last executing test programs: 44.419719426s ago: executing program 3 (id=45): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x420000, 0x0) ioctl$DM_VERSION(r0, 0xc138fd00, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8001}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @empty, 0x10}, 0x1c) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) close(r3) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) open_tree(r3, &(0x7f00000001c0)='./file0\x00', 0x1) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e32, 0x7, @remote, 0xeef}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) 44.134779792s ago: executing program 3 (id=48): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x300000000000000, 0x200000000280, 0x200000000398, 0x2000000004e0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'batadv0\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@dev={0xac, 0x14, 0x14, 0x31}, @empty, 0x0, 0x0, 0xfe, 0x11, 0x4e84ee8874ed0a2d, 0x2e, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) 43.727907514s ago: executing program 3 (id=50): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000001340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) (async) close(0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "bde7a0eaf2"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) (async) ftruncate(r3, 0x400010008008972) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000013c0)={0x1, &(0x7f0000001400)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setxattr$incfs_metadata(&(0x7f0000001440)='./cgroup\x00', &(0x7f0000001480), 0x0, 0x0, 0x1) syz_usb_connect$midi(0x2, 0x4a, &(0x7f00000014c0)=ANY=[@ANYBLOB="12011001000000400c200b104000010203010902380001010740f8090400000001033000132403030406040806470208030803040c08"], 0x0) (async) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001500), 0x28041, 0x0) write$dsp(r6, &(0x7f0000001540)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000001580)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f00000015c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000001600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001640)=0x4081ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001680), 0x8d00, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x1a, 0x2, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 43.67513471s ago: executing program 1 (id=52): syz_emit_ethernet(0x19a, &(0x7f0000002100)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\nA', 0x164, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x0, "00001c"}, {0x3, 0x14, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa35fa32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577ed"}, {0xe}, {0x22, 0xb, "17dcea46805d4809c20004406b18901b0aeff04c0300f3c75dc2d227a83b89483b0000b9e575671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x1, 0xf, &(0x7f0000002380)=ANY=[@ANYBLOB="180800feff00000000000000fbe9ffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000002400)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 41.797103188s ago: executing program 3 (id=60): mmap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0xb, 0x110, 0xffffffffffffffff, 0x400000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x18) r0 = open(&(0x7f0000000000)='./file1\x00', 0x80800, 0x4) r1 = semget$private(0x0, 0x3, 0x45) semop(r1, &(0x7f0000000240)=[{0x0, 0xff}, {0x2, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0x8}], 0x5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000140)={0x1, 0x3, 0x1, 0x9}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000480)={0x3, 0x100, {0xffffffffffffffff}, {0x0}, 0x2, 0x1}) read$FUSE(r0, &(0x7f0000000c00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x13, 0xffffffffffffffff, 0x5ac26000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x8000, 0x1f7) r6 = fanotify_init(0x200, 0x2) fanotify_mark(r6, 0x3a99ba4207623b6a, 0x37, r5, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x81, 0x2a82) fcntl$lock(r7, 0x24, &(0x7f00000002c0)={0x0, 0x0, 0x7, 0x5}) fanotify_mark(r6, 0x1, 0x8000001, r5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r8, 0xc00464af, &(0x7f00000005c0)=r9) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xc) timer_settime(r10, 0x1, &(0x7f0000000380), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) mknodat(r0, &(0x7f0000000680)='./file1\x00', 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x242002, 0x0) getgroups(0x0, &(0x7f00000001c0)) 41.362017511s ago: executing program 3 (id=63): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000140)="4357ae1fd44479434c13921bb1d268ee636983e46d12085ed21da74e1189ba97441c3ca8d53d35cd2be0b1fcc86d661a8425023661cb21f9cab092b99dd7dce047852ee3193a05379b9b9968170c5d71106863107aaf839cecb3efd3089d11f84db33657e2140ee5828fca9560fe0309fc8ad2c5acc1595fb9dd942eef22b6bbb80067e65ffeb88331d1d764569cf137d15aaeafe227b29fd5e9081a4a3fa96817c6981d1f027d490af9aa4c4a37f0cef8f4cc4fa7d03855e08e8a3ef6159d7d71e801177e9ec2bbbd1aeee6530bd1b46533f274b82b4c4d20423544881eb06f98b62538", 0xe4}, {&(0x7f00000002c0)="6c40db6e96d12989be615e89b33d", 0xe}, {&(0x7f0000000380)="33a1a3877313e15e3a2041ce6d142ab678c93c54d06822", 0x17}, {&(0x7f00000003c0)="bcc37060fbfabaee234016c19885fbf4e1b6927b27e4e46ca98167", 0x1b}, {&(0x7f0000000400)="bab247e9990c2c0fe03cbcd709c2d3cdf9d76bee232680c329269080aac8f367240aa4bceca401fff95ba413279339df195924a86fe7e9b20672a670bfd84594c12073ce18e0ce84128a82a368366821a843a639ad84aa223db6782585d14b22b248a3ddbea64498b73cb865ea32a34736fc59f878688b0709c3ccecbeebdd9b8712ca7f820af40a49b7f82105fbcd20e9178b6e58cae570f73a7763bd7c0621892d72016d7f69e5b8f134009871519aa1f682f748c161fd033941e54bd4f2a31b1731fa1963135b4c3dbbef7b7395a7e424ce653239166e9d55bd335af7dd2e89d445b9", 0xe4}], 0x5) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x2703) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000300)={0x0, 0x1b, 0x4, &(0x7f0000000340)={0x1d, "b3df96c264264ccfc600470001010100"}}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0xc, 0x2f0201) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x3, 0x5, &(0x7f0000000040)={0xe, "330be78d86dc0756fe2bfe49c88564556aede2e4a4a09df11efb03e764ebf28d00"}}) 41.226265612s ago: executing program 1 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000940)={0x4, 0x7}) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000580)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x3, &(0x7f0000000a80)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x40, 0x0, 0x5}, @exit], &(0x7f0000000ac0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x2982, 0x0) close(r3) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000740)=@name={0x1e, 0x2, 0x47b8f505e53035ec, {{0x43, 0x2}, 0x3}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010400000000000000000a0000000900010073797a30000000004c000000030a010400000000000000000a0000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002"], 0x148}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r6 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x4, 0x40) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000900)={0x0, 0x7, 0x1008}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x24, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x44000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x1c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x6e}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x30) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00') ioctl$EVIOCGBITKEY(r10, 0x80404521, &(0x7f0000000d80)=""/89) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000b00)={0xffffff}, 0x10) (async) write(r11, &(0x7f0000000b40)="240000001a005f0214f9f4070009040080ff0000fe000005000000000800040001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYBLOB="8b03915cf0204166eefda28c5e81fc7d6110a951ca6b35a11953e9d082d0d5f46ba059021fca4496cbc0b827150668b60d5b96c0a6e820edc9cf275ad3b09e9e071353739be9d4cd3809933bb548f8f6bcc0b29ab303b08325df61ef3d67cacb037a8acc87bba078ba74e20f201e2032e27a781ca5bf14b491c3fd46813f2e3915d90a28987347fd5db65d9a9551d5925135ac3c0647d345fa14dbef5f9a8625aef3752867008554bc823bfc7b08adf61ffc2f3e013190ea9b2edbf4bf3603ac4b85ecd80a117f651c13cdf87e8e06cc255ca29e925c3930f6b8a139770c2fe2744a2bdbb4c654cba1253b4b25a7170977ae7de3", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYRESOCT=r11], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.834548893s ago: executing program 1 (id=68): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0x5, @local, 0xc}, 0x1c, 0x0}, 0x1000000}], 0x1, 0x20000080) 40.632553185s ago: executing program 1 (id=69): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0xffffffffffffff55, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000094) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020400000a0000002bbd700200000000030006006c0000000200000064010102000000000000000002000100000000000002060201000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) ioctl$XFS_IOC_DIOINFO(r5, 0x800c581e, &(0x7f00000002c0)) 40.266379435s ago: executing program 1 (id=70): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000180)={0x80000002, 0xffffffff, 0x100000, 0x400000, 0x2, 0x2}) (fail_nth: 1) 39.928558528s ago: executing program 4 (id=73): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x1, @private1, 0xffffff57}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a01a444a131f4da58a030056dd38e64b029607462029add09240005c6776267517308a3d40aa1c788dfd"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0xf, 0x1, 0x3, 0x4, 0xccb6, 0x81}, 0x20) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000003c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000440)) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x7439) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x7c) r4 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) fcntl$setlease(r5, 0x400, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x88, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00523479b23a2e686e5f15988f4c6009235b4ceb07590e688b7b3040da287cb7ea69f9cf3a0225dcd11ea0759a53ef86e386b6"]) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000600)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f00000009c0)="8076c66eafb3f9c3ab60a330a4cab81458b7d393c3125a6c97403613653ba5500f218239160b0f927af488581405c725e87340171e619880ae7d5a52404a3ae4bdf903b7ebf72ceb8009379be593349bf17622db4e5945b52e886848eaf863281c70af2e30955d7744f168a3fb84a42f0cf35f35698587f755ecac7516c44e517071c2aff72ce476cc65cd785a288f48253bb04786525bc382", 0x99, 0x4008094, 0x0, 0x0) r8 = mq_open(&(0x7f0000000680)='eth0\x00', 0x42, 0x0, 0x0) lseek(r8, 0x50, 0x3) 39.437615857s ago: executing program 4 (id=75): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) unshare(0x6020400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/43, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00'}, 0x48) io_setup(0x4, &(0x7f0000000680)=0x0) io_submit(r2, 0x2, &(0x7f0000000880)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0x52f, 0xffffffffffffffff, &(0x7f00000006c0)="be22832bea6e5b56de5ec15c5313ac9125c7c6836c26d95fc4f2a4a52ece450810cb6f261568a3e38bce9ad589ebe9e58ab35bb95c41c357b0d9ed82db7b265f34c93531297b9128a8551641c186f8c0356c596c79210d7751bf90b6408473f2809497988148c0b05277b64215ad2d", 0x6f, 0x5, 0x0, 0x0, r1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x8, r1, &(0x7f0000000800)="9320f4cf7ec22688b608abf0dc570d473a25dfc10a36b1609d6015697b2a4dc614ccfe9fec", 0x25, 0x6, 0x0, 0x2, r1}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (fail_nth: 18) close(r3) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000640)=0xfffbffff, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="0101010064010101150000000000000000000086dd000000"], 0x38}, 0x1, 0x0, 0x0, 0x2004804}, 0x80c0) sendto$packet(r1, &(0x7f0000000400)="1c86d71e09450589f719fffd9011d957298b3bf8cc0bd5db35fb412dd1ccd8f378fe05d92e9a5f20c1a3b85b7b283aaefb2543c49c903bf840dd880893fbb73e8052ed59e8fd168a66a88ea23636074bce0f43c070898f2a57b4b6d8671a91454187fe8d7025178c6ddb063b286c5363876d8c898d0bdc735ec23f424049e662f6772f840735eb97", 0x88, 0xc815, &(0x7f00000005c0)={0x11, 0x16, r6, 0x1, 0x1, 0x6, @remote}, 0x14) 39.355097147s ago: executing program 0 (id=76): r0 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x4000000ff9, 0xf) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x560b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000084) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0xe0, 0x488902) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x4, 0x1}, 0xc2d0, 0x20, &(0x7f0000000240)="42de94e83c0ab5710fac979a4832559826a606a4b268132baefa056c62eee443f25ab53e419161ade123ed64c627edb02c3977d28c9cc7a9f473733750607f3168a3c2c04bf2dedbbeab26d0", 0x4c, 0x40, 0x100, 0x8001, 0x7fff, 0x1, &(0x7f00000002c0)="a5fd298a4488b323a0eee04a0def4f27d69e75db4d936d2288e56846e6f2a346ae26fff1b5ac6127f416f832750faffdb5dc551fe2ea60cc89ca0cb3046106bd98e62860188a2272abdf914f04a2cfe892f75b83b5838e2e3449ec473f84fd144193f8f23ccf0ede647cbd3bd784964dae78574011479fb3a68e59b75cc4b352f647d78f23f8618d48ea1b530cc1331b134dfc"}) fcntl$notify(r1, 0x402, 0x1a) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) (async) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x42, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x42, 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc}) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 39.252429107s ago: executing program 0 (id=78): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000001c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, 0x0, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x4000000, 0x4000000}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000500), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000540)=0xcde, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000680)={0x18, 0x0, 0x222, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010040004000ffffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080002"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 39.140347067s ago: executing program 0 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r2 = socket$inet_tcp(0x2, 0x1, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10) listen(r2, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0xffea, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) connect$inet(r3, &(0x7f00000007c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000800), 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000840)=@gcm_256={{0x303}, "591fef61a278b8da", "06991213061e9793adb01c27bb4f7d265fc34456c07699bf5b741382189ebc11", "e37800", "639a4d05eaf61ae0"}, 0x38) sendto$inet(r3, &(0x7f0000000880)='\x00', 0xffffff5a, 0x40, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44e6e02cdde5c77010f558000000080000000000", @ANYRES32=r9, @ANYBLOB="9f060000040000002400128009000100626f6e64000000001400028005000100040000000500110001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0xa50, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x4, 0xa}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xa20, 0x2, [@TCA_BASIC_ACT={0x17c, 0x3, [@m_mpls={0x98, 0x17, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x809b}]}, {0x61, 0x6, "21324ec5672ebad90d0987c5715ec34d7f3afa47df6c18b2aca0911e7582158e0c97d952619cb61db6457a5d9c18ae0458dceba7f2eafaaecc7efcc6ad44d5d38a4030d4a402233153626067be61d14c11e9c4982cf3fc25434e6f2e98"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xe0, 