last executing test programs: 7m41.268030569s ago: executing program 4 (id=886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x40000010) 7m41.177748294s ago: executing program 4 (id=888): r0 = socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_pidfd_open(r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r2 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) setsockopt$inet6_buf(r0, 0x29, 0x35, 0x0, 0x0) fsmount(r2, 0x0, 0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80800, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x2, 0x80002, 0xfffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x0, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7m40.951617265s ago: executing program 4 (id=889): syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x822b01) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x78, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xead1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8051}, 0x10008044) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f32"], 0x138) 7m40.77029945s ago: executing program 4 (id=891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045a", 0xa2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20008000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7m40.66785848s ago: executing program 4 (id=892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0xfc73) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) syz_io_uring_setup(0x4ccd, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x3, 0x373}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @multicast1}, @address_request}}}}, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0x28, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x9, 0x7, 0x9, 0x80, 0x4}, @exit, @generic={0x2, 0x5, 0xe, 0xe, 0xf41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x55}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x81, 0x83, &(0x7f0000000540)=""/131, 0x41000, 0x31, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1}, 0xfffffffffffffcf3, 0x10, &(0x7f0000000640)={0x4, 0x1, 0x101, 0x3}, 0x10, r5, r6, 0x3, 0x0, &(0x7f0000000a00)=[{0x2, 0x2, 0x7, 0xa}, {0x5, 0x3, 0x0, 0x2}, {0x5, 0x5, 0x8, 0xa}], 0x10, 0x5}, 0x94) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffe47, &(0x7f0000000100)="06ff03076844ec0dae6018e2cc8c", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) 7m40.202437521s ago: executing program 4 (id=898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x40000010) 7m25.070687532s ago: executing program 32 (id=898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x40000010) 3m36.660730357s ago: executing program 2 (id=1878): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffe24, &(0x7f0000000680)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\x01\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x87\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xa5\xcd\x83\x85\x9b\x95\x86\xf5\x8d\xe1\xe0)\x96\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\x01\x01\x00\x00\x00\x00\x00\x00(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00') r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'hsr0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'geneve0\x00'}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c000180090001006c617374000000000c2202800800014000008006140000001100010000000000000000"], 0xbc}}, 0x0) 3m35.433782334s ago: executing program 2 (id=1881): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) 3m35.128745472s ago: executing program 2 (id=1884): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x61, 0x0, 0x0, 0x3}]}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000091, 0xec000000}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000100)={0x0, 0x0, 0x0, r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x800, 0x2b5, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 3m34.885659395s ago: executing program 2 (id=1885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r4, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4, 0x40, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) 3m33.879473311s ago: executing program 2 (id=1889): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000003c0)={0x1, &(0x7f00000001c0)=""/208, &(0x7f0000000340)=[{0xfff, 0x1c, 0xfffffee4, &(0x7f0000000300)=""/28}]}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x0, 0x40, 0xffffffd6, 0x5bd, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1c}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000440)}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xff7fffffffffda7c) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x667, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000002c0)={0x22001500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x3, 0x8, 0xfd, 0x0, 0x0, 0x1000, 0x5000, '\x00', 0x6}) openat$cgroup_devices(r4, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r5 = io_uring_setup(0x185e, &(0x7f0000000100)={0x0, 0xc8a1, 0x8, 0x1, 0x800000c1}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m32.653180254s ago: executing program 2 (id=1890): syz_usb_connect$uac3(0x0, 0x9f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 3m21.296717564s ago: executing program 3 (id=1925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x1, 0xfd, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x5, 0xd0, 0x83, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x34}, [@mixer_unit={0x7, 0x24, 0x4, 0x10, 0xfc, '>['}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x401, 0x1, 0x2, 0x8, 0x5c, 0x41}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x3, 0x4, [0x3, 0x8, 0x8, 0x3], 0x9}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x7, "b2fab6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x3, 0x0, 0x7}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x83, 0x4, 0x2d, 0x9, "de4fd70b"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x6, 0x6, 0x2, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x9, 0xa, 0xf}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x81, 0x7, 0x8, {0x7, 0x25, 0x1, 0xc, 0xff, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0xeb, 0x7f, "884622"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x3, 0xe4, "b2c5ab", '?'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0xc, 0x8, 0xf}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x7, 0x81, 0xc6, 0x3d}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0x23e, 0x4, "e1c027c283d9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x78, 0x9, {0x7, 0x25, 0x1, 0x4, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6b, 0x0, 0xc2, 0xff, 0x8}, 0x1a, &(0x7f0000000240)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xe, 0x0, 0x6, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x3c, 0x6, 0x40}]}, 0x3, [{0x13, &(0x7f0000000600)=@string={0x13, 0x3, "9316dceae8405fe0aa3fd07b2961ab5bc6"}}, {0x47, &(0x7f0000000640)=@string={0x47, 0x3, "8c3b774d3d83500ba5be82d558166802211a97b502e7e724bfe401b71298fc2473a1d4073e82d32d98e24b8eb544e185855a5e9043213fe4abd94788b96fd85b7a96413824"}}, {0x87, &(0x7f00000006c0)=@string={0x87, 0x3, "3f7ed714c366b83edd9b1e4ad8f806f07f7f66d34a76f1a4727dd69bce3f5b91e5347f0520ca95553c8d2f5889a6a208e443b82f936762da66c5b67ba649e3023dba3aa61cbd425136f89f00d3f24121837f6bed4eb37a2da3bbed88506df8dfabe515ef75114658cb07cad588bbd5c5dfc2cc579e5ba787c278178ec7f7b46b68564a174e"}}]}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=@flushsa={0x230, 0x1c, 0x200, 0x70bd29, 0x25dfdbfe, {0x2b}, [@extra_flags={0x8}, @policy={0xac, 0x7, {{@in6=@mcast2, @in=@broadcast, 0x4e24, 0x0, 0x4e20, 0x1dc0, 0xa, 0x90, 0xe0, 0x2c, r4, 0xee01}, {0x1, 0x18000000, 0xa, 0xc65, 0x1, 0x3, 0x8, 0x8001}, {0x0, 0x8001, 0x1, 0x8}, 0x6, 0x6e6bbd, 0x2, 0x1, 0x2, 0x1}}, @replay_thresh={0x8, 0xb, 0x1}, @lastused={0xc, 0xf, 0xffff}, @algo_auth={0x145, 0x1, {{'sha224-avx\x00'}, 0x7e8, "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"}}, @mark={0xc, 0x15, {0x35075b, 0x4}}]}, 0x230}, 0x1, 0x0, 0x0, 0x8000}, 0x4) fcntl$setflags(r2, 0x2, 0x0) 3m18.108660948s ago: executing program 3 (id=1938): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r1, @ANYBLOB="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"], 0x38}}, 0x4000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000280)=[@acquire_done], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xc, 0x8b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6daefdd17ba958b07dcdb6eefbdc6a98b8ecf4d468b1d8c1289cf4909d5066c0b8c9ab46cfe580d"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x200200, 0x0) write$nci(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="710301f70400030544df88c9e933f3886a9a4678c359e196af43a9c72c81f705eb0100"/50], 0x32) 3m17.30627937s ago: executing program 33 (id=1890): syz_usb_connect$uac3(0x0, 0x9f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 3m17.034793348s ago: executing program 3 (id=1942): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000c980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000033c0)=ANY=[@ANYBLOB="110000ed"], 0xe0}}], 0x1, 0x40844) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0xfffffffa, 0x407, 0x8, 0x8010041, 0x80, "0baa301fa951e8a4603c811200", 0x81ed, 0xfffffff5}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x812) r6 = dup(r5) r7 = socket(0x28, 0x5, 0x0) ioctl$SIOCSIFMTU(r7, 0x8901, &(0x7f0000000040)={'vlan1\x00', 0x10000007}) fcntl$getownex(r7, 0x10, &(0x7f0000000180)) read$FUSE(r6, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000680)={0x4000000, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x1c}, &(0x7f00000004c0)=""/146, 0x92, &(0x7f0000000580)=""/121, 0x0, 0x0, {r8}}, 0x58) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r9, 0xc008aec1, &(0x7f0000000300)={0x9, 0x0, [{0x7, 0x9, 0x0, 0x3, 0x7ff, 0x154, 0x40}, {0x5, 0x7f35, 0x5, 0x6, 0x0, 0x100, 0x9}, {0x80000019, 0x2ffffd, 0x6, 0x1, 0x0, 0x8000, 0xd84d}, {0x80000007, 0x7ff, 0x1, 0x7, 0x8, 0x7, 0x3}, {0x80000007, 0xa, 0x4, 0x1, 0x7, 0x7c930742, 0x9}, {0x80000019, 0xe0, 0x4, 0x1, 0x9, 0x9, 0x2}, {0xa, 0x5, 0x7, 0x1, 0x9, 0x8001, 0xa}, {0xc0000000, 0x7ff, 0x3, 0x2, 0x4, 0x4, 0x3ff}, {0x80000019, 0xd, 0x4, 0x8, 0xfff, 0x8, 0x1a}]}) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$getflags(r3, 0x408) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xf63e57cfc88925bf, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000100), &(0x7f0000000140)={'L+', 0x1}, 0x16, 0x0) ioctl$SOUND_PCM_READ_BITS(r11, 0x80045005, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 3m15.256931025s ago: executing program 3 (id=1945): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20008000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m14.017121664s ago: executing program 3 (id=1949): pipe(&(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x82141000) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 3m13.323768995s ago: executing program 3 (id=1953): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000063f728e9497e7331000000000000000000000000000000000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000133020000000000000a000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc020000000000000000000000000000ff0000000335000000000200ffffffff00000000000000000000000000000000000000000000ffefe000000200000000000000000000000000000000ac141400000000000000000000000000000100000635000002000f00ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a0010"], 0x27c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2m57.752504432s ago: executing program 34 (id=1953): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 11.319553113s ago: executing program 0 (id=2378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x40, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008090}, 0x40c0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000080)) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 11.055179951s ago: executing program 1 (id=2379): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f000040a000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20c, 0x40000, 0x2, 0x2d6}, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r3 = socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x22) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 10.090000377s ago: executing program 0 (id=2381): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030073797a31000000000c0002400000000000000001140000001100010000000000000000000000000a5f395bf7bd1997877bbed6d8ac4a3081b245401ad0792254109326e70f68ecfe80ea908571e48cd00cd1655d8be280ed16a1c8e074abfeeb8bdf52ee26c6ef64b619d0afd85a9b3cc66128f439a0c8a73007e6b584ccde7a97989dadad9725feb1d800feffce"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000012000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x56, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x0}) r1 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="07cfc2e1c60de0"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 9.67793672s ago: executing program 1 (id=2382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000e00), &(0x7f0000000080)=ANY=[@ANYBLOB="00fb170156df02e9635b3012e6bb58af9d6b6022f208262b5bbe9a3ffaac7369d8a7cf6411cd"], 0x17, 0x1) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x10000001}], 0x1, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) syz_open_dev$video(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='.F\xba:\x00', 0x0) 7.842892927s ago: executing program 1 (id=2385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000004600)=[{{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000001840)=[{&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/219, 0xdb}, {&(0x7f00000015c0)=""/239, 0xef}, {&(0x7f00000016c0)=""/61, 0x3d}, {&(0x7f0000001700)=""/149, 0x95}, {&(0x7f00000017c0)=""/67, 0x43}], 0x7, &(0x7f00000018c0)=""/120, 0x78}, 0x7}, {{&(0x7f0000001940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)=[{&(0x7f00000019c0)=""/163, 0xa3}, {&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000001b00)=""/109, 0x6d}, {&(0x7f0000001b80)=""/201, 0xc9}, {&(0x7f0000001c80)=""/98, 0x62}, {&(0x7f0000001d00)=""/254, 0xfe}, {&(0x7f0000001e00)=""/177, 0xb1}, {&(0x7f0000001ec0)=""/145, 0x91}], 0x8, &(0x7f0000002000)=""/85, 0x55}, 0x7}, {{&(0x7f0000002080)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002100)=""/132, 0x84}, {&(0x7f00000021c0)=""/48, 0x30}, {&(0x7f0000002200)=""/246, 0xf6}, {&(0x7f0000002300)=""/193, 0xc1}], 0x4, &(0x7f0000002440)=""/93, 0x5d}, 0x5}, {{&(0x7f00000024c0), 0x80, &(0x7f0000002840)=[{&(0x7f0000002540)=""/193, 0xc1}, {&(0x7f0000002640)=""/86, 0x56}, {&(0x7f00000026c0)=""/255, 0xff}, {&(0x7f00000027c0)=""/80, 0x50}], 0x4, &(0x7f0000002880)=""/253, 0xfd}, 0xf7b70}, {{&(0x7f0000002980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002a00)=""/187, 0xbb}], 0x1, &(0x7f0000002b00)=""/141, 0x8d}, 0xcd25}, {{&(0x7f0000002bc0)=@alg, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002c40)=""/209, 0xd1}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/201, 0xc9}], 0x3, &(0x7f0000003e80)=""/51, 0x33}, 0x40}, {{&(0x7f0000003ec0)=@qipcrtr, 0x80, &(0x7f0000004500)=[{&(0x7f0000003f40)=""/195, 0xc3}, {&(0x7f0000004040)=""/193, 0xc1}, {&(0x7f0000004140)=""/10, 0xa}, {&(0x7f0000004180)=""/212, 0xd4}, {&(0x7f0000004280)=""/122, 0x7a}, {&(0x7f0000004300)=""/37, 0x25}, {&(0x7f0000004340)=""/66, 0x42}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/191, 0xbf}], 0x9, &(0x7f00000045c0)=""/48, 0x30}, 0x1ff}], 0x7, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x2, &(0x7f0000000280)) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080000008435001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20000907803ff"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000200)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000140)=[{{0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1}, {0x1, 0x1, 0x1}}, {{0x1}, {0x1, 0x1}}], 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0xf, 0x85a465202fddd452}, {0x3, 0xfff3}}}, 0x24}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 6.997329604s ago: executing program 0 (id=2386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01010000000000000000020000000c00024000000000000000010900010073797a3000000000140000001100010000000000000000000200000a8331c5cce6fa2c7e4049e5402729846dca6bb400a88f60d4abbc87177f4f6c94d326fed8d79963d317e277ed15e81b9ad9e3ee1fe9bf"], 0x54}}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc0100001800110100000000000000000a001000fd040006000000000c001680060006000008000093000880f0ed8d2f299e3b8b9ed89eed74cf7015eb5b8f25d65a1bce0da80ea3a57f58ed386eb8449c5bb40e13a26b7409a46b97bf55602cd36a29322d529783348b7636e1f33a272faa1ffae03ddb6ff0253a3f5582f9dbf50a256d91bd99f8d82feb4c4204b6443eeb152a7e041e81dd67fd94c0d99287c190e8737cfbd53aed05b53007ee1e0580b84ab75f8584f641be2b000800060006"], 0x1bc}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f00000003c0)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.890163101s ago: executing program 5 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044800) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x8, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x5, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x9a, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x7, 0xfffffffe, 0x2, 0x9, 0x6124, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0x3, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff7, 0x0, 0x1, 0xd6f, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0xfffdffff, 0xfffffffd, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x0, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x7, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x964, 0x5, 0x8, 0x101, 0x6, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x200, 0xfff, 0x100, 0xc, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x5, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0x3, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x8, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x8, 0x5, 0x6, 0x2, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0x7ff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x101, 0xfffff466, 0x0, 0xfffffffd, 0x8, 0x8, 0x6, 0x27, 0xe5f, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x4, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbffddbdf250000000000000000000000000000000000000000000000000000ffffe0000002000103944e230005000000003a000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb0000000000000000000000000000000000000000ffff000000000000060000000000000056000000000000001c25080000000000020040000000000000040000000000000000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 