo_encode+0x2ad/0x570 [ 914.276173][T14690] ? tomoyo_encode+0x2ad/0x570 [ 914.276215][T14690] tomoyo_encode+0x2ad/0x570 [ 914.276247][T14690] tomoyo_realpath_from_path+0x5fa/0x640 [ 914.276284][T14690] ? tomoyo_path_number_perm+0x219/0x5f0 [ 914.276320][T14690] tomoyo_path_number_perm+0x246/0x5f0 [ 914.276359][T14690] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 914.276392][T14690] ? __lock_acquire+0x683/0x2ce0 [ 914.276431][T14690] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 914.276462][T14690] ? hook_file_ioctl+0x1f3/0x600 [ 914.276491][T14690] ? lockdep_hardirqs_on+0x7a/0x110 [ 914.276547][T14690] ? __fget_files+0x2a/0x420 [ 914.276573][T14690] ? __fget_files+0x2a/0x420 [ 914.276593][T14690] ? __fget_files+0x3a8/0x420 [ 914.276613][T14690] ? __fget_files+0x2a/0x420 [ 914.276639][T14690] security_file_ioctl+0xc3/0x2a0 [ 914.276665][T14690] __se_sys_ioctl+0x47/0x170 [ 914.276693][T14690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.276717][T14690] do_syscall_64+0x174/0x580 [ 914.276747][T14690] ? trace_irq_disable+0x3b/0x140 [ 914.276781][T14690] ? clear_bhb_loop+0x70/0xc0 [ 914.276810][T14690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.276831][T14690] RIP: 0033:0x7fd8518fe0d9 [ 914.276851][T14690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.276871][T14690] RSP: 002b:00007fd84fb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.276896][T14690] RAX: ffffffffffffffda RBX: 00007fd851b85fa0 RCX: 00007fd8518fe0d9 [ 914.276913][T14690] RDX: 0000200000000080 RSI: 0000000040a0ae49 RDI: 0000000000000004 [ 914.276928][T14690] RBP: 00007fd84fb56090 R08: 0000000000000000 R09: 0000000000000000 [ 914.276942][T14690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.276953][T14690] R13: 00007fd851b86038 R14: 00007fd851b85fa0 R15: 00007fffb0fc0348 [ 914.276988][T14690] [ 914.541049][T14690] ERROR: Out of memory at tomoyo_realpath_from_path. [ 915.185679][T13629] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 915.326792][T13629] usb 6-1: device descriptor read/64, error -71 [ 915.439960][T13629] usb usb6-port1: attempt power cycle [ 915.907496][T13629] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 916.021908][T14708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 916.535838][T13629] usb 6-1: device descriptor read/8, error -71 [ 916.837555][T13629] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 916.892530][T13629] usb 6-1: device descriptor read/8, error -71 [ 917.014747][T13629] usb usb6-port1: unable to enumerate USB device [ 917.950473][T14726] FAULT_INJECTION: forcing a failure. [ 917.950473][T14726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.950501][T14726] CPU: 1 UID: 0 PID: 14726 Comm: syz.5.2522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 917.950519][T14726] Tainted: [L]=SOFTLOCKUP [ 917.950524][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.950532][T14726] Call Trace: [ 917.950538][T14726] [ 917.950554][T14726] dump_stack_lvl+0xe8/0x150 [ 917.950578][T14726] should_fail_ex+0x467/0x600 [ 917.950600][T14726] _copy_to_user+0x31/0xb0 [ 917.950616][T14726] simple_read_from_buffer+0xe1/0x170 [ 917.950632][T14726] proc_fail_nth_read+0x1be/0x230 [ 917.950649][T14726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 917.950664][T14726] ? rw_verify_area+0x250/0x4d0 [ 917.950680][T14726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 917.950697][T14726] vfs_read+0x219/0xa90 [ 917.950716][T14726] ? __pfx_vfs_read+0x10/0x10 [ 917.950732][T14726] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 917.950751][T14726] ? lockdep_hardirqs_on+0x7a/0x110 [ 917.950769][T14726] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 917.950789][T14726] ? mutex_lock_nested+0x152/0x1d0 [ 917.950802][T14726] ? fdget_pos+0x252/0x320 [ 917.950825][T14726] ksys_read+0x156/0x270 [ 917.950841][T14726] ? __pfx_ksys_read+0x10/0x10 [ 917.950860][T14726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.950874][T14726] do_syscall_64+0x174/0x580 [ 917.950891][T14726] ? trace_irq_disable+0x3b/0x140 [ 917.950910][T14726] ? clear_bhb_loop+0x70/0xc0 [ 917.950926][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.950938][T14726] RIP: 0033:0x7f39ae56e90e [ 917.950951][T14726] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 917.950962][T14726] RSP: 002b:00007f39ac7e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 917.950976][T14726] RAX: ffffffffffffffda RBX: 00007f39ac7e56c0 RCX: 00007f39ae56e90e [ 