last executing test programs: 14m6.532249811s ago: executing program 4 (id=842): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x5433, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x9a000, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x100000001, 0x7fffffffffffffff, 0x6, 0x2, 0x5, 0xfffffffffffff801, 0x0, 0x8, 0x400, 0x2, 0x9, 0x0, 0xa, 0x9, 0xd09, 0x8000], 0x200000, 0x10011}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) rt_sigtimedwait(&(0x7f0000000180)={[0x80000000]}, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x989680}, 0x8) ioctl$UFFDIO_POISON(r5, 0xc020aa08, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, 0x0, 0xfffffffffffffff9) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r6, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/72, 0x48) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14m5.455854572s ago: executing program 4 (id=850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="9ac24b3c34551eccc15c94cd5067f7e3795319d9d6d8d8d63e517db2aa") r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_LK(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0xa, 0x9, 0x2, r1}}}, 0x28) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="04001f00000000", 0x7}, {&(0x7f0000000040)="80feffff0000000000dfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x20008b88) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r0], 0x64}, 0x1, 0x0, 0x0, 0xdbd21b5bdb4b521b}, 0x20004000) 14m5.106372787s ago: executing program 4 (id=852): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11) r1 = fsopen(&(0x7f00000001c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000900)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xfffffffd, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0x8, 0xffffffff, 0x9, 0xffffffff, 0xfffffbff], [0x7ca0, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x5, 0x1, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x1000103, 0x3f9, 0x0, 0x0, 0x1}, {0x3fc, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x6, 0x5, 0x0, 0x0, 0x1}, {0x1000, 0x5, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) membarrier(0x10, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000000240)=0x4) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x2c2440, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0xe}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f0000000440)=@multiplanar_fd={0xc742, 0x0, 0x4, 0x70000, 0x7, {}, {0x3, 0x1, 0x5, 0x7, 0x0, 0x80, "131de400"}, 0x1, 0x4, {0x0}, 0x3, 0x0, 0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, 0x0) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000480)) sendmmsg$unix(r13, &(0x7f0000012e40)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)="9077c9b0913c1c1f4f360f1eeb88e69fbd053131d23bd340cb7a14d5782aefa6b7b36fc0932fe4975aa8a426049f6a6d157af46a10d6510a1b30d1ed9bdcd86d83ef8eeea0b950cbf0557d11176ba7d63f020f6604545ad3f46ec7367365dceb057d5c6b8d4beb7450c82a9fc8d06c8d62a4f03d3ebbe9872cb5d890a0d20023d3aeb9b8d9d7b5b260a95d160b23aca1ec6799c18ea6392e989ced879b4f6e7a4df0d7fb1b90f4e8060560282a3e92643f467978a645c9cfb833271cd71ade1a056dba75506dad22051e05c828700bf8fcf2660ea207092f6d249b11d965f42cf2202b", 0xe3}], 0x1, &(0x7f0000000780)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r11, 0xffffffffffffffff, r2, r7, r8, r13, r6, r1]}}, @rights={{0x1c, 0x1, 0x1, [r4, r3, r4]}}, @rights={{0x1c, 0x1, 0x1, [r9, r4, r2]}}, @rights={{0x30, 0x1, 0x1, [r12, 0xffffffffffffffff, r5, 0xffffffffffffffff, r13, r0, r4, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r12, r6, r9, r8, r10, 0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r7, r0, r10, r10]}}], 0x108, 0x80c0}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d80), 0x0, &(0x7f00000031c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0xd8, 0x20040000}}, {{&(0x7f0000004200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004340)=[{&(0x7f0000004280)="eb526c11aa9eddf1c458813339485c8d8bbf56642375e63385ebad4839b95c866b16b46b25d0662b5864f6d5592d4660ae4f479e276d7f794e3c18dcbc63a34051b68ad63f9ff52975bf614f6492c7804067146b9b397864ed211488c3c0ea51e7974c15404364427bb27a585373f8a201b08ca022b97b6fc53f1d870a4922c3fe904b9cb10b70d00c03755f0665847381d9015ab441d89cfb9d0e7dc68c73f1edbd6eb3bbf7e0", 0xa7}], 0x1, &(0x7f0000004440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r12, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5]}}, @rights={{0x28, 0x1, 0x1, [r4, r6, 0xffffffffffffffff, r0, r3, r8]}}, @cred={{0x1c}}], 0x88, 0x8004}}, {{&(0x7f0000004500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004580), 0x0, &(0x7f0000004680)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r13, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, r8]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r12]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f000000a3c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000a480)=[{&(0x7f000000a440)="f144742e1a92c119", 0x8}], 0x1, &(0x7f000000a580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x40}}, {{&(0x7f000000a600)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000010700)=[{&(0x7f000000a680)="7f07506978f921eb1dbf8a0926f14f193b0e597c9144a7cb54e0aceccbd1137c5a", 0x21}, {&(0x7f000000a6c0)="3a95b3afe4291b66e29d58fa5c794e36d7c35e68f6d46776fcec26670c7aa7559a5a7eb0e4baf9ff97ff52ad21fd420f6b59c789364e8697b283dd2baba6932fbb03bdb46c6b7e8bb13bc1d279a7532a0d6404d28f192dc3bbf2811e6b4e1e2966b5460657a5bb050dd7bc0f7f9ff87eba6b0b3df0077a2f0b4ee041976e504bd825f607405b27c7670db5619bd3d7d24fb738695832b4c9a0eb0c7fe8963633608d0bdec5717bc9f2c40dff3ebe82d686fc011a1872", 0xb6}, {&(0x7f000000a780)="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", 0x1000}, {&(0x7f000000e400)="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", 0x1000}, {&(0x7f000000f400)="74000a7bb6cb6af5bc48bd94f185bd51e08929263418bfa4ef2d146f6a8623201952d0d9621133a0c4744f8bac5b9c785fcd316563683cd69bdd7e9033bef4e24b5c4640fd5bf47b6bc022e8a8e7a4f404aa8476fbb26f23c140f4edba5fce717030423dae5cb6062574d819b5e6995ccbc405977c0f90bacbe130c6b2b593b8d16f39295a1a0be19e9044c4de9d707054aed8d015d76199888d05bce0c917b4f5bb462f51d409a58dcdf06749efd6ae0e1fb2dac00bc97747face938a780cfaaca4baf18d425ba7a3198d7730621551d6802099eca43e3a09", 0xd9}, {&(0x7f000000f500)="d32617ba74260b7b9fdf8cfedb38d7a61ce85880ae59e5106763275254531e1a9379d77a7d9ae4052991248fd98a1f97d570c3e0bb8cb7f0ba4704418009da67fa78ccf4ced69037fbb68a03dee9dfa2fc7f2aed0793e73760a8a3c48a2cd00d47787b682b74101c84d7", 0x6a}, {&(0x7f000000f580)="e4e22fcf4cbec168b8c98d01ecf22f434af3a9afe30cb68a6709e3b81cdf05d723880dc935a1ee88edbf65f9a48db4e14ce63b8e06cbc9bf6b9d2621badad71076e27ff150e0c40061406270ab4a09f88ea6460e55bc135d655ffa3a2e0b84afbaa2baa333c2f26cdff53b49ca94c51b3e1ca1cfabf0fe40c5c5ce60054519957821a9786730743d6414365cfd5f07396a04d544815f8a159102ec666855e9f3d8660f70029f29888349e96543d22d6503ae81accc70228ede7022a2629a90557ef659bceacda21b869d5120dc0e18f14b743a473ef7dbba94a7152f3a90a5a80552267dd802d44347518140349ef11cb8", 0xf1}, {&(0x7f000000f680)="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", 0x1000}, {&(0x7f0000010680)="f52d6bbabc028ee228e44ca9354b71a8b34d18ff54a4ab471d152c62ce3a17fcb6e05a8a1759016247c388e1969980a3ba7ec85ed2d73ebc84108771d2b683127584e70cb8092edf8d6e8a8b1dcb0e45103ce2d4d740b236ed2d01b0ef129d98b8437aa2093c0702b6e074639e859351df", 0x71}], 0x9, &(0x7f0000010800)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000000000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x1}}, {{&(0x7f0000010880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000010e80)=[{&(0x7f0000010900)="59b090eea875cb3a392cbf01e528bd01d1b4045aaec31367223d5aa57bb5d43c786462f26ffaac6cadd14f470e6b1ce941be7840f58de03546746c4f091360d4f0f6be310045752099a71ce9a60c09b0408323bde0e13bd427ae22dee44085d1eee626166bfb7b5ca0cd40a61fa26492d72b5966a609d399deab2433b2270ed134b20babebbdc6394c7f20f935e0d324399ad57bc3930532910ba574c61525f5", 0xa0}, {0x0}, {&(0x7f0000010a40)="7a80c34971882306f69a9d2c910e02ebf9ff90acbccd6ec32d3e5078f0b3c8d626e385dd4e3c953b730b4a818dae20bcbf6771d3f2b1cea19b5dc359ad80a13cb5f45641cc42d08844964db77ffb931a317856938d8414a87da95e05c239f0193a053f5421e963f7b883c69d06e327816bbb269457df306668569cbf3eee912e67f3b08b91de82cd660df00fd07058358f4442495506620463bab253ab4c7fca39a4d6ee5e", 0xa5}, {&(0x7f0000010b00)="39284a608ca77fe07b3cda375ee2b71894ff839d8df3724962eabe0add1ebb1fa6435141fdb5617c9fbf76802a533cd4e92b47ede88c3c284c99f442a3717c59bd3d2e5b71cdbb10707426cc50a014616df1436597e3cd6a92648bebba89761588479961919f66bfafc7a9f2207370aab49dcded0cab03f476da02d1cb7cea75fca84115ca4699679f24cde74119fc9a249356c8a287107c18e707ca84829f76166697fc856d81876472f627f6d19c7f4b58fe70f4daa00ed006b4cff7ef7783a229160bd61180fe8457ef80129a29598598b90c1172333195cb8f178a161130acde7735675ad8383b71a3f10fb59c63afa1e218bef34f", 