0x1e, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x2, 0x80, 0x0, 0xffffffff}, {0x2, 0xfe, 0x1, 0x10000}, {0x9, 0x0, 0xa, 0x54}, {0xd, 0x5, 0x7}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xd7, 0x8, 0x5, 0x6, 0x3628}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x58, 0x6, "cbaf82e7dc8c8950ede42304eec1944d36f94f45d65803b7af39f33f2895233bff8b5a17d46e2fb2cebfc2350c15affdd0edf5f35ffe052049a3c578d3435e71ea7af2840593901cc06e52f7b22fea4b24a83920"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_POLICE={0x898, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0xfffffffd, 0x7fffffff, 0xc5, 0x0, 0x467, 0x8931, 0x4, 0xe, 0x4, 0x40, 0x8, 0xe35, 0x4, 0xffffffff, 0x8, 0x0, 0x2, 0x3ff, 0x97dd, 0x7fff, 0x2, 0x7f, 0x2, 0x79b, 0x5, 0x9, 0x6, 0x7, 0x6, 0x7, 0x2, 0x1, 0x10000, 0xa, 0x1, 0x40, 0x1ff, 0x3, 0x9, 0x2, 0x5, 0x9, 0x2, 0x7, 0x4, 0x1, 0xfffffe01, 0x3, 0x400, 0x9, 0xfffffffb, 0x1, 0x4, 0x9, 0x7901a7d1, 0x7, 0xd68, 0xf, 0x80, 0x0, 0xfb6, 0x2, 0x101, 0x9, 0x7, 0x8, 0x7, 0x8, 0x6, 0x1, 0x8, 0x3, 0x10, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0xa0, 0x0, 0xfffff77d, 0x5, 0xe7a, 0x81, 0x4, 0x100, 0x5, 0x0, 0x9, 0x80, 0x0, 0x4, 0xffffe3a1, 0x7, 0x0, 0x1, 0x8, 0x2269, 0x22, 0x8, 0x5dad, 0x7307, 0x7, 0x1, 0x401, 0x7, 0x40, 0x5, 0x3, 0x100, 0x0, 0xc4f, 0xfffffffc, 0x8, 0x1ff, 0x4, 0x7, 0x4, 0x5, 0x100, 0xc74, 0xb5c5, 0x9, 0x1000, 0xfffffffe, 0x7, 0x1d0, 0x7, 0x7, 0x4, 0x400, 0x1, 0x3, 0xfffffffd, 0xb5e, 0x0, 0x8, 0x63, 0x8, 0x6, 0x4, 0x7, 0x7, 0x0, 0xa6d6, 0x8, 0x7f, 0x4, 0xc, 0x3, 0x80, 0xd7, 0x1, 0x5, 0x9, 0x4, 0x8001, 0x61, 0xf5, 0x6, 0x1ff, 0x8, 0x2, 0x9, 0x7fffffff, 0x4, 0x1, 0x9, 0xa, 0x2, 0x2, 0x9, 0x100, 0x137, 0x7, 0x7, 0x7, 0x4, 0x1, 0xffffa6f5, 0x8, 0x50a, 0x9, 0xe0, 0x0, 0xc8a, 0x4e, 0xb7, 0x7, 0x0, 0x0, 0x5, 0x81, 0x2, 0x3, 0x3, 0xce63, 0x8, 0xd5, 0x8000, 0x6, 0x836, 0x1, 0xab6d, 0x8, 0x1, 0x2, 0x51, 0xfcc800, 0x6, 0x6, 0xa1, 0x5, 0x8000, 0x8, 0x3, 0x5, 0xf, 0x0, 0x3d3, 0x7fff, 0x7, 0x4, 0x0, 0x5, 0x2, 0x7ff, 0x0, 0x2, 0xfffffffd, 0x1, 0x101, 0x3, 0x9, 0x14, 0x8000, 0x9, 0x5a, 0xd0c, 0x4, 0x2, 0x9, 0x8, 0x2, 0x9c10, 0xf, 0x4, 0x7, 0x5f0, 0x5, 0x7, 0x4, 0xffff8000, 0x3, 0x435]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x100000, 0x5, 0xf, {0xc6, 0x2, 0x0, 0x0, 0x1a}, {0x3, 0x2, 0x1, 0x2, 0xffff, 0x3}, 0x2, 0x7, 0x8001}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0xfffffffc, 0x4, 0x1, 0x5, 0x20000000, 0x3, 0xd, 0x7f, 0x6, 0x3, 0xff, 0x5, 0x4, 0xffffff81, 0x8, 0xc, 0x1, 0x3, 0x7, 0x8, 0x7, 0x2, 0x0, 0x5, 0xd56d, 0x1, 0x1, 0x1, 0x80, 0xf, 0x5, 0x100003, 0x0, 0x5, 0x7, 0x800, 0x9, 0x6, 0x7ff, 0x4, 0x99, 0x200, 0x1bae, 0x7f, 0x60, 0x9, 0x4, 0x80, 0x10, 0x3, 0xe, 0x28e7, 0xfffff001, 0x1, 0x5, 0x2, 0x2, 0x1, 0x2, 0x5, 0x417, 0x9196, 0xffffffff, 0xffff, 0x2, 0x3ff, 0x38000000, 0x2f46, 0x6, 0x0, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5, 0xfffffffb, 0x8000, 0x2, 0x4, 0x1, 0x3, 0x5, 0x0, 0x9, 0x5, 0x3ff, 0x2, 0x9, 0x0, 0x0, 0x1ff, 0x10, 0x8001, 0x2, 0x5, 0x7, 0x4, 0x10, 0x800, 0xfffffff7, 0x1, 0x0, 0x1, 0x9, 0x800, 0x54e, 0x1, 0x2, 0x5, 0x1, 0x1, 0xd, 0x5, 0x2, 0x5df, 0x3, 0x0, 0xff, 0x9, 0x5, 0x0, 0x6, 0x3ff, 0x4, 0x5, 0xb, 0x8, 0x8000, 0x0, 0x8, 0x85a, 0x52400000, 0x935, 0x8, 0x7, 0x5, 0x5, 0x2da, 0x9, 0x2, 0xfffffff4, 0x5, 0x0, 0x470, 0x80000001, 0x8000, 0x4, 0x10000, 0x8, 0x6, 0x441, 0x7, 0x756f7079, 0x1, 0x4, 0x8000, 0x9, 0x24, 0xfffffffb, 0xff, 0x7, 0x4, 0xbc, 0x5b, 0x40, 0x0, 0x5, 0x3, 0x3, 0x7fff, 0x1, 0x10, 0x1, 0x5, 0x8c, 0x2, 0xc, 0x3, 0xe72, 0x400, 0x8a2e, 0xd3, 0x10000, 0xb, 0x2, 0x4ee, 0xc8e0, 0x80000000, 0x2, 0x400, 0x5, 0x9, 0x1, 0x9, 0x8, 0x1d, 0x8001, 0x5, 0x80, 0xfcd7, 0x6, 0x3, 0x3fffc, 0x54f, 0xaf1, 0x0, 0x3ff, 0x4, 0x6, 0x4, 0x7, 0x2, 0x2, 0x4c, 0x4fc7df24, 0x40, 0x9e0, 0x3ff, 0x10001, 0x80000000, 0x4b2b, 0xffff0001, 0x3, 0xfff, 0x9, 0xc0, 0x6, 0x7, 0x6, 0x7, 0x3, 0x3, 0x8, 0x9, 0xfffffff9, 0x80000001, 0x9, 0x6b, 0x1, 0x400, 0x7fff, 0x0, 0xa, 0x4, 0xf, 0x6f6, 0x1, 0x2, 0x2, 0x7, 0x7, 0x3, 0xffffffff, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xfff3}}]}}]}, 0xa50}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 38.982345603s ago: executing program 0 (id=82): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="b800000010000100"/19, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}}, 0x4008004) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000340)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$getflags(r2, 0xb) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x1, 0xc, 0x4d, 0x4, 0x6, 0x2, 0x45, 0xac, 0x1, 0x3, 0x9, 0x3, 0x180000000}, {0x9, 0x7, 0xa, 0x0, 0x8, 0x7, 0x4d, 0xff, 0x2, 0xfe, 0x9, 0x1, 0x20000000006}, {0x2, 0x2, 0x77, 0x84, 0x8, 0x8, 0xfd, 0x40, 0x5, 0x2, 0x4, 0x6, 0xff}], 0xf87}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendto$unix(r5, &(0x7f00000000c0)="97dd17a34455", 0x6, 0x20000050, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x40110) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x18, {[@local=@item_012={0x1, 0x2, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @local=@item_4={0x3, 0x2, 0x0, "ff3a6e34"}, @main=@item_012={0x2, 0x0, 0xa, '\a\x00'}, @local=@item_4={0x3, 0x2, 0x9, "0f3d065a"}, @main=@item_4={0x3, 0x0, 0xa, "d47a4083"}]}}, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r10 = syz_open_dev$vcsu(&(0x7f0000000540), 0x10, 0x4ce0440095098826) connect$inet(r10, &(0x7f0000000580)={0x2, 0x4e20, @empty}, 0x10) unshare(0x22020600) 37.811305016s ago: executing program 1 (id=84): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x6, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x7ffd, 0x1, 0x5, 0x2, 0x0, 0x802, 0x9, 0x3, 0x1, 0xffffffdffffffff4, 0x200000004a, 0x400000000005, 0xf9, 0xd, 0xe1, 0x413, 0x1, 0x2a9, 0x8, 0xc39, 0x3, 0x8, 0xfffffffc, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7e4, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x7, 0x0, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5ba, 0x1, 0x7ffffffe, 0x3, 0x7ffc, 0xc9, 0x7, 0x6, 0xc, 0xffffffff, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0xfffffffffffffffc, 0xd, 0x1f, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x9, 0x200000000007, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x0, 0x50000000000000, 0xe, 0x0, 0x0, 0x3000000003, 0x2, 0x7, 0x6, 0x3, 0x8, 0x2, 0x0, 0x3, 0x40, 0x0, 0x7, 0xe, 0x1000003]}) syz_usb_connect(0x5, 0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406000005240002000d240f0110000000d500ff000306241a0300d509050a"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000006c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000700)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000740)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000002b80)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000780)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000840)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000002c80)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x70000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x2000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x2, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xf, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x3c, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) 37.638562415s ago: executing program 2 (id=85): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\x00\f\x00\x00', @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000000000000000000000000000000000000000000001516dbf6427a48a99ce837eec501b942e94b51f45b010598d9f439c8d97c22b9cb8cacf1153bce4f183fbbc3be1edf733540ef30a5d06fc9558"], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)='4', 0x1}], 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@union={0xe, 0x1, 0x0, 0x5, 0x1, 0x6, [{0xd, 0x0, 0x3}]}]}, {0x0, [0x2e, 0x61, 0x5f, 0x61, 0x5f, 0x0]}}, &(0x7f0000000400)=""/5, 0x38, 0x5, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x7, 0x7, 0x5, 0x8002, r4, 0x2, '\x00', 0x0, r5, 0x2, 0x3, 0x1, 0x0, @value=r6}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan0\x00'}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000980)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x22}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x24000800) openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x800, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) ioctl$EVIOCGBITSND(r8, 0x80004508, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000a40)={0x82000000, 0x1}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0xc0041, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000ac0)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000b00)=0x90) write$tun(r10, &(0x7f0000000b40)={@void, @void, @ipv6=@gre_packet={0x4, 0x6, "e2a6a3", 0x223, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2, [0x89a3]}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "768ab8fa3e8ad5d134f164549969133534e7ee032fb27eacaa664b7df2020bc458b65952a474e9f099eaae2bd9ceefdfd02822cec51d459abf155f1e9c8c9a94782bc10cdc8c335cf2f76f4a9c44f70d572426be1b18fbac1120cdceb27d5cec7682bb468f943eb5012295b2b7829d6b46b31b9e27df805ca287eca67e3fca7e8e6192a97fb39368057e986a56dfdff6f0ae046b258188d4db09299fe327118f1d0868c219eae9b6ce8eeb7ac184d600d44f681802ade533e0f85a0c45b9865dd44bdff4edac05ab8af4ff2963cd91850112f4cfa7619b6edd5cfb9ef51c333e45b568f2c681"}, {0x8, 0x88be, 0x0, {{0xc, 0x1, 0x6, 0x2, 0x0, 0x2, 0x2, 0x25}, 0x1, {0x68bb}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x6, 0x1, 0x1, 0x2, 0x4, 0x3}, 0x2, {0x0, 0x3, 0x3, 0x2, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "2b4d2c369660b2f3ff2d0fcbae1b1c17eed19e891d351d247c889372f7e2f2f6cd56c5438df36618f82faddcb04776dc604247ff362736ab30326a603e8f0913322af0243d47bf4d327b5e159b22a920d11576ef8656ed025d71f1176973663875c50b9d099a63085707793ed08dbbc65ac3ab8c37d19f462a22ee6fa9eb2b78863fc0ca9e155a6c80d35ad20d47f31c28f05cfa94221672ce6e1c430ab9853400dfc43e95d5f5c14a9110339f45f8b99a7c2e8ec1d77827c3b7c048cc1a0d028220edb965651746c7813e6bcc1f638cf784d40e10965de9159ac62f801cfae97f7ffb79e1c858cae5fb0d23684cd62c08fb56cfdf0977"}}}}}, 0x24b) sendmsg$nl_route(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 37.520167222s ago: executing program 3 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x40}}, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f00000004c0)={0x0, [[0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xfffffffb, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000780)="b4eb3b47", 0x4}, {0x0}], 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x1, 0x138, [0x200000002200, 0x0, 0x0, 0x200000002230, 0x200000002260], 0x0, 0x0, &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x20, 0x78fe936e12801826, 'veth1_to_bond\x00', 'nr0\x00', 'pim6reg0\x00', 'team_slave_1\x00', @random="27a280318546", [0xff, 0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}]}, 0x1b0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/key-users\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/68, 0x44}], 0x1, 0x29, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000002c0)={0x8, 0x1}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x3, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) close(0x4) 37.25387564s ago: executing program 4 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000002900)=""/128) (async, rerun: 32) syz_create_resource$kvm_nested_state(&(0x7f00000004c0)=@vmx={0x8, 0x0, 0x2080, {0x30000, 0x9000, {0x2}, 0x1, 0x3ff}, {"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", "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"}}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x7, 0x50000, 0x1000, &(0x7f00005d4000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = open(&(0x7f0000000200)='./file1\x00', 0x14400, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00005d4000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000240)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) (async, rerun: 32) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000002540)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000180)={0x7, 0x7, {0xffffffffffffffff}, {0xee00}, 0x9, 0x1}) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000001000000a00300000200"], 0x50) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000002640), &(0x7f0000002680), 0x1800, r7}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000026c0)={r7, &(0x7f0000002700), &(0x7f0000002740)=""/240}, 0x20) (async, rerun: 64) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000002640), &(0x7f0000002680)={'L-', 0x200}, 0x16, 0x3) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000002840)=""/150) r10 = getpgid(0x0) (async, rerun: 32) ioctl$int_in(r9, 0x5452, &(0x7f0000000440)=0xfffffffffffffffa) (rerun: 32) fcntl$setownex(r9, 0xf, &(0x7f0000000480)={0x2, r10}) (async, rerun: 32) close(r8) (async, rerun: 32) fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) (async) r11 = getegid() (async) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x1, r5}, {0x2, 0x3, r6}], {0x4, 0x2}, [{0x8, 0x2, r11}, {0x8, 0x2, r12}], {0x10, 0x7}, {0x20, 0x6}}, 0x44, 0x3) 37.042675611s ago: executing program 2 (id=88): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 4) 36.434834628s ago: executing program 2 (id=89): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='veth0\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x1234, 0x300, @remote}, 0x1c) 36.351848519s ago: executing program 0 (id=90): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0xfffffffffffffffd) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x1f, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0xf}, @TCA_PIE_LIMIT={0x8, 0x2, 0x40000000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) 36.178865355s ago: executing program 2 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0xfffffffffffffff0, 0x0, 0x20008004}, 0x4) 36.127186592s ago: executing program 2 (id=92): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000840)={0xa, 0x4e23, 0x6, @remote, 0x5}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)='s', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)="402bbe", 0x3}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1400000000000000290000003e000000f7ffffff00000000580000000000000029000000390000002b0801c6000000000000000000000000000000000000000020010000000000000000000000000002fe8000000000000000000000000000aa0000000000000000000000000000000124000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYBLOB="00000000f0000000"], 0x188}}], 0x2, 0xc010) (fail_nth: 75) 36.057363157s ago: executing program 4 (id=93): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x1, 0xc, &(0x7f0000002580)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000002600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.594366713s ago: executing program 2 (id=94): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000580)=0x800001, 0x4) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000600)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000640)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000680)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x80000003) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000080)=0x8b, 