5.568700924s ago: executing program 0 (id=2388): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360cd520cb701", 0x46}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee2", 0xba}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000600)=""/251, 0xfb}, {&(0x7f0000000700)=""/15, 0xf}], 0x4}, 0x0) 5.530700019s ago: executing program 1 (id=2389): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000002300)={0x0, 0x0, @ioapic={0x0, 0x5, 0x2788, 0x1000, 0x0, [{0x7d, 0x5e, 0x38, '\x00', 0x5}, {0x7, 0x84, 0xb, '\x00', 0x3}, {0x2, 0x0, 0x6, '\x00', 0x6}, {0xf8, 0x9, 0x3, '\x00', 0x9}, {0xa, 0x2, 0x8, '\x00', 0xc0}, {0x8, 0x5, 0x4, '\x00', 0xf}, {0x2, 0x8, 0xe, '\x00', 0xb}, {0xc0, 0xff, 0x3}, {0xc5, 0x2, 0x9, '\x00', 0xf}, {0x9, 0x7f}, {0x9, 0x7, 0x2, '\x00', 0x8}, {0x54, 0xfb, 0xf8, '\x00', 0x2}, {0x6, 0x7, 0x3, '\x00', 0x8}, {0x6, 0x3, 0xf9, '\x00', 0x22}, {0x15, 0x9, 0x6, '\x00', 0xc}, {0xb8, 0x1, 0x43, '\x00', 0x5}, {0x3, 0x0, 0x9, '\x00', 0x4}, {0x81, 0xa6, 0x8, '\x00', 0xf2}, {0x1, 0x3, 0x3, '\x00', 0x7}, {0x2, 0x7, 0x6, '\x00', 0x6}, {0x9, 0x0, 0x6, '\x00', 0x3}, {0x40, 0x40, 0xd3}, {0x9, 0x8, 0x4, '\x00', 0x6}, {0x3b, 0x20, 0x91, '\x00', 0x3}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14040000ffb900000003"], 0x14}, 0x1, 0x0, 0x0, 0x2000044}, 0x20008000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990906, 0x40009c, '\x00', @value64=0xfff}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r6, 0x0, 0x0, 0x200000c0, &(0x7f00000001c0)={0xa, 0x2, 0x8001, @loopback, 0x8}, 0x1c) shutdown(r6, 0x1) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003780)={0x1, [{0x0, 0x0, 0x1000000, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x40, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x97, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0xffffffc0, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x2, 0x0, 0x561, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x95b, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x3, 0x160, 0xfeda80c, &(0x7f0000002780)="45d689bf2c979625e5e087d440df0b24add9a1ee834cc54dfe962d5e8c1adcb9569314f3b3d1b195dc208480"}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x13000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009d, 0x0, 0x81}]}) 5.529939372s ago: executing program 5 (id=2390): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f000040a000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20c, 0x40000, 0x2, 0x2d6}, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r3 = socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x22) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, 0x0) 5.306341906s ago: executing program 0 (id=2391): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x100000000000002, 0x1, 0xe8, 0x10004, 0x7, 0x1}, 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x250f6607, 0xffffffffffff0001, 0xd, 0x1136f858, 0xffffffffffffffff, 0x206}, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000280)={0x14}, 0x14) 4.249024146s ago: executing program 5 (id=2392): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/217, &(0x7f0000000280)=0xd9) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x2000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='=\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',\x00']) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001500add427323b470c45b40400067fffffff81004e22030200ff0028925aa8002000eaa57b000900", 0x2c}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x5c}, {0xfffffffffffffff8, 0x400000000001, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0xfffffffc, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 3.808486901s ago: executing program 0 (id=2393): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f00000018c0)={0xc9, 0x0, 0xc}) r1 = socket(0x2d, 0x80805, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0x1, [0x6a6, 0x1, 0x7, 0xfffffff9, 0x81, 0x6, 0x8, 0x10000, 0x3, 0x9, 0x9, 0x3, 0x7, 0x0, 0xdee1, 0xfff, 0x10001, 0x5, 0x8001, 0x9, 0x4, 0xf9a, 0x1, 0x6, 0x8001, 0x1, 0x8, 0x4, 0xb, 0x2, 0x9, 0x1, 0x6, 0x8, 0x0, 0x4, 0x9, 0x9b, 0x0, 0x3, 0x9, 0xfffffffe, 0x1, 0x4, 0x40, 0x40, 0xfffffff7, 0x3, 0x8, 0x2, 0x7, 0x8, 0xfff, 0x10, 0x4e, 0x7, 0x5, 0x80, 0x7, 0xffff, 0x7, 0x7f, 0x400, 0x80000001, 0xdb, 0x6, 0x8, 0x2, 0x0, 0x1, 0x5, 0x4, 0x9, 0x6, 0xfffffc01, 0x9, 0x8, 0x0, 0x4, 0xa21, 0x6, 0x3, 0x7f, 0x0, 0x200, 0x40, 0x0, 0xe, 0x1, 0x7, 0x8, 0x200, 0x8, 0x0, 0x8, 0x9, 0x4c96, 0x480000, 0x4a5a000, 0x0, 0x40, 0x4, 0x4, 0xfffffffa, 0x7, 0x400, 0x7, 0x2, 0x400, 0x8, 0xf3, 0x6f1f, 0x2, 0xa, 0xde7c, 0x401, 0x9, 0x3, 0x40, 0x7, 0xeba6, 0x4, 0x4, 0x0, 0x10, 0x2, 0x2], "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"}}) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r5, 0x80, 0x5}, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYBLOB="e6b777a48c606ade9c83af04ba2932"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000001940)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r3, @ANYRES8=r4, @ANYRESOCT=r0, @ANYBLOB="27293b3508c224e4d699cfd9e66159ff9ce57cb74d9a59071747b1f2f502134a39255c8d9dbabcf2f5d1deb14bf4f6c6be4df816477c2c49d37f5cfaec2dd9bc3473e90ea652a9d6627d2dee6ddc5ad91620cc6cc788dac0517d81eaf6aee775a6412db50fe9ef7fcdecb8a2a873ed2464a18ce80742d5df9859a34ee5e77445514febcfdf40e974514249d58c5f5ecb6100a97fe8a9364edb6ee505", @ANYRES16=r6, @ANYRES64=r2, @ANYRES32=r4, @ANYRESHEX=r5], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000140)=""/37, 0x2025000, 0x3000, 0xfffffffa, 0x3}, 0x20) r9 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/242, 0xf2}], 0x1}, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x9, 0x5}}, 0x30) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r12, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) 1.687970785s ago: executing program 5 (id=2394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0, 0x6000}, 0xc) 1.649802776s ago: executing program 1 (id=2395): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030073797a31000000000c0002400000000000000001140000001100010000000000000000000000000a5f395bf7bd1997877bbed6d8ac4a3081b245401ad0792254109326e70f68ecfe80ea908571e48cd00cd1655d8be280ed16a1c8e074abfeeb8bdf52ee26c6ef64b619d0afd85a9b3cc66128f439a0c8a73007e6b584ccde7a97989dadad9725feb1d800feffce"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000012000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x56, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x0}) r1 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="07cfc2e1c60de0"], 0x0) 1.344938656s ago: executing program 5 (id=2396): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f00000007c0)={0x0, 0x45, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newsa={0x19c, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0xa0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@policy={0xac, 0x7, {{@in6=@private2, @in6=@remote, 0x4e24, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x67}, {0x3, 0x4a, 0x7194, 0xc61f, 0x3, 0x975, 0x8, 0x82df}, {0x7fffffff, 0xfffffffffffffffb, 0x5, 0x9}, 0x101, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r9 = fanotify_init(0x1a, 0x101000) fanotify_mark(r9, 0x401, 0x8000028, r8, 0x0) fanotify_mark(r9, 0x200, 0x20, r8, &(0x7f0000000000)='./file0\x00') 161.413176ms ago: executing program 5 (id=2397): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) tkill(r1, 0x3a) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) syz_pidfd_open(r1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xb4000f20) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00') lseek(r2, 0x2000, 0x0) rmdir(0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (fail_nth: 8) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) ppoll(&(0x7f0000000040)=[{r3, 0x1002}], 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {r6, r7+10000000}}, 0x0) 0s ago: executing program 1 (id=2398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044800) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x8, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x5, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x9a, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x7, 0xfffffffe, 0x2, 0x9, 0x6124, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0x3, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff7, 0x0, 0x1, 0xd6f, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0xfffdffff, 0xfffffffd, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x0, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x7, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x964, 0x5, 0x8, 0x101, 0x6, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x200, 0xfff, 0x100, 0xc, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x5, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0x3, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x8, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x8, 0x5, 0x6, 0x2, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0x7ff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x101, 0xfffff466, 0x0, 0xfffffffd, 0x8, 0x8, 0x6, 0x27, 0xe5f, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x4, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbffddbdf250000000000000000000000000000000000000000000000000000ffffe0000002000103944e230005000000003a000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb0000000000000000000000000000000000000000ffff000000000000060000000000000056000000000000001c25080000000000020040000000000000040000000000000000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) kernel console output (not intermixed with test programs): 2: 0000000000000001 [ 590.503111][T12127] R13: 00007fa7ab596038 R14: 00007fa7ab595fa0 R15: 00007ffe49258408 [ 590.503147][T12127] [ 590.901249][T11975] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 590.980819][T12130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.039311][T11975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 591.044240][T11975] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 591.371205][T12128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.397952][T11975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 591.399921][T11975] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 592.280083][T11975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.282682][T11975] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 592.380105][T11975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 592.467193][ T5606] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 592.908109][T12152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1989'. [ 593.072734][T11975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.257897][T11975] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.432995][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.433190][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.530381][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.530649][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.184497][ T5722] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 594.338331][ T5722] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 594.338402][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.339882][ T5722] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 594.339914][ T5722] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 594.339937][ T5722] usb 2-1: Manufacturer: syz [ 594.397587][ T5722] usb 2-1: config 0 descriptor?? [ 594.446900][ T821] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 594.528169][ T5722] rc_core: IR keymap rc-hauppauge not found [ 594.528193][ T5722] Registered IR keymap rc-empty [ 594.530029][ T5722] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 594.563327][ T5722] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 594.604467][ T821] usb 6-1: Invalid ep0 maxpacket: 64 [ 594.784964][ T821] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 594.937708][ T821] usb 6-1: Invalid ep0 maxpacket: 64 [ 594.938643][ T821] usb usb6-port1: attempt power cycle [ 594.976655][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 594.976884][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 594.976938][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 595.030013][ T5785] usb 2-1: USB disconnect, device number 62 [ 595.276210][ T821] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 595.310168][ T821] usb 6-1: Invalid ep0 maxpacket: 64 [ 595.444481][ T821] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 595.468183][ T821] usb 6-1: Invalid ep0 maxpacket: 64 [ 595.470965][ T821] usb usb6-port1: unable to enumerate USB device [ 595.851579][T11977] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 595.907013][T11977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 595.911206][T11977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 595.917465][T11977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 595.924554][T11977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.484220][T11975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.128723][ T5606] Bluetooth: hci0: command tx timeout [ 599.304992][ T8442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.495957][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2006'. [ 600.551950][ T5606] Bluetooth: hci0: command tx timeout [ 600.844833][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 601.014643][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 601.017097][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.017137][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.028432][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.028528][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.028583][ T9] usb 1-1: Product: syz [ 601.028626][ T9] usb 1-1: Manufacturer: syz [ 601.028667][ T9] usb 1-1: SerialNumber: syz [ 601.157335][ T9] usb 1-1: 0:2 : does not exist [ 602.622738][ T5606] Bluetooth: hci0: command tx timeout [ 603.054842][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 603.146843][T12260] 9p: Bad value for 'rfdno' [ 603.318465][ T9] usb 1-1: USB disconnect, device number 47 [ 603.585864][ T5706] udevd[5706]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.896931][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 604.448086][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 604.448151][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.479850][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 604.479889][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 604.479911][ T9] usb 1-1: Manufacturer: syz [ 604.517719][ T9] usb 1-1: config 0 descriptor?? [ 604.532300][ T8442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.686259][ T5606] Bluetooth: hci0: command tx timeout [ 604.908096][ T9] rc_core: IR keymap rc-hauppauge not found [ 604.908118][ T9] Registered IR keymap rc-empty [ 604.928898][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 604.965282][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 605.290881][ T821] usb 1-1: USB disconnect, device number 48 [ 605.890745][ T8442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.189220][T11975] veth0_vlan: entered promiscuous mode [ 608.936616][ T8442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.250997][T11975] veth1_vlan: entered promiscuous mode [ 609.404053][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 609.564543][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 609.567754][ T9] usb 1-1: config 1 has an invalid interface number: 91 but max is 0 [ 609.567800][ T9] usb 1-1: config 1 has no interface number 0 [ 609.567840][ T9] usb 1-1: config 1 interface 91 has no altsetting 0 [ 609.574124][ T9] usb 1-1: New USB device found, idVendor=0e55, idProduct=110b, bcdDevice=b2.e4 [ 609.574178][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.574213][ T9] usb 1-1: Product: syz [ 609.574234][ T9] usb 1-1: Manufacturer: syz [ 609.574255][ T9] usb 1-1: SerialNumber: syz [ 609.884587][ T5715] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 609.983831][T11975] veth0_macvtap: entered promiscuous mode [ 610.065330][T11975] veth1_macvtap: entered promiscuous mode [ 610.150908][T12311] macsec0: entered allmulticast mode [ 610.164071][ T5715] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 610.164134][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.191561][ T5715] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 610.191594][ T5715] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 610.191623][ T5715] usb 6-1: Manufacturer: syz [ 610.200849][ T5715] usb 6-1: config 0 descriptor?? [ 610.263117][T12317] veth1_macvtap: entered allmulticast mode [ 610.296696][T12317] macsec0: left allmulticast mode [ 610.296724][T12317] veth1_macvtap: left allmulticast mode [ 610.332788][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 610.447397][ T5715] rc_core: IR keymap rc-hauppauge not found [ 610.447415][ T5715] Registered IR keymap rc-empty [ 610.449058][ T5715] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 610.457916][ T5715] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40 [ 610.981389][ T9] rndis_host 1-1:1.91: More than one union descriptor, skipping ... [ 610.981416][ T9] rndis_host 1-1:1.91: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 610.989651][ T9] pl2303 1-1:1.91: required endpoints missing [ 611.041260][ T9] usb 1-1: USB disconnect, device number 49 [ 611.105630][ T5714] usb 6-1: USB disconnect, device number 27 [ 611.673684][T12330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2033'. [ 612.101933][ T37] audit: type=1326 audit(1783162427.206:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.0.2038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f516b2ede59 code=0x0 [ 612.235575][T11975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.600592][T12190] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.602302][T12190] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.602585][T12190] bridge_slave_0: entered allmulticast mode [ 612.635943][T12190] bridge_slave_0: entered promiscuous mode [ 612.641854][T12345] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2037'. [ 612.646998][T11975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.673009][T12190] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.673323][T12190] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.681711][T12190] bridge_slave_1: entered allmulticast mode [ 612.699215][T12190] bridge_slave_1: entered promiscuous mode [ 613.349006][T12354] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2041'. [ 613.392849][ T8442] bridge_slave_1: left allmulticast mode [ 613.392888][ T8442] bridge_slave_1: left promiscuous mode [ 613.393155][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.857354][ T5715] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 613.976877][T12364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2044'. [ 614.213258][ T5715] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 614.213314][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.218470][ T5715] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 614.218503][ T5715] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 614.218524][ T5715] usb 6-1: Manufacturer: syz [ 614.228347][ T5715] usb 6-1: config 0 descriptor?? [ 617.811046][ T5715] rc_core: IR keymap rc-hauppauge not found [ 617.888475][ T5715] Registered IR keymap rc-empty [ 618.231078][ T5715] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 618.275829][ T5715] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 618.331329][ T5715] usb 6-1: USB disconnect, device number 28 [ 618.945129][ T11] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 619.097290][ T11] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 619.097323][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.161246][ T11] usb 2-1: config 0 descriptor?? [ 619.182474][ T11] cp210x 2-1:0.0: cp210x converter detected [ 619.823310][ T11] usb 2-1: cp210x converter now attached to ttyUSB0 [ 620.094506][ T11] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 620.248273][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 620.261965][ T11] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 620.262003][ T11] usb 6-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 620.262025][ T11] usb 6-1: Product: syz [ 620.262036][ T11] usb 6-1: Manufacturer: syz [ 620.262047][ T11] usb 6-1: SerialNumber: syz [ 620.297807][ T11] usb 6-1: config 0 descriptor?? [ 620.303177][ T11] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 620.320236][ T5714] usb 2-1: USB disconnect, device number 63 [ 620.358299][ T5714] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 620.513704][ T11] usb 6-1: USB disconnect, device number 29 [ 620.647622][ T5714] cp210x 2-1:0.0: device disconnected [ 620.722191][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.745145][ T8442] bond_slave_0: left promiscuous mode [ 620.745329][ T8442] bond_slave_0: left allmulticast mode [ 620.775495][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.815629][ T8442] bond_slave_1: left promiscuous mode [ 620.815780][ T8442] bond_slave_1: left allmulticast mode [ 620.821961][ T8442] bond0 (unregistering): Released all slaves [ 620.879389][ T5864] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.907941][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.029316][T12368] ip6gretap0: entered promiscuous mode [ 621.029586][ T5864] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.123874][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.124274][ T5864] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.738437][T12396] NILFS (nullb0): couldn't find nilfs on the device [ 621.840438][ T5864] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.122369][ T6000] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 622.271762][ T6000] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 622.271825][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.296629][ T6000] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 622.296669][ T6000] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 622.296696][ T6000] usb 2-1: Manufacturer: syz [ 622.437486][ T6000] usb 2-1: config 0 descriptor?? [ 622.744414][ T6000] rc_core: IR keymap rc-hauppauge not found [ 622.744436][ T6000] Registered IR keymap rc-empty [ 622.746286][ T6000] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 622.780330][ T6000] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 622.807536][T12190] team0: Port device team_slave_0 added [ 623.222352][ T6000] usb 2-1: USB disconnect, device number 64 [ 624.358908][T12190] team0: Port device team_slave_1 added [ 624.371877][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.371950][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.714253][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 625.264661][T12425] hsr_slave_0: left promiscuous mode [ 626.245952][T12425] hsr_slave_1: left promiscuous mode [ 626.595382][T12190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.595402][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.595432][T12190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.267823][T12454] FAULT_INJECTION: forcing a failure. [ 627.267823][T12454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 627.267891][T12454] CPU: 1 UID: 0 PID: 12454 Comm: syz.5.2067 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 627.267923][T12454] Tainted: [L]=SOFTLOCKUP [ 627.267932][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 627.267947][T12454] Call Trace: [ 627.267957][T12454] [ 627.267967][T12454] dump_stack_lvl+0xe8/0x150 [ 627.268010][T12454] should_fail_ex+0x467/0x600 [ 627.268049][T12454] prepare_alloc_pages+0x223/0x690 [ 627.268083][T12454] __alloc_frozen_pages_noprof+0x12f/0x380 [ 627.268115][T12454] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 627.268149][T12454] ? __pfx_policy_nodemask+0x10/0x10 [ 627.268187][T12454] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 627.268227][T12454] alloc_pages_mpol+0xce/0x280 [ 627.268265][T12454] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 627.268297][T12454] vma_alloc_folio_noprof+0xe1/0x1e0 [ 627.268329][T12454] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 627.268355][T12454] ? up_write+0x5a/0x190 [ 627.268392][T12454] ? __anon_vma_prepare+0x416/0x4e0 [ 627.268421][T12454] do_pte_missing+0x567/0x28f0 [ 627.268455][T12454] ? handle_mm_fault+0x1f0/0x13f0 [ 627.268499][T12454] handle_mm_fault+0xd28/0x13f0 [ 627.268536][T12454] ? lockdep_hardirqs_on+0x7a/0x110 [ 627.268575][T12454] ? handle_mm_fault+0xe8/0x13f0 [ 627.268615][T12454] ? __pfx_handle_mm_fault+0x10/0x10 [ 627.268679][T12454] __get_user_pages+0x166b/0x2590 [ 627.268749][T12454] populate_vma_page_range+0x2be/0x3c0 [ 627.268787][T12454] ? __pfx_populate_vma_page_range+0x10/0x10 [ 627.268821][T12454] ? userfaultfd_unmap_complete+0x28d/0x310 [ 627.268852][T12454] ? userfaultfd_unmap_complete+0x292/0x310 [ 627.268881][T12454] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 627.268922][T12454] __mm_populate+0x25f/0x390 [ 627.268958][T12454] ? __pfx___mm_populate+0x10/0x10 [ 627.268990][T12454] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 627.269024][T12454] ? lockdep_hardirqs_on+0x7a/0x110 [ 627.269055][T12454] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 627.269089][T12454] ? up_write+0x5a/0x190 [ 627.269123][T12454] vm_mmap_pgoff+0x356/0x4e0 [ 627.269168][T12454] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 627.269209][T12454] ? __fget_files+0x2a/0x420 [ 627.269232][T12454] ? __fget_files+0x3a8/0x420 [ 627.269254][T12454] ? __fget_files+0x2a/0x420 [ 627.269281][T12454] ksys_mmap_pgoff+0x4a6/0x720 [ 627.269317][T12454] ? __x64_sys_mmap+0x7f/0x140 [ 627.269355][T12454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.269387][T12454] do_syscall_64+0x174/0x580 [ 627.269421][T12454] ? clear_bhb_loop+0x40/0x90 [ 627.269450][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.269475][T12454] RIP: 0033:0x7f03c1c4de59 [ 627.269497][T12454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.269518][T12454] RSP: 002b:00007f03bfe64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 627.269544][T12454] RAX: ffffffffffffffda RBX: 00007f03c1ed6180 RCX: 00007f03c1c4de59 [ 627.269561][T12454] RDX: 000000000000000b RSI: 0000000000400000 RDI: 0000200000200000 [ 627.269577][T12454] RBP: 00007f03bfe64090 R08: 0000000000000007 R09: 0000000000000000 [ 627.269593][T12454] R10: 0000000000002012 R11: 0000000000000246 R12: 0000000000000002 [ 627.269608][T12454] R13: 00007f03c1ed6218 R14: 00007f03c1ed6180 R15: 00007ffeecd8b8a8 [ 627.269646][T12454] [ 628.135304][T12463] tmpfs: Bad value for 'mpol' [ 628.281414][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 628.304641][T12190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.304662][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.304688][T12190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.478563][T12460] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2070'. [ 629.016176][ T5714] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 629.135391][ T8442] hsr_slave_0: left promiscuous mode [ 629.160300][ T5714] usb 2-1: device descriptor read/64, error -71 [ 629.414437][ T5714] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 629.554509][ T5714] usb 2-1: device descriptor read/64, error -71 [ 629.684502][ T8442] hsr_slave_1: left promiscuous mode [ 629.685620][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.685647][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.719901][ T5714] usb usb2-port1: attempt power cycle [ 630.010138][ T8442] veth1_macvtap: left promiscuous mode [ 630.010253][ T8442] veth0_macvtap: left promiscuous mode [ 630.010535][ T8442] veth1_vlan: left promiscuous mode [ 630.010736][ T8442] veth0_vlan: left promiscuous mode [ 630.054527][ T5714] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 630.077275][ T5714] usb 2-1: device descriptor read/8, error -71 [ 630.316817][ T5714] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 630.578258][ T5714] usb 2-1: device descriptor read/8, error -71 [ 631.041312][T12491] fuse: fd is not a fuse device [ 631.266915][ T5714] usb usb2-port1: unable to enumerate USB device [ 634.153695][ T7958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.153718][ T7958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.368021][T12517] FAULT_INJECTION: forcing a failure. [ 635.368021][T12517] name failslab, interval 1, probability 0, space 0, times 0 [ 635.403426][T12517] CPU: 0 UID: 0 PID: 12517 Comm: syz.5.2089 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 635.403458][T12517] Tainted: [L]=SOFTLOCKUP [ 635.403465][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.403476][T12517] Call Trace: [ 635.403484][T12517] [ 635.403492][T12517] dump_stack_lvl+0xe8/0x150 [ 635.403528][T12517] should_fail_ex+0x467/0x600 [ 635.403558][T12517] should_failslab+0xa8/0x100 [ 635.403580][T12517] __kmalloc_cache_noprof+0xa0/0x6b0 [ 635.403599][T12517] ? cttimeout_new_timeout+0x26a/0x910 [ 635.403702][T12517] ? cttimeout_new_timeout+0x26a/0x910 [ 635.403733][T12517] cttimeout_new_timeout+0x26a/0x910 [ 635.403777][T12517] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 635.403805][T12517] ? unwind_get_return_address+0x4d/0x90 [ 635.403825][T12517] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 635.403865][T12517] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 635.403927][T12517] netlink_rcv_skb+0x226/0x4a0 [ 635.403945][T12517] ? __lock_acquire+0x683/0x2ce0 [ 635.403963][T12517] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 635.403991][T12517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.404017][T12517] ? bpf_lsm_capable+0x9/0x20 [ 635.404040][T12517] ? security_capable+0x7e/0x2c0 [ 635.404067][T12517] nfnetlink_rcv+0x2b9/0x28d0 [ 635.404091][T12517] ? __local_bh_enable+0x1e1/0x2f0 [ 635.404117][T12517] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 635.404137][T12517] ? lockdep_hardirqs_on+0x7a/0x110 [ 635.404162][T12517] ? __dev_queue_xmit+0x291/0x3890 [ 635.404185][T12517] ? __dev_queue_xmit+0x1f31/0x3890 [ 635.404211][T12517] ? __dev_queue_xmit+0x291/0x3890 [ 635.404231][T12517] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 635.404263][T12517] ? __pfx___dev_queue_xmit+0x10/0x10 [ 635.404291][T12517] ? ref_tracker_free+0x668/0x820 [ 635.404322][T12517] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.404348][T12517] ? __asan_memcpy+0x40/0x70 [ 635.404375][T12517] ? __skb_clone+0x5c/0x6c0 [ 635.404396][T12517] ? __skb_clone+0x449/0x6c0 [ 635.404417][T12517] ? skb_clone+0x246/0x3a0 [ 635.404436][T12517] ? __netlink_deliver_tap+0x811/0x860 [ 635.404453][T12517] ? netlink_deliver_tap+0x2e/0x1b0 [ 635.404475][T12517] ? netlink_deliver_tap+0x2e/0x1b0 [ 635.404490][T12517] ? netlink_deliver_tap+0x2e/0x1b0 [ 635.404511][T12517] netlink_unicast+0x7f5/0x990 [ 635.404546][T12517] netlink_sendmsg+0x813/0xb40 [ 635.404573][T12517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.404592][T12517] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 635.404618][T12517] ? __kernel_text_address+0xd/0x30 [ 635.404635][T12517] ? unwind_get_return_address+0x4d/0x90 [ 635.404656][T12517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.404672][T12517] sock_sendmsg_nosec+0x13a/0x180 [ 635.404698][T12517] ____sys_sendmsg+0x565/0x870 [ 635.404716][T12517] ? __might_fault+0xaf/0x130 [ 635.404738][T12517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.404774][T12517] ? import_iovec+0x73/0xa0 [ 635.404796][T12517] ___sys_sendmsg+0x2a5/0x360 [ 635.404812][T12517] ? __lock_acquire+0x683/0x2ce0 [ 635.404833][T12517] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.404878][T12517] ? __fget_files+0x2a/0x420 [ 635.404894][T12517] ? __fget_files+0x3a8/0x420 [ 635.404918][T12517] __x64_sys_sendmsg+0x1b7/0x290 [ 635.404953][T12517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.404986][T12517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.405005][T12517] do_syscall_64+0x174/0x580 [ 635.405030][T12517] ? trace_irq_disable+0x3b/0x140 [ 635.405047][T12517] ? clear_bhb_loop+0x40/0x90 [ 635.405068][T12517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.405086][T12517] RIP: 0033:0x7f03c1c4de59 [ 635.405104][T12517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.405120][T12517] RSP: 002b:00007f03bfea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.405140][T12517] RAX: ffffffffffffffda RBX: 00007f03c1ed5fa0 RCX: 00007f03c1c4de59 [ 635.405152][T12517] RDX: 0000000000000008 RSI: 0000200000000200 RDI: 0000000000000003 [ 635.405163][T12517] RBP: 00007f03bfea6090 R08: 0000000000000000 R09: 0000000000000000 [ 635.405173][T12517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.405184][T12517] R13: 00007f03c1ed6038 R14: 00007f03c1ed5fa0 R15: 00007ffeecd8b8a8 [ 635.405213][T12517] [ 636.089830][T12190] hsr_slave_0: entered promiscuous mode [ 636.091839][T12190] hsr_slave_1: entered promiscuous mode [ 636.092993][T12190] debugfs: 'hsr0' already exists in 'hsr' [ 636.093022][T12190] Cannot create hsr debugfs directory [ 636.372662][T11977] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 636.439494][T11977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 636.462692][T11977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 636.464102][T11977] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 636.634645][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2092'. [ 636.634724][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2092'. [ 637.381055][T12532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 637.592914][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2092'. [ 637.592944][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2092'. [ 637.613099][ T31] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 637.801514][ T31] usb 6-1: device descriptor read/64, error -71 [ 638.034577][ T31] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 638.215917][ T31] usb 6-1: device descriptor read/64, error -71 [ 638.343996][ T31] usb usb6-port1: attempt power cycle [ 638.764786][ T5614] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 638.773990][ T31] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 638.795988][ T31] usb 6-1: device descriptor read/8, error -71 [ 639.035037][ T31] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 639.207532][ T31] usb 6-1: device descriptor read/8, error -71 [ 639.256396][ T5614] usb 2-1: device not accepting address 69, error -71 [ 639.320326][ T31] usb usb6-port1: unable to enumerate USB device [ 639.587603][ T5606] Bluetooth: hci4: command tx timeout [ 641.654796][ T5606] Bluetooth: hci4: command tx timeout [ 642.646817][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 643.965439][ T5606] Bluetooth: hci4: command tx timeout [ 644.481399][T12619] netlink: 'syz.1.2108': attribute type 7 has an invalid length. [ 646.337370][ T5606] Bluetooth: hci4: command tx timeout [ 646.469570][T12626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.865660][ T8442] IPVS: stop unused estimator thread 0... [ 646.884600][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 646.915173][T12641] FAULT_INJECTION: forcing a failure. [ 646.915173][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 646.915216][T12641] CPU: 1 UID: 0 PID: 12641 Comm: syz.1.2114 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 646.915247][T12641] Tainted: [L]=SOFTLOCKUP [ 646.915256][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 646.915271][T12641] Call Trace: [ 646.915280][T12641] [ 646.915293][T12641] dump_stack_lvl+0xe8/0x150 [ 646.915337][T12641] should_fail_ex+0x467/0x600 [ 646.915376][T12641] should_failslab+0xa8/0x100 [ 646.915403][T12641] kmem_cache_alloc_noprof+0xa4/0x650 [ 646.915439][T12641] ? mas_alloc_nodes+0x291/0x350 [ 646.915470][T12641] ? mas_alloc_nodes+0x291/0x350 [ 646.915507][T12641] mas_alloc_nodes+0x291/0x350 [ 646.915544][T12641] mas_preallocate+0x2cf/0x630 [ 646.915583][T12641] ? __pfx_mas_preallocate+0x10/0x10 [ 646.915635][T12641] ? anon_vma_name+0x61/0x210 [ 646.915663][T12641] ? __mas_set_range+0x11a/0x3a0 [ 646.915702][T12641] __split_vma+0x33d/0xa40 [ 646.915738][T12641] ? mas_next_slot+0xc94/0xd70 [ 646.915772][T12641] ? __pfx___split_vma+0x10/0x10 [ 646.915813][T12641] ? mas_find+0xab1/0xcf0 [ 646.915850][T12641] vms_gather_munmap_vmas+0x4e3/0x1370 [ 646.915900][T12641] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 646.915940][T12641] ? mas_find+0xa23/0xcf0 [ 646.915978][T12641] mmap_region+0x914/0x2310 [ 646.916025][T12641] ? __lock_acquire+0x683/0x2ce0 [ 646.916048][T12641] ? __pfx_mmap_region+0x10/0x10 [ 646.916079][T12641] ? __lock_acquire+0x683/0x2ce0 [ 646.916110][T12641] ? __lock_acquire+0x683/0x2ce0 [ 646.916203][T12641] ? __lock_acquire+0x683/0x2ce0 [ 646.916227][T12641] ? __pfx_process_measurement+0x10/0x10 [ 646.916274][T12641] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 646.916321][T12641] ? rcu_is_watching+0x15/0xb0 [ 646.916350][T12641] ? cap_capable+0x123/0x460 [ 646.916384][T12641] ? cap_mmap_addr+0xaf/0x100 [ 