0xf7}, {&(0x7f0000010c00)="16302f7b1dcd00de165320ebf29e6d9e37ae1ab8", 0x14}, {&(0x7f0000010c40)='\r', 0x1}, {&(0x7f0000010c80)="b0da3207890d0fea6a8ea2d6", 0xc}, {&(0x7f0000010cc0)="1dadeda829350ff8a5b3997eb2ac75e34ca32a2792c5b58fb9a0face0758a92ec29cb73c3b9541b2ff9c1ab88f8b71d0b05f9fdaa6d5c5da4751730c2b52ae86aa33229bb736d7ea744c51b0280cbcf34497e10abd6a47bd908a4595645fd6bb6d63ff28fc2b5e9545cb02c94a75a3d68199ea082878946921d78ccd273e9ec9b537820bd422e573c2f70c3057ccd50d888d12fc0727bc67b01ad7931ae8858f7ff7c5990e60b2709c65b2a4c2f3a106bf9fe8a7e10a343dbca8d69c64cf1a47bb322ff298069e81c958b8ac8d6f3725", 0xd0}, {&(0x7f0000010dc0)="8e2d91b27034e03de1f9fd596213510e80b5cda7a3b544239a775ee4d88c11052ca4acf258987db03b7ec7aac80d333245ed2e1e65ee1ad1f7f9721a76beafdc559bdac1a1d62881008ca3bb4654a5d9b96cd40f0a951ba55d88b9ab547a4166f1e112849fcf539454e0daebfd77303f1a16800c24bdfe6a080caff03c791c7d84867641b5092f6cf8f37a4dbaa8a61381ca34eb7111cd", 0x97}], 0x9, &(0x7f0000010f40)=[@rights={{0x20, 0x1, 0x1, [r4, r8, r7, 0xffffffffffffffff]}}], 0x20, 0x40000}}, {{&(0x7f0000010f80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000125c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r11, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x50, 0x4000090}}, {{&(0x7f0000012640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000012940)=[{&(0x7f00000126c0)="db91fa23a0841031476c1962bbebdf842c842a75d2efd52626107b3f59d95d6c9ee68c7f8e76d9a32623087ae7976d18d27efdc4df8f5b6eb33b5e5873c744e1b667447c1049fe7f2c2e3402afc8b47edd56c62302771fc33c10ee2e21d6d3a74b3de31e23097d151590bf29f87cd4de6cf1e3e42adbae0eadc2ecffee61ef79916db59f57a92a78daea98c8535c21457a5da2b1e5", 0x95}, {&(0x7f0000012840)="4252564e8984217fe5ad3b9d080f58655c5f817a3da56386ebd80ad2ec810b13c1", 0x21}, {0x0}], 0x3, &(0x7f00000129c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, r12, r10, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0, 0x8080}}, {{&(0x7f0000012ac0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000012c00)=[{&(0x7f0000012b40)="c1c43cf17eed024e6dbff60c5e6a8f4e149d131447fb49ea2cdc69096cd7135ea5407924e50f64b3a87887f1d07516cf5150fb6099598d38f554cc27", 0x3c}, {&(0x7f0000012b80)="81bf9fa01330718a9ce52ffd8e379ad47baa22a71642da3a17b8b7de5e9f874a2d45555ee06114e3e499e6ff1ae6f245271444a4ca175aab974aadd567364b22b9dfe89541aa75c5170bf9db8d2da7100187e5b3fc7b6fbdae", 0x59}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="a2e6f0012d1df9ce8144e0a3466efe289b253479f4f002fd42aa45280502b82a4ead72f83ae6cf7082fa12e54a0ffcc813f12ab051c0749ce0373a7ce3a21d22fbd44e5d3910119864ec87f344d235e08e2a258a0f5b623d45113377b9e010f72c4b0a2e5685881db8fe2b35855541e9ba30d5", @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES64=r12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001c00"], 0x60, 0x801}}], 0xa, 0x28d0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 14m3.838698701s ago: executing program 4 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x2400c090}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_ublk_setup_io_uring(0x224, &(0x7f0000000340)={0x0, 0x80000001, 0x800, 0x20000002, 0x3e2}, &(0x7f0000000540)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000000c0)={0x2e, 0x9, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0xe8d, 0x0, 0x0, 0x1000, 0x1}}}, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r7, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0\x00') write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r8 = open(&(0x7f0000000340)='./bus\x00', 0x4c27e, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000000c0)={r11, 0x5, 0x8}, &(0x7f0000000140)=0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff7, 0x12, r8, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000180000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c500000000000000000000000000220000000000000000000490904adf6cba11efa9b1f95da486fe0849adc74b8bf117d39211d41da67dd506a2665a3de9f24d47feaeebfafcb0300b4f73456ce7686c0aeba0af8c588717ad4e8302f0c9e1ade9e2aff9bca535da75894a869a69a9e9d8be2d3591222b50060fce3025113284f16666bf8a8b924078a21c9d8d872fb9c7221af5874f77686d0e1ef20eeda7544259d9a382e8f4db5f2df424fb9955b3b5119ebe3465cb775eb3dd"], 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'veth1\x00'}) 14m3.632828285s ago: executing program 4 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00ff800008001f80"], 0x38}}, 0x0) 14m3.328583311s ago: executing program 4 (id=867): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x7, 0x0, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = dup(r1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000514080026bd7000ffdbdf2508000100000000000800b5535544f93919b70300030000000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x4) preadv(r4, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/144, 0x90}], 0x1, 0xfffff52b, 0x3) syz_ublk_setup_io_uring(0x70aa, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x0, 0x158}, &(0x7f0000000500)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r8, 0x1, 0x5, &(0x7f0000000040)=0x3, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00680000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000440), 0xa02, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r9, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) futex(&(0x7f000000cffc)=0x1, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) futex(&(0x7f0000000100)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_add_dev(r11, r5, r6, r7, &(0x7f0000000280)={0x2e, 0x4, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0xcc0, 0x0, 0x0, 0x1000, 0x1000, 0xffffffffffffffff, 0x0, 0x49}}}, &(0x7f0000000300)) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private0, @private=0xa010100, 0xf, 0x16}}) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 14m3.047438864s ago: executing program 32 (id=867): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x7, 0x0, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = dup(r1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000514080026bd7000ffdbdf2508000100000000000800b5535544f93919b70300030000000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x4) preadv(r4, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/144, 0x90}], 0x1, 0xfffff52b, 0x3) syz_ublk_setup_io_uring(0x70aa, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x0, 0x158}, &(0x7f0000000500)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r8, 0x1, 0x5, &(0x7f0000000040)=0x3, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00680000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000440), 0xa02, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r9, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) futex(&(0x7f000000cffc)=0x1, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) futex(&(0x7f0000000100)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_add_dev(r11, r5, r6, r7, &(0x7f0000000280)={0x2e, 0x4, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0xcc0, 0x0, 0x0, 0x1000, 0x1000, 0xffffffffffffffff, 0x0, 0x49}}}, &(0x7f0000000300)) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private0, @private=0xa010100, 0xf, 0x16}}) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 10.17664402s ago: executing program 2 (id=5863): r0 = syz_open_dev$sndpcmc(&(0x7f0000002900), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffdfff], [0xffffffff, 0x7, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0x9e, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd(0x84) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r0, 0x40, 0x2}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000900)={0x0, 0x0, @pic={0x3, 0xf, 0x6, 0x0, 0x1, 0x4, 0x0, 0x6, 0x5, 0x6, 0x7f, 0xa, 0x4, 0x2b, 0x1, 0x9}}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) symlink(&(0x7f0000000000), &(0x7f0000000100)='my_configfs\x00') ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@report={0xa0, 0x29, 0x1, 0x70bd2b, 0x25ffdbfe, {0x33, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x7ff, 0x6, 0x4e23, 0x0, 0x0, 0xb0, 0xa0, 0x11}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @lastused={0xc, 0xf, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000010}, 0xc810) 7.588494989s ago: executing program 2 (id=5875): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xff7ff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000240)="2a73ed35", 0x732a}], 0x1}}], 0x40000ca, 0x200040c4) (fail_nth: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x28000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) 6.584075077s ago: executing program 2 (id=5880): r0 = semget(0x3, 0x4, 0x69c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8001}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xf801}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x401}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xdc}}, 