0x100000500) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000480)={0x85, "fa02791d3a69a24bf102000000000000e9dee1b80000000100001000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000004c0)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000500)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r5, &(0x7f0000000280)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000440), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 35.566245559s ago: executing program 4 (id=95): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="270201000000000008000a00", @ANYRES32=r1, @ANYBLOB="200012800e0001006970366772657461700000000c000280080001003238"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x100) lseek(r2, 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000280)=[{{&(0x7f0000000300)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)='g', 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r4, &(0x7f0000000480)="8b", 0x34000, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)='.', 0x1}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r5, &(0x7f0000000600)="a8000000410001000300000000000000030100002a0000003200010000112233445566778899aabb88a8450088a8aaaa40004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x78, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x0, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0xfffffffffffffee0, 0x2c, 0xfffff097}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x48048) 34.863548539s ago: executing program 0 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x28, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x5, 0x0, 0x0, @fd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x48080) (fail_nth: 2) 34.626072914s ago: executing program 4 (id=97): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000004c0)={0xb, {"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", 0x1000}}, 0x1006) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)="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", 0x1be}, {&(0x7f0000001900)="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", 0x184}, {&(0x7f0000001ac0)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd35", 0x2a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000001b00)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{&(0x7f0000001b80)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000001c00)=[{&(0x7f0000001c80)=""/102, 0x365}, {&(0x7f0000001d00)=""/76, 0x14c}, {&(0x7f0000001d80)=""/4096, 0x197}, {&(0x7f0000002d80)=""/92, 0x645}, {&(0x7f0000002e00)=""/73, 0x1b}, {&(0x7f0000002e80)=""/77, 0x188}, {&(0x7f0000002f00)=""/154, 0x2c}, {&(0x7f0000002fc0)=""/17, 0x1d8}], 0x21, &(0x7f0000003000)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f00000030c0)={0x77359400}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000001540)={0x10000011}) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000003100)=0x43f9, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e23, @local}]}, &(0x7f00000003c0)=0x10) listen(r5, 0xa) r7 = gettid() r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001580)={'syz_tun\x00'}) getsockname$l2tp6(r8, &(0x7f00000015c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001600)=0x20) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000001500)={0x0, 0x0, 0xfd8b, 0x5, r7}) fcntl$setown(r3, 0x8, r7) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c000000390001000000000000009b05987adfc3a682272651630c4aefcab3cf91958b890151c62808b182fae4607e5a61a75d8199f04ae763bd260e786268e54c4a181ad433ed95b36c08eb3e2a1f678ebbcd1ebce6f0b02f634fdce61f43a05107e019b99ec310d8982920b056a953a61a3ffc98e08f2eb7ebf00036f978057f99cd261831f964d7d4"], 0x8c}, 0x1, 0x0, 0x0, 0x297a44bee218ce4f}, 0x0) 0s ago: executing program 32 (id=84): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x6, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x7ffd, 0x1, 0x5, 0x2, 0x0, 0x802, 0x9, 0x3, 0x1, 0xffffffdffffffff4, 0x200000004a, 0x400000000005, 0xf9, 0xd, 0xe1, 0x413, 0x1, 0x2a9, 0x8, 0xc39, 0x3, 0x8, 0xfffffffc, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7e4, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x7, 0x0, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5ba, 0x1, 0x7ffffffe, 0x3, 0x7ffc, 0xc9, 0x7, 0x6, 0xc, 0xffffffff, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0xfffffffffffffffc, 0xd, 0x1f, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x9, 0x200000000007, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x0, 0x50000000000000, 0xe, 0x0, 0x0, 0x3000000003, 0x2, 0x7, 0x6, 0x3, 0x8, 0x2, 0x0, 0x3, 0x40, 0x0, 0x7, 0xe, 0x1000003]}) syz_usb_connect(0x5, 0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406000005240002000d240f0110000000d500ff000306241a0300d509050a"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000006c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000700)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000740)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000002b80)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000780)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000840)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000002c80)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x70000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x2000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x2, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xf, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x3c, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.40' (ED25519) to the list of known hosts. [ 79.431532][ T5621] cgroup: Unknown subsys name 'net' [ 79.541350][ T5621] cgroup: Unknown subsys name 'cpuset' [ 79.551253][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.237136][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.487782][ T4951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.489799][ T4951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.491002][ T4951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.491651][ T4951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.493776][ T4951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.494144][ T4951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.494886][ T4951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.496639][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.521325][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.523133][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.614412][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.617029][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.632011][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.633202][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.633854][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.662672][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.666210][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.674698][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.700351][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.703954][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.740241][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.741864][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.743311][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.744588][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.745231][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.874722][ T5649] br_netfilter no longer supported in user namespaces [ 86.996348][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.997429][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.997613][ T5646] bridge_slave_0: entered allmulticast mode [ 87.000113][ T5646] bridge_slave_0: entered promiscuous mode [ 87.065271][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.065392][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.065557][ T5644] bridge_slave_0: entered allmulticast mode [ 87.090530][ T5644] bridge_slave_0: entered promiscuous mode [ 87.102185][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.102315][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.102684][ T5644] bridge_slave_1: entered allmulticast mode [ 87.105451][ T5644] bridge_slave_1: entered promiscuous mode [ 87.153499][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.153614][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.153753][ T5646] bridge_slave_1: entered allmulticast mode [ 87.155792][ T5646] bridge_slave_1: entered promiscuous mode [ 87.213937][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.214055][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.214212][ T5649] bridge_slave_0: entered allmulticast mode [ 87.216681][ T5649] bridge_slave_0: entered promiscuous mode [ 87.247809][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.247922][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.249024][ T5649] bridge_slave_1: entered allmulticast mode [ 87.250940][ T5649] bridge_slave_1: entered promiscuous mode [ 87.360584][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.391922][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.414223][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.435220][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.440404][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.440996][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.442040][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.442387][ T5650] bridge_slave_0: entered allmulticast mode [ 87.446814][ T5650] bridge_slave_0: entered promiscuous mode [ 87.485715][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.485792][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.485880][ T5647] bridge_slave_0: entered allmulticast mode [ 87.488360][ T5647] bridge_slave_0: entered promiscuous mode [ 87.520092][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.520250][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.520355][ T5650] bridge_slave_1: entered allmulticast mode [ 87.521620][ T5650] bridge_slave_1: entered promiscuous mode [ 87.556174][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.573789][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.573900][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.574391][ T5647] bridge_slave_1: entered allmulticast mode [ 87.575842][ T5647] bridge_slave_1: entered promiscuous mode [ 87.592254][ T5631] Bluetooth: hci1: command tx timeout [ 87.646311][ T5646] team0: Port device team_slave_0 added [ 87.664919][ T5644] team0: Port device team_slave_0 added [ 87.667905][ T5634] Bluetooth: hci0: command tx timeout [ 87.668130][ T5631] Bluetooth: hci2: command tx timeout [ 87.668254][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.702486][ T5646] team0: Port device team_slave_1 added [ 87.705348][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.710557][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.719961][ T5644] team0: Port device team_slave_1 added [ 87.746567][ T5649] team0: Port device team_slave_0 added [ 87.748114][ T5631] Bluetooth: hci3: command tx timeout [ 87.780566][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.802110][ T5649] team0: Port device team_slave_1 added [ 87.827186][ T5631] Bluetooth: hci4: command tx timeout [ 87.831565][ T5650] team0: Port device team_slave_0 added [ 87.851740][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.851755][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.851779][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.885296][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.885359][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.885433][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.908639][ T5650] team0: Port device team_slave_1 added [ 87.965218][ T5647] team0: Port device team_slave_0 added [ 87.965981][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.965992][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.966011][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.018614][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.018636][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.018664][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.020041][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.020054][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.020074][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.094215][ T5647] team0: Port device team_slave_1 added [ 88.122260][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.122295][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.122323][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.124214][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.124229][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.124252][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.229689][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.229706][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.229730][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.286671][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.286692][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.286710][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.298637][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.298684][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.298751][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.418300][ T5646] hsr_slave_0: entered promiscuous mode [ 88.419214][ T5646] hsr_slave_1: entered promiscuous mode [ 88.430422][ T5644] hsr_slave_0: entered promiscuous mode [ 88.433977][ T5644] hsr_slave_1: entered promiscuous mode [ 88.436528][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 88.436575][ T5644] Cannot create hsr debugfs directory [ 88.473849][ T5649] hsr_slave_0: entered promiscuous mode [ 88.474642][ T5649] hsr_slave_1: entered promiscuous mode [ 88.475182][ T5649] debugfs: 'hsr0' already exists in 'hsr' [ 88.475199][ T5649] Cannot create hsr debugfs directory [ 88.585394][ T5650] hsr_slave_0: entered promiscuous mode [ 88.586240][ T5650] hsr_slave_1: entered promiscuous mode [ 88.586785][ T5650] debugfs: 'hsr0' already exists in 'hsr' [ 88.586802][ T5650] Cannot create hsr debugfs directory [ 88.667663][ T5647] hsr_slave_0: entered promiscuous mode [ 88.668999][ T5647] hsr_slave_1: entered promiscuous mode [ 88.669592][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 88.669608][ T5647] Cannot create hsr debugfs directory [ 89.248149][ T5646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.268689][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.271344][ T5646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.276628][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.285020][ T5646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.296268][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.302597][ T5646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.323836][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.409986][ T5644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.415714][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.439754][ T5644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.444404][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.461614][ T5644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.465473][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.492117][ T5644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.496064][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.593197][ T5649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.603279][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.613794][ T5649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.625003][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.646233][ T5649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.656938][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.661611][ T5649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.666063][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.668429][ T5631] Bluetooth: hci1: command tx timeout [ 89.747530][ T5634] Bluetooth: hci0: command tx timeout [ 89.747624][ T5631] Bluetooth: hci2: command tx timeout [ 89.771705][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.810432][ T5650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.815180][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.837397][ T5631] Bluetooth: hci3: command tx timeout [ 89.839096][ T5650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.845063][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.845909][ T5650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.871163][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.876541][ T5650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.893551][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.907532][ T5631] Bluetooth: hci4: command tx timeout [ 89.951026][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.012287][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.012422][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.053721][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.053801][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.100878][ T5647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.104072][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.104883][ T5647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.113582][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.122422][ T5647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.133356][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.171997][ T5647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.185932][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.212885][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.310152][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.312079][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.359026][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.359144][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.402230][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.402339][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.450673][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.465410][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.465486][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.508813][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.528724][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.528816][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.565390][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.646666][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.693191][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.693276][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.730288][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.748964][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.749042][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.835478][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.855182][ T5646] veth0_vlan: entered promiscuous mode [ 90.885802][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.885887][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.912896][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.933782][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.950521][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.950598][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.976324][ T5646] veth1_vlan: entered promiscuous mode [ 91.124294][ T5646] veth0_macvtap: entered promiscuous mode [ 91.162400][ T5646] veth1_macvtap: entered promiscuous mode [ 91.185447][ T5649] veth0_vlan: entered promiscuous mode [ 91.200841][ T5644] veth0_vlan: entered promiscuous mode [ 91.215624][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.231558][ T5644] veth1_vlan: entered promiscuous mode [ 91.263594][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.264092][ T5649] veth1_vlan: entered promiscuous mode [ 91.313254][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.324047][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.376403][ T5644] veth0_macvtap: entered promiscuous mode [ 91.398227][ T5644] veth1_macvtap: entered promiscuous mode [ 91.477876][ T5649] veth0_macvtap: entered promiscuous mode [ 91.506236][ T5649] veth1_macvtap: entered promiscuous mode [ 91.526850][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.527584][ T159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.530721][ T151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.530857][ T151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.530954][ T151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.581217][ T5650] veth0_vlan: entered promiscuous mode [ 91.615445][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.651593][ T5650] veth1_vlan: entered promiscuous mode [ 91.676637][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.676669][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.695599][ T159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.695651][ T159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.695707][ T159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.697675][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.716585][ T5647] veth0_vlan: entered promiscuous mode [ 91.747753][ T5631] Bluetooth: hci1: command tx timeout [ 91.756036][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.796750][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.796774][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.824325][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.837860][ T5634] Bluetooth: hci0: command tx timeout [ 91.837960][ T5631] Bluetooth: hci2: command tx timeout [ 91.844885][ T5647] veth1_vlan: entered promiscuous mode [ 91.898354][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.898409][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.898449][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.921685][ T5631] Bluetooth: hci3: command tx timeout [ 91.990745][ T5631] Bluetooth: hci4: command tx timeout [ 91.994763][ T993] cfg80211: failed to load regulatory.db [ 92.028757][ T5650] veth0_macvtap: entered promiscuous mode [ 92.114559][ T5650] veth1_macvtap: entered promiscuous mode [ 92.129932][ T5646] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.135525][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.135547][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.180591][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.280567][ T5647] veth0_macvtap: entered promiscuous mode [ 92.302047][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.302071][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.368417][ T5647] veth1_macvtap: entered promiscuous mode [ 92.384916][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.422156][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.422183][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.486760][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.534585][ T5734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 92.545726][ T5734] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.580883][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.600866][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.600889][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.638870][ T5737] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 92.668085][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.695787][ T5737] team0: Device xfrm0 is of different type [ 92.724014][ T5734] tipc: Started in network mode [ 92.724055][ T5734] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 92.724713][ T5734] tipc: Enabled bearer , priority 0 [ 92.917274][ T151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.918520][ T159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.918569][ T159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.918631][ T159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.918670][ T159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.001637][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.001664][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.049389][ T159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.049464][ T159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.049504][ T159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.054602][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.054629][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.159831][ T5744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6'. [ 93.214633][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.214655][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.334213][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.334237][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.401709][ T5747] bridge_slave_0: left allmulticast mode [ 93.401738][ T5747] bridge_slave_0: left promiscuous mode [ 93.402666][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.464871][ T5747] bridge_slave_1: left allmulticast mode [ 93.464902][ T5747] bridge_slave_1: left promiscuous mode [ 93.465137][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.521402][ T5747] bond0: (slave bond_slave_0): Releasing backup interface [ 93.548132][ T5747] bond0: (slave bond_slave_1): Releasing backup interface [ 93.582336][ T5747] team0: Port device team_slave_0 removed [ 93.593249][ T5747] team0: Port device team_slave_1 removed [ 93.596533][ T5747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.596641][ T5747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.624300][ T5747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.624328][ T5747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.642447][ T5747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.674459][ T5751] team0: Port device xfrm0 added [ 93.686243][ T5753] tipc: Started in network mode [ 93.686275][ T5753] tipc: Node identity f204911dfaec, cluster identity 4711 [ 93.686514][ T5753] tipc: Enabled bearer , priority 0 [ 93.727936][ T29] tipc: Node number set to 11578026 [ 93.828950][ T5631] Bluetooth: hci1: command tx timeout [ 93.901463][ T5756] bridge_slave_0: left allmulticast mode [ 93.901495][ T5756] bridge_slave_0: left promiscuous mode [ 93.902702][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.910800][ T5634] Bluetooth: hci0: command tx timeout [ 93.910865][ T5631] Bluetooth: hci2: command tx timeout [ 93.975751][ T5756] bridge_slave_1: left allmulticast mode [ 93.975782][ T5756] bridge_slave_1: left promiscuous mode [ 93.976045][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.998327][ T5631] Bluetooth: hci3: command tx timeout [ 94.037647][ T5761] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 94.067468][ T5631] Bluetooth: hci4: command tx timeout [ 94.071573][ T5762] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.099450][ T5756] bond0: (slave bond_slave_0): Releasing backup interface [ 94.127954][ T5760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7'. [ 94.154812][ T5756] bond0: (slave bond_slave_1): Releasing backup interface [ 94.243198][ T5756] team0: Port device team_slave_0 removed [ 94.284306][ T5756] team0: Port device team_slave_1 removed [ 94.314061][ T5756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.314088][ T5756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.335747][ T5756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.335772][ T5756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.365179][ T5756] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.412451][ T5757] tipc: Started in network mode [ 94.412496][ T5757] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 94.412713][ T5757] tipc: Enabled bearer , priority 0 [ 94.462284][ T5769] team0: Device xfrm0 is of different type [ 94.473996][ T5775] tipc: Started in network mode [ 94.474029][ T5775] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 94.474246][ T5775] tipc: Enabled bearer , priority 0 [ 94.578771][ T5704] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.682059][ T5720] tipc: Node number set to 149459229 [ 94.732604][ T5704] usb 4-1: New USB device found: idVendor=046d, idProduct=ca04, bcdDevice=0.00 [ 94.747236][ T5704] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.747272][ T5704] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.747299][ T5704] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.747336][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.814414][ T5704] usb 4-1: config 0 descriptor?? [ 95.408045][ T29] tipc: Node number set to 11578026 [ 95.419588][ T5640] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.569605][ T5640] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 95.572049][ T5640] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.572101][ T5640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.572128][ T5640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.572152][ T5640] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.572196][ T5640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.586095][ T5640] usb 3-1: config 0 descriptor?? [ 95.646836][ T5712] tipc: Node number set to 11578026 [ 95.715373][ T5797] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 95.789995][ T5704] usbhid 4-1:0.0: can't add hid device: -71 [ 95.790116][ T5704] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 95.825542][ T5704] usb 4-1: USB disconnect, device number 2 [ 95.855226][ T5797] team0: Port device syz_tun added [ 95.856645][ T5802] tipc: Resetting bearer [ 96.144222][ T5789] Zero length message leads to an empty skb [ 96.310361][ T5806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.500740][ T5809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17'. [ 96.714171][ T5815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18'. [ 96.749458][ T5816] netlink: 'syz.3.19': attribute type 3 has an invalid length. [ 97.042921][ T5818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20'. [ 97.140755][ T5818] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 97.157104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.167114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.237091][ T5704] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.256612][ T5818] team0: Device xfrm0 is of different type [ 97.321414][ T5827] tipc: Enabling of bearer rejected, already enabled [ 97.323394][ T5826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.21'. [ 97.388707][ T5704] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 97.390608][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.390656][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.390684][ T5704] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.390707][ T5704] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.390751][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.584108][ T5730] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 97.627095][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.809878][ T10] usb 1-1: New USB device found: idVendor=046d, idProduct=ca04, bcdDevice=0.00 [ 97.835422][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.835458][ T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.835486][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.835570][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.882204][ T10] usb 1-1: config 0 descriptor?? [ 98.178027][ T5833] fido_id[5833]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.539460][ T5640] usbhid 3-1:0.0: can't add hid device: -71 [ 98.539574][ T5640] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 98.578095][ T5640] usb 3-1: USB disconnect, device number 2 [ 99.128783][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 99.129308][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 99.160233][ T5728] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.174163][ T5640] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.193989][ T10] usb 1-1: USB disconnect, device number 2 [ 99.317069][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 99.319236][ T5728] usb 3-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 99.321540][ T5728] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 99.326381][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.326410][ T5728] usb 3-1: Product: syz [ 99.326453][ T5728] usb 3-1: Manufacturer: syz [ 99.326475][ T5728] usb 3-1: SerialNumber: syz [ 99.373735][ T5640] usb 4-1: New USB device found: idVendor=04da, idProduct=104d, bcdDevice=0.40 [ 99.388803][ T5728] usb 3-1: config 0 descriptor?? [ 99.394874][ T5640] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.394910][ T5640] usb 4-1: config 1 interface 0 has no altsetting 0 [ 99.426094][ T5728] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 99.438413][ T5640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.438443][ T5640] usb 4-1: Product: 팖⸨炞Џ逃鮾ᶔ惇켍阈悅晴构鈆໲鹳관 [ 99.438461][ T5640] usb 4-1: Manufacturer: ࠾ [ 99.438485][ T5640] usb 4-1: SerialNumber: ᱥ繪㈭岥Ɵ㨦ᴼ㺩퀘讙瞧㫃禸빳㈐奘獸億닼醷ࢫ靖뷬퉡戀抉Ҽ◝ͩ狈⮆鿇↭茀윁䥋䑮酪쟸뉱외焣ꂯ飐益뚲ꥎ㲛⪪럏ṩ˲邦Ҿ䃡어㞩莭ド [ 99.705811][ T5867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 99.758196][ T5640] usbhid 4-1:1.0: can't add hid device: -71 [ 99.758307][ T5640] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 99.767106][ T5640] usb 4-1: USB disconnect, device number 3 [ 99.824302][ T30] audit: type=1326 audit(1793975091.626:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 99.844759][ T30] audit: type=1326 audit(1793975091.646:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 99.849305][ T30] audit: type=1326 audit(1793975091.656:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 99.849444][ T30] audit: type=1326 audit(1793975091.656:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 99.857994][ T30] audit: type=1326 audit(1793975091.656:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 99.942994][ T30] audit: type=1326 audit(1793975091.746:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 99.963375][ T30] audit: type=1326 audit(1793975091.746:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 99.963526][ T30] audit: type=1326 audit(1793975091.766:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 99.972565][ T30] audit: type=1326 audit(1793975091.756:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 99.972690][ T30] audit: type=1326 audit(1793975091.776:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0695f9fb19 code=0x7ffc0000 [ 100.117353][ T5728] gspca_zc3xx: reg_w_i err -110 [ 100.134236][ T5704] gud 2-1:1.0: probe with driver gud failed with error -71 [ 100.152394][ T5704] usb 2-1: USB disconnect, device number 2 [ 100.178992][ T5871] team0: Port device syz_tun removed [ 100.198480][ T5871] bridge_slave_0: left allmulticast mode [ 100.198514][ T5871] bridge_slave_0: left promiscuous mode [ 100.198727][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.243141][ T5871] bridge_slave_1: left allmulticast mode [ 100.243168][ T5871] bridge_slave_1: left promiscuous mode [ 100.243461][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.293663][ T5872] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 100.331256][ T5871] bond0: (slave bond_slave_0): Releasing backup interface [ 100.354610][ T5871] bond0: (slave bond_slave_1): Releasing backup interface [ 100.381651][ T5871] team0: Port device team_slave_0 removed [ 100.415748][ T5851] kernel profiling enabled (shift: 9) [ 100.423763][ T5871] team0: Port device team_slave_1 removed [ 100.424647][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.445503][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.461166][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.461191][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.467326][ T5871] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.510420][ T5872] tipc: Enabling of bearer rejected, already enabled [ 100.515355][ T5878] netlink: 152 bytes leftover after parsing attributes in process `syz.3.39'. [ 100.637491][ T993] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.662661][ T5881] netlink: 152 bytes leftover after parsing attributes in process `syz.4.40'. [ 100.717087][ T5728] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 100.717289][ T5728] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 100.807766][ T993] usb 2-1: Using ep0 maxpacket: 32 [ 100.808632][ T993] usb 2-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 100.814074][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.814099][ T993] usb 2-1: Product: syz [ 100.814114][ T993] usb 2-1: Manufacturer: syz [ 100.814128][ T993] usb 2-1: SerialNumber: syz [ 100.861915][ T993] usb 2-1: config 0 descriptor?? [ 100.876873][ T993] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 100.889592][ T5640] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.037878][ T5640] usb 4-1: New USB device found: idVendor=046d, idProduct=ca04, bcdDevice=0.00 [ 101.039114][ T5640] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.039147][ T5640] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.039175][ T5640] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.039210][ T5640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.044496][ T5640] usb 4-1: config 0 descriptor?? [ 101.127113][ T5730] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.278923][ T5730] usb 5-1: New USB device found: idVendor=046d, idProduct=ca04, bcdDevice=0.00 [ 101.281157][ T5730] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.281193][ T5730] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.281245][ T5730] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.281286][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.286017][ T5730] usb 5-1: config 0 descriptor?? [ 101.398796][ T29] usb 3-1: USB disconnect, device number 3 [ 101.465964][ T5640] logitech 0003:046D:CA04.0002: unbalanced collection at end of report description [ 101.484378][ T5640] logitech 0003:046D:CA04.0002: parse failed [ 101.487067][ T5640] logitech 0003:046D:CA04.0002: probe with driver logitech failed with error -22 [ 101.807166][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.957166][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 101.959371][ T29] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.964327][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.964354][ T29] usb 3-1: Product: syz [ 101.964370][ T29] usb 3-1: Manufacturer: syz [ 101.964411][ T29] usb 3-1: SerialNumber: syz [ 101.997079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.022050][ T29] usb 3-1: config 0 descriptor?? [ 102.073918][ T5894] FAULT_INJECTION: forcing a failure. [ 102.073918][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 102.073980][ T5894] CPU: 1 UID: 0 PID: 5894 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(full) [ 102.074004][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 102.074029][ T5894] Call Trace: [ 102.074039][ T5894] [ 102.074048][ T5894] dump_stack_lvl+0xe8/0x150 [ 102.074089][ T5894] should_fail_ex+0x3eb/0x540 [ 102.074134][ T5894] should_failslab+0xa8/0x100 [ 102.074190][ T5894] ? vm_area_dup+0x32/0x8e0 [ 102.074215][ T5894] kmem_cache_alloc_noprof+0x9c/0x600 [ 102.074244][ T5894] ? vm_area_dup+0x32/0x8e0 [ 102.074279][ T5894] vm_area_dup+0x32/0x8e0 [ 102.074295][ T5894] ? dup_mmap+0x558/0x1c80 [ 102.074314][ T5894] dup_mmap+0x736/0x1c80 [ 102.074363][ T5894] ? __pfx_dup_mmap+0x10/0x10 [ 102.074390][ T5894] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.074426][ T5894] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.074454][ T5894] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.074471][ T5894] ? __percpu_counter_init_many+0x35f/0x380 [ 102.074506][ T5894] ? __asan_memset+0x22/0x50 [ 102.074535][ T5894] ? mm_init+0xaf0/0xcb0 [ 102.074566][ T5894] copy_mm+0x2ae/0x640 [ 102.074603][ T5894] copy_process+0x1ecc/0x4510 [ 102.074638][ T5894] ? copy_process+0xd17/0x4510 [ 102.074698][ T5894] ? __pfx_copy_process+0x10/0x10 [ 102.074729][ T5894] ? __lock_acquire+0x747/0x2de0 [ 102.074766][ T5894] kernel_clone+0x2d7/0x940 [ 102.074794][ T5894] ? __pfx_kernel_clone+0x10/0x10 [ 102.074847][ T5894] ? ktime_get+0x45/0x220 [ 102.074884][ T5894] __x64_sys_clone+0x1b6/0x230 [ 102.074917][ T5894] ? __hrtimer_run_queues+0x9da/0xa10 [ 102.074936][ T5894] ? __pfx___x64_sys_clone+0x10/0x10 [ 102.074988][ T5894] ? __irq_exit_rcu+0xc6/0x220 [ 102.075018][ T5894] ? lockdep_softirqs_on+0x11e/0x190 [ 102.075044][ T5894] ? handle_softirqs+0x6d0/0x8d0 [ 102.075084][ T5894] do_syscall_64+0x166/0x520 [ 102.075137][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.075161][ T5894] ? clear_bhb_loop+0x70/0xc0 [ 102.075188][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.075209][ T5894] RIP: 0033:0x7f7ee239fb19 [ 102.075235][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.075247][ T5894] RSP: 002b:00007f7ee32d4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 102.075267][ T5894] RAX: ffffffffffffffda RBX: 00007f7ee2625fa0 RCX: 00007f7ee239fb19 [ 102.075291][ T5894] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000004000000 [ 102.075306][ T5894] RBP: 00007f7ee32d5090 R08: 0000000000000000 R09: 0000000000000000 [ 102.075320][ T5894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 102.075333][ T5894] R13: 00007f7ee2626038 R14: 00007f7ee2625fa0 R15: 00007f7ee274fa48 [ 102.075367][ T5894] [ 102.318515][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.385143][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.431339][ T29] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.471715][ T5640] usb 4-1: USB disconnect, device number 4 [ 102.616721][ T993] gspca_ov534_9: reg_r err -32 [ 102.671214][ T5730] usbhid 5-1:0.0: can't add hid device: -71 [ 102.671350][ T5730] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 102.696173][ T5730] usb 5-1: USB disconnect, device number 2 [ 102.791559][ T5899] pim6reg9: entered allmulticast mode [ 102.871077][ T993] gspca_ov534_9: Unknown sensor 0000 [ 102.871166][ T993] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 102.875721][ T993] usb 2-1: USB disconnect, device number 3 [ 102.912119][ T5904] FAULT_INJECTION: forcing a failure. [ 102.912119][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 102.912178][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: syz.4.47 Not tainted syzkaller #0 PREEMPT(full) [ 102.912203][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 102.912216][ T5904] Call Trace: [ 102.912225][ T5904] [ 102.912235][ T5904] dump_stack_lvl+0xe8/0x150 [ 102.912276][ T5904] should_fail_ex+0x3eb/0x540 [ 102.912313][ T5904] should_failslab+0xa8/0x100 [ 102.912350][ T5904] __kvmalloc_node_noprof+0x171/0x820 [ 102.912382][ T5904] ? __kmalloc_cache_noprof+0x31c/0x600 [ 102.912413][ T5904] ? nf_tables_commit+0xc31/0xad60 [ 102.912441][ T5904] ? nf_tables_commit+0xc31/0xad60 [ 102.912479][ T5904] nf_tables_commit+0xc31/0xad60 [ 102.912538][ T5904] ? do_raw_spin_unlock+0xf5/0x200 [ 102.912565][ T5904] ? __pfx_nf_tables_commit+0x10/0x10 [ 102.912593][ T5904] ? __free_frozen_pages+0x7f1/0xd90 [ 102.912632][ T5904] ? nf_tables_newrule+0x258d/0x28a0 [ 102.912680][ T5904] ? __pfx_nf_tables_newrule+0x10/0x10 [ 102.912710][ T5904] ? lock_acquire+0x115/0x350 [ 102.912761][ T5904] nfnetlink_rcv+0x1caf/0x28c0 [ 102.912829][ T5904] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 102.912908][ T5904] ? skb_clone+0x246/0x3a0 [ 102.912950][ T5904] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.912982][ T5904] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.913020][ T5904] netlink_unicast+0x8ef/0xa80 [ 102.913068][ T5904] netlink_sendmsg+0x7f0/0xb20 [ 102.913117][ T5904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.913153][ T5904] ? aa_sock_msg_perm+0x144/0x210 [ 102.913193][ T5904] ? apparmor_socket_sendmsg+0x18b/0x360 [ 102.913221][ T5904] ? irqentry_exit+0x2a0/0x9b0 [ 102.913251][ T5904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.913282][ T5904] sock_sendmsg_nosec+0x14e/0x190 [ 102.913316][ T5904] ____sys_sendmsg+0x54e/0x850 [ 102.913347][ T5904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.913377][ T5904] ? __sanitizer_cov_trace_const_cmp4+0x8/0xb0 [ 102.913411][ T5904] ? import_iovec+0x73/0xa0 [ 102.913443][ T5904] ___sys_sendmsg+0x2a5/0x360 [ 102.913466][ T5904] ? __lock_acquire+0x747/0x2de0 [ 102.913499][ T5904] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.913564][ T5904] ? __fget_files+0x3a2/0x420 [ 102.913592][ T5904] ? __fget_files+0x2a/0x420 [ 102.913630][ T5904] __x64_sys_sendmsg+0x1b1/0x290 [ 102.913658][ T5904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.913706][ T5904] do_syscall_64+0x166/0x520 [ 102.913731][ T5904] ? trace_irq_disable+0x3b/0x140 [ 102.913760][ T5904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.913781][ T5904] ? clear_bhb_loop+0x70/0xc0 [ 102.913813][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.913835][ T5904] RIP: 0033:0x7fc65259fb19 [ 102.913855][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.913872][ T5904] RSP: 002b:00007fc6507f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.913894][ T5904] RAX: ffffffffffffffda RBX: 00007fc652825fa0 RCX: 00007fc65259fb19 [ 102.913910][ T5904] RDX: 0000000020040040 RSI: 0000200000000740 RDI: 0000000000000003 [ 102.913924][ T5904] RBP: 00007fc6507f6090 R08: 0000000000000000 R09: 0000000000000000 [ 102.913937][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.913948][ T5904] R13: 00007fc652826038 R14: 00007fc652825fa0 R15: 00007fc65294fa48 [ 102.913984][ T5904] [ 103.687204][ T993] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 103.855449][ T993] usb 4-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 103.874416][ T993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.900187][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.900219][ T993] usb 4-1: Product: syz [ 103.900235][ T993] usb 4-1: Manufacturer: syz [ 103.900250][ T993] usb 4-1: SerialNumber: syz [ 103.990335][ T5926] netlink: 152 bytes leftover after parsing attributes in process `syz.0.55'. [ 104.034686][ T29] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 104.064287][ T29] usb 3-1: USB disconnect, device