646.916407][T12641] ? safesetid_security_capable+0xa9/0x1a0 [ 646.916437][T12641] ? shmem_mapping+0xd/0x50 [ 646.916468][T12641] ? memfd_check_seals_mmap+0xcb/0x210 [ 646.916496][T12641] do_mmap+0xc1e/0x10b0 [ 646.916540][T12641] ? __pfx_do_mmap+0x10/0x10 [ 646.916573][T12641] ? rwbase_write_lock+0x550/0x720 [ 646.916629][T12641] vm_mmap_pgoff+0x275/0x4e0 [ 646.916676][T12641] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 646.916721][T12641] ? __fget_files+0x2a/0x420 [ 646.916742][T12641] ? __fget_files+0x3a8/0x420 [ 646.916763][T12641] ? __fget_files+0x2a/0x420 [ 646.916787][T12641] ksys_mmap_pgoff+0x4a6/0x720 [ 646.916825][T12641] ? __x64_sys_mmap+0x7f/0x140 [ 646.916863][T12641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.916890][T12641] do_syscall_64+0x174/0x580 [ 646.916921][T12641] ? trace_irq_disable+0x3b/0x140 [ 646.916943][T12641] ? clear_bhb_loop+0x40/0x90 [ 646.916973][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.916996][T12641] RIP: 0033:0x7fa7ab30de59 [ 646.917018][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.917037][T12641] RSP: 002b:00007fa7a9566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 646.917062][T12641] RAX: ffffffffffffffda RBX: 00007fa7ab595fa0 RCX: 00007fa7ab30de59 [ 646.917079][T12641] RDX: 00000000027ffffd RSI: 0000000000001000 RDI: 00002000003c3000 [ 646.917093][T12641] RBP: 00007fa7a9566090 R08: 0000000000000003 R09: 0000000000000000 [ 646.917104][T12641] R10: 0000000000006813 R11: 0000000000000246 R12: 0000000000000001 [ 646.917115][T12641] R13: 00007fa7ab596038 R14: 00007fa7ab595fa0 R15: 00007ffe49258408 [ 646.917151][T12641] [ 646.918195][T12190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 647.619267][T12190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.640114][T12190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 647.778468][ T9] kernel read not supported for file /605/schedstat (pid: 9 comm: kworker/0:0) [ 647.862371][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 647.884486][T12190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.899523][T12645] netlink: 'syz.0.2116': attribute type 2 has an invalid length. [ 648.145960][T12190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 648.271619][T12190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.410013][T12190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 648.610044][T12190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.117816][ T8442] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.271037][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 650.631056][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2130'. [ 650.631101][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2130'. [ 650.694522][ T5714] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 650.782628][ T8442] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.824506][ T5714] usb 1-1: device descriptor read/64, error -71 [ 650.882641][T12712] gretap0: entered promiscuous mode [ 650.920653][T12712] gretap0: left promiscuous mode [ 651.064950][ T5714] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 651.194490][ T5714] usb 1-1: device descriptor read/64, error -71 [ 651.305040][ T5714] usb usb1-port1: attempt power cycle [ 651.465146][T12725] FAULT_INJECTION: forcing a failure. [ 651.465146][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 651.465176][T12725] CPU: 0 UID: 0 PID: 12725 Comm: syz.1.2133 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 651.465199][T12725] Tainted: [L]=SOFTLOCKUP [ 651.465205][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 651.465216][T12725] Call Trace: [ 651.465223][T12725] [ 651.465229][T12725] dump_stack_lvl+0xe8/0x150 [ 651.465260][T12725] should_fail_ex+0x467/0x600 [ 651.465288][T12725] should_failslab+0xa8/0x100 [ 651.465309][T12725] __kmalloc_node_noprof+0x107/0x7d0 [ 651.465326][T12725] ? __get_vm_area_node+0x1f2/0x300 [ 651.465349][T12725] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 651.465374][T12725] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 651.465405][T12725] __vmalloc_node_range_noprof+0x5d9/0x1730 [ 651.465436][T12725] ? is_bpf_text_address+0x26/0x2b0 [ 651.465469][T12725] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 651.465496][T12725] ? is_bpf_text_address+0x26/0x2b0 [ 651.465517][T12725] ? kernel_text_address+0xa5/0xe0 [ 651.465537][T12725] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 651.465553][T12725] __vmalloc_noprof+0xd2/0x120 [ 651.465578][T12725] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 651.465597][T12725] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 651.465612][T12725] ? bpf_prog_alloc+0x2a/0x1a0 [ 651.465633][T12725] bpf_prog_alloc+0x3c/0x1a0 [ 651.465651][T12725] bpf_prog_load+0x7f8/0x1c00 [ 651.465677][T12725] ? __pfx_bpf_prog_load+0x10/0x10 [ 651.465708][T12725] ? vfs_write+0x980/0xbb0 [ 651.465728][T12725] __sys_bpf+0xd0d/0xd90 [ 651.465748][T12725] ? vfs_write+0x980/0xbb0 [ 651.465766][T12725] ? __pfx___sys_bpf+0x10/0x10 [ 651.465793][T12725] ? vfs_write+0x980/0xbb0 [ 651.465826][T12725] ? ksys_write+0x202/0x270 [ 651.465847][T12725] ? __pfx_ksys_write+0x10/0x10 [ 651.465870][T12725] __x64_sys_bpf+0xba/0xd0 [ 651.465895][T12725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.465913][T12725] do_syscall_64+0x174/0x580 [ 651.465937][T12725] ? trace_irq_disable+0x3b/0x140 [ 651.465985][T12725] ? clear_bhb_loop+0x40/0x90 [ 651.466017][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.466033][T12725] RIP: 0033:0x7fa7ab30de59 [ 651.466048][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.466062][T12725] RSP: 002b:00007fa7a9566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 651.466079][T12725] RAX: ffffffffffffffda RBX: 00007fa7ab595fa0 RCX: 00007fa7ab30de59 [ 651.466092][T12725] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 651.466102][T12725] RBP: 00007fa7a9566090 R08: 0000000000000000 R09: 0000000000000000 [ 651.466113][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.466122][T12725] R13: 00007fa7ab596038 R14: 00007fa7ab595fa0 R15: 00007ffe49258408 [ 651.466147][T12725] [ 651.466175][T12725] syz.1.2133: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 651.466227][T12725] CPU: 0 UID: 0 PID: 12725 Comm: syz.1.2133 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 651.466249][T12725] Tainted: [L]=SOFTLOCKUP [ 651.466254][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 651.466264][T12725] Call Trace: [ 651.466270][T12725] [ 651.466276][T12725] dump_stack_lvl+0xe8/0x150 [ 651.466301][T12725] warn_alloc+0x24c/0x270 [ 651.466322][T12725] ? __pfx_warn_alloc+0x10/0x10 [ 651.466342][T12725] ? __kmalloc_node_noprof+0x5a2/0x7d0 [ 651.466358][T12725] ? __get_vm_area_node+0x1f2/0x300 [ 651.466381][T12725] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 651.466406][T12725] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 651.466437][T12725] __vmalloc_node_range_noprof+0xa81/0x1730 [ 651.466468][T12725] ? is_bpf_text_address+0x26/0x2b0 [ 651.466499][T12725] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 651.466524][T12725] ? is_bpf_text_address+0x26/0x2b0 [ 651.466544][T12725] ? kernel_text_address+0xa5/0xe0 [ 651.466564][T12725] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 651.466579][T12725] __vmalloc_noprof+0xd2/0x120 [ 651.466604][T12725] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 651.466623][T12725] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 651.466638][T12725] ? bpf_prog_alloc+0x2a/0x1a0 [ 651.466655][T12725] bpf_prog_alloc+0x3c/0x1a0 [ 651.466674][T12725] bpf_prog_load+0x7f8/0x1c00 [ 651.466699][T12725] ? __pfx_bpf_prog_load+0x10/0x10 [ 651.466729][T12725] ? vfs_write+0x980/0xbb0 [ 651.466749][T12725] __sys_bpf+0xd0d/0xd90 [ 651.466769][T12725] ? vfs_write+0x980/0xbb0 [ 651.466787][T12725] ? __pfx___sys_bpf+0x10/0x10 [ 651.466808][T12725] ? vfs_write+0x980/0xbb0 [ 651.466841][T12725] ? ksys_write+0x202/0x270 [ 651.466862][T12725] ? __pfx_ksys_write+0x10/0x10 [ 651.466885][T12725] __x64_sys_bpf+0xba/0xd0 [ 651.466909][T12725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.466926][T12725] do_syscall_64+0x174/0x580 [ 651.466949][T12725] ? trace_irq_disable+0x3b/0x140 [ 651.466964][T12725] ? clear_bhb_loop+0x40/0x90 [ 651.466983][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.467012][T12725] RIP: 0033:0x7fa7ab30de59 [ 651.467025][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.467039][T12725] RSP: 002b:00007fa7a9566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 651.467054][T12725] RAX: ffffffffffffffda RBX: 00007fa7ab595fa0 RCX: 00007fa7ab30de59 [ 651.467066][T12725] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 651.467076][T12725] RBP: 00007fa7a9566090 R08: 0000000000000000 R09: 0000000000000000 [ 651.467086][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.467096][T12725] R13: 00007fa7ab596038 R14: 00007fa7ab595fa0 R15: 00007ffe49258408 [ 651.467120][T12725] [ 651.467126][T12725] Mem-Info: [ 651.467133][T12725] active_anon:197 inactive_anon:6472 isolated_anon:0 [ 651.467133][T12725] active_file:16472 inactive_file:41892 isolated_file:0 [ 651.467133][T12725] unevictable:768 dirty:99 writeback:0 [ 651.467133][T12725] slab_reclaimable:12266 slab_unreclaimable:106174 [ 651.467133][T12725] mapped:30872 shmem:1298 pagetables:3628 [ 651.467133][T12725] sec_pagetables:3 bounce:0 [ 651.467133][T12725] kernel_misc_reclaimable:0 [ 651.467133][T12725] free:1301246 free_pcp:6056 free_cma:0 [ 651.467176][T12725] Node 0 active_anon:788kB inactive_anon:25888kB active_file:65676kB inactive_file:167568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123488kB dirty:392kB writeback:0kB shmem:3656kB kernel_stack:15356kB pagetables:14352kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 651.467215][T12725] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 651.467252][T12725] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.467296][T12725] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 651.467323][T12725] Node 0 DMA32 free:1266712kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:788kB inactive_anon:25888kB active_file:65676kB inactive_file:167568kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2560796kB mlocked:0kB bounce:0kB free_pcp:12080kB local_pcp:3604kB free_cma:0kB [ 651.467370][T12725] lowmem_reserve[]: 0 0 1 1 1 [ 651.467395][T12725] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 651.467439][T12725] lowmem_reserve[]: 0 0 0 0 0 [ 651.467464][T12725] Node 1 Normal free:3922912kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12136kB local_pcp:12092kB free_cma:0kB [ 651.467510][T12725] lowmem_reserve[]: 0 0 0 0 0 [ 651.467535][T12725] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 651.467624][T12725] Node 0 DMA32: 1398*4kB (UME) 1164*8kB (UME) 1159*16kB (UME) 1543*32kB (UME) 904*64kB (UME) 659*128kB (UM) 453*256kB (UME) 284*512kB (UME) 176*1024kB (UM) 11*2048kB (UME) 141*4096kB (UM) = 1266696kB [ 651.467743][T12725] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 651.467817][T12725] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 0*64kB 1*128kB (U) 1*256kB (M) 1*512kB (M) 0*1024kB 1*2048kB (M) 957*4096kB (M) = 3922912kB [ 651.467922][T12725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.467935][T12725] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 651.467947][T12725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.467960][T12725] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 651.467973][T12725] 59658 total pagecache pages [ 651.467979][T12725] 0 pages in swap cache [ 651.467985][T12725] Free swap = 124996kB [ 651.467997][T12725] Total swap = 124996kB [ 651.468003][T12725] 2097051 pages RAM [ 651.468009][T12725] 0 pages HighMem/MovableOnly [ 651.468015][T12725] 424772 pages reserved [ 651.468021][T12725] 0 pages cma reserved [ 651.831055][ T5714] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 651.894240][ T5714] usb 1-1: device descriptor read/8, error -71 [ 652.214455][ T5714] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 652.255847][ T5714] usb 1-1: device descriptor read/8, error -71 [ 652.374587][ T5714] usb usb1-port1: unable to enumerate USB device [ 652.579211][ T8442] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.870872][T12729] zonefs (nullb0) ERROR: Not a zoned block device [ 653.314485][ T5715] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 653.353101][ T8442] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.466535][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.470079][ T5715] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 653.470110][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.470131][ T5715] usb 2-1: Product: syz [ 653.470147][ T5715] usb 2-1: Manufacturer: syz [ 653.470162][ T5715] usb 2-1: SerialNumber: syz [ 653.518853][ T5715] usb 2-1: config 0 descriptor?? [ 653.766304][ T6000] usb 2-1: USB disconnect, device number 71 [ 653.866904][ T5253] 8021q: adding VLAN 0 to HW filter on device eth8 [ 654.087349][T12761] FAULT_INJECTION: forcing a failure. [ 654.087349][T12761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 654.087391][T12761] CPU: 1 UID: 0 PID: 12761 Comm: syz.0.2143 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 654.087421][T12761] Tainted: [L]=SOFTLOCKUP [ 654.087429][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.087442][T12761] Call Trace: [ 654.087451][T12761] [ 654.087461][T12761] dump_stack_lvl+0xe8/0x150 [ 654.087504][T12761] should_fail_ex+0x467/0x600 [ 654.087543][T12761] prepare_alloc_pages+0x223/0x690 [ 654.087575][T12761] __alloc_frozen_pages_noprof+0x12f/0x380 [ 654.087607][T12761] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 654.087639][T12761] ? __pfx_policy_nodemask+0x10/0x10 [ 654.087667][T12761] ? mas_start+0x3c3/0x560 [ 654.087706][T12761] alloc_pages_mpol+0xce/0x280 [ 654.087738][T12761] alloc_pages_noprof+0xd2/0x2f0 [ 654.087767][T12761] __pud_alloc+0x3a/0x460 [ 654.087795][T12761] handle_mm_fault+0xe5a/0x13f0 [ 654.087831][T12761] ? mt_find+0x186/0x630 [ 654.087879][T12761] ? handle_mm_fault+0xe8/0x13f0 [ 654.087918][T12761] ? __pfx_handle_mm_fault+0x10/0x10 [ 654.087987][T12761] __get_user_pages+0x166b/0x2590 [ 654.088057][T12761] get_user_pages_remote+0x307/0xb10 [ 654.088101][T12761] ? __pfx_down_read+0x10/0x10 [ 654.088136][T12761] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 654.088171][T12761] ? __pfx_get_user_pages_remote+0x10/0x10 [ 654.088211][T12761] ? mmap_read_lock_maybe_expand+0xc6/0x3a0 [ 654.088241][T12761] copy_string_kernel+0x2f9/0x5f0 [ 654.088358][T12761] ? __pfx_copy_string_kernel+0x10/0x10 [ 654.088382][T12761] ? rt_spin_unlock+0x163/0x200 [ 654.088408][T12761] ? alloc_bprm+0x582/0x640 [ 654.088435][T12761] do_execveat_common+0x373/0x670 [ 654.088470][T12761] __x64_sys_execveat+0xc7/0xf0 [ 654.088498][T12761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.088523][T12761] do_syscall_64+0x174/0x580 [ 654.088553][T12761] ? trace_irq_disable+0x3b/0x140 [ 654.088574][T12761] ? clear_bhb_loop+0x40/0x90 [ 654.088603][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.088626][T12761] RIP: 0033:0x7f516b2ede59 [ 654.088648][T12761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.088667][T12761] RSP: 002b:00007f5169546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 654.088690][T12761] RAX: ffffffffffffffda RBX: 00007f516b575fa0 RCX: 00007f516b2ede59 [ 654.088706][T12761] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 654.088720][T12761] RBP: 00007f5169546090 R08: 0000000000001000 R09: 0000000000000000 [ 654.088735][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.088748][T12761] R13: 00007f516b576038 R14: 00007f516b575fa0 R15: 00007ffe077d6518 [ 654.088784][T12761] [ 654.597384][T12526] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.597514][T12526] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.597768][T12526] bridge_slave_0: entered allmulticast mode [ 654.600850][T12526] bridge_slave_0: entered promiscuous mode [ 654.679584][T12526] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.679718][T12526] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.679969][T12526] bridge_slave_1: entered allmulticast mode [ 654.713781][T12526] bridge_slave_1: entered promiscuous mode [ 655.106858][ T5715] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 655.159512][T12526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.219152][T12526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.255640][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 655.258577][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 655.260978][ T5715] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 655.261008][ T5715] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 655.261030][ T5715] usb 2-1: config 14 has no interface number 0 [ 655.261048][ T5715] usb 2-1: config 14 has no interface number 1 [ 655.261131][ T5715] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 655.261157][ T5715] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 655.261182][ T5715] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 655.261210][ T5715] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 655.261239][ T5715] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 655.261267][ T5715] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.261293][ T5715] usb 2-1: config 14 interface 57 has no altsetting 0 [ 655.261312][ T5715] usb 2-1: config 14 interface 228 has no altsetting 0 [ 655.325974][ T5715] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 655.326006][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.326025][ T5715] usb 2-1: Product: syz [ 655.326039][ T5715] usb 2-1: Manufacturer: syz [ 655.326060][ T5715] usb 2-1: SerialNumber: syz [ 656.399378][ T5715] legousbtower 2-1:14.57: interrupt endpoints not found [ 656.539857][ T5715] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 656.836338][ T5715] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 657.139576][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 657.203027][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 657.227668][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 657.259445][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 657.260481][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 657.317787][T12526] team0: Port device team_slave_0 added [ 657.326263][T12526] team0: Port device team_slave_1 added [ 