0x0) (async) semop(r0, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}], 0x1f4) (async) creat(&(0x7f00000006c0)='./file0\x00', 0x10) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000640)={0xa, 0x2, 0x3a, 0x10000, '\x00', 0x105}) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ff9, 0x0, 0x0, 0x15, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xe, 0xc]}}) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x6000}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r2, &(0x7f00000004c0)="cde4a37b9abaf7023ac743ee8fe95ea2a067f0a64a200f4d1127722f279dbc4c3090af997723d4ca9d6c853cecff835a9f6cba9adbda7d25df9538bc35d060daf4bc860ddbafd038810c597bd9d4ef15fb8a9b74c89fde86d3ed7bd95c9202bd9f6f723e06dbdc5f411b10bdee549a898392ebace7ebb6a4f57be1e02c37cebe70c1050157da3cd40b12e3974035c4c1b42dff784f93afc8e2e73be7fcc232c07de6b071ba31276d1d4180dbb1416480694b8539af0e6fd94ae15d64d995377a32b5ea6ec4c10b5e61bf5ab06814f62354dd0310309c6af57d23f35db97826f48a504b9ab2e659cda5aaadc749", &(0x7f00000005c0)=""/54}, 0x20) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040), 0x4) (async) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) (async) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000080)) (async) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)=0xdfe5) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) (async) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000097}]}) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ibss_ssid, 0x6, 0x1) 5.376295383s ago: executing program 1 (id=5887): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000300003000000000000040000000000000000000000000000000000000000fc0200000000000000000000000000000300050000000000020000fee0412986bcf9b40020000000030006000000000002"], 0x80}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 4.840795854s ago: executing program 1 (id=5890): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x200b}) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000002, 0x10010, r2, 0x0) r6 = mmap$IORING_OFF_SQES(0x0, 0x81, 0x200000e, 0x10, r2, 0x10000000) syz_io_uring_submit(0x0, r5, r6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) lseek(0xffffffffffffffff, 0xffffff60, 0x1) ioprio_get$pid(0x3, 0x0) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x8000, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 3.854473449s ago: executing program 2 (id=5896): preadv(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1, 0x6, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x44804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x7, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20008810) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000097000010010ab4be68e8da23507000000", @ANYRES32=r1, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) 3.657900001s ago: executing program 1 (id=5898): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0xc1c2, 0x1000, 0xfffffffd, 0x5, 0x0, r1}) (async) r2 = io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0xc1c2, 0x1000, 0xfffffffd, 0x5, 0x0, r1}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000001780), 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) (async) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x4) (async) exit(0x4) preadv(r5, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/144, 0x90}], 0x1, 0xfffff52b, 0x3) (async) preadv(r5, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/144, 0x90}], 0x1, 0xfffff52b, 0x3) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'pim6reg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe4, 0x0, 0x701, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 3.580235825s ago: executing program 2 (id=5899): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000013c0)={{r3, &(0x7f0000000340)=')\x00\xb3^\xae', 0x4000, &(0x7f0000000280)={@align=0x7, {0xbbc5, 0x155, 0x2}}, 0xfffffaca, &(0x7f00000002c0), &(0x7f0000000300)=0x8}, 0x0, &(0x7f0000001380)}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r2, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800009) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ff"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="170be540690003"], 0x18}}, 0x404c080) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100000008000600090000000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014"], 0x48}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x7, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x405, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0xfffff000, 0x6, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x400009, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x8, 0x9, 0x5, 0x8, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x8, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r8 = syz_open_dev$vcsa(&(0x7f0000000380), 0x5b95b610, 0x701c83) ioctl$MEMREAD(r8, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x2, 0x4, 0x4bb}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 2.978862711s ago: executing program 5 (id=5901): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000640)={0x1, 0x0, [{0x489, 0x0, 0xb5}]}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000500010000020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000899f5b78f7a5fbb808e44cc6939ff5c2543c4fa7b83e8afa3c89e6f378d0800dffc966660b0cc0f5f3ecf6effb72c701df425af4b22fe33676"], 0x48}}, 0x0) sendmsg$NFT_MSG_GETSET(r2, 0x0, 0x408c4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRES16=r1], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0x1000000, 0x3, {0x4, 0x21}, 0x14, 0x1}) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000020) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x5, 0x0, 0x21dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004044}, 0x4000000) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r10, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@pad1]}}}], 0x38}}], 0x1, 0x40000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendmsg$NFT_MSG_GETFLOWTABLE(r11, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24044880}, 0x200000c0) r12 = accept4(r0, 0x0, 0x0, 0x0) sendmsg(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000780)="5505ae09", 0x4}, {0x0}], 0x2}, 0x0) 2.554692938s ago: executing program 5 (id=5902): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000240)=""/65, 0x41, 0x60010163, 0x0, 0x0) 2.554295196s ago: executing program 1 (id=5903): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x50040) r4 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)='espintcp', 0x8) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r5 = landlock_create_ruleset(&(0x7f0000000040), 0x30, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x8) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x6) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x7) landlock_restrict_self(r6, 0xf) landlock_restrict_self(r5, 0x1) landlock_restrict_self(r6, 0x6) landlock_restrict_self(r6, 0xc) landlock_restrict_self(r5, 0xe) landlock_restrict_self(r5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r8, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) signalfd4(r7, &(0x7f0000000140), 0x8, 0x0) 2.204244593s ago: executing program 1 (id=5905): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000150001030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c8}, 0x40810) 2.061645925s ago: executing program 1 (id=5906): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x9]}, 0x8) close(r0) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x24004800) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd09022400010000e8010904000001030000000921fd7f000122eb0009058103"], 0x0) r5 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2\x00#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x92\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="b3030000", 0x4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x8, 0x0, &(0x7f00000000c0)=[{0x6, 0x3}, {0x625, 0x3}, {0x8, 0x4}, {0x100000000, 0x8}, {0x7, 0x7fffffff}, {0x4}, {0x7f}, {0xffffffff, 0x2}]}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) fsopen(&(0x7f0000000040)='anon_inodefs\x00', 0x0) 1.158671194s ago: executing program 5 (id=5913): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff0000000000000000000000008400050000000000000000000000ffff00000000000004d5320000000a00000064010101000000000000000000000000000000000002480004000000ffff000005000000e0000002000000000000000000000000000004d42b0000000a000000ac1e0101000000000000000000000000000001000300f9ffffffff030100d900"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01fdff000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.052743646s ago: executing