number 4 [ 104.208122][ T993] usb 4-1: unit 8 not found! [ 104.208149][ T993] usb 4-1: unit 6 not found! [ 104.366558][ T993] usb 4-1: USB disconnect, device number 5 [ 104.491565][ T5688] udevd[5688]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.523136][ T5640] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.672589][ T5640] usb 1-1: New USB device found: idVendor=046d, idProduct=ca04, bcdDevice=0.00 [ 104.673780][ T5640] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.673801][ T5640] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.673820][ T5640] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.673844][ T5640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.732937][ T5640] usb 1-1: config 0 descriptor?? [ 105.236843][ T5640] logitech 0003:046D:CA04.0003: unbalanced collection at end of report description [ 105.249466][ T5640] logitech 0003:046D:CA04.0003: parse failed [ 105.249581][ T5640] logitech 0003:046D:CA04.0003: probe with driver logitech failed with error -22 [ 105.920052][ T5966] ip_tables: iptables: counters copy to user failed while replacing table [ 106.015457][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 106.025131][ T993] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 106.026247][ T31] IPVS: starting estimator thread 0... [ 106.128492][ T5971] IPVS: using max 24 ests per chain, 57600 per kthread [ 106.199356][ T993] usb 4-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 106.216556][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.216584][ T993] usb 4-1: Product: syz [ 106.216598][ T993] usb 4-1: Manufacturer: syz [ 106.216611][ T993] usb 4-1: SerialNumber: syz [ 106.247946][ T993] usb 4-1: config 0 descriptor?? [ 106.495388][ T993] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 006 [ 106.658419][ T50] IPVS: starting estimator thread 0... [ 106.747672][ T5987] IPVS: using max 27 ests per chain, 64800 per kthread [ 106.962380][ T5730] usb 1-1: USB disconnect, device number 3 [ 107.091699][ T29] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.140994][ T30] kauditd_printk_skb: 790 callbacks suppressed [ 107.141045][ T30] audit: type=1326 audit(1793975098.946:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.141170][ T30] audit: type=1326 audit(1793975098.946:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.143668][ T30] audit: type=1326 audit(1793975098.946:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.143806][ T30] audit: type=1326 audit(1793975098.946:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.144286][ T30] audit: type=1326 audit(1793975098.946:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.144448][ T30] audit: type=1326 audit(1793975098.946:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.145926][ T30] audit: type=1326 audit(1793975098.946:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.147083][ T30] audit: type=1326 audit(1793975098.946:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.165182][ T30] audit: type=1326 audit(1793975098.966:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.166801][ T30] audit: type=1326 audit(1793975098.966:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.73" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65259fb19 code=0x7ffc0000 [ 107.244065][ T29] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 107.274698][ T29] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 107.274886][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 107.277491][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.387899][ T29] usb 2-1: config 0 descriptor?? [ 107.460759][ T29] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 107.654766][ T6006] geneve2: entered allmulticast mode [ 107.857139][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.031526][ T29] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.032875][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.032910][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.032980][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.057860][ T6004] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.104577][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.114745][ T6019] netlink: 152 bytes leftover after parsing attributes in process `syz.0.82'. [ 108.318663][ T6026] FAULT_INJECTION: forcing a failure. [ 108.318663][ T6026] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.318698][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT(full) [ 108.318725][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 108.318740][ T6026] Call Trace: [ 108.318749][ T6026] [ 108.318760][ T6026] dump_stack_lvl+0xe8/0x150 [ 108.318805][ T6026] should_fail_ex+0x3eb/0x540 [ 108.318842][ T6026] _copy_to_user+0x31/0xb0 [ 108.318875][ T6026] simple_read_from_buffer+0xe1/0x170 [ 108.318919][ T6026] proc_fail_nth_read+0x1bb/0x230 [ 108.318949][ T6026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.318977][ T6026] ? rw_verify_area+0x24a/0x4c0 [ 108.319014][ T6026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.319039][ T6026] vfs_read+0x213/0xa80 [ 108.319079][ T6026] ? __pfx___mutex_lock+0x10/0x10 [ 108.319111][ T6026] ? __pfx_vfs_read+0x10/0x10 [ 108.319147][ T6026] ? __fget_files+0x2a/0x420 [ 108.319176][ T6026] ? __fget_files+0x3a2/0x420 [ 108.319207][ T6026] ? __fget_files+0x2a/0x420 [ 108.319242][ T6026] ? fdget+0x1ac/0x250 [ 108.319280][ T6026] ksys_read+0x150/0x270 [ 108.319311][ T6026] ? __fget_files+0x3a2/0x420 [ 108.319338][ T6026] ? __pfx_ksys_read+0x10/0x10 [ 108.319377][ T6026] do_syscall_64+0x166/0x520 [ 108.319401][ T6026] ? trace_irq_disable+0x3b/0x140 [ 108.319427][ T6026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.319449][ T6026] ? clear_bhb_loop+0x70/0xc0 [ 108.319475][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.319496][ T6026] RIP: 0033:0x7fef0936034e [ 108.319517][ T6026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.319533][ T6026] RSP: 002b:00007fef075d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.319555][ T6026] RAX: ffffffffffffffda RBX: 00007fef075d56c0 RCX: 00007fef0936034e [ 108.319568][ T6026] RDX: 000000000000000f RSI: 00007fef075d50a0 RDI: 0000000000000004 [ 108.319580][ T6026] RBP: 00007fef075d5090 R08: 0000000000000000 R09: 0000000000000000 [ 108.319600][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.319611][ T6026] R13: 00007fef09626218 R14: 00007fef09626180 R15: 00007fef0974fa48 [ 108.319642][ T6026] [ 108.323792][ T6004] FAULT_INJECTION: forcing a failure. [ 108.323792][ T6004] name failslab, interval 1, probability 0, space 0, times 0 [ 108.323826][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.4.75 Not tainted syzkaller #0 PREEMPT(full) [ 108.323853][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 108.323868][ T6004] Call Trace: [ 108.323877][ T6004] [ 108.323887][ T6004] dump_stack_lvl+0xe8/0x150 [ 108.323936][ T6004] should_fail_ex+0x3eb/0x540 [ 108.323975][ T6004] should_failslab+0xa8/0x100 [ 108.324017][ T6004] __kmalloc_cache_noprof+0x9e/0x600 [ 108.324052][ T6004] ? snd_seq_oss_writeq_new+0xd7/0x2f0 [ 108.324081][ T6004] ? snd_seq_oss_writeq_new+0xd7/0x2f0 [ 108.324130][ T6004] snd_seq_oss_writeq_new+0xd7/0x2f0 [ 108.324160][ T6004] ? rcu_is_watching+0x16/0xb0 [ 108.324198][ T6004] ? __pfx_snd_seq_oss_writeq_new+0x10/0x10 [ 108.324229][ T6004] ? snd_seq_oss_readq_new+0x3c/0x1d0 [ 108.324261][ T6004] ? __raw_spin_lock_init+0x45/0x100 [ 108.324291][ T6004] ? __raw_spin_lock_init+0x45/0x100 [ 108.324325][ T6004] snd_seq_oss_open+0x885/0xf80 [ 108.324369][ T6004] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 108.324420][ T6004] ? __mutex_trylock_common+0x15f/0x270 [ 108.324462][ T6004] ? __pfx___mutex_trylock_common+0x10/0x10 [ 108.324520][ T6004] ? rcu_is_watching+0x16/0xb0 [ 108.324558][ T6004] ? trace_contention_end+0x3d/0x140 [ 108.324622][ T6004] ? __pfx___mutex_lock+0x10/0x10 [ 108.324661][ T6004] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 108.324698][ T6004] ? __pfx_free_devinfo+0x10/0x10 [ 108.324733][ T6004] ? do_raw_spin_unlock+0xf5/0x200 [ 108.324764][ T6004] ? soundcore_open+0x2da/0x490 [ 108.324805][ T6004] odev_open+0x67/0xa0 [ 108.324840][ T6004] chrdev_open+0x4d9/0x600 [ 108.324868][ T6004] ? __pfx_chrdev_open+0x10/0x10 [ 108.324892][ T6004] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 108.324931][ T6004] ? devcgroup_check_permission+0x31/0x8f0 [ 108.324967][ T6004] ? __pfx_chrdev_open+0x10/0x10 [ 108.324989][ T6004] do_dentry_open+0x80e/0x1360 [ 108.325029][ T6004] vfs_open_consume+0x4a/0x350 [ 108.325052][ T6004] ? path_openat+0x16e1/0x20f0 [ 108.325100][ T6004] path_openat+0x16fc/0x20f0 [ 108.325158][ T6004] do_file_open+0x23e/0x4a0 [ 108.325202][ T6004] ? __pfx_do_file_open+0x10/0x10 [ 108.325264][ T6004] ? _raw_spin_unlock+0x28/0x50 [ 108.325289][ T6004] ? alloc_fd+0x6af/0x760 [ 108.325330][ T6004] do_sys_openat2+0x115/0x200 [ 108.325366][ T6004] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.325395][ T6004] ? ksys_write+0x1fc/0x270 [ 108.325432][ T6004] ? __pfx_ksys_write+0x10/0x10 [ 108.325472][ T6004] __x64_sys_openat+0x138/0x170 [ 108.325507][ T6004] do_syscall_64+0x166/0x520 [ 108.325534][ T6004] ? trace_irq_disable+0x3b/0x140 [ 108.325567][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.325590][ T6004] ? clear_bhb_loop+0x70/0xc0 [ 108.325622][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.325645][ T6004] RIP: 0033:0x7fc65259fb19 [ 108.325667][ T6004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.325686][ T6004] RSP: 002b:00007fc6507f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.325712][ T6004] RAX: ffffffffffffffda RBX: 00007fc652825fa0 RCX: 00007fc65259fb19 [ 108.325729][ T6004] RDX: 00000000000c2882 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 108.325745][ T6004] RBP: 00007fc6507f6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.325758][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.325771][ T6004] R13: 00007fc652826038 R14: 00007fc652825fa0 R15: 00007fc65294fa48 [ 108.325813][ T6004] [ 108.522779][ T915] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.733362][ T5959] i2c i2c-1: failure writing data [ 108.743603][ T5640] usb 4-1: USB disconnect, device number 6 [ 108.764849][ T915] usb 1-1: New USB device found: idVendor=046d, idProduct=ca04, bcdDevice=0.00 [ 108.839563][ T915] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.839660][ T915] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.839743][ T915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.839850][ T915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.018883][ T915] usb 1-1: config 0 descriptor?? [ 109.145376][ T5730] usb 2-1: USB disconnect, device number 4 [ 109.436115][ T915] logitech 0003:046D:CA04.0004: unbalanced collection at end of report description [ 109.445420][ T915] logitech 0003:046D:CA04.0004: parse failed [ 109.455023][ T915] logitech 0003:046D:CA04.0004: probe with driver logitech failed with error -22 [ 109.564291][ T5640] usb 5-1: USB disconnect, device number 3 [ 109.628354][ T5730] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.784047][ T5730] usb 2-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 109.796337][ T5730] usb 2-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid wMaxPacketSize 0 [ 109.796384][ T5730] usb 2-1: config 2 interface 0 has no altsetting 0 [ 109.829074][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.829101][ T5730] usb 2-1: Product: syz [ 109.829116][ T5730] usb 2-1: Manufacturer: syz [ 109.829131][ T5730] usb 2-1: SerialNumber: syz [ 110.045570][ T6048] FAULT_INJECTION: forcing a failure. [ 110.045570][ T6048] name failslab, interval 1, probability 0, space 0, times 0 [ 110.045603][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: syz.2.88 Not tainted syzkaller #0 PREEMPT(full) [ 110.045627][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 110.045639][ T6048] Call Trace: [ 110.045647][ T6048] [ 110.045656][ T6048] dump_stack_lvl+0xe8/0x150 [ 110.045701][ T6048] should_fail_ex+0x3eb/0x540 [ 110.045732][ T6048] ? dup_task_struct+0x52/0xa00 [ 110.045762][ T6048] should_failslab+0xa8/0x100 [ 110.045798][ T6048] ? dup_task_struct+0x52/0xa00 [ 110.045824][ T6048] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 110.045855][ T6048] ? dup_task_struct+0x52/0xa00 [ 110.045898][ T6048] dup_task_struct+0x52/0xa00 [ 110.045928][ T6048] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.045956][ T6048] copy_process+0x7ea/0x4510 [ 110.046016][ T6048] ? rcu_is_watching+0x16/0xb0 [ 110.046052][ T6048] ? __pfx_copy_process+0x10/0x10 [ 110.046089][ T6048] ? mutex_init_lockdep+0xdf/0x110 [ 110.046124][ T6048] vhost_task_create+0x1f9/0x380 [ 110.046150][ T6048] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 110.046179][ T6048] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 110.046210][ T6048] ? __pfx_vhost_task_create+0x10/0x10 [ 110.046234][ T6048] ? register_lock_class+0x31/0x2e0 [ 110.046269][ T6048] ? __pfx_vhost_task_fn+0x10/0x10 [ 110.046304][ T6048] ? kasan_quarantine_put+0xbb/0x1f0 [ 110.046343][ T6048] kvm_mmu_post_init_vm+0x147/0x2b0 [ 110.046379][ T6048] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 110.046412][ T6048] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 110.046445][ T6048] kvm_vcpu_ioctl+0xa61/0xfd0 [ 110.046478][ T6048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.046526][ T6048] ? __fget_files+0x2a/0x420 [ 110.046557][ T6048] ? __fget_files+0x2a/0x420 [ 110.046585][ T6048] ? __fget_files+0x2a/0x420 [ 110.046620][ T6048] ? bpf_lsm_file_ioctl+0x9/0x20 [ 110.046653][ T6048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.046681][ T6048] __se_sys_ioctl+0xfc/0x170 [ 110.046718][ T6048] do_syscall_64+0x166/0x520 [ 110.046744][ T6048] ? trace_irq_disable+0x3b/0x140 [ 110.046774][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.046797][ T6048] ? clear_bhb_loop+0x70/0xc0 [ 110.046825][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.046847][ T6048] RIP: 0033:0x7f0695f9fb19 [ 110.046868][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.046886][ T6048] RSP: 002b:00007f0696dd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.046918][ T6048] RAX: ffffffffffffffda RBX: 00007f0696226090 RCX: 00007f0695f9fb19 [ 110.046934][ T6048] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000047 [ 110.046947][ T6048] RBP: 00007f0696dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 110.046960][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.046971][ T6048] R13: 00007f0696226128 R14: 00007f0696226090 R15: 00007f069634fa48 [ 110.047006][ T6048] [ 110.486756][ T5704] usb 1-1: USB disconnect, device number 4 [ 110.961701][ T6072] FAULT_INJECTION: forcing a failure. [ 110.961701][ T6072] name failslab, interval 1, probability 0, space 0, times 0 [ 110.961798][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT(full) [ 110.961824][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 110.961837][ T6072] Call Trace: [ 110.961846][ T6072] [ 110.961856][ T6072] dump_stack_lvl+0xe8/0x150 [ 110.961913][ T6072] should_fail_ex+0x3eb/0x540 [ 110.961948][ T6072] should_failslab+0xa8/0x100 [ 110.961985][ T6072] __kmalloc_cache_noprof+0x9e/0x600 [ 110.962016][ T6072] ? __kmalloc_cache_noprof+0x148/0x600 [ 110.962043][ T6072] ? sctp_add_bind_addr+0x8c/0x370 [ 110.962068][ T6072] ? sctp_add_bind_addr+0x8c/0x370 [ 110.962103][ T6072] sctp_add_bind_addr+0x8c/0x370 [ 110.962135][ T6072] sctp_copy_local_addr_list+0x31a/0x4e0 [ 110.962166][ T6072] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 110.962195][ T6072] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 110.962225][ T6072] ? sctp_v6_is_any+0x64/0x80 [ 110.962266][ T6072] ? sctp_copy_one_addr+0x93/0x360 [ 110.962298][ T6072] sctp_bind_addr_copy+0xb3/0x3c0 [ 110.962332][ T6072] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 110.962360][ T6072] sctp_connect_new_asoc+0x2ff/0x6b0 [ 110.962398][ T6072] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 110.962445][ T6072] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 110.962482][ T6072] ? security_sctp_bind_connect+0x7e/0x2c0 [ 110.962516][ T6072] sctp_sendmsg+0x159b/0x2d00 [ 110.962566][ T6072] ? __pfx_sctp_sendmsg+0x10/0x10 [ 110.962605][ T6072] ? __lock_acquire+0x747/0x2de0 [ 110.962649][ T6072] ? aa_sock_msg_perm+0xf5/0x210 [ 110.962682][ T6072] ? sock_rps_record_flow+0x19/0x350 [ 110.962711][ T6072] ? inet_sendmsg+0x298/0x320 [ 110.962738][ T6072] ? __pfx_inet_sendmsg+0x10/0x10 [ 110.962762][ T6072] sock_sendmsg_nosec+0x10f/0x190 [ 110.962796][ T6072] ____sys_sendmsg+0x54e/0x850 [ 110.962829][ T6072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.962866][ T6072] ? import_iovec+0x73/0xa0 [ 110.962899][ T6072] ___sys_sendmsg+0x2a5/0x360 [ 110.962921][ T6072] ? __lock_acquire+0x747/0x2de0 [ 110.962955][ T6072] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.962987][ T6072] ? kstrtouint+0x6e/0xe0 [ 110.963041][ T6072] ? __fget_files+0x3a2/0x420 [ 110.963068][ T6072] ? __fget_files+0x2a/0x420 [ 110.963107][ T6072] __sys_sendmmsg+0x273/0x4e0 [ 110.963139][ T6072] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.963176][ T6072] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.963222][ T6072] ? ksys_write+0x242/0x270 [ 110.963263][ T6072] ? __pfx_ksys_write+0x10/0x10 [ 110.963303][ T6072] __x64_sys_sendmmsg+0xa0/0xc0 [ 110.963331][ T6072] do_syscall_64+0x166/0x520 [ 110.963357][ T6072] ? trace_irq_disable+0x3b/0x140 [ 110.963388][ T6072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.963411][ T6072] ? clear_bhb_loop+0x70/0xc0 [ 110.963439][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.963461][ T6072] RIP: 0033:0x7f0695f9fb19 [ 110.963488][ T6072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.963506][ T6072] RSP: 002b:00007f0696df5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.963538][ T6072] RAX: ffffffffffffffda RBX: 00007f0696225fa0 RCX: 00007f0695f9fb19 [ 110.963554][ T6072] RDX: 0000000000000002 RSI: 0000200000000f40 RDI: 0000000000000003 [ 110.963568][ T6072] RBP: 00007f0696df5090 R08: 0000000000000000 R09: 0000000000000000 [ 110.963581][ T6072] R10: 000000000000c010 R11: 0000000000000246 R12: 0000000000000002 [ 110.963595][ T6072] R13: 00007f0696226038 R14: 00007f0696225fa0 R15: 00007f069634fa48 [ 110.963631][ T6072] [ 111.348633][ T6074] syz.4.93 uses obsolete (PF_INET,SOCK_PACKET) [ 111.570514][ T6081] netlink: ct family unspecified [ 112.177974][ T6079] ip6gretap1: entered allmulticast mode [ 112.195412][ T6079] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 112.207928][ T6079] batman_adv: batadv0: Adding interface: ip6gretap1 [ 112.207946][ T6079] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.207979][ T6079] batman_adv: batadv0: Interface activated: ip6gretap1 [ 112.381394][ T5730] ims_pcu 2-1:2.0: Control endpoint is not INTERRUPT IN [ 112.381456][ T5730] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 112.431158][ T6086] FAULT_INJECTION: forcing a failure. [ 112.431158][ T6086] name failslab, interval 1, probability 0, space 0, times 0 [ 112.431204][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.0.96 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.431234][ T6086] Tainted: [L]=SOFTLOCKUP [ 112.431241][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 112.431254][ T6086] Call Trace: [ 112.431262][ T6086] [ 112.431272][ T6086] dump_stack_lvl+0xe8/0x150 [ 112.431313][ T6086] should_fail_ex+0x3eb/0x540 [ 112.431345][ T6086] ? __alloc_skb+0x1db/0x7a0 [ 112.431366][ T6086] should_failslab+0xa8/0x100 [ 112.431403][ T6086] ? __alloc_skb+0x1db/0x7a0 [ 112.431422][ T6086] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 112.431449][ T6086] ? __alloc_skb+0x18d/0x7a0 [ 112.431471][ T6086] ? __alloc_skb+0x1db/0x7a0 [ 112.431499][ T6086] __alloc_skb+0x1db/0x7a0 [ 112.431526][ T6086] netlink_sendmsg+0x5cd/0xb20 [ 112.431567][ T6086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.431604][ T6086] ? aa_sock_msg_perm+0x144/0x210 [ 112.431644][ T6086] ? apparmor_socket_sendmsg+0x98/0x360 [ 112.431677][ T6086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.431709][ T6086] sock_sendmsg_nosec+0x14e/0x190 [ 112.431744][ T6086] ____sys_sendmsg+0x54e/0x850 [ 112.431775][ T6086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.431818][ T6086] ? import_iovec+0x73/0xa0 [ 112.431851][ T6086] ___sys_sendmsg+0x2a5/0x360 [ 112.431874][ T6086] ? __lock_acquire+0x747/0x2de0 [ 112.431907][ T6086] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.431936][ T6086] ? __schedule+0x17f3/0x5830 [ 112.431998][ T6086] ? __fget_files+0x3a2/0x420 [ 112.432025][ T6086] ? __fget_files+0x2a/0x420 [ 112.432063][ T6086] __x64_sys_sendmsg+0x1b1/0x290 [ 112.432092][ T6086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.432141][ T6086] do_syscall_64+0x166/0x520 [ 112.432171][ T6086] ? trace_irq_disable+0x3b/0x140 [ 112.432201][ T6086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.432224][ T6086] ? clear_bhb_loop+0x70/0xc0 [ 112.432251][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.432273][ T6086] RIP: 0033:0x7f7ee239fb19 [ 112.432293][ T6086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.432311][ T6086] RSP: 002b:00007f7ee32d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.432334][ T6086] RAX: ffffffffffffffda RBX: 00007f7ee2625fa0 RCX: 00007f7ee239fb19 [ 112.432350][ T6086] RDX: 0000000000048080 RSI: 0000200000000880 RDI: 0000000000000003 [ 112.432364][ T6086] RBP: 00007f7ee32d5090 R08: 0000000000000000 R09: 0000000000000000 [ 112.432378][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.432390][ T6086] R13: 00007f7ee2626038 R14: 00007f7ee2625fa0 R15: 00007f7ee274fa48 [ 112.432426][ T6086] [ 112.714380][ T5730] usb 2-1: USB disconnect, device number 5 [ 117.257428][ C1] sched: DL replenish lagged too much [ 136.220796][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.236367][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.029281][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.048068][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.014116][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.032508][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.253263][ T33] INFO: task kworker/0:6:5704 blocked for more than 145 seconds. [ 266.253307][ T33] Tainted: G L syzkaller #0 [ 266.253320][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.253330][ T33] task:kworker/0:6 state:D stack:22592 pid:5704 tgid:5704 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 266.253392][ T33] Workqueue: events reg_todo [ 266.253430][ T33] Call Trace: [ 266.253438][ T33] [ 266.253453][ T33] __schedule+0x17dd/0x5830 [ 266.253497][ T33] ? __pfx___schedule+0x10/0x10 [ 266.253531][ T33] ? __pfx___schedule+0x10/0x10 [ 266.253566][ T33] ? schedule+0x90/0x2b0 [ 266.253594][ T33] schedule+0x164/0x2b0 [ 266.253621][ T33] schedule_preempt_disabled+0x13/0x30 [ 266.253645][ T33] __mutex_lock+0x7c4/0x15a0 [ 266.253678][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 266.253710][ T33] ? reg_process_self_managed_hints+0xae/0x170 [ 266.253746][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 266.253774][ T33] ? __pfx_reg_process_self_managed_hint+0x10/0x10 [ 266.253826][ T33] reg_process_self_managed_hints+0xae/0x170 [ 266.253860][ T33] reg_todo+0xe6e/0xff0 [ 266.253896][ T33] ? lock_acquire+0x115/0x350 [ 266.253927][ T33] ? __pfx_reg_todo+0x10/0x10 [ 266.253962][ T33] ? rcu_is_watching+0x16/0xb0 [ 266.253997][ T33] ? process_scheduled_works+0x97a/0x1630 [ 266.254030][ T33] process_scheduled_works+0xc3d/0x1630 [ 266.254097][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 266.254144][ T33] ? assign_work+0x3cf/0x5d0 [ 266.254182][ T33] worker_thread+0xa47/0xfb0 [ 266.254231][ T33] ? __kthread_parkme+0x71/0x1f0 [ 266.254273][ T33] kthread+0x38b/0x480 [ 266.254299][ T33] ? __pfx_worker_thread+0x10/0x10 [ 266.254331][ T33] ? __pfx_kthread+0x10/0x10 [ 266.254358][ T33] ret_from_fork+0x514/0xb70 [ 266.254386][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 266.254412][ T33] ? __switch_to+0xc78/0x1410 [ 266.254449][ T33] ? __pfx_kthread+0x10/0x10 [ 266.254475][ T33] ret_from_fork_asm+0x1a/0x30 [ 266.254518][ T33] [ 266.254547][ T33] [ 266.254547][ T33] Showing all locks held in the system: [ 266.254556][ T33] locks held by kthreadd/2: 1, last CPU#0: [ 266.254571][ T33] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 266.254640][ T33] locks held by kworker/0:0/9: 4, last CPU#0: [ 266.254655][ T33] #0: ffff8880582ef148 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.254722][ T33] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.254819][ T33] #2: ffff888078a0d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 266.254877][ T33] #3: ffff88805722c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 266.254933][ T33] locks held by kworker/0:1/10: 3, last CPU#0: [ 266.254949][ T33] #0: ffff88807e02a148 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255017][ T33] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255103][ T33] #2: ffff88802a429480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 266.255165][ T33] locks held by kworker/u8:0/12: 3, last CPU#0: [ 266.255185][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255255][ T33] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255320][ T33] #2: ffff888073800800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 266.255380][ T33] locks held by kworker/u8:1/13: 3, last CPU#0: [ 266.255395][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255458][ T33] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255521][ T33] #2: ffff888055d60800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 266.255583][ T33] locks held by kworker/u8:2/31: 3, last CPU#0: [ 266.255598][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255661][ T33] #1: ffffc90000a77c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255725][ T33] #2: ffff888056630800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 266.255784][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 266.255799][ T33] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 266.255855][ T33] locks held by kworker/u8:3/50: 3, last CPU#0: [ 266.255871][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255933][ T33] #1: ffffc90000ba7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.255997][ T33] #2: ffff888055f10800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 266.256056][ T33] locks held by kworker/u9:0/53: 5, on CPU#0: [ 266.256089][ T33] #0: ffff88807e94d148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.256154][ T33] #1: ffffc90000be7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.256224][ T33] #2: ffff8880339a4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 266.256289][ T33] #3: ffff8880339a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 266.256348][ T33] #4: ffffffff9180f0a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 266.256414][ T33] locks held by kworker/u8:4/62: 4, last CPU#0: [ 266.256430][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.256493][ T33] #1: ffffc9000203fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.256557][ T33] #2: ffff888073670800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 266.256617][ T33] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 266.256678][ T33] locks held by kworker/u8:5/65: 3, last CPU#0: [ 266.256694][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.256758][ T33] #1: ffffc9000206fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.256822][ T33] #2: ffff888055e40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 266.274509][ T33] locks held by kworker/u8:6/151: 3, last CPU#0: [ 266.274533][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.274607][ T33] #1: ffffc90002df7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.274672][ T33] #2: ffff888056bf0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 266.274740][ T33] locks held by kworker/u8:7/159: 3, last CPU#0: [ 266.274756][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.274830][ T33] #1: ffffc90002e87c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.274902][ T33] #2: ffff888056400800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 266.274960][ T33] locks held by kworker/1:2/915: 2, last CPU#1: [ 266.274975][ T33] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275056][ T33] #1: ffffc90004837c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275122][ T33] locks held by kworker/0:2/993: 3, last CPU#0: [ 266.275137][ T33] #0: ffff888057e40948 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275206][ T33] #1: ffffc90004de7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275287][ T33] #2: ffff888035489700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 266.275347][ T33] locks held by kworker/u8:8/1106: 3, last CPU#0: [ 266.275362][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275425][ T33] #1: ffffc900054afc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275489][ T33] #2: ffff888073510800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 266.275550][ T33] locks held by kworker/0:3/2242: 3, last CPU#0: [ 266.275565][ T33] #0: ffff88807e028948 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275634][ T33] #1: ffffc90006d0fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275723][ T33] #2: ffff888037e99480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 266.275792][ T33] locks held by kworker/R-bat_e/3229: 6, last CPU#1: [ 266.275808][ T33] #0: ffff88803353a948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275877][ T33] #1: ffffc9000e867c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.275943][ T33] #2: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 266.275995][ T33] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 266.276063][ T33] #4: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 266.276124][ T33] #5: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 266.276186][ T33] locks held by kworker/u9:1/4951: 3, on CPU#0: [ 266.276201][ T33] #0: ffff8880362e0148 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.276269][ T33] #1: ffffc9000fe47c40 ((work_completion)(&hdev->cmd_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 266.276340][ T33] #2: ffff888030fd00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_cmd_work+0xa0/0x850 [ 266.276400][ T33] locks held by udevd/5000: 1, last CPU#0: [ 266.276415][ T33] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: path_init+0x124/0x1300 [ 266.276473][ T33] locks held by dhcpcd/5294: 2, last CPU#0: [ 266.276488][ T33] #0: ffffffff90907c98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 266.276550][ T33] #1: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 266.276610][ T33] locks held by dhcpcd/5295: 4, last CPU#0: [ 266.276626][ T33] #0: ffffffff9023a610 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0xf6/0x640 [ 266.276686][ T33] #1: ffff88807ecf8340 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 266.276753][ T33] #2: ffff88807f73a800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 266.276813][ T33] #3: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 266.276873][ T33] locks held by getty/5391: 2, on CPU#1: [ 270.801940][ T33] #0: ffff8880374dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 270.802013][ T33] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 270.802067][ T33] locks held by kworker/u9:2/5631: 7, on CPU#0: [ 270.802083][ T33] #0: ffff8880342d5948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.802144][ T33] #1: ffffc900043a7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.802205][ T33] #2: ffff888030fd0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 270.802262][ T33] #3: ffff888030fd00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 270.802322][ T33] #4: ffffffff9180f0a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 270.802383][ T33] #5: ffff888078d522f8 (_T->lock#5){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630 [ 270.802439][ T33] #6: ffffffff90160928 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 270.802489][ T33] locks held by kworker/u9:3/5634: 5, on CPU#0: [ 270.802505][ T33] #0: ffff88807e949948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.802574][ T33] #1: ffffc900043d7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.802653][ T33] #2: ffff8880794bcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 270.802708][ T33] #3: ffff8880794bc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 270.802759][ T33] #4: ffffffff9180f0a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 270.802820][ T33] locks held by kworker/u9:4/5637: 5, on CPU#1: [ 270.802835][ T33] #0: ffff8880362e2148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.802895][ T33] #1: ffffc900043f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.802960][ T33] #2: ffff88802cd0cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 270.803036][ T33] #3: ffff88802cd0c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 270.803094][ T33] #4: ffffffff9180f0a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 270.803156][ T33] locks held by kworker/1:3/5640: 2, last CPU#1: [ 270.803172][ T33] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.803235][ T33] #1: ffffc90004437c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.803307][ T33] locks held by syz-executor/5644: 2, last CPU#0: [ 270.803323][ T33] #0: ffffffff90907c98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 270.803384][ T33] #1: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 270.803443][ T33] locks held by syz-executor/5646: 3, last CPU#0: [ 270.803458][ T33] #0: ffffffff90907c98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 270.803518][ T33] #1: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 270.803573][ T33] #2: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 270.803634][ T33] locks held by syz-executor/5647: 1, last CPU#0: [ 270.803649][ T33] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: lruvec_stat_mod_folio+0x6e/0x3e0 [ 270.803706][ T33] locks held by syz-executor/5649: 4, last CPU#0: [ 270.803722][ T33] #0: ffff888055c5c478 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 270.803789][ T33] #1: ffff8880739c5df0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x198/0x5c0 [ 270.803852][ T33] #2: ffffffff90907c98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 270.803911][ T33] #3: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 270.803967][ T33] locks held by syz-executor/5650: 1, last CPU#0: [ 270.804015][ T33] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 270.804078][ T33] locks held by kworker/0:4/5689: 2, last CPU#0: [ 270.804094][ T33] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804157][ T33] #1: ffffc900043c7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804222][ T33] locks held by kworker/0:6/5704: 4, on CPU#0: [ 270.804237][ T33] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804317][ T33] #1: ffffc900046e7c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804376][ T33] #2: ffffffff918db880 (cfg80211_mutex){+.+.}-{4:4}, at: reg_todo+0x80/0xff0 [ 270.804436][ T33] #3: ffff888073670800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xae/0x170 [ 270.804498][ T33] locks held by kworker/1:4/5712: 2, last CPU#1: [ 270.804513][ T33] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804574][ T33] #1: ffffc90004757c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804635][ T33] locks held by kworker/0:7/5728: 3, on CPU#0: [ 270.804650][ T33] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804711][ T33] #1: ffffc90004c77c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804771][ T33] #2: ffffffff918db880 (cfg80211_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x1f/0x90 [ 270.804832][ T33] locks held by kworker/1:6/5730: 6, last CPU#1: [ 270.804847][ T33] #0: ffff888021aac948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804907][ T33] #1: ffffc90004c87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.804968][ T33] #2: ffff88802abf41d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 270.805017][ T33] #3: ffff88802ac78090 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x52/0x840 [ 270.805075][ T33] #4: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 270.805154][ T33] #5: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 270.805215][ T33] locks held by kworker/u8:9/5828: 3, last CPU#0: [ 270.805231][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.805300][ T33] #1: ffffc90004cd7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.805363][ T33] #2: ffff888056750800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 270.805423][ T33] locks held by kworker/u8:10/6087: 3, last CPU#0: [ 270.805438][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.805501][ T33] #1: ffffc90006edfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.805565][ T33] #2: ffff888078852258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 270.805624][ T33] locks held by kworker/u8:11/6088: 3, last CPU#0: [ 270.805639][ T33] #0: ffff88807f620148 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.805702][ T33] #1: ffffc90006e17c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 270.805765][ T33] #2: ffff88807ab79280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 270.805823][ T33] [ 270.805829][ T33] ============================================= [ 270.805829][ T33] [ 270.805839][ T33] NMI backtrace for cpu 0 [ 270.805858][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 270.805886][ T33] Tainted: [L]=SOFTLOCKUP [ 270.805893][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 270.805905][ T33] Call Trace: [ 270.805914][ T33] [ 270.805924][ T33] dump_stack_lvl+0xe8/0x150 [ 270.805960][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 270.805985][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 270.806013][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 270.806040][ T33] sys_info+0x135/0x170 [ 270.806071][ T33] watchdog+0x1073/0x10f0 [ 270.806110][ T33] ? watchdog+0x209/0x10f0 [ 270.806148][ T33] kthread+0x38b/0x480 [ 270.806175][ T33] ? __pfx_watchdog+0x10/0x10 [ 270.806202][ T33] ? __pfx_kthread+0x10/0x10 [ 270.806229][ T33] ret_from_fork+0x514/0xb70 [ 270.806258][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 270.806283][ T33] ? __switch_to+0xc78/0x1410 [ 270.806338][ T33] ? __pfx_kthread+0x10/0x10 [ 270.806364][ T33] ret_from_fork_asm+0x1a/0x30 [ 270.806404][ T33] [ 270.806411][ T33] Sending NMI from CPU 0 to CPUs 1: [ 270.806453][ C1] NMI backtrace for cpu 1 [ 270.806469][ C1] CPU: 1 UID: 0 PID: 3229 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 270.806494][ C1] Tainted: [L]=SOFTLOCKUP [ 270.806500][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 270.806511][ C1] Workqueue: bat_events batadv_tt_purge [ 270.806531][ C1] RIP: 0010:__lock_acquire+0x51a/0x2de0 [ 270.806556][ C1] Code: 41 8d 5c 24 01 49 ff cc 89 d9 83 c1 fe 78 41 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 8b 8c ce d0 0b 00 00 <31> c1 ff cb 49 ff cc f7 c1 00 60 00 00 74 cf eb 18 48 c7 c7 90 83 [ 270.806571][ C1] RSP: 0018:ffffc90000a07db8 EFLAGS: 00000087 [ 270.806585][ C1] RAX: 7500000000022007 RBX: 0000000000000004 RCX: 0000000000022007 [ 270.806597][ C1] RDX: 0000000000000003 RSI: 0000000000022000 RDI: 7500000000000000 [ 270.806609][ C1] RBP: ffff88803417ab90 R08: ffffffff817879cf R09: 0000000000000000 [ 270.806621][ C1] R10: ffffc90000a08098 R11: ffffffff81b3a390 R12: 0000000000000002 [ 270.806633][ C1] R13: 0000000000000000 R14: ffff888034179f40 R15: 0000000000000002 [ 270.806644][ C1] FS: 0000000000000000(0000) GS:ffff88812350d000(0000) knlGS:0000000000000000 [ 270.806658][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.806670][ C1] CR2: 00007f275ff4eccc CR3: 000000007e30a000 CR4: 00000000003526f0 [ 270.806685][ C1] Call Trace: [ 270.806691][ C1] [ 270.806706][ C1] ? lock_acquire+0x115/0x350 [ 270.806730][ C1] lock_acquire+0x115/0x350 [ 270.806750][ C1] ? unwind_next_frame+0x8f/0x2550 [ 270.806778][ C1] ? unwind_next_frame+0x8f/0x2550 [ 270.806807][ C1] ? do_softirq+0x77/0xd0 [ 270.806829][ C1] ? unwind_next_frame+0x8f/0x2550 [ 270.806852][ C1] unwind_next_frame+0xac/0x2550 [ 270.806878][ C1] ? unwind_next_frame+0x8f/0x2550 [ 270.806906][ C1] ? handle_softirqs+0x265/0x8d0 [ 270.806931][ C1] ? unwind_next_frame+0x8f/0x2550 [ 270.806960][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 270.806987][ C1] arch_stack_walk+0x11b/0x150 [ 270.807017][ C1] ? do_softirq+0x77/0xd0 [ 270.807045][ C1] stack_trace_save+0xa9/0x100 [ 270.807070][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 270.807098][ C1] ? __lock_acquire+0x747/0x2de0 [ 270.807125][ C1] kasan_save_track+0x3e/0x80 [ 270.807153][ C1] ? kasan_save_track+0x3e/0x80 [ 270.807179][ C1] ? kasan_save_free_info+0x40/0x50 [ 270.807202][ C1] ? __kasan_slab_free+0x5c/0x80 [ 270.807230][ C1] ? kmem_cache_free+0x182/0x650 [ 270.807257][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 270.807285][ C1] ? nft_synproxy_do_eval+0x389/0x5d0 [ 270.807313][ C1] ? nft_do_chain+0x48d/0x1b10 [ 270.807342][ C1] ? nft_do_chain_ipv4+0x195/0x290 [ 270.807369][ C1] ? nf_hook_slow+0xc5/0x220 [ 270.807389][ C1] ? NF_HOOK+0x21f/0x3c0 [ 270.807416][ C1] ? NF_HOOK+0x336/0x3c0 [ 270.807443][ C1] ? process_backlog+0xa6b/0x18b0 [ 270.807462][ C1] ? __napi_poll+0xaa/0x330 [ 270.807490][ C1] ? net_rx_action+0x61d/0xf50 [ 270.807509][ C1] ? handle_softirqs+0x265/0x8d0 [ 270.807535][ C1] ? do_softirq+0x77/0xd0 [ 270.807599][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 270.807627][ C1] kasan_save_free_info+0x40/0x50 [ 270.807651][ C1] __kasan_slab_free+0x5c/0x80 [ 270.807681][ C1] kmem_cache_free+0x182/0x650 [ 270.807712][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 270.807749][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 270.807780][ C1] ? nf_ip_checksum+0x13c/0x510 [ 270.807819][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 270.807848][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 270.807896][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 270.807924][ C1] ? ieee80211_rx_handlers+0xcf76/0xcfe0 [ 270.807954][ C1] ? chacha_permute+0x4ce/0xf00 [ 270.807979][ C1] nft_do_chain+0x48d/0x1b10 [ 270.808018][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 270.808051][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 270.808080][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 270.808120][ C1] nft_do_chain_ipv4+0x195/0x290 [ 270.808150][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 270.808177][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 270.808209][ C1] ? iptable_mangle_hook+0x18a/0x4c0 [ 270.808242][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 270.808272][ C1] nf_hook_slow+0xc5/0x220 [ 270.808297][ C1] NF_HOOK+0x21f/0x3c0 [ 270.808333][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 270.808363][ C1] ? NF_HOOK+0x9e/0x3c0 [ 270.808391][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 270.808422][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 270.808456][ C1] ? ip_local_deliver+0x113/0x190 [ 270.808487][ C1] NF_HOOK+0x336/0x3c0 [ 270.808517][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 270.808547][ C1] ? NF_HOOK+0x9e/0x3c0 [ 270.808575][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 270.808605][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 270.808634][ C1] ? ip_rcv_core+0x88d/0xd50 [ 270.808666][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 270.808695][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 270.808724][ C1] process_backlog+0xa6b/0x18b0 [ 270.808746][ C1] ? process_backlog+0x3de/0x18b0 [ 270.808774][ C1] __napi_poll+0xaa/0x330 [ 270.808814][ C1] net_rx_action+0x61d/0xf50 [ 270.808841][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 270.808878][ C1] handle_softirqs+0x265/0x8d0 [ 270.808913][ C1] ? batadv_tt_purge+0x4ee/0xa40 [ 270.808933][ C1] do_softirq+0x77/0xd0 [ 270.808961][ C1] [ 270.808968][ C1] [ 270.808976][ C1] __local_bh_enable_ip+0x100/0x140 [ 270.809005][ C1] batadv_tt_purge+0x4ee/0xa40 [ 270.809029][ C1] ? process_scheduled_works+0x97a/0x1630 [ 270.809062][ C1] process_scheduled_works+0xc3d/0x1630 [ 270.809112][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.809148][ C1] ? assign_work+0x3af/0x5d0 [ 270.809181][ C1] rescuer_thread+0x84a/0x12a0 [ 270.809206][ C1] ? rescuer_thread+0xb8/0x12a0 [ 270.809237][ C1] kthread+0x38b/0x480 [ 270.809261][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 270.809281][ C1] ? __pfx_kthread+0x10/0x10 [ 270.809302][ C1] ret_from_fork+0x514/0xb70 [ 270.809325][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 270.809348][ C1] ? __switch_to+0xc78/0x1410 [ 270.809383][ C1] ? __pfx_kthread+0x10/0x10 [ 270.809407][ C1] ret_from_fork_asm+0x1a/0x30 [ 270.809439][ C1] [ 270.822721][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 273.191737][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 273.202447][ T33] Tainted: [L]=SOFTLOCKUP [ 273.206877][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 273.216953][ T33] Call Trace: [ 273.220274][ T33] [ 273.223280][ T33] vpanic+0x26f/0x710 [ 273.227305][ T33] panic+0xc5/0xd0 [ 273.231064][ T33] ? __pfx_panic+0x10/0x10 [ 273.235523][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 273.240589][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 273.246804][ T33] watchdog+0x10e7/0x10f0 [ 273.251216][ T33] ? watchdog+0x209/0x10f0 [ 273.255693][ T33] kthread+0x38b/0x480 [ 273.259796][ T33] ? __pfx_watchdog+0x10/0x10 [ 273.264507][ T33] ? __pfx_kthread+0x10/0x10 [ 273.269133][ T33] ret_from_fork+0x514/0xb70 [ 273.273783][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 273.279015][ T33] ? __switch_to+0xc78/0x1410 [ 273.283742][ T33] ? __pfx_kthread+0x10/0x10 [ 273.288365][ T33] ret_from_fork_asm+0x1a/0x30 [ 273.293217][ T33] [ 273.296854][ T33] Kernel Offset: disabled [ 273.301275][ T33] Rebooting in 86400 seconds..