917.950986][T14726] RDX: 000000000000000f RSI: 00007f39ac7e50a0 RDI: 0000000000000008 [ 917.950994][T14726] RBP: 00007f39ac7e5090 R08: 0000000000000000 R09: 0000000000000000 [ 917.951002][T14726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.951010][T14726] R13: 00007f39ae836128 R14: 00007f39ae836090 R15: 00007ffd966a4df8 [ 917.951029][T14726] [ 920.346064][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 920.346084][ T37] audit: type=1326 audit(1786286653.191:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 920.389821][ T37] audit: type=1326 audit(1786286653.231:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 920.389889][ T37] audit: type=1326 audit(1786286653.231:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 920.389943][ T37] audit: type=1326 audit(1786286653.231:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 920.389993][ T37] audit: type=1326 audit(1786286653.231:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 920.390043][ T37] audit: type=1326 audit(1786286653.231:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 920.390093][ T37] audit: type=1326 audit(1786286653.231:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 920.390143][ T37] audit: type=1326 audit(1786286653.231:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 920.390194][ T37] audit: type=1326 audit(1786286653.241:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 920.390242][ T37] audit: type=1326 audit(1786286653.241:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14732 comm="syz.5.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ae5ae0d9 code=0x7ffc0000 [ 921.237794][T13629] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 922.010539][T13629] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 922.027750][T13629] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 922.027792][T13629] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 922.086490][T13629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.086522][T13629] usb 6-1: Product: syz [ 922.086539][T13629] usb 6-1: Manufacturer: syz [ 922.086555][T13629] usb 6-1: SerialNumber: syz [ 922.190342][T13629] usb 6-1: can't set config #1, error -71 [ 922.276562][T13629] usb 6-1: USB disconnect, device number 8 [ 922.366880][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2530'. [ 923.256922][ T5594] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 925.031846][ T5594] usb 6-1: device descriptor read/64, error -71 [ 925.274043][ T5594] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 925.476097][ T5594] usb 6-1: Using ep0 maxpacket: 32 [ 925.479811][ T5594] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 925.507346][ T5594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.507377][ T5594] usb 6-1: Product: syz [ 925.507393][ T5594] usb 6-1: Manufacturer: syz [ 925.507408][ T5594] usb 6-1: SerialNumber: syz [ 925.585674][ T5594] usb 6-1: config 0 descriptor?? [ 926.072901][ T5594] airspy 6-1:0.0: Board ID: 00 [ 926.072921][ T5594] airspy 6-1:0.0: Firmware version: [ 926.253774][T14222] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 926.410569][T14222] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 926.441441][T14222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.441475][T14222] usb 4-1: Product: syz [ 926.441490][T14222] usb 4-1: Manufacturer: syz [ 926.441504][T14222] usb 4-1: SerialNumber: syz [ 926.568859][ T5594] airspy 6-1:0.0: usb_control_msg() failed -32 request 0e [ 926.608638][T14803] lo: entered allmulticast mode [ 926.684753][ T5594] airspy 6-1:0.0: Registered as swradio24 [ 926.684777][ T5594] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 926.805071][ C1] port100 4-1:1.0: NFC: Urb failure (status -71) [ 926.920767][ C1] port100 4-1:1.0: NFC: Urb failure (status -71) [ 926.950936][T14222] port100 4-1:1.0: NFC: Could not get supported command types [ 927.031888][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'. [ 927.031909][T14809] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 927.156326][T14222] usb 4-1: USB disconnect, device number 21 [ 927.868818][T14222] usb 6-1: USB disconnect, device number 10 [ 927.909394][T14206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 928.149956][T14206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 928.183972][T14206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 928.536914][ T5600] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 928.687540][ T5600] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 928.688652][ T5600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.688679][ T5600] usb 4-1: config 0 interface 0 has no altsetting 0 [ 928.695865][T14206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 928.705842][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.705870][ T5600] usb 4-1: Product: syz [ 928.705885][ T5600] usb 4-1: Manufacturer: syz [ 928.705899][ T5600] usb 4-1: SerialNumber: syz [ 928.853319][ T5600] usb 4-1: config 0 descriptor?? [ 928.881872][ T5600] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 928.903620][ T5600] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 928.914151][ T5600] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 928.914235][ T5600] usb 4-1: media controller created [ 928.978246][T14206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 929.024640][T14206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 929.040133][T14206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 929.172085][T14206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 929.187394][ T5600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 929.395074][T14838] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2551'. [ 929.466733][T14845] mmap: syz.3.2547 (14845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 930.085597][T14845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.086321][T14845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.139655][ T5600] DVB: Unable to find symbol tda10046_attach() [ 930.139673][ T5600] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 930.139688][ T5600] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 930.283417][T12383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 930.386715][T12383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 930.405413][T12383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 930.534846][T12383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 930.580590][T12383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 930.901229][ T5600] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 930.954135][ T5600] usb 4-1: USB disconnect, device number 22 [ 931.710233][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.710315][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.482896][ T5591] BUG: unable to handle page fault for address: ffffffff925aeb38 [ 932.482920][ T5591] #PF: supervisor read access in kernel mode [ 932.482933][ T5591] #PF: error_code(0x0000) - not-present page [ 932.482946][ T5591] PGD dfb3067 P4D dfb3067 PUD dfb4063 PMD 800fffffedbff062 [ 932.482986][ T5591] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 932.483093][ T5591] CPU: 0 UID: 0 PID: 5591 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 932.483125][ T5591] Tainted: [L]=SOFTLOCKUP [ 932.483133][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 932.483146][ T5591] RIP: 0010:__lock_acquire+0x69b/0x2ce0 [ 932.483174][ T5591] Code: 00 00 4c 89 f7 4c 89 ee ba 08 00 00 00 e8 7d 44 00 00 31 ed 85 c0 0f 84 19 0d 00 00 83 3d cc 81 07 18 00 75 13 48 63 44 24 20 <48> 0f a3 05 9d f1 03 12 0f 83 5d 1e 00 00 49 8b 9e f8 0b 00 00 48 [ 932.483196][ T5591] RSP: 0018:ffffc900043cf438 EFLAGS: 00010046 [ 932.483215][ T5591] RAX: fffffffff5acaef7 RBX: 0000000000000000 RCX: ffffffff935205c8 [ 932.483230][ T5591] RDX: 0000000000000008 RSI: ffff888037c50d48 RDI: ffff888037c50000 [ 932.483243][ T5591] RBP: 0000000000000000 R08: ffffffff8a33b5cd R09: 0000000000000000 [ 932.483255][ T5591] R10: 0000000000000000 R11: ffff88802b07e7e8 R12: 0000000000000ef7 [ 932.483267][ T5591] R13: ffff888037c50d48 R14: ffff888037c50000 R15: ffff888037c50c08 [ 932.483284][ T5591] FS: 0000000000000000(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 932.483301][ T5591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.483316][ T5591] CR2: ffffffff925aeb38 CR3: 0000000031e02000 CR4: 00000000003526f0 [ 932.483338][ T5591] Call Trace: [ 932.483346][ T5591] [ 932.483362][ T5591] ? __lock_acquire+0x683/0x2ce0 [ 932.483387][ T5591] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 932.483413][ T5591] ? __pfx___schedule+0x10/0x10 [ 932.483442][ T5591] ? bt_accept_unlink+0x7d/0x2f0 [ 932.483521][ T5591] lock_acquire+0x106/0x350 [ 932.483539][ T5591] ? bt_accept_unlink+0x7d/0x2f0 [ 932.483571][ T5591] ? __local_bh_disable_ip+0x3c/0x420 [ 932.483599][ T5591] rt_spin_lock+0x83/0x400 [ 932.483621][ T5591] ? bt_accept_unlink+0x7d/0x2f0 [ 932.483660][ T5591] ? __pfx_rt_spin_lock+0x10/0x10 [ 932.483684][ T5591] ? rcu_is_watching+0x15/0xb0 [ 932.483708][ T5591] ? __local_bh_disable_ip+0x3c/0x420 [ 932.483733][ T5591] ? bt_accept_unlink+0x61/0x2f0 [ 932.483764][ T5591] bt_accept_unlink+0x7d/0x2f0 [ 932.483794][ T5591] ? bt_accept_unlink+0x61/0x2f0 [ 932.483823][ T5591] l2cap_sock_teardown_cb+0x17e/0x490 [ 932.483871][ T5591] l2cap_chan_del+0x98/0x600 [ 932.483921][ T5591] l2cap_conn_del+0x2f2/0x520 [ 932.483947][ T5591] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 932.483970][ T5591] hci_conn_hash_flush+0x105/0x260 [ 932.484034][ T5591] hci_dev_close_sync+0x7fc/0x10a0 [ 932.484079][ T5591] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 932.484099][ T5591] ? lockdep_hardirqs_on+0x7a/0x110 [ 932.484128][ T5591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 932.484156][ T5591] ? mutex_lock_nested+0x152/0x1d0 [ 932.484177][ T5591] ? hci_unregister_dev+0x22a/0x5b0 [ 932.484206][ T5591] hci_unregister_dev+0x232/0x5b0 [ 932.484234][ T5591] vhci_release+0x170/0x1c0 [ 932.484302][ T5591] ? __pfx_vhci_release+0x10/0x10 [ 932.484321][ T5591] __fput+0x42a/0xa80 [ 932.484344][ T5591] task_work_run+0x1d9/0x270 [ 932.484376][ T5591] ? __pfx_task_work_run+0x10/0x10 [ 932.484406][ T5591] ? do_exit+0x735/0x2360 [ 932.484434][ T5591] ? kmem_cache_free+0x187/0x6c0 [ 932.484455][ T5591] ? put_net+0x191/0x260 [ 932.484477][ T5591] ? do_exit+0x735/0x2360 [ 932.484504][ T5591] do_exit+0x73a/0x2360 [ 932.484533][ T5591] ? lockdep_hardirqs_on+0x7a/0x110 [ 932.484560][ T5591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 932.484591][ T5591] ? __pfx_do_exit+0x10/0x10 [ 932.484621][ T5591] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 932.484652][ T5591] ? rt_spin_lock+0x1e0/0x400 [ 932.484678][ T5591] ? rt_spin_unlock+0x157/0x200 [ 932.484702][ T5591] do_group_exit+0x22d/0x2f0 [ 932.484730][ T5591] ? rt_spin_unlock+0x163/0x200 [ 932.484754][ T5591] get_signal+0x121b/0x12c0 [ 932.484787][ T5591] arch_do_signal_or_restart+0xbb/0x860 [ 932.484816][ T5591] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 932.484843][ T5591] ? do_sys_openat2+0x14e/0x200 [ 932.484884][ T5591] exit_to_user_mode_loop+0x104/0x730 [ 932.484957][ T5591] ? rcu_is_watching+0x15/0xb0 [ 932.484982][ T5591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.485003][ T5591] do_syscall_64+0x353/0x580 [ 932.485031][ T5591] ? clear_bhb_loop+0x70/0xc0 [ 932.485052][ T5591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.485070][ T5591] RIP: 0033:0x7f4f7fffe90e [ 932.485088][ T5591] Code: Unable to access opcode bytes at 0x7f4f7fffe8e4. [ 932.485125][ T5591] RSP: 002b:00007ffdd3d54f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 932.485148][ T5591] RAX: 0000000000000007 RBX: 000055557c7a6500 RCX: 00007f4f7fffe90e [ 932.485163][ T5591] RDX: 0000000000000000 RSI: 00007ffdd3d550e0 RDI: ffffffffffffff9c [ 932.485178][ T5591] RBP: 00007ffdd3d550e0 R08: 0000000000000000 R09: 0000000000000000 [ 932.485191][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd3d561d0 [ 932.485204][ T5591] R13: 00007f4f800d4474 R14: 000055557c7a64e8 R15: 0000000000000007 [ 932.485225][ T5591] [ 932.485232][ T5591] Modules linked in: [ 932.485246][ T5591] CR2: ffffffff925aeb38 [ 932.485258][ T5591] ---[ end trace 0000000000000000 ]--- [ 932.485269][ T5591] RIP: 0010:__lock_acquire+0x69b/0x2ce0 [ 932.485292][ T5591] Code: 00 00 4c 89 f7 4c 89 ee ba 08 00 00 00 e8 7d 44 00 00 31 ed 85 c0 0f 84 19 0d 00 00 83 3d cc 81 07 18 00 75 13 48 63 44 24 20 <48> 0f a3 05 9d f1 03 12 0f 83 5d 1e 00 00 49 8b 9e f8 0b 00 00 48 [ 932.485311][ T5591] RSP: 0018:ffffc900043cf438 EFLAGS: 00010046 [ 932.485329][ T5591] RAX: fffffffff5acaef7 RBX: 0000000000000000 RCX: ffffffff935205c8 [ 932.485345][ T5591] RDX: 0000000000000008 RSI: ffff888037c50d48 RDI: ffff888037c50000 [ 932.485359][ T5591] RBP: 0000000000000000 R08: ffffffff8a33b5cd R09: 0000000000000000 [ 932.485373][ T5591] R10: 0000000000000000 R11: ffff88802b07e7e8 R12: 0000000000000ef7 [ 932.485388][ T5591] R13: ffff888037c50d48 R14: ffff888037c50000 R15: ffff888037c50c08 [ 932.485405][ T5591] FS: 0000000000000000(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 932.485424][ T5591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.485439][ T5591] CR2: ffffffff925aeb38 CR3: 0000000031e02000 CR4: 00000000003526f0 [ 932.485463][ T5591] Kernel panic - not syncing: Fatal exception in interrupt [ 932.485622][ T5591] Kernel Offset: disabled