program 5 (id=5915): socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x802) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, 0x0) inotify_init1(0x800) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x800) socket(0x1e, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000180), 0x7fffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timerfd_create(0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0x4, 0x8, 0x40000187}) socket(0x10, 0x803, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 987.33052ms ago: executing program 5 (id=5917): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r1 = socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x200000000000000, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000840000000010900010073797a3000000000080005400000000408000a40000000000900020073797a3100000000140000001000010000000000000000000084000aa6430b0811e5627fe88b9892df7eee63b9e73b8d64b69aa2ff360c2bf34e8c275eb3a08c5554f8c48a1f8d149f31f71f605f7c69f94c5322d5aeb1ff204bdfbdb77268213118efa7dcf319390b6b5516e57160c107b8"], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) listns(&(0x7f0000000040)={0x20, 0x0, 0x8000000000000002, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x2c, r9, 0x8}, 0xc) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r10, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x100000, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) 932.610029ms ago: executing program 0 (id=5918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(r1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x22040085}, 0x11) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 725.869697ms ago: executing program 3 (id=5919): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) truncate(0x0, 0x8000e) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x25000, 0x200000, 0x2, 0x4f, 0xfc}) 399.666435ms ago: executing program 0 (id=5920): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0xeb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x4000) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000001140)=0x1) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2002, @remote}}}, 0x108) r8 = socket$kcm(0xa, 0x2, 0x73) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r10 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r10, 0x1000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)=0x44) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x29, 0x8, {0x0, @broadcast, @private=0xa010100}}}], 0x50}, 0x9fc) 382.122374ms ago: executing program 2 (id=5921): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x200b}) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000002, 0x10010, r2, 0x0) r4 = mmap$IORING_OFF_SQES(0x0, 0x81, 0x200000e, 0x10, r2, 0x10000000) syz_io_uring_submit(0x0, r3, r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) lseek(0xffffffffffffffff, 0xffffff60, 0x1) ioprio_get$pid(0x3, 0x0) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x8000, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 306.01749ms ago: executing program 0 (id=5922): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000001540)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x54, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x40}, {[@routing={0x0, 0x2, 0x1, 0x12, 0x0, [@local]}, @dstopts={0x33}, @dstopts={0x2f}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e20, 0x4e24}, 0x1000000, 0x2}, 0x3, 0x4}, 0x1}}}}}}}, 0x7c) 188.090381ms ago: executing program 0 (id=5923): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000130000b776f88eff7f0000000008"], 0x50) 170.689221ms ago: executing program 0 (id=5924): pipe2$watch_queue(0x0, 0x80) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000640)={0x1, 0x0, [{0x489, 0x0, 0xb5}]}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000500010000020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000899f5b78f7a5fbb808e44cc6939ff5c2543c4fa7b83e8afa3c89e6f378d0800dffc966660b0cc0f5f3ecf6effb72c701df425af4b22fe33676"], 0x48}}, 0x0) sendmsg$NFT_MSG_GETSET(r2, 0x0, 0x408c4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRES16=r1], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0x1000000, 0x3, {0x4, 0x21}, 0x14, 0x1}) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000020) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x5, 0x0, 0x21dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004044}, 0x4000000) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r10, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@pad1]}}}], 0x38}}], 0x1, 0x40000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendmsg$NFT_MSG_GETFLOWTABLE(r11, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24044880}, 0x200000c0) r12 = accept4(r0, 0x0, 0x0, 0x0) sendmsg(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000780)="5505ae09", 0x4}, {0x0}], 0x2}, 0x0) 71.812434ms ago: executing program 3 (id=5925): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000200)={&(0x7f00000002c0)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2}) 20.323637ms ago: executing program 5 (id=5926): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r1 = eventfd(0x5f0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0xe08e, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a680, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0xfffffffffffffffd, 0x9c8a, 0x0, 0x17fffffffffffc, 0x800}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000019280)=0x15, 0x4) r4 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000194c0)=ANY=[@ANYRES64=0x0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) r6 = add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', 0x0}) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x10003, 0x2, 0x42000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0xaaaae5d, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) add_key$keyring(&(0x7f0000019080), &(0x7f0000019240)={'syz', 0x0}, 0x0, 0x0, r6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f0000019500)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="00000000000000000000000000d51b3edb8ae60442966cc819000000fc010000000000000000c000000000004e2301014e23ebf81eb6421dc180c800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000200000f000000000000000001000000000000005000000000000000100000000000080000000800000000004000000000000000200000000000000010000800000000005000000000000000600000000c89d59309a82ce000000010000000000000005000000bf6b6e00000102010000000006000000010000007f00000029bd7000"], 0x128}}, 0x24048880) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000192c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="c980145dcfa1d86635a0e7b656e5cc00be745783af82d1375d866d01e80ad98d4f9c62bc14f0a24d2bf614231aebad71ae4aaa13347a49eea9d6bb7894bac982ab3c685570afbfc5d0689b88af61e12de03638bfefb3334bd9d996e8f944f6e8841e83f0f754296a53988dae1113441868243b301eb808db8925728351cff06a007b259843436e1d0c20e3789088749aa181a34eb1bd4d8e5be4e11d6b017e603adc55b8dc25edf17d28700c9056a0967b487fea6475a1663ad774fbec636df278fd6f2eff85b341eabc196d4b4ad7181e6f9b3d48ba"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=5927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "040007", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1001}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r9}}, 0x18) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x1000, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f7ffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x1, 0x147}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff7, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) kernel console output (not intermixed with test programs): vfs_read+0x10/0x10 [ 1027.179664][T23459] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1027.179709][T23459] ksys_read+0x150/0x270 [ 1027.179731][T23459] ? __pfx_ksys_read+0x10/0x10 [ 1027.179763][T23459] do_syscall_64+0x166/0x520 [ 1027.179801][T23459] ? trace_irq_disable+0x3b/0x140 [ 1027.179828][T23459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.179850][T23459] ? clear_bhb_loop+0x70/0xc0 [ 1027.179873][T23459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.179899][T23459] RIP: 0033:0x7f8449b5e98e [ 1027.179918][T23459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1027.179937][T23459] RSP: 002b:00007f8447df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1027.179962][T23459] RAX: ffffffffffffffda RBX: 00007f8447df66c0 RCX: 00007f8449b5e98e [ 1027.179977][T23459] RDX: 000000000000000f RSI: 00007f8447df60a0 RDI: 0000000000000004 [ 1027.179990][T23459] RBP: 00007f8447df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.180004][T23459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.180017][T23459] R13: 00007f8449e26038 R14: 00007f8449e25fa0 