658.155381][T12526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.155402][T12526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.155432][T12526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.162287][T12526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.162306][T12526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.162337][T12526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.308196][T12804] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2154'. [ 658.308240][T12804] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2154'. [ 658.437860][ T5614] usb 2-1: USB disconnect, device number 72 [ 659.232470][T12815] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2157'. [ 659.359898][ T11] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 659.362782][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'. [ 659.451758][T12815] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2157'. [ 659.488252][T12532] Bluetooth: hci3: command tx timeout [ 659.586385][ T5614] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 659.634549][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 659.779940][ T11] usb 1-1: config 0 has no interfaces? [ 659.802778][ T11] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 659.802809][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.802829][ T11] usb 1-1: Product: syz [ 659.802843][ T11] usb 1-1: Manufacturer: syz [ 659.802857][ T11] usb 1-1: SerialNumber: syz [ 659.900209][ T11] usb 1-1: config 0 descriptor?? [ 660.586345][ T8442] bridge_slave_1: left allmulticast mode [ 660.586386][ T8442] bridge_slave_1: left promiscuous mode [ 660.586704][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.766846][ T8442] bridge_slave_0: left allmulticast mode [ 660.766889][ T8442] bridge_slave_0: left promiscuous mode [ 660.767188][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.573742][T12532] Bluetooth: hci3: command tx timeout [ 661.817453][T12852] FAULT_INJECTION: forcing a failure. [ 661.817453][T12852] name failslab, interval 1, probability 0, space 0, times 0 [ 661.817483][T12852] CPU: 1 UID: 0 PID: 12852 Comm: syz.5.2162 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.817505][T12852] Tainted: [L]=SOFTLOCKUP [ 661.817512][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.817522][T12852] Call Trace: [ 661.817529][T12852] [ 661.817536][T12852] dump_stack_lvl+0xe8/0x150 [ 661.817566][T12852] should_fail_ex+0x467/0x600 [ 661.817594][T12852] should_failslab+0xa8/0x100 [ 661.817618][T12852] __kmalloc_node_track_caller_noprof+0x102/0x7c0 [ 661.817638][T12852] ? __kernfs_new_node+0xac/0xa70 [ 661.817729][T12852] ? __kernfs_new_node+0xac/0xa70 [ 661.817751][T12852] kstrdup+0x42/0x100 [ 661.817774][T12852] __kernfs_new_node+0xac/0xa70 [ 661.817795][T12852] ? kernfs_root+0x1c/0x230 [ 661.817810][T12852] ? __pfx___kernfs_new_node+0x10/0x10 [ 661.817827][T12852] ? kernfs_root+0x1c/0x230 [ 661.817846][T12852] ? kernfs_root+0x1c/0x230 [ 661.817874][T12852] ? kernfs_root+0x1c/0x230 [ 661.817894][T12852] kernfs_new_node+0xea/0x140 [ 661.817919][T12852] __kernfs_create_file+0x4b/0x2e0 [ 661.817942][T12852] cgroup_addrm_files+0x837/0xd70 [ 661.818003][T12852] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 661.818026][T12852] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.818050][T12852] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.818073][T12852] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 661.818096][T12852] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 661.818126][T12852] ? css_next_descendant_pre+0x17d/0x260 [ 661.818146][T12852] css_populate_dir+0x19d/0x3d0 [ 661.818191][T12852] cgroup_mkdir+0xcfb/0xf70 [ 661.818215][T12852] ? __pfx_cgroup_mkdir+0x10/0x10 [ 661.818233][T12852] kernfs_iop_mkdir+0x213/0x360 [ 661.818255][T12852] vfs_mkdir+0x402/0x620 [ 661.818326][T12852] filename_mkdirat+0x289/0x520 [ 661.818360][T12852] ? __pfx_filename_mkdirat+0x10/0x10 [ 661.818392][T12852] ? do_getname+0x151/0x250 [ 661.818424][T12852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.818449][T12852] __se_sys_mkdir+0x34/0x150 [ 661.818479][T12852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.818503][T12852] do_syscall_64+0x174/0x580 [ 661.818535][T12852] ? trace_irq_disable+0x3b/0x140 [ 661.818555][T12852] ? clear_bhb_loop+0x40/0x90 [ 661.818584][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.818606][T12852] RIP: 0033:0x7f03c1c4de59 [ 661.818628][T12852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.818648][T12852] RSP: 002b:00007f03bfea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 661.818671][T12852] RAX: ffffffffffffffda RBX: 00007f03c1ed5fa0 RCX: 00007f03c1c4de59 [ 661.818689][T12852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000020c0 [ 661.818702][T12852] RBP: 00007f03bfea6090 R08: 0000000000000000 R09: 0000000000000000 [ 661.818715][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 661.818728][T12852] R13: 00007f03c1ed6038 R14: 00007f03c1ed5fa0 R15: 00007ffeecd8b8a8 [ 661.818763][T12852] [ 661.822047][T12852] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 662.245346][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.325290][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.368323][ T8442] bond0 (unregistering): Released all slaves [ 662.563691][T12526] hsr_slave_0: entered promiscuous mode [ 662.583617][T12526] hsr_slave_1: entered promiscuous mode [ 662.592362][T12526] debugfs: 'hsr0' already exists in 'hsr' [ 662.592391][T12526] Cannot create hsr debugfs directory [ 663.147570][T12865] forcing mempool usage for bio_alloc_bioset+0x631/0xc80 [ 663.908871][T12532] Bluetooth: hci3: command tx timeout [ 664.446971][T12878] 9p: Bad value for 'rfdno' [ 665.404483][ T821] usb 1-1: USB disconnect, device number 54 [ 665.976414][T12532] Bluetooth: hci3: command tx timeout [ 666.513377][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 667.508893][T12909] overlayfs: overlapping lowerdir path [ 668.450996][T12916] FAULT_INJECTION: forcing a failure. [ 668.450996][T12916] name failslab, interval 1, probability 0, space 0, times 0 [ 668.451037][T12916] CPU: 1 UID: 0 PID: 12916 Comm: syz.0.2175 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 668.451068][T12916] Tainted: [L]=SOFTLOCKUP [ 668.451077][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.451090][T12916] Call Trace: [ 668.451099][T12916] [ 668.451110][T12916] dump_stack_lvl+0xe8/0x150 [ 668.451152][T12916] should_fail_ex+0x467/0x600 [ 668.451197][T12916] should_failslab+0xa8/0x100 [ 668.451227][T12916] __kmalloc_cache_noprof+0xa0/0x6b0 [ 668.451251][T12916] ? sctp_add_bind_addr+0x8c/0x370 [ 668.451288][T12916] ? sctp_add_bind_addr+0x8c/0x370 [ 668.451321][T12916] sctp_add_bind_addr+0x8c/0x370 [ 668.451352][T12916] sctp_copy_local_addr_list+0x31a/0x4e0 [ 668.451382][T12916] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 668.451410][T12916] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 668.451439][T12916] ? sctp_v6_is_any+0x64/0x80 [ 668.451469][T12916] ? sctp_copy_one_addr+0x93/0x360 [ 668.451503][T12916] sctp_bind_addr_copy+0xb3/0x3c0 [ 668.451532][T12916] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 668.451571][T12916] sctp_connect_new_asoc+0x2ff/0x6b0 [ 668.451607][T12916] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 668.451649][T12916] ? sctp_inet6_send_verify+0x23a/0x300 [ 668.451675][T12916] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 668.451712][T12916] __sctp_connect+0x5cb/0xdc0 [ 668.451758][T12916] ? __pfx___sctp_connect+0x10/0x10 [ 668.451789][T12916] ? security_sctp_bind_connect+0x7e/0x2c0 [ 668.451818][T12916] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 668.451917][T12916] sctp_getsockopt_connectx3+0x227/0x360 [ 668.451949][T12916] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 668.451984][T12916] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 668.452012][T12916] ? lockdep_hardirqs_on+0x7a/0x110 [ 668.452049][T12916] sctp_getsockopt+0x984/0xb90 [ 668.452080][T12916] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 668.452114][T12916] do_sock_getsockopt+0x51d/0x7e0 [ 668.452157][T12916] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 668.452219][T12916] ? __fget_files+0x3a8/0x420 [ 668.452241][T12916] ? __fget_files+0x2a/0x420 [ 668.452272][T12916] __x64_sys_getsockopt+0x1aa/0x250 [ 668.452315][T12916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.452341][T12916] do_syscall_64+0x174/0x580 [ 668.452372][T12916] ? trace_irq_disable+0x3b/0x140 [ 668.452394][T12916] ? clear_bhb_loop+0x40/0x90 [ 668.452422][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.452446][T12916] RIP: 0033:0x7f516b2ede59 [ 668.452468][T12916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.452487][T12916] RSP: 002b:00007f5169546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 668.452510][T12916] RAX: ffffffffffffffda RBX: 00007f516b575fa0 RCX: 00007f516b2ede59 [ 668.452526][T12916] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 668.452540][T12916] RBP: 00007f5169546090 R08: 0000200000000040 R09: 0000000000000000 [ 668.452555][T12916] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 668.452569][T12916] R13: 00007f516b576038 R14: 00007f516b575fa0 R15: 00007ffe077d6518 [ 668.452605][T12916] [ 669.131293][T12923] openvswitch: netlink: IP tunnel dst address not specified [ 669.359877][T12928] FAULT_INJECTION: forcing a failure. [ 669.359877][T12928] name failslab, interval 1, probability 0, space 0, times 0 [ 669.359915][T12928] CPU: 1 UID: 0 PID: 12928 Comm: syz.0.2180 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.359944][T12928] Tainted: [L]=SOFTLOCKUP [ 669.359950][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.359962][T12928] Call Trace: [ 669.359970][T12928] [ 669.359979][T12928] dump_stack_lvl+0xe8/0x150 [ 669.360021][T12928] should_fail_ex+0x467/0x600 [ 669.360060][T12928] should_failslab+0xa8/0x100 [ 669.360089][T12928] __kvmalloc_node_noprof+0x17a/0x8a0 [ 669.360118][T12928] ? proc_sys_call_handler+0x3d1/0x830 [ 669.360230][T12928] ? proc_sys_call_handler+0x3d1/0x830 [ 669.360266][T12928] proc_sys_call_handler+0x3d1/0x830 [ 669.360291][T12928] ? vfs_write+0x231/0xbb0 [ 669.360323][T12928] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 669.360363][T12928] vfs_write+0x61e/0xbb0 [ 669.360398][T12928] ? __pfx_vfs_write+0x10/0x10 [ 669.360427][T12928] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 669.360460][T12928] ? lockdep_hardirqs_on+0x7a/0x110 [ 669.360495][T12928] ? mutex_lock_nested+0x152/0x1d0 [ 669.360519][T12928] ? fdget_pos+0x252/0x320 [ 669.360551][T12928] ksys_write+0x156/0x270 [ 669.360580][T12928] ? __pfx_ksys_write+0x10/0x10 [ 669.360617][T12928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.360642][T12928] do_syscall_64+0x174/0x580 [ 669.360676][T12928] ? trace_irq_disable+0x3b/0x140 [ 669.360697][T12928] ? clear_bhb_loop+0x40/0x90 [ 669.360726][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.360748][T12928] RIP: 0033:0x7f516b2ede59 [ 669.360770][T12928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.360788][T12928] RSP: 002b:00007f5169546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 669.360812][T12928] RAX: ffffffffffffffda RBX: 00007f516b575fa0 RCX: 00007f516b2ede59 [ 669.360829][T12928] RDX: 000000000000002a RSI: 0000200000000200 RDI: 0000000000000003 [ 669.360844][T12928] RBP: 00007f5169546090 R08: 0000000000000000 R09: 0000000000000000 [ 669.360857][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.360870][T12928] R13: 00007f516b576038 R14: 00007f516b575fa0 R15: 00007ffe077d6518 [ 669.360905][T12928] [ 669.751714][T12937] netlink: 'syz.0.2183': attribute type 29 has an invalid length. [ 669.810551][T12934] netlink: 'syz.0.2183': attribute type 29 has an invalid length. [ 670.044557][ T8442] hsr_slave_0: left promiscuous mode [ 670.055067][ T5614] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 670.095517][ T8442] hsr_slave_1: left promiscuous mode [ 670.096864][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.096894][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.165124][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.165155][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.204497][ T5614] usb 2-1: Using ep0 maxpacket: 32 [ 670.207478][ T5614] usb 2-1: config 1 has an invalid interface number: 91 but max is 0 [ 670.207503][ T5614] usb 2-1: config 1 has no interface number 0 [ 670.207530][ T5614] usb 2-1: config 1 interface 91 has no altsetting 0 [ 670.225327][ T5614] usb 2-1: New USB device found, idVendor=0e55, idProduct=110b, bcdDevice=b2.e4 [ 670.225427][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.225451][ T5614] usb 2-1: Product: syz [ 670.225466][ T5614] usb 2-1: Manufacturer: syz [ 670.225483][ T5614] usb 2-1: SerialNumber: syz [ 670.397740][ T8442] veth1_macvtap: left promiscuous mode [ 670.397856][ T8442] veth0_macvtap: left promiscuous mode [ 670.398128][ T8442] veth1_vlan: left promiscuous mode [ 670.398326][ T8442] veth0_vlan: left promiscuous mode [ 671.565823][ T8442] team0 (unregistering): Port device team_slave_1 removed [ 671.625423][ T8442] team0 (unregistering): Port device team_slave_0 removed [ 672.211192][T12947] veth1_macvtap: left promiscuous mode [ 672.211230][T12947] macsec0: entered allmulticast mode [ 672.578948][ T5722] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 672.799245][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 672.838387][ T5722] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 672.838418][ T5722] usb 1-1: config 0 has no interface number 0 [ 672.838481][ T5722] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 672.838510][ T5722] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 672.838553][ T5722] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 672.838577][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.940390][ T5722] usb 1-1: config 0 descriptor?? [ 672.943251][ T5614] rndis_host 2-1:1.91: More than one union descriptor, skipping ... [ 672.943277][ T5614] rndis_host 2-1:1.91: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 673.035960][ T5614] pl2303 2-1:1.91: required endpoints missing [ 673.088493][ T5722] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 673.140225][ T5614] usb 2-1: USB disconnect, device number 73 [ 673.352257][T12951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.352749][T12951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.243967][ T11] usb 1-1: USB disconnect, device number 55 [ 674.732844][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2190'. [ 674.926716][ T5614] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 675.114699][ T5614] usb 6-1: device descriptor read/64, error -71 [ 675.374442][ T5614] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 675.559275][ T5614] usb 6-1: device descriptor read/64, error -71 [ 675.686506][ T5614] usb usb6-port1: attempt power cycle [ 676.045947][ T5614] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 676.095887][ T5614] usb 6-1: device descriptor read/8, error -71 [ 676.354524][ T5614] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 676.375314][ T5614] usb 6-1: device descriptor read/8, error -71 [ 676.488269][ T5614] usb usb6-port1: unable to enumerate USB device [ 678.293960][T12782] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.294218][T12782] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.295192][T12782] bridge_slave_0: entered allmulticast mode [ 678.885291][T12782] bridge_slave_0: entered promiscuous mode [ 678.921216][T12782] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.921423][T12782] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.921656][T12782] bridge_slave_1: entered allmulticast mode [ 678.957797][T12782] bridge_slave_1: entered promiscuous mode [ 679.017106][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2202'. [ 680.741984][T12782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.774537][ T11] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 680.783994][T12782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.936579][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 680.940992][ T11] usb 6-1: unable to get BOS descriptor or descriptor too short [ 680.942858][ T11] usb 6-1: config 1 interface 0 has no altsetting 0 [ 680.981568][ T11] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 680.981600][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.981622][ T11] usb 6-1: Product: syz [ 680.981638][ T11] usb 6-1: Manufacturer: syz [ 680.981654][ T11] usb 6-1: SerialNumber: syz [ 681.406313][ T5722] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 681.422291][T12782] team0: Port device team_slave_0 added [ 681.502093][ T11] usbhid 6-1:1.0: can't add hid device: -71 [ 681.502227][ T11] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 681.537826][ T11] usb 6-1: USB disconnect, device number 38 [ 681.554385][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 681.557019][ T5722] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 681.557064][ T5722] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 681.557088][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.620685][ T5722] usb 2-1: config 0 descriptor?? [ 681.859760][ T9] usb 2-1: USB disconnect, device number 74 [ 682.686717][T12782] team0: Port device team_slave_1 added [ 683.527334][T13089] FAULT_INJECTION: forcing a failure. [ 683.527334][T13089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.527370][T13089] CPU: 0 UID: 0 PID: 13089 Comm: syz.5.2219 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 683.527394][T13089] Tainted: [L]=SOFTLOCKUP [ 683.527401][T13089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 683.527412][T13089] Call Trace: [ 683.527418][T13089] [ 683.527426][T13089] dump_stack_lvl+0xe8/0x150 [ 683.527460][T13089] should_fail_ex+0x467/0x600 [ 683.527489][T13089] _copy_from_iter+0x1d3/0x1660 [ 683.527521][T13089] ? rcu_is_watching+0x15/0xb0 [ 683.527543][T13089] ? trace_kmem_cache_alloc+0x29/0xe0 [ 683.527574][T13089] ? __pfx__copy_from_iter+0x10/0x10 [ 683.527599][T13089] ? __alloc_skb+0x276/0x7a0 [ 683.527624][T13089] ? __alloc_skb+0x276/0x7a0 [ 683.527652][T13089] ? netlink_sendmsg+0x650/0xb40 [ 683.527669][T13089] ? skb_put+0x112/0x210 [ 683.527697][T13089] netlink_sendmsg+0x6c0/0xb40 [ 683.527720][T13089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.527739][T13089] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 683.527768][T13089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.527784][T13089] sock_sendmsg_nosec+0x13a/0x180 [ 683.527809][T13089] __sys_sendto+0x41e/0x5d0 [ 683.527840][T13089] ? __pfx___sys_sendto+0x10/0x10 [ 683.527864][T13089] ? errseq_sample+0x40/0x70 [ 683.527900][T13089] ? fd_install+0x97/0x3e0 [ 683.527930][T13089] ? fd_install+0x30c/0x3e0 [ 683.527963][T13089] __x64_sys_sendto+0xde/0x100 [ 683.528002][T13089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.528024][T13089] do_syscall_64+0x174/0x580 [ 683.528055][T13089] ? trace_irq_disable+0x3b/0x140 [ 683.528072][T13089] ? clear_bhb_loop+0x40/0x90 [ 683.528094][T13089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.528111][T13089] RIP: 0033:0x7f03c1c0e68e [ 683.528129][T13089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 683.528144][T13089] RSP: 002b:00007f03bfe83e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 683.528164][T13089] RAX: ffffffffffffffda RBX: 00007f03bfe856c0 RCX: 00007f03c1c0e68e [ 683.528177][T13089] RDX: 0000000000000020 RSI: 00007f03bfe84000 RDI: 0000000000000006 [ 683.528188][T13089] RBP: 0000000000000000 R08: 00007f03bfe83f04 R09: 000000000000000c [ 683.528199][T13089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 683.528209][T13089] R13: 00007f03bfe83f58 R14: 00007f03bfe84000 R15: 0000000000000000 [ 683.528233][T13089] [ 684.024927][ T37] audit: type=1326 audit(1783162499.136:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13090 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 684.030679][ T37] audit: type=1326 audit(1783162499.136:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13090 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 684.030724][ T37] audit: type=1326 audit(1783162499.136:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13090 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 684.030760][ T37] audit: type=1326 audit(1783162499.136:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13090 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 684.030795][ T37] audit: type=1326 audit(1783162499.136:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13090 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 684.030827][ T37] audit: type=1326 audit(1783162499.136:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13090 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 684.030860][ T37] audit: type=1326 audit(1783162499.136:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13090 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7ab2ce68e code=0x7ffc0000 [ 684.043377][ T37] audit: type=1326 audit(1783162499.146:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13090 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7ab2ce68e code=0x7ffc0000 [ 684.045426][ T37] audit: type=1326 audit(1783162499.146:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13090 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 684.060208][T13091] FAULT_INJECTION: forcing a failure. [ 684.060208][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 684.060311][T13091] CPU: 0 UID: 0 PID: 13091 Comm: syz.1.2220 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 684.060395][T13091] Tainted: [L]=SOFTLOCKUP [ 684.060417][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.060450][T13091] Call Trace: [ 684.060481][T13091] [ 684.060521][T13091] dump_stack_lvl+0xe8/0x150 [ 684.060630][T13091] should_fail_ex+0x467/0x600 [ 684.060743][T13091] should_failslab+0xa8/0x100 [ 684.060819][T13091] kmem_cache_alloc_noprof+0xa4/0x650 [ 684.060928][T13091] ? audit_log_start+0x108/0xa30 [ 684.061152][T13091] ? audit_log_start+0x108/0xa30 [ 684.061239][T13091] audit_log_start+0x108/0xa30 [ 684.061330][T13091] ? __pfx_audit_log_start+0x10/0x10 [ 684.061403][T13091] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 684.061489][T13091] ? rt_spin_unlock+0x157/0x200 [ 684.061573][T13091] audit_seccomp+0x63/0x190 [ 684.061617][T13091] ? fput+0xa0/0xd0 [ 684.061694][T13091] __seccomp_filter+0xd14/0x1e00 [ 684.061798][T13091] ? __pfx___seccomp_filter+0x10/0x10 [ 684.061854][T13091] ? seqcount_lockdep_reader_access+0xea/0x100 [ 684.061958][T13091] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 684.062080][T13091] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 684.062207][T13091] ? __secure_computing+0xe7/0x2b0 [ 684.062273][T13091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.062344][T13091] do_syscall_64+0x10e/0x580 [ 684.062422][T13091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.062486][T13091] ? clear_bhb_loop+0x40/0x90 [ 684.062561][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.062618][T13091] RIP: 0033:0x7fa7ab2ce68e [ 684.062679][T13091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 684.062732][T13091] RSP: 002b:00007fa7a9565fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 684.062797][T13091] RAX: ffffffffffffffda RBX: 00007fa7a95666c0 RCX: 00007fa7ab2ce68e [ 684.062839][T13091] RDX: 000000000000000f RSI: 00007fa7a95660a0 RDI: 0000000000000005 [ 684.062879][T13091] RBP: 00007fa7a9566090 R08: 0000000000000000 R09: 0000000000000000 [ 684.062903][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.062915][T13091] R13: 00007fa7ab596038 R14: 00007fa7ab595fa0 R15: 00007ffe49258408 [ 684.062964][T13091] [ 684.076223][T13091] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 685.818118][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.818171][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.921981][T12782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.921998][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.922026][T12782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.953266][T12782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.953307][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.953393][T12782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.574482][ T11] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 686.670159][ T5606] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 686.670193][ T5606] CPU: 1 UID: 0 PID: 5606 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 686.670229][ T5606] Tainted: [L]=SOFTLOCKUP [ 686.670237][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.670256][ T5606] Workqueue: hci5 hci_rx_work [ 686.670401][ T5606] Call Trace: [ 686.670412][ T5606] [ 686.670424][ T5606] dump_stack_lvl+0xe8/0x150 [ 686.670470][ T5606] sysfs_create_dir_ns+0x271/0x2a0 [ 686.670548][ T5606] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 686.670597][ T5606] ? rt_spin_unlock+0x163/0x200 [ 686.670632][ T5606] kobject_add_internal+0x62c/0xce0 [ 686.670671][ T5606] kobject_add+0x163/0x240 [ 686.670695][ T5606] ? rt_spin_unlock+0x157/0x200 [ 686.670732][ T5606] ? __pfx_kobject_add+0x10/0x10 [ 686.670767][ T5606] ? get_device_parent+0x370/0x3a0 [ 686.670881][ T5606] device_add+0x3fa/0xb80 [ 686.670915][ T5606] hci_conn_add_sysfs+0xd5/0x210 [ 686.670986][ T5606] le_conn_complete_evt+0xfef/0x1580 [ 686.671059][ T5606] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 686.671087][ T5606] ? lockdep_hardirqs_on+0x7a/0x110 [ 686.671121][ T5606] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 686.671158][ T5606] ? rt_mutex_slowunlock+0x219/0x460 [ 686.671187][ T5606] ? skb_pull_data+0xf0/0x200 [ 686.671225][ T5606] hci_le_conn_complete_evt+0x187/0x470 [ 686.671301][ T5606] hci_event_packet+0x67a/0xf10 [ 686.671347][ T5606] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 686.671387][ T5606] ? __pfx_hci_event_packet+0x10/0x10 [ 686.671423][ T5606] ? rt_spin_unlock+0x157/0x200 [ 686.671463][ T5606] ? hci_send_to_monitor+0xe2/0x590 [ 686.671497][ T5606] hci_rx_work+0x3ee/0x1020 [ 686.671543][ T5606] ? process_scheduled_works+0xa20/0x14e0 [ 686.671574][ T5606] process_scheduled_works+0xa8e/0x14e0 [ 686.671641][ T5606] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.671681][ T5606] ? assign_work+0x3cf/0x5d0 [ 686.671717][ T5606] worker_thread+0xa47/0xfb0 [ 686.671783][ T5606] kthread+0x388/0x470 [ 686.671821][ T5606] ? __pfx_worker_thread+0x10/0x10 [ 686.671851][ T5606] ? __pfx_kthread+0x10/0x10 [ 686.671898][ T5606] ret_from_fork+0x514/0xb70 [ 686.671942][ T5606] ? __pfx_ret_from_fork+0x10/0x10 [ 686.671982][ T5606] ? __switch_to+0xc89/0x1420 [ 686.672080][ T5606] ? __pfx_kthread+0x10/0x10 [ 686.672121][ T5606] ret_from_fork_asm+0x1a/0x30 [ 686.672170][ T5606] [ 686.681235][ T5606] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 686.682898][ T5606] Bluetooth: hci5: failed to register connection device [ 686.749855][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.749932][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.924955][ T11] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 686.925069][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 686.925148][ T11] usb 1-1: SerialNumber: syz [ 687.247926][ T11] usb 1-1: 0:2 : does not exist [ 687.248009][ T11] usb 1-1: unit 5 not found! [ 687.451074][ T11] usb 1-1: USB disconnect, device number 56 [ 687.771394][ T5706] udevd[5706]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.487064][T12526] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 691.754016][T12526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.470634][T12782] hsr_slave_0: entered promiscuous mode [ 692.471669][T12782] hsr_slave_1: entered promiscuous mode [ 692.505718][T12526] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 692.604789][T12526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.643087][T12526] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 692.683905][ T5606] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 692.703214][T12526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.737828][T12526] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 692.820483][T12526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 693.132280][T13169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.132306][T13169] IPv6: NLM_F_CREATE should be set when creating new route [ 693.361926][T13176] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2236'. [ 693.404567][ T31] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 693.554443][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 693.560325][ T31] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 693.560354][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.560373][ T31] usb 1-1: Product: Р [ 693.560388][ T31] usb 1-1: Manufacturer:   [ 693.560402][ T31] usb 1-1: SerialNumber: ﳾ舚ུ꧆캅伦슮ಹꨑ彰꘹㴗⯗ኟ휲掱ᇘ腜㓐鰸廍儘莳턮를朥ứꏃ湜瓢뽮␬砖뺃즗䄚쉼讥䚘ꂊ꙲兣ꄝ [ 696.763694][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 697.392166][T12532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 697.471640][T12532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 697.488975][T12532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 697.492826][T12532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 697.536581][T12532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 697.728626][ T663] bridge_slave_1: left allmulticast mode [ 697.728662][ T663] bridge_slave_1: left promiscuous mode [ 697.728917][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.825101][ T31] usb 1-1: USB disconnect, device number 57 [ 698.186700][ T663] bridge_slave_0: left allmulticast mode [ 698.186739][ T663] bridge_slave_0: left promiscuous mode [ 698.212099][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.724544][ T5606] Bluetooth: hci0: command tx timeout [ 699.979199][ T5693] udevd[5693]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.634474][ T31] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 700.794406][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 700.797822][ T31] usb 1-1: config 1 has an invalid interface number: 91 but max is 0 [ 700.797852][ T31] usb 1-1: config 1 has no interface number 0 [ 700.797885][ T31] usb 1-1: config 1 interface 91 has no altsetting 0 [ 700.800927][ T31] usb 1-1: New USB device found, idVendor=0e55, idProduct=110b, bcdDevice=b2.e4 [ 700.800952][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.800967][ T31] usb 1-1: Product: syz [ 700.800978][ T31] usb 1-1: Manufacturer: syz [ 700.800990][ T31] usb 1-1: SerialNumber: syz [ 701.066515][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.173217][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.243495][ T663] bond0 (unregistering): Released all slaves [ 701.612404][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 701.814452][ T5606] Bluetooth: hci0: command tx timeout [ 702.172769][T13270] macsec0: entered allmulticast mode [ 702.992902][ T6000] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 703.037548][ T31] rndis_host 1-1:1.91: More than one union descriptor, skipping ... [ 703.037576][ T31] rndis_host 1-1:1.91: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 703.096175][ T31] pl2303 1-1:1.91: required endpoints missing [ 703.154655][ T6000] usb 2-1: Using ep0 maxpacket: 32 [ 703.157257][ T6000] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 703.157289][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.342702][ T31] usb 1-1: USB disconnect, device number 58 [ 703.362789][ T6000] usb 2-1: config 0 descriptor?? [ 703.376089][ T663] hsr_slave_0: left promiscuous mode [ 703.490523][T13287] netlink: 'syz.5.2256': attribute type 7 has an invalid length. [ 704.321335][ T5606] Bluetooth: hci0: command tx timeout [ 704.374324][ T6000] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 704.429223][ T663] hsr_slave_1: left promiscuous mode [ 704.587350][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.615329][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.345703][ T663] team0 (unregistering): Port device team_slave_1 removed [ 705.394234][T13301] 9p: Bad value for 'wfdno' [ 705.426377][ T663] team0 (unregistering): Port device team_slave_0 removed [ 706.156291][T13311] netlink: 4424 bytes leftover after parsing attributes in process `syz.0.2263'. [ 706.230954][ T6000] gspca_vc032x: reg_r err -32 [ 706.230973][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.230985][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.230995][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231005][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231016][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231026][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231035][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231045][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231055][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231064][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231075][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231085][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231094][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231105][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231114][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231124][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231133][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231142][ T6000] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.231152][ T6000] gspca_vc032x: Unknown sensor... [ 706.231237][ T6000] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 706.369207][ T5606] Bluetooth: hci0: command tx timeout [ 706.599815][ T31] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 706.775720][ T31] usb 6-1: device descriptor read/64, error -71 [ 707.014415][ T31] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 707.158027][ T31] usb 6-1: device descriptor read/64, error -71 [ 707.264495][ T11] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 707.265108][ T31] usb usb6-port1: attempt power cycle [ 707.424709][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 707.427003][ T11] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 707.427029][ T11] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 707.427063][ T11] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 707.427087][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.674727][ T31] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 707.705337][ T31] usb 6-1: device descriptor read/8, error -71 [ 707.754618][T13323] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 707.754645][T13323] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2265'. [ 707.754677][T13323] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 707.873737][ T5715] usb 2-1: USB disconnect, device number 75 [ 707.975737][ T11] usb 1-1: USB disconnect, device number 59 [ 708.077867][ T31] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 708.107003][ T31] usb 6-1: device descriptor read/8, error -71 [ 708.214894][ T31] usb usb6-port1: unable to enumerate USB device [ 708.621780][T13350] sctp: [Deprecated]: syz.1.2266 (pid 13350) Use of int in max_burst socket option. [ 708.621780][T13350] Use struct sctp_assoc_value instead [ 708.623166][T13350] sctp: [Deprecated]: syz.1.2266 (pid 13350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 708.623166][T13350] Use struct sctp_sack_info instead [ 710.359255][T13366] 9p: Bad value for 'rfdno' [ 712.739730][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2275'. [ 712.839136][ T6000] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 712.994611][ T6000] usb 2-1: Using ep0 maxpacket: 16 [ 712.997236][ T6000] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 712.997273][ T6000] usb 2-1: config 0 interface 0 has no altsetting 0 [ 713.000428][ T6000] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 713.000459][ T6000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.000483][ T6000] usb 2-1: Product: syz [ 713.000499][ T6000] usb 2-1: Manufacturer: syz [ 713.000515][ T6000] usb 2-1: SerialNumber: syz [ 713.047232][ T6000] usb 2-1: config 0 descriptor?? [ 713.483948][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 714.338292][ T6000] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input43 [ 716.312525][T13221] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.333288][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.347072][T13221] bridge_slave_0: entered allmulticast mode [ 716.366606][T13221] bridge_slave_0: entered promiscuous mode [ 716.390093][T13383] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.2274'. [ 716.435226][T13221] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.437095][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.440296][T13221] bridge_slave_1: entered allmulticast mode [ 716.484969][T13221] bridge_slave_1: entered promiscuous mode [ 716.742060][T12782] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 716.832495][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'. [ 716.832520][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'. [ 716.833100][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 716.875397][T12782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.944920][ T6000] imon:send_packet: packet tx failed (-71) [ 716.965482][ T6000] imon 2-1:0.0: panel buttons/knobs setup failed [ 717.037519][T13413] gretap0: Device is already in use. [ 717.914430][ T6000] rc_core: IR keymap rc-imon-pad not found [ 717.914452][ T6000] Registered IR keymap rc-empty [ 717.914539][ T6000] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 717.914558][ T6000] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 717.917570][ T6000] imon:send_packet: packet tx failed (-71) [ 717.934667][ T6000] imon 2-1:0.0: remote input dev register failed [ 717.934983][ T6000] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 718.228507][ T31] IPVS: starting estimator thread 0... [ 718.253035][T13416] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 718.286943][T13425] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 718.314454][T13427] IPVS: using max 8 ests per chain, 19200 per kthread [ 718.379663][T13221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.512362][T12532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 718.608103][T12532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 718.628351][T12532] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 718.634214][T12532] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 718.915272][T13221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.236892][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 719.236937][ T37] audit: type=1326 audit(1783162534.216:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 719.237264][ T37] audit: type=1326 audit(1783162534.216:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 719.474548][ T37] audit: type=1326 audit(1783162534.236:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 719.474613][ T37] audit: type=1326 audit(1783162534.236:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 719.474664][ T37] audit: type=1326 audit(1783162534.236:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 719.474714][ T37] audit: type=1326 audit(1783162534.236:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 719.474767][ T37] audit: type=1326 audit(1783162534.236:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab30de59 code=0x7ffc0000 [ 719.474818][ T37] audit: type=1326 audit(1783162534.246:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7ab2ce68e code=0x7ffc0000 [ 719.474869][ T37] audit: type=1326 audit(1783162534.246:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7ab2ce68e code=0x7ffc0000 [ 719.474921][ T37] audit: type=1326 audit(1783162534.246:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.1.