R15: 00007f8449f4fa48 [ 1027.180047][T23459] [ 1027.180228][T23460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5393'. [ 1027.470247][T23462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.470742][T23462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.163002][T23475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.168664][T23475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.851598][T23499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1029.072922][T23504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.611376][T23519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.613333][T23519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.695080][T23517] netlink: 'syz.5.5411': attribute type 10 has an invalid length. [ 1030.510604][T23530] netlink: 'syz.0.5415': attribute type 10 has an invalid length. [ 1030.565182][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 1030.565205][ T31] audit: type=1326 audit(1790973324.613:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.565589][ T31] audit: type=1326 audit(1790973324.613:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.568455][ T31] audit: type=1326 audit(1790973324.623:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.568670][ T31] audit: type=1326 audit(1790973324.623:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.568858][ T31] audit: type=1326 audit(1790973324.623:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.569054][ T31] audit: type=1326 audit(1790973324.623:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.569272][ T31] audit: type=1326 audit(1790973324.623:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.569509][ T31] audit: type=1326 audit(1790973324.623:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.569743][ T31] audit: type=1326 audit(1790973324.623:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.569952][ T31] audit: type=1326 audit(1790973324.623:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.1.5416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d1679e159 code=0x7ffc0000 [ 1030.582399][T23533] tipc: Started in network mode [ 1030.582434][T23533] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 1030.582489][T23533] tipc: Enabling of bearer rejected, failed to enable media [ 1030.970486][T23542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5419'. [ 1031.057427][T23544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1031.057453][T23544] IPv6: NLM_F_CREATE should be set when creating new route [ 1031.432577][T23557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.448184][T23557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.547510][T23557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.550209][T23557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.597123][T23557] ip6gre1: entered allmulticast mode [ 1031.599536][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1032.070584][T23568] : renamed from bond_slave_0 (while UP) [ 1032.546918][T23581] FAULT_INJECTION: forcing a failure. [ 1032.546918][T23581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.546958][T23581] CPU: 1 UID: 0 PID: 23581 Comm: syz.2.5429 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.546983][T23581] Tainted: [L]=SOFTLOCKUP [ 1032.546990][T23581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1032.547001][T23581] Call Trace: [ 1032.547009][T23581] [ 1032.547019][T23581] dump_stack_lvl+0xe8/0x150 [ 1032.547058][T23581] should_fail_ex+0x410/0x560 [ 1032.547087][T23581] _copy_from_user+0x2d/0xb0 [ 1032.547115][T23581] ___sys_recvmsg+0x173/0x5a0 [ 1032.547154][T23581] ? __pfx____sys_recvmsg+0x10/0x10 [ 1032.547187][T23581] ? lock_acquire+0x115/0x350 [ 1032.547234][T23581] do_recvmmsg+0x31a/0x7f0 [ 1032.547267][T23581] ? __pfx_do_recvmmsg+0x10/0x10 [ 1032.547306][T23581] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1032.547338][T23581] ? __fget_files+0x3a2/0x420 [ 1032.547380][T23581] __x64_sys_recvmmsg+0x198/0x250 [ 1032.547414][T23581] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1032.547449][T23581] do_syscall_64+0x166/0x520 [ 1032.547476][T23581] ? trace_irq_disable+0x3b/0x140 [ 1032.547495][T23581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.547516][T23581] ? clear_bhb_loop+0x70/0xc0 [ 1032.547539][T23581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.547558][T23581] RIP: 0033:0x7fd8f2f9e159 [ 1032.547578][T23581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.547598][T23581] RSP: 002b:00007fd8f3e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1032.547622][T23581] RAX: ffffffffffffffda RBX: 00007fd8f3226090 RCX: 00007fd8f2f9e159 [ 1032.547635][T23581] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1032.547648][T23581] RBP: 00007fd8f3e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.547660][T23581] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1032.547672][T23581] R13: 00007fd8f3226128 R14: 00007fd8f3226090 R15: 00007fd8f334fa48 [ 1032.547698][T23581] [ 1033.040806][T23585] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1033.040843][T23585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.251366][ T5615] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1033.783687][T23600] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5437'. [ 1034.082519][T23606] batadv_slave_0: entered promiscuous mode [ 1034.104031][T23606] netlink: 'syz.5.5439': attribute type 23 has an invalid length. [ 1034.169999][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5439'. [ 1034.230941][T23609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.231414][T23609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.269196][T23609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.269651][T23609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.273746][T23608] batadv_slave_0 (unregistering): left promiscuous mode [ 1035.250254][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5445'. [ 1035.326408][T23630] gretap0: entered promiscuous mode [ 1035.326561][T23630] macvlan2: entered allmulticast mode [ 1035.326698][T23630] gretap0: entered allmulticast mode [ 1035.456024][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1035.459266][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5447'. [ 1035.728457][T23642] FAULT_INJECTION: forcing a failure. [ 1035.728457][T23642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1035.728488][T23642] CPU: 1 UID: 0 PID: 23642 Comm: syz.3.5450 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.728505][T23642] Tainted: [L]=SOFTLOCKUP [ 1035.728509][T23642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.728517][T23642] Call Trace: [ 1035.728523][T23642] [ 1035.728529][T23642] dump_stack_lvl+0xe8/0x150 [ 1035.728554][T23642] should_fail_ex+0x410/0x560 [ 1035.728573][T23642] prepare_alloc_pages+0x223/0x600 [ 1035.728593][T23642] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1035.728609][T23642] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1035.728621][T23642] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1035.728636][T23642] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1035.728651][T23642] ? __pfx_policy_nodemask+0x10/0x10 [ 1035.728665][T23642] ? trace_irq_disable+0x3b/0x140 [ 1035.728681][T23642] __alloc_pages_noprof+0x10/0x100 [ 1035.728694][T23642] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1035.728710][T23642] ? alloc_pages_noprof+0x140/0x2b0 [ 1035.728727][T23642] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1035.728743][T23642] alloc_vmap_area+0xd1a/0x1420 [ 1035.728768][T23642] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1035.728782][T23642] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1035.728801][T23642] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1035.728813][T23642] ? __get_vm_area_node+0x155/0x2f0 [ 1035.728830][T23642] __get_vm_area_node+0x200/0x2f0 [ 1035.728848][T23642] __vmalloc_node_range_noprof+0x343/0x1540 [ 1035.728865][T23642] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 1035.728883][T23642] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1035.728903][T23642] ? trace_contention_end+0x3d/0x140 [ 1035.728923][T23642] ? do_alloc_pages+0xed/0x260 [ 1035.728937][T23642] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1035.728952][T23642] ? __mutex_unlock_slowpath+0x731/0x900 [ 1035.728973][T23642] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 1035.728987][T23642] vmalloc_noprof+0xb2/0xe0 [ 1035.729002][T23642] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 1035.729016][T23642] snd_dma_alloc_dir_pages+0x120/0x220 [ 1035.729031][T23642] do_alloc_pages+0x11c/0x260 [ 1035.729046][T23642] snd_pcm_lib_malloc_pages+0x33a/0x780 [ 1035.729063][T23642] snd_pcm_hw_params+0x870/0x1d50 [ 1035.729085][T23642] ? do_raw_spin_lock+0x12b/0x2f0 [ 1035.729110][T23642] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1035.729126][T23642] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1035.729142][T23642] ? snd_pcm_kernel_ioctl+0x336/0xb20 [ 1035.729162][T23642] ? snd_pcm_kernel_ioctl+0x1f2/0xb20 [ 1035.729189][T23642] snd_pcm_oss_change_params_locked+0x1e90/0x3c80 [ 1035.729230][T23642] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1035.729256][T23642] ? do_raw_spin_lock+0x12b/0x2f0 [ 1035.729270][T23642] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1035.729287][T23642] snd_pcm_oss_set_trigger+0x4ff/0xda0 [ 1035.729303][T23642] snd_pcm_oss_poll+0x67a/0x8f0 [ 1035.729322][T23642] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1035.729341][T23642] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1035.729357][T23642] do_sys_poll+0x990/0x1110 [ 1035.729381][T23642] ? __pfx_do_sys_poll+0x10/0x10 [ 1035.729395][T23642] ? lock_acquire+0x115/0x350 [ 1035.729409][T23642] ? __pfx___pollwait+0x10/0x10 [ 1035.729424][T23642] ? __pfx_pollwake+0x10/0x10 [ 1035.729482][T23642] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1035.729502][T23642] __x64_sys_poll+0x190/0x360 [ 1035.729518][T23642] ? __pfx___x64_sys_poll+0x10/0x10 [ 1035.729537][T23642] do_syscall_64+0x166/0x520 [ 1035.729553][T23642] ? trace_irq_disable+0x3b/0x140 [ 1035.729564][T23642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.729576][T23642] ? clear_bhb_loop+0x70/0xc0 [ 1035.729590][T23642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.729608][T23642] RIP: 0033:0x7fcdcbb9e159 [ 1035.729622][T23642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.729633][T23642] RSP: 002b:00007fcdccaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1035.729647][T23642] RAX: ffffffffffffffda RBX: 00007fcdcbe25fa0 RCX: 00007fcdcbb9e159 [ 1035.729656][T23642] RDX: 0000000000000090 RSI: 0000000000000001 RDI: 0000200000000280 [ 1035.729663][T23642] RBP: 00007fcdccaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.729670][T23642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.729677][T23642] R13: 00007fcdcbe26038 R14: 00007fcdcbe25fa0 R15: 00007fcdcbf4fa48 [ 1035.729694][T23642] [ 1035.733271][T23642] syz.3.5450: vmalloc error: size 2097152, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1035.733324][T23642] CPU: 1 UID: 0 PID: 23642 Comm: syz.3.5450 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.733339][T23642] Tainted: [L]=SOFTLOCKUP [ 1035.733343][T23642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.733351][T23642] Call Trace: [ 1035.733356][T23642] [ 1035.733363][T23642] dump_stack_lvl+0xe8/0x150 [ 1035.733386][T23642] warn_alloc+0x24d/0x270 [ 1035.733400][T23642] ? lockdep_hardirqs_on+0x7b/0x110 [ 1035.733420][T23642] ? __pfx_warn_alloc+0x10/0x10 [ 1035.733430][T23642] ? kfree+0x1c5/0x650 [ 1035.733451][T23642] ? __get_vm_area_node+0x219/0x2f0 [ 1035.733472][T23642] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1035.733488][T23642] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1035.733510][T23642] ? trace_contention_end+0x3d/0x140 [ 1035.733531][T23642] ? do_alloc_pages+0xed/0x260 [ 1035.733548][T23642] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1035.733563][T23642] ? __mutex_unlock_slowpath+0x731/0x900 [ 1035.733582][T23642] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 1035.733595][T23642] vmalloc_noprof+0xb2/0xe0 [ 1035.733615][T23642] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 1035.733629][T23642] snd_dma_alloc_dir_pages+0x120/0x220 [ 1035.733644][T23642] do_alloc_pages+0x11c/0x260 [ 1035.733660][T23642] snd_pcm_lib_malloc_pages+0x33a/0x780 [ 1035.733676][T23642] snd_pcm_hw_params+0x870/0x1d50 [ 1035.733697][T23642] ? do_raw_spin_lock+0x12b/0x2f0 [ 1035.733715][T23642] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1035.733731][T23642] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1035.733748][T23642] ? snd_pcm_kernel_ioctl+0x336/0xb20 [ 1035.733762][T23642] ? snd_pcm_kernel_ioctl+0x1f2/0xb20 [ 1035.733778][T23642] snd_pcm_oss_change_params_locked+0x1e90/0x3c80 [ 1035.733811][T23642] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1035.733837][T23642] ? do_raw_spin_lock+0x12b/0x2f0 [ 1035.733851][T23642] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1035.733868][T23642] snd_pcm_oss_set_trigger+0x4ff/0xda0 [ 1035.733884][T23642] snd_pcm_oss_poll+0x67a/0x8f0 [ 1035.733902][T23642] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1035.733921][T23642] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1035.733937][T23642] do_sys_poll+0x990/0x1110 [ 1035.733960][T23642] ? __pfx_do_sys_poll+0x10/0x10 [ 1035.733974][T23642] ? lock_acquire+0x115/0x350 [ 1035.733988][T23642] ? __pfx___pollwait+0x10/0x10 [ 1035.734003][T23642] ? __pfx_pollwake+0x10/0x10 [ 1035.734061][T23642] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1035.734081][T23642] __x64_sys_poll+0x190/0x360 [ 1035.734101][T23642] ? __pfx___x64_sys_poll+0x10/0x10 [ 1035.734120][T23642] do_syscall_64+0x166/0x520 [ 1035.734135][T23642] ? trace_irq_disable+0x3b/0x140 [ 1035.734147][T23642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.734159][T23642] ? clear_bhb_loop+0x70/0xc0 [ 1035.734172][T23642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.734183][T23642] RIP: 0033:0x7fcdcbb9e159 [ 1035.734195][T23642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.734205][T23642] RSP: 002b:00007fcdccaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1035.734217][T23642] RAX: ffffffffffffffda RBX: 00007fcdcbe25fa0 RCX: 00007fcdcbb9e159 [ 1035.734226][T23642] RDX: 0000000000000090 RSI: 0000000000000001 RDI: 0000200000000280 [ 1035.734233][T23642] RBP: 00007fcdccaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.734240][T23642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.734247][T23642] R13: 00007fcdcbe26038 R14: 00007fcdcbe25fa0 R15: 00007fcdcbf4fa48 [ 1035.734264][T23642] [ 1035.734269][T23642] Mem-Info: [ 1035.734276][T23642] active_anon:20818 inactive_anon:28 isolated_anon:0 [ 1035.734276][T23642] active_file:2168 inactive_file:64172 isolated_file:0 [ 1035.734276][T23642] unevictable:0 dirty:354 writeback:0 [ 1035.734276][T23642] slab_reclaimable:8157 slab_unreclaimable:101659 [ 1035.734276][T23642] mapped:44457 shmem:13837 pagetables:2652 [ 1035.734276][T23642] sec_pagetables:0 bounce:0 [ 1035.734276][T23642] kernel_misc_reclaimable:0 [ 1035.734276][T23642] free:1252780 free_pcp:19672 free_cma:0 [ 1035.734309][T23642] Node 0 active_anon:83272kB inactive_anon:112kB active_file:8672kB inactive_file:256480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177828kB dirty:1416kB writeback:0kB shmem:55348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14336kB pagetables:10448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1035.734343][T23642] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1035.734373][T23642] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1035.734405][T23642] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1035.734425][T23642] Node 0 DMA32 free:1088796kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:83872kB inactive_anon:112kB active_file:8672kB inactive_file:256480kB unevictable:0kB writepending:1416kB zspages:1284kB present:3129332kB managed:2546864kB mlocked:0kB bounce:0kB free_pcp:44460kB local_pcp:13336kB free_cma:0kB [ 1035.760536][T23642] lowmem_reserve[]: 0 0 0 0 0 [ 1035.760570][T23642] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1035.760600][T23642] lowmem_reserve[]: 0 0 0 0 0 [ 1035.760619][T23642] Node 1 Normal free:3906964kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:34228kB local_pcp:16224kB free_cma:0kB [ 1035.760650][T23642] lowmem_reserve[]: 0 0 0 0 0 [ 1035.760669][T23642] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1035.760731][T23642] Node 0 DMA32: 3665*4kB (UME) 2018*8kB (UME) 1125*16kB (UME) 1246*32kB (UME) 768*64kB (UME) 405*128kB (ME) 220*256kB (UME) 114*512kB (UME) 44*1024kB (UME) 9*2048kB (ME) 176*4096kB (UM) = 1088740kB [ 1035.760832][T23642] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1035.760889][T23642] Node 1 Normal: 3*4kB (UM) 11*8kB (UM) 13*16kB (UM) 19*32kB (UM) 16*64kB (UM) 12*128kB (UM) 8*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 952*4096kB (UM) = 3906964kB [ 1035.760968][T23642] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1035.760977][T23642] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1035.760986][T23642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1035.760995][T23642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1035.761004][T23642] 80394 total pagecache pages [ 1035.761010][T23642] 53 pages in swap cache [ 1035.761014][T23642] Free swap = 123640kB [ 