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7ab2ce68e code=0x7ffc0000 [ 719.606153][T12532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 719.942482][T13221] team0: Port device team_slave_0 added [ 719.948085][T13221] team0: Port device team_slave_1 added [ 720.156509][ T6000] imon 2-1:0.0: unable to initialize intf0, err 0 [ 720.156533][ T6000] imon:imon_probe: failed to initialize context! [ 720.156547][ T6000] imon 2-1:0.0: unable to register, err -19 [ 720.184490][ T6000] usb 2-1: USB disconnect, device number 76 [ 720.241907][T13443] use of bytesused == 0 is deprecated and will be removed in the future, [ 720.241925][T13443] use the actual size instead. [ 721.336402][ C0] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 721.554613][T13221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.554632][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.554664][T13221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.868002][ T5606] Bluetooth: hci4: command tx timeout [ 722.465585][T13221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.465605][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.465633][T13221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.791978][T13221] hsr_slave_0: entered promiscuous mode [ 723.793373][T13221] hsr_slave_1: entered promiscuous mode [ 723.821431][T13221] debugfs: 'hsr0' already exists in 'hsr' [ 723.821471][T13221] Cannot create hsr debugfs directory [ 723.888394][ T5606] Bluetooth: hci4: command tx timeout [ 724.324565][ T5715] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 724.481973][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 724.482019][ T5715] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 724.482043][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.532980][ T5715] usb 2-1: config 0 descriptor?? [ 724.534225][T13515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 725.015787][T13515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.051414][T13515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.105264][T13515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.105932][T13515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.113835][T13515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.136231][T13515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.373225][ T5715] usb 2-1: string descriptor 0 read error: -71 [ 725.388010][ T5715] uclogic 0003:5543:006E.0008: failed retrieving string descriptor #200: -71 [ 725.388121][ T5715] uclogic 0003:5543:006E.0008: failed retrieving pen parameters: -71 [ 725.388135][ T5715] uclogic 0003:5543:006E.0008: failed probing pen v2 parameters: -71 [ 725.388207][ T5715] uclogic 0003:5543:006E.0008: failed probing parameters: -71 [ 725.388289][ T5715] uclogic 0003:5543:006E.0008: probe with driver uclogic failed with error -71 [ 725.393082][ T5715] usb 2-1: USB disconnect, device number 77 [ 725.964445][ T5606] Bluetooth: hci4: command tx timeout [ 727.501329][T13538] FAULT_INJECTION: forcing a failure. [ 727.501329][T13538] name failslab, interval 1, probability 0, space 0, times 0 [ 727.501360][T13538] CPU: 0 UID: 0 PID: 13538 Comm: syz.1.2306 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 727.501383][T13538] Tainted: [L]=SOFTLOCKUP [ 727.501389][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.501400][T13538] Call Trace: [ 727.501406][T13538] [ 727.501413][T13538] dump_stack_lvl+0xe8/0x150 [ 727.501447][T13538] should_fail_ex+0x467/0x600 [ 727.501478][T13538] should_failslab+0xa8/0x100 [ 727.501500][T13538] kmem_cache_alloc_node_noprof+0xae/0x670 [ 727.501529][T13538] ? __alloc_skb+0x1d7/0x7a0 [ 727.501555][T13538] ? __alloc_skb+0x1d7/0x7a0 [ 727.501583][T13538] __alloc_skb+0x1d7/0x7a0 [ 727.501616][T13538] hci_cmd_sync_alloc+0x3d/0x3a0 [ 727.501707][T13538] hci_send_cmd+0x46/0x1a0 [ 727.501734][T13538] hci_conn_security+0x599/0xa90 [ 727.501759][T13538] ? __pfx_hci_conn_security+0x10/0x10 [ 727.501778][T13538] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 727.501806][T13538] ? l2cap_chan_check_security+0x31f/0x4f0 [ 727.501850][T13538] l2cap_do_start+0x2bd/0x820 [ 727.501881][T13538] ? __pfx_l2cap_do_start+0x10/0x10 [ 727.501905][T13538] ? rt_write_unlock+0x19c/0x360 [ 727.501930][T13538] ? rt_write_unlock+0x1a8/0x360 [ 727.501950][T13538] l2cap_chan_connect+0xa8a/0xeb0 [ 727.501985][T13538] ? __pfx_l2cap_chan_connect+0x10/0x10 [ 727.502014][T13538] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 727.502037][T13538] ? bacmp+0xe/0x30 [ 727.502058][T13538] l2cap_sock_connect+0x5e4/0x7e0 [ 727.502080][T13538] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 727.502100][T13538] ? hook_socket_connect+0x1f1/0x470 [ 727.502131][T13538] ? bpf_lsm_socket_connect+0x9/0x20 [ 727.502158][T13538] __sys_connect+0x336/0x470 [ 727.502186][T13538] ? __pfx___sys_connect+0x10/0x10 [ 727.502219][T13538] ? __pfx_ksys_write+0x10/0x10 [ 727.502244][T13538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.502263][T13538] __x64_sys_connect+0x7a/0x90 [ 727.502288][T13538] do_syscall_64+0x174/0x580 [ 727.502310][T13538] ? trace_irq_disable+0x3b/0x140 [ 727.502326][T13538] ? clear_bhb_loop+0x40/0x90 [ 727.502346][T13538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.502363][T13538] RIP: 0033:0x7fa7ab30de59 [ 727.502379][T13538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.502393][T13538] RSP: 002b:00007fa7a9566028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 727.502411][T13538] RAX: ffffffffffffffda RBX: 00007fa7ab595fa0 RCX: 00007fa7ab30de59 [ 727.502423][T13538] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000006 [ 727.502433][T13538] RBP: 00007fa7a9566090 R08: 0000000000000000 R09: 0000000000000000 [ 727.502443][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.502453][T13538] R13: 00007fa7ab596038 R14: 00007fa7ab595fa0 R15: 00007ffe49258408 [ 727.502479][T13538] [ 727.653544][T13538] Bluetooth: hci4: no memory for command [ 728.044646][ T5606] Bluetooth: hci4: command tx timeout [ 728.194404][ T5715] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 728.344369][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 728.348287][ T5715] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.348328][ T5715] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 728.348356][ T5715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 728.348384][ T5715] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 728.348424][ T5715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 728.348451][ T5715] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 728.349718][ T5715] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 728.349749][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 728.349772][ T5715] usb 6-1: SerialNumber: syz [ 728.465174][ T5715] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 728.501341][ T5715] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 728.582292][T13545] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2309'. [ 728.744877][T13547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.746137][T13547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.748250][ T663] bridge_slave_1: left allmulticast mode [ 728.748285][ T663] bridge_slave_1: left promiscuous mode [ 728.748544][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.977330][ T663] bridge_slave_0: left allmulticast mode [ 728.977382][ T663] bridge_slave_0: left promiscuous mode [ 728.979218][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.010979][T13553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2311'. [ 729.567816][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.648287][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.716595][ T663] bond0 (unregistering): Released all slaves [ 729.894057][ T821] usb 6-1: USB disconnect, device number 43 [ 730.216359][T13567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.708698][T13564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.205113][ T663] hsr_slave_0: left promiscuous mode [ 732.254547][ T663] hsr_slave_1: left promiscuous mode [ 732.255689][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.305537][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.234051][ T37] kauditd_printk_skb: 37 callbacks suppressed [ 733.234071][ T37] audit: type=1326 audit(1783162548.336:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.5.2321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f03c1c47bd7 code=0x0 [ 734.325080][ T663] team0 (unregistering): Port device team_slave_1 removed [ 734.365269][ T663] team0 (unregistering): Port device team_slave_0 removed [ 735.144372][ T6000] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 735.303852][T13615] FAULT_INJECTION: forcing a failure. [ 735.303852][T13615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.303917][T13615] CPU: 0 UID: 0 PID: 13615 Comm: syz.0.2324 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 735.303949][T13615] Tainted: [L]=SOFTLOCKUP [ 735.303958][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 735.303973][T13615] Call Trace: [ 735.303982][T13615] [ 735.303992][T13615] dump_stack_lvl+0xe8/0x150 [ 735.304035][T13615] should_fail_ex+0x467/0x600 [ 735.304075][T13615] _copy_from_user+0x2d/0xb0 [ 735.304101][T13615] ___sys_sendmsg+0x1c6/0x360 [ 735.304132][T13615] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.304195][T13615] ? __fget_files+0x2a/0x420 [ 735.304218][T13615] ? __fget_files+0x3a8/0x420 [ 735.304254][T13615] __x64_sys_sendmsg+0x1b7/0x290 [ 735.304279][T13615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.304330][T13615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.304356][T13615] do_syscall_64+0x174/0x580 [ 735.304392][T13615] ? clear_bhb_loop+0x40/0x90 [ 735.304420][T13615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.304444][T13615] RIP: 0033:0x7f516b2ede59 [ 735.304466][T13615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.304488][T13615] RSP: 002b:00007f5169504028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.304512][T13615] RAX: ffffffffffffffda RBX: 00007f516b576180 RCX: 00007f516b2ede59 [ 735.304529][T13615] RDX: 0000000000044040 RSI: 0000200000000180 RDI: 0000000000000007 [ 735.304545][T13615] RBP: 00007f5169504090 R08: 0000000000000000 R09: 0000000000000000 [ 735.304558][T13615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.304571][T13615] R13: 00007f516b576218 R14: 00007f516b576180 R15: 00007ffe077d6518 [ 735.304608][T13615] [ 735.596483][ T6000] usb 6-1: Using ep0 maxpacket: 8 [ 736.173716][ T6000] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 736.173781][ T6000] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.173806][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 736.173832][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 736.173858][ T6000] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.173903][ T6000] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 736.173928][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.437995][T13582] pimreg: entered allmulticast mode [ 736.457692][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 736.473223][T13582] pimreg: left allmulticast mode [ 738.293839][ T11] usb 6-1: USB disconnect, device number 44 [ 738.618129][T13632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.834507][T13628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.295379][T13426] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.295599][T13426] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.295842][T13426] bridge_slave_0: entered allmulticast mode [ 742.355947][T13426] bridge_slave_0: entered promiscuous mode [ 742.487666][T13426] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.490093][T13426] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.510671][T13426] bridge_slave_1: entered allmulticast mode [ 742.527581][T13426] bridge_slave_1: entered promiscuous mode [ 742.644397][ T821] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 742.774491][ T821] usb 1-1: device descriptor read/64, error -71 [ 743.043566][ T821] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 743.198691][ T821] usb 1-1: device descriptor read/64, error -71 [ 743.339950][ T821] usb usb1-port1: attempt power cycle [ 743.531618][T13426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.601286][T13426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.674510][ T821] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 743.698633][ T821] usb 1-1: device descriptor read/8, error -71 [ 743.873937][T13426] team0: Port device team_slave_0 added [ 743.893945][T13426] team0: Port device team_slave_1 added [ 743.935679][ T821] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 743.960141][ T821] usb 1-1: device descriptor read/8, error -71 [ 744.071277][ T821] usb usb1-port1: unable to enumerate USB device [ 744.107483][T13683] overlayfs: cannot append lower layer [ 744.278164][T13682] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 744.278202][T13682] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 744.557239][T13288] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 744.735118][T13288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.735139][T13288] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 744.803933][T13288] usb 2-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 744.803965][T13288] usb 2-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 744.803981][T13288] usb 2-1: Product: syz [ 744.803992][T13288] usb 2-1: Manufacturer: syz [ 744.804003][T13288] usb 2-1: SerialNumber: syz [ 744.843573][T13288] usb 2-1: config 0 descriptor?? [ 745.431872][T13426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.431892][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.431921][T13426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.606885][T13693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.409304][T13691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.090492][ T821] usb 2-1: USB disconnect, device number 78 [ 747.208623][T13713] overlayfs: conflicting lowerdir path [ 747.210560][T13426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.210576][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.210605][T13426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.297898][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.297973][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.581137][T13721] overlayfs: failed to resolve 'xino=off': -2 [ 748.304209][T13733] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2344'. [ 748.721467][T13747] overlay: Unknown parameter '/' [ 748.970079][T13746] netlink: 'syz.5.2346': attribute type 7 has an invalid length. [ 749.353125][T13755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.012579][T13754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.068333][T13426] hsr_slave_0: entered promiscuous mode [ 750.079115][T13426] hsr_slave_1: entered promiscuous mode [ 750.084213][T13426] debugfs: 'hsr0' already exists in 'hsr' [ 750.085890][T13426] Cannot create hsr debugfs directory [ 750.425068][T13221] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 750.483713][T13221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.573812][T13221] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 750.640230][T13221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.714454][T13221] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 750.785627][T13221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.840051][T13221] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 750.915805][T13221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.685016][T13802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.843919][T13801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.119297][ T663] bridge_slave_1: left allmulticast mode [ 754.119327][ T663] bridge_slave_1: left promiscuous mode [ 754.119543][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.338510][ T663] bridge_slave_0: left allmulticast mode [ 754.338537][ T663] bridge_slave_0: left promiscuous mode [ 754.338727][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.602330][T13820] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2363'. [ 754.784417][ T36] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 754.934454][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 754.938993][ T36] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 754.939024][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.939048][ T36] usb 2-1: Product: syz [ 754.939060][ T36] usb 2-1: Manufacturer: syz [ 754.939071][ T36] usb 2-1: SerialNumber: syz [ 754.943408][ T36] usb 2-1: config 0 descriptor?? [ 754.994901][ T36] hub 2-1:0.0: bad descriptor, ignoring hub [ 754.994944][ T36] hub 2-1:0.0: probe with driver hub failed with error -5 [ 755.088495][ T36] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 755.130561][ T6790] usb 2-1: Failed to submit usb control message: -71 [ 755.131726][ T6790] usb 2-1: unable to send the bmi data to the device: -71 [ 755.131749][ T6790] usb 2-1: unable to get target info from device [ 755.131767][ T6790] usb 2-1: could not get target info (-71) [ 755.171763][ T6790] usb 2-1: could not probe fw (-71) [ 755.195357][ T663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.197565][T13830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.198303][T13830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.295378][ T663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.315025][ T11] usb 2-1: USB disconnect, device number 79 [ 755.403986][ T663] bond0 (unregistering): Released all slaves [ 755.498173][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 757.754474][ T821] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 759.132834][ T663] hsr_slave_0: left promiscuous mode [ 759.170549][ T663] hsr_slave_1: left promiscuous mode [ 759.180307][ T663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.327465][ T663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.638213][T12532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 759.693226][T12532] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 759.716272][T12532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 759.723648][T12532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.747578][T12532] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 761.485259][ T663] team0 (unregistering): Port device team_slave_1 removed [ 761.538606][ T663] team0 (unregistering): Port device team_slave_0 removed [ 761.587493][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 761.804433][ T5606] Bluetooth: hci3: command tx timeout [ 763.127420][ T5253] 8021q: adding VLAN 0 to HW filter on device eth10 [ 763.554393][ T821] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 764.391185][ T5606] Bluetooth: hci3: command tx timeout [ 764.404352][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 764.406769][ T821] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 764.406815][ T821] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 764.406839][ T821] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 764.406860][ T821] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 764.409830][ T821] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 764.409859][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.409881][ T821] usb 1-1: Product: syz [ 764.409897][ T821] usb 1-1: Manufacturer: syz [ 764.409913][ T821] usb 1-1: SerialNumber: syz [ 764.562396][ T821] usb 1-1: 0:2 : does not exist [ 764.604834][T13925] libceph: resolve '.F' (ret=-3): failed [ 764.752699][ T821] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 764.852074][ T821] usb 1-1: USB disconnect, device number 64 [ 764.932126][ T5706] udevd[5706]: setting owner of /dev/bus/usb/001/064 to uid=0, gid=0 failed: No such file or directory [ 764.983591][ T37] audit: type=1326 audit(1783162580.076:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13928 comm="syz.5.2384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03c1c4de59 code=0x0 [ 765.027269][ T5706] udevd[5706]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.635624][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 766.454213][ T5606] Bluetooth: hci3: command tx timeout [ 767.854848][ T821] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 768.004359][ T821] usb 2-1: Using ep0 maxpacket: 8 [ 768.188777][ T821] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 768.188892][ T821] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.188952][ T821] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.189028][ T821] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.189092][ T821] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.189290][ T821] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 768.189366][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.619790][ T5606] Bluetooth: hci3: command tx timeout [ 768.667432][ T821] usb 2-1: usb_control_msg returned -32 [ 768.667481][ T821] usbtmc 2-1:16.0: can't read capabilities [ 768.874330][T13980] IPVS: length: 217 != 24 [ 768.874983][T13980] 9p: Bad value for 'rfdno' [ 769.923824][T13984] usbtmc 2-1:16.0: control status returned 0 [ 770.154403][ T6000] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 770.310054][ T6000] usb 1-1: Using ep0 maxpacket: 8 [ 770.318830][ T6000] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 770.318866][ T6000] usb 1-1: config 179 has no interface number 0 [ 770.318903][ T6000] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 770.318924][ T6000] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 770.318947][ T6000] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 770.318968][ T6000] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 770.318990][ T6000] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 770.319025][ T6000] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 770.319043][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.325868][T13990] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 771.064552][ T5722] usb 2-1: USB disconnect, device number 80 [ 771.664376][ T5722] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 771.793611][T14007] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2396'. [ 771.824439][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 771.826822][ T5722] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 771.826863][ T5722] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 771.826884][ T5722] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 771.826903][ T5722] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 771.831019][ T5722] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 771.831045][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.831065][ T5722] usb 2-1: Product: syz [ 771.831080][ T5722] usb 2-1: Manufacturer: syz [ 771.831097][ T5722] usb 2-1: SerialNumber: syz [ 771.924517][ T5722] usb 2-1: 0:2 : does not exist [ 772.113513][ T5722] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 772.337614][ T5722] usb 2-1: USB disconnect, device number 81 [ 772.717313][ T5706] udevd[5706]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.049853][ T5722] usb 1-1: USB disconnect, device number 65 [ 773.179668][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 773.228877][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 774.025348][ C0] ================================================================== [ 774.025368][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 774.025424][ C0] Read of size 1 at addr ffff8880640cf070 by task ktimers/0/16 [ 774.025511][ C0] [ 774.025529][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 774.025563][ C0] Tainted: [L]=SOFTLOCKUP [ 774.025573][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 774.025588][ C0] Call Trace: [ 774.025598][ C0] [ 774.025609][ C0] dump_stack_lvl+0xe8/0x150 [ 774.025647][ C0] print_address_description+0x55/0x1e0 [ 774.025700][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 774.025731][ C0] print_report+0x58/0x70 [ 774.025762][ C0] kasan_report+0x117/0x150 [ 774.025787][ C0] ? irqentry_exit+0x218/0x8f0 [ 774.025821][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 774.025856][ C0] ? rt_spin_lock+0x157/0x400 [ 774.025879][ C0] __kasan_check_byte+0x2a/0x40 [ 774.025904][ C0] lock_acquire+0x84/0x350 [ 774.025932][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.025962][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 774.025991][ C0] ? rt_spin_lock+0x157/0x400 [ 774.026015][ C0] rt_spin_lock+0x157/0x400 [ 774.026040][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 774.026062][ C0] ? rt_spin_unlock+0x157/0x200 [ 774.026089][ C0] ? rt_spin_unlock+0x163/0x200 [ 774.026115][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 774.026225][ C0] __usb_hcd_giveback_urb+0x429/0x5f0 [ 774.026316][ C0] dummy_timer+0xab9/0x4b30 [ 774.026405][ C0] ? __lock_acquire+0x683/0x2ce0 [ 774.026428][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 774.026462][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 774.026502][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 774.026538][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 774.026565][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 774.026596][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 774.026621][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 774.026663][ C0] hrtimer_run_softirq+0x18f/0x260 [ 774.026698][ C0] handle_softirqs+0x1d9/0x6c0 [ 774.026731][ C0] run_ktimerd+0x69/0x100 [ 774.026760][ C0] smpboot_thread_fn+0x57c/0xa80 [ 774.026835][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 774.026867][ C0] kthread+0x388/0x470 [ 774.026900][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 774.026927][ C0] ? __pfx_kthread+0x10/0x10 [ 774.026959][ C0] ret_from_fork+0x514/0xb70 [ 774.026995][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 774.027027][ C0] ? __switch_to+0xc89/0x1420 [ 774.027057][ C0] ? __pfx_kthread+0x10/0x10 [ 774.027089][ C0] ret_from_fork_asm+0x1a/0x30 [ 774.027119][ C0] [ 774.027128][ C0] [ 774.027140][ C0] Allocated by task 6000: [ 774.027186][ C0] kasan_save_track+0x3e/0x80 [ 774.027205][ C0] __kasan_kmalloc+0x93/0xb0 [ 774.027225][ C0] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 774.027245][ C0] xpad_probe+0x43f/0x2040 [ 774.027307][ C0] usb_probe_interface+0x653/0xc60 [ 774.027328][ C0] really_probe+0x254/0xae0 [ 774.027387][ C0] __driver_probe_device+0x1e8/0x360 [ 774.027412][ C0] driver_probe_device+0x4f/0x240 [ 774.027456][ C0] __device_attach_driver+0x270/0x410 [ 774.027483][ C0] bus_for_each_drv+0x25b/0x2f0 [ 774.027516][ C0] __device_attach+0x2c7/0x450 [ 774.027539][ C0] device_initial_probe+0xa1/0xd0 [ 774.027564][ C0] bus_probe_device+0x12d/0x220 [ 774.027595][ C0] device_add+0x7d7/0xb80 [ 774.027616][ C0] usb_set_configuration+0x1ad8/0x2180 [ 774.027649][ C0] usb_generic_driver_probe+0x8d/0x150 [ 774.027733][ C0] usb_probe_device+0x1c3/0x3b0 [ 774.027754][ C0] really_probe+0x254/0xae0 [ 774.027779][ C0] __driver_probe_device+0x1e8/0x360 [ 774.027804][ C0] driver_probe_device+0x4f/0x240 [ 774.027829][ C0] __device_attach_driver+0x270/0x410 [ 774.027852][ C0] bus_for_each_drv+0x25b/0x2f0 [ 774.027882][ C0] __device_attach+0x2c7/0x450 [ 774.027907][ C0] device_initial_probe+0xa1/0xd0 [ 774.027930][ C0] bus_probe_device+0x12d/0x220 [ 774.027960][ C0] device_add+0x7d7/0xb80 [ 774.027980][ C0] usb_new_device+0x98d/0x1610 [ 774.028007][ C0] hub_event+0x28cf/0x4cf0 [ 774.028036][ C0] process_scheduled_works+0xa8e/0x14e0 [ 774.028060][ C0] worker_thread+0xa47/0xfb0 [ 774.028083][ C0] kthread+0x388/0x470 [ 774.028111][ C0] ret_from_fork+0x514/0xb70 [ 774.028140][ C0] ret_from_fork_asm+0x1a/0x30 [ 774.028160][ C0] [ 774.028166][ C0] Freed by task 5722: [ 774.028178][ C0] kasan_save_track+0x3e/0x80 [ 774.028196][ C0] kasan_save_free_info+0x40/0x50 [ 774.028224][ C0] __kasan_slab_free+0x5c/0x80 [ 774.028243][ C0] kfree+0x1c5/0x6c0 [ 774.028273][ C0] xpad_disconnect+0x323/0x440 [ 774.028294][ C0] usb_unbind_interface+0x295/0x9f0 [ 774.028314][ C0] device_release_driver_internal+0x4f5/0x880 [ 774.028341][ C0] bus_remove_device+0x449/0x560 [ 774.028373][ C0] device_del+0x528/0x8f0 [ 774.028409][ C0] usb_disable_device+0x3d4/0x8d0 [ 774.028440][ C0] usb_disconnect+0x32d/0x990 [ 774.028467][ C0] hub_event+0x1bb7/0x4cf0 [ 774.028497][ C0] process_scheduled_works+0xa8e/0x14e0 [ 774.028521][ C0] worker_thread+0xa47/0xfb0 [ 774.028545][ C0] kthread+0x388/0x470 [ 774.028575][ C0] ret_from_fork+0x514/0xb70 [ 774.028605][ C0] ret_from_fork_asm+0x1a/0x30 [ 774.028625][ C0] [ 774.028632][ C0] The buggy address belongs to the object at ffff8880640cf000 [ 774.028632][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 774.028654][ C0] The buggy address is located 112 bytes inside of [ 774.028654][ C0] freed 1024-byte region [ffff8880640cf000, ffff8880640cf400) [ 774.028690][ C0] [ 774.028697][ C0] The buggy address belongs to the physical page: [ 774.028716][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880640c8000 pfn:0x640c8 [ 774.028740][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 774.028758][ C0] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 774.028778][ C0] page_type: f5(slab) [ 774.028798][ C0] raw: 0080000000000240 ffff88813ffb4dc0 ffffea0000a66010 ffffea0001007a10 [ 774.028819][ C0] raw: ffff8880640c8000 000000080010000c 00000000f5000000 0000000000000000 [ 774.028840][ C0] head: 0080000000000240 ffff88813ffb4dc0 ffffea0000a66010 ffffea0001007a10 [ 774.028861][ C0] head: ffff8880640c8000 000000080010000c 00000000f5000000 0000000000000000 [ 774.028882][ C0] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 774.028900][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 774.028912][ C0] page dumped because: kasan: bad access detected [ 774.028927][ C0] page_owner tracks the page as allocated [ 774.028936][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5927, tgid 5927 (kworker/u8:21), ts 129183911744, free_ts 0 [ 774.028973][ C0] post_alloc_hook+0x1f9/0x250 [ 774.029006][ C0] get_page_from_freelist+0x262a/0x26a0 [ 774.029030][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 774.029053][ C0] allocate_slab+0x79/0x5e0 [ 774.029079][ C0] refill_objects+0x2d8/0x350 [ 774.029106][ C0] __pcs_replace_empty_main+0x330/0x690 [ 774.029132][ C0] __kmalloc_noprof+0x544/0x780 [ 774.029151][ C0] ieee802_11_parse_elems_full+0x14b/0x2d60 [ 774.029234][ C0] ieee80211_ibss_rx_queued_mgmt+0x50b/0x2be0 [ 774.029311][ C0] ieee80211_iface_work+0x78a/0x1010 [ 774.029363][ C0] cfg80211_wiphy_work+0x29e/0x420 [ 774.029416][ C0] process_scheduled_works+0xa8e/0x14e0 [ 774.029439][ C0] worker_thread+0xa47/0xfb0 [ 774.029462][ C0] kthread+0x388/0x470 [ 774.029490][ C0] ret_from_fork+0x514/0xb70 [ 774.029517][ C0] ret_from_fork_asm+0x1a/0x30 [ 774.029537][ C0] page_owner free stack trace missing [ 774.029546][ C0] [ 774.029551][ C0] Memory state around the buggy address: [ 774.029565][ C0] ffff8880640cef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 774.029581][ C0] ffff8880640cef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 774.029598][ C0] >ffff8880640cf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.029610][ C0] ^ [ 774.029623][ C0] ffff8880640cf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.029638][ C0] ffff8880640cf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.029650][ C0] ================================================================== [ 774.029670][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 774.029691][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 774.029722][ C0] Tainted: [L]=SOFTLOCKUP [ 774.029731][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 774.029745][ C0] Call Trace: [ 774.029755][ C0] [ 774.029784][ C0] vpanic+0x56c/0xa60 [ 774.029810][ C0] ? __pfx_vpanic+0x10/0x10 [ 774.029839][ C0] panic+0xc5/0xd0 [ 774.029860][ C0] ? __pfx_panic+0x10/0x10 [ 774.029884][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 774.029915][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.029943][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 774.029975][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 774.030004][ C0] check_panic_on_warn+0x89/0xb0 [ 774.030075][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 774.030106][ C0] end_report+0x73/0x170 [ 774.030130][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 774.030160][ C0] kasan_report+0x128/0x150 [ 774.030184][ C0] ? irqentry_exit+0x218/0x8f0 [ 774.030217][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 774.030263][ C0] ? rt_spin_lock+0x157/0x400 [ 774.030286][ C0] __kasan_check_byte+0x2a/0x40 [ 774.030309][ C0] lock_acquire+0x84/0x350 [ 774.030334][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.030361][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 774.030397][ C0] ? rt_spin_lock+0x157/0x400 [ 774.030420][ C0] rt_spin_lock+0x157/0x400 [ 774.030445][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 774.030468][ C0] ? rt_spin_unlock+0x157/0x200 [ 774.030495][ C0] ? rt_spin_unlock+0x163/0x200 [ 774.030520][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 774.030558][ C0] __usb_hcd_giveback_urb+0x429/0x5f0 [ 774.030587][ C0] dummy_timer+0xab9/0x4b30 [ 774.030618][ C0] ? __lock_acquire+0x683/0x2ce0 [ 774.030640][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 774.030674][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 774.030712][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 774.030748][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 774.030774][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 774.030805][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 774.030831][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 774.030870][ C0] hrtimer_run_softirq+0x18f/0x260 [ 774.030904][ C0] handle_softirqs+0x1d9/0x6c0 [ 774.030936][ C0] run_ktimerd+0x69/0x100 [ 774.030965][ C0] smpboot_thread_fn+0x57c/0xa80 [ 774.030994][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 774.031027][ C0] kthread+0x388/0x470 [ 774.031058][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 774.031086][ C0] ? __pfx_kthread+0x10/0x10 [ 774.031118][ C0] ret_from_fork+0x514/0xb70 [ 774.031150][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 774.031180][ C0] ? __switch_to+0xc89/0x1420 [ 774.031210][ C0] ? __pfx_kthread+0x10/0x10 [ 774.031239][ C0] ret_from_fork_asm+0x1a/0x30 [ 774.031269][ C0] [ 774.031689][ C0] Kernel Offset: disabled