1035.761019][T23642] Total swap = 124996kB [ 1035.761024][T23642] 2097051 pages RAM [ 1035.761028][T23642] 0 pages HighMem/MovableOnly [ 1035.761033][T23642] 428719 pages reserved [ 1035.761037][T23642] 0 pages cma reserved [ 1038.747094][T23675] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1038.810079][T23678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.810362][T23678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.869419][T23680] xt_REDIRECT: bad rangesize 26624. [ 1039.038199][T23678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.038692][T23678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.143649][T23689] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5466'. [ 1039.212445][T23689] batman_adv: batadv0: Interface deactivated: syz_tun [ 1039.375850][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5466'. [ 1039.409332][T23705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5465'. [ 1039.435951][T14215] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.435992][T14215] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.436030][T14215] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.436055][T14215] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.436089][T14215] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.436114][T14215] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.450261][T14215] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.450300][T14215] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.830873][T23721] FAULT_INJECTION: forcing a failure. [ 1039.830873][T23721] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.830910][T23721] CPU: 0 UID: 0 PID: 23721 Comm: syz.3.5474 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.830939][T23721] Tainted: [L]=SOFTLOCKUP [ 1039.830947][T23721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1039.830960][T23721] Call Trace: [ 1039.830967][T23721] [ 1039.830974][T23721] dump_stack_lvl+0xe8/0x150 [ 1039.830997][T23721] should_fail_ex+0x410/0x560 [ 1039.831017][T23721] should_failslab+0xa8/0x100 [ 1039.831036][T23721] ? anon_vma_clone+0x3f3/0x9f0 [ 1039.831053][T23721] kmem_cache_alloc_noprof+0xa1/0x600 [ 1039.831073][T23721] ? anon_vma_clone+0x3f3/0x9f0 [ 1039.831094][T23721] anon_vma_clone+0x3f3/0x9f0 [ 1039.831114][T23721] __split_vma+0x3e0/0xa60 [ 1039.831135][T23721] ? __pfx___split_vma+0x10/0x10 [ 1039.831154][T23721] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1039.831171][T23721] vms_gather_munmap_vmas+0x322/0x1370 [ 1039.831189][T23721] ? do_vmi_align_munmap+0x3b7/0x4b0 [ 1039.831204][T23721] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1039.831220][T23721] ? __lock_acquire+0x747/0x2de0 [ 1039.831239][T23721] do_vmi_align_munmap+0x2b4/0x4b0 [ 1039.831277][T23721] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1039.831316][T23721] ? mas_walk+0x37e/0x490 [ 1039.831343][T23721] ? mas_find+0x642/0xcb0 [ 1039.831372][T23721] do_vmi_munmap+0x252/0x2d0 [ 1039.831401][T23721] mremap_to+0x250/0x8d0 [ 1039.831427][T23721] ? __pfx_mremap_to+0x10/0x10 [ 1039.831464][T23721] __se_sys_mremap+0xf59/0x12d0 [ 1039.831492][T23721] ? ksys_write+0x1e6/0x270 [ 1039.831510][T23721] ? __pfx___se_sys_mremap+0x10/0x10 [ 1039.831542][T23721] ? __mutex_unlock_slowpath+0x731/0x900 [ 1039.831569][T23721] ? __fget_files+0x2a/0x420 [ 1039.831599][T23721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1039.831623][T23721] ? __fget_files+0x3a2/0x420 [ 1039.831645][T23721] ? __pfx_ksys_write+0x10/0x10 [ 1039.831659][T23721] ? __x64_sys_mremap+0x20/0xc0 [ 1039.831672][T23721] do_syscall_64+0x166/0x520 [ 1039.831687][T23721] ? trace_irq_disable+0x3b/0x140 [ 1039.831701][T23721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.831712][T23721] ? clear_bhb_loop+0x70/0xc0 [ 1039.831726][T23721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.831737][T23721] RIP: 0033:0x7fcdcbb9e159 [ 1039.831750][T23721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.831761][T23721] RSP: 002b:00007fcdccaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1039.831774][T23721] RAX: ffffffffffffffda RBX: 00007fcdcbe25fa0 RCX: 00007fcdcbb9e159 [ 1039.831783][T23721] RDX: 0000000000003000 RSI: 0000000000004000 RDI: 0000200000c58000 [ 1039.831790][T23721] RBP: 00007fcdccaeb090 R08: 0000200000ffa000 R09: 0000000000000000 [ 1039.831797][T23721] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1039.831803][T23721] R13: 00007fcdcbe26038 R14: 00007fcdcbe25fa0 R15: 00007fcdcbf4fa48 [ 1039.831820][T23721] [ 1041.118906][T23754] FAULT_INJECTION: forcing a failure. [ 1041.118906][T23754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.118977][T23754] CPU: 1 UID: 0 PID: 23754 Comm: syz.3.5484 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.119006][T23754] Tainted: [L]=SOFTLOCKUP [ 1041.119013][T23754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1041.119026][T23754] Call Trace: [ 1041.119035][T23754] [ 1041.119044][T23754] dump_stack_lvl+0xe8/0x150 [ 1041.119081][T23754] should_fail_ex+0x410/0x560 [ 1041.119111][T23754] _copy_to_user+0x31/0xb0 [ 1041.119142][T23754] copy_siginfo_to_user+0x22/0xc0 [ 1041.119168][T23754] x64_setup_rt_frame+0x764/0xc50 [ 1041.119218][T23754] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1041.119257][T23754] arch_do_signal_or_restart+0x456/0x860 [ 1041.119286][T23754] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1041.119321][T23754] ? __x64_sys_recvmmsg+0x198/0x250 [ 1041.119361][T23754] exit_to_user_mode_loop+0x10e/0x770 [ 1041.119385][T23754] ? rcu_is_watching+0x16/0xb0 [ 1041.119414][T23754] do_syscall_64+0x328/0x520 [ 1041.119441][T23754] ? trace_irq_disable+0x3b/0x140 [ 1041.119463][T23754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.119483][T23754] ? clear_bhb_loop+0x70/0xc0 [ 1041.119508][T23754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.119528][T23754] RIP: 0033:0x7fcdcbb9e157 [ 1041.119547][T23754] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1041.119565][T23754] RSP: 002b:00007fcdccaeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1041.119587][T23754] RAX: 000000000000012b RBX: 00007fcdcbe25fa0 RCX: 00007fcdcbb9e159 [ 1041.119600][T23754] RDX: 0000000000000001 RSI: 0000200000002a80 RDI: 0000000000000003 [ 1041.119613][T23754] RBP: 00007fcdccaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.119625][T23754] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 1041.119637][T23754] R13: 00007fcdcbe26038 R14: 00007fcdcbe25fa0 R15: 00007fcdcbf4fa48 [ 1041.119666][T23754] [ 1041.400459][T23760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.400979][T23760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.509795][T23760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.510332][T23760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.539412][T23765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5486'. [ 1041.745892][T23775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.746193][T23775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.091538][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 1043.091561][ T31] audit: type=1326 audit(1790973337.143:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.5.5500" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1043.091789][ T31] audit: type=1326 audit(1790973337.143:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.5.5500" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1043.160287][ T31] audit: type=1326 audit(1790973337.213:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.5.5500" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8449b5e98e code=0x7ffc0000 [ 1043.160691][ T31] audit: type=1326 audit(1790973337.213:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.5.5500" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1043.160967][ T31] audit: type=1326 audit(1790973337.213:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.5.5500" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1043.161338][ T31] audit: type=1326 audit(1790973337.213:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.5.5500" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1043.161600][ T31] audit: type=1326 audit(1790973337.213:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.5.5500" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1043.162013][ T31] audit: type=1326 audit(1790973337.213:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.5.5500" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1043.296018][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1043.672933][T23809] netlink: 'syz.5.5501': attribute type 10 has an invalid length. [ 1043.672954][T23809] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5501'. [ 1043.979095][T23812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.981822][T23812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.081078][T23814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5503'. [ 1044.229142][T23812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.229622][T23812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.462564][T23828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5504'. [ 1044.575018][T23828] syzkaller0: left promiscuous mode [ 1044.575046][T23828] syzkaller0: left allmulticast mode [ 1044.670808][T23835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5510'. [ 1045.564528][T23861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5517'. [ 1045.566473][T23864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5519'. [ 1045.566624][T23864] FAULT_INJECTION: forcing a failure. [ 1045.566624][T23864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.566653][T23864] CPU: 0 UID: 0 PID: 23864 Comm: syz.0.5519 Tainted: G L syzkaller #0 PREEMPT(full) [ 1045.566679][T23864] Tainted: [L]=SOFTLOCKUP [ 1045.566686][T23864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1045.566698][T23864] Call Trace: [ 1045.566705][T23864] [ 1045.566714][T23864] dump_stack_lvl+0xe8/0x150 [ 1045.566748][T23864] should_fail_ex+0x410/0x560 [ 1045.566775][T23864] _copy_to_user+0x31/0xb0 [ 1045.566804][T23864] simple_read_from_buffer+0xe1/0x170 [ 1045.566838][T23864] proc_fail_nth_read+0x1bb/0x230 [ 1045.566857][T23864] ? common_file_perm+0x20e/0x2b0 [ 1045.566891][T23864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1045.566913][T23864] ? rw_verify_area+0x24a/0x4c0 [ 1045.566941][T23864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1045.566959][T23864] vfs_read+0x213/0xa80 [ 1045.566994][T23864] ? __pfx___mutex_lock+0x10/0x10 [ 1045.567021][T23864] ? __pfx_vfs_read+0x10/0x10 [ 1045.567050][T23864] ? __fget_files+0x2a/0x420 [ 1045.567081][T23864] ? __fget_files+0x3a2/0x420 [ 1045.567107][T23864] ? __fget_files+0x2a/0x420 [ 1045.567141][T23864] ksys_read+0x150/0x270 [ 1045.567160][T23864] ? __pfx_ksys_read+0x10/0x10 [ 1045.567188][T23864] do_syscall_64+0x166/0x520 [ 1045.567209][T23864] ? trace_irq_disable+0x3b/0x140 [ 1045.567226][T23864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.567245][T23864] ? clear_bhb_loop+0x70/0xc0 [ 1045.567269][T23864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.567289][T23864] RIP: 0033:0x7fc3f6f5e98e [ 1045.567308][T23864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1045.567325][T23864] RSP: 002b:00007fc3f7e2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1045.567346][T23864] RAX: ffffffffffffffda RBX: 00007fc3f7e2e6c0 RCX: 00007fc3f6f5e98e [ 1045.567360][T23864] RDX: 000000000000000f RSI: 00007fc3f7e2e0a0 RDI: 0000000000000004 [ 1045.567372][T23864] RBP: 00007fc3f7e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.567385][T23864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.567398][T23864] R13: 00007fc3f7226038 R14: 00007fc3f7225fa0 R15: 00007fc3f734fa48 [ 1045.567429][T23864] [ 1046.107823][T23880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.108290][T23880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.241222][T23880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.255355][T23880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.592724][T23900] binder: BC_ACQUIRE_RESULT not supported [ 1046.592738][T23900] binder: 23899:23900 ioctl c0306201 200000004a40 returned -22 [ 1046.649740][T23902] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1046.747673][T23906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1048.751008][T23939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5543'. [ 1048.986185][T23941] fuse: Bad value for 'fd' [ 1049.086325][T23949] usb usb8: usbfs: process 23949 (syz.1.5545) did not claim interface 0 before use [ 1050.134971][T23974] xt_recent: Unsupported userspace flags (000000c5) [ 1050.449260][T23973] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1051.014214][T23995] fuse: Bad value for 'fd' [ 1051.378727][T24005] syz_tun: entered allmulticast mode [ 1051.520069][T24007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.520370][T24007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.169503][T24013] fuse: Bad value for 'fd' [ 1052.181886][T24013] FAULT_INJECTION: forcing a failure. [ 1052.181886][T24013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.181918][T24013] CPU: 0 UID: 0 PID: 24013 Comm: syz.5.5566 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.181934][T24013] Tainted: [L]=SOFTLOCKUP [ 1052.181938][T24013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1052.181945][T24013] Call Trace: [ 1052.181950][T24013] [ 1052.181957][T24013] dump_stack_lvl+0xe8/0x150 [ 1052.181984][T24013] should_fail_ex+0x410/0x560 [ 1052.182006][T24013] _copy_to_user+0x31/0xb0 [ 1052.182024][T24013] simple_read_from_buffer+0xe1/0x170 [ 1052.182044][T24013] proc_fail_nth_read+0x1bb/0x230 [ 1052.182057][T24013] ? common_file_perm+0x20e/0x2b0 [ 1052.182074][T24013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.182087][T24013] ? rw_verify_area+0x24a/0x4c0 [ 1052.182105][T24013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.182115][T24013] vfs_read+0x213/0xa80 [ 1052.182137][T24013] ? __pfx___mutex_lock+0x10/0x10 [ 1052.182153][T24013] ? __pfx_vfs_read+0x10/0x10 [ 1052.182170][T24013] ? __fget_files+0x2a/0x420 [ 1052.182188][T24013] ? __fget_files+0x3a2/0x420 [ 1052.182202][T24013] ? __fget_files+0x2a/0x420 [ 1052.182221][T24013] ksys_read+0x150/0x270 [ 1052.182232][T24013] ? __pfx_ksys_read+0x10/0x10 [ 1052.182248][T24013] do_syscall_64+0x166/0x520 [ 1052.182263][T24013] ? trace_irq_disable+0x3b/0x140 [ 1052.182275][T24013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.182287][T24013] ? clear_bhb_loop+0x70/0xc0 [ 1052.182300][T24013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.182311][T24013] RIP: 0033:0x7f8449b5e98e [ 1052.182323][T24013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1052.182339][T24013] RSP: 002b:00007f8447df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.182353][T24013] RAX: ffffffffffffffda RBX: 00007f8447df66c0 RCX: 00007f8449b5e98e [ 1052.182361][T24013] RDX: 000000000000000f RSI: 00007f8447df60a0 RDI: 0000000000000004 [ 1052.182368][T24013] RBP: 00007f8447df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.182375][T24013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.182382][T24013] R13: 00007f8449e26038 R14: 00007f8449e25fa0 R15: 00007f8449f4fa48 [ 1052.182399][T24013] [ 1052.217155][T24002] syz_tun: left allmulticast mode [ 1053.037449][T24028] fuse: Bad value for 'fd' [ 1053.560748][ T1218] usb 2-1: USB disconnect, device number 23 [ 1053.959027][T24039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.965023][T24039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.082203][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1054.093618][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1054.099813][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1054.130134][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1054.130760][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1054.234836][T24046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.235276][T24046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.817535][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.817593][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.382404][T24048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.390510][T24048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.392852][T24048] bridge_slave_0: entered allmulticast mode [ 1055.395287][T24048] bridge_slave_0: entered promiscuous mode [ 1055.436109][T24048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.437063][T24048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.437383][T24048] bridge_slave_1: entered allmulticast mode [ 1055.442412][T24048] bridge_slave_1: entered promiscuous mode [ 1055.566314][T24048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.589212][T24048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.199462][T24048] team0: Port device team_slave_0 added [ 1056.203705][T24048] team0: Port device team_slave_1 added [ 1056.246099][ T5615] Bluetooth: hci1: command tx timeout [ 1056.401579][T24048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.401601][T24048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.401625][T24048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.466383][T24048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.466398][T24048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.466416][T24048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.641423][T24077] netlink: 'syz.2.5582': attribute type 16 has an invalid length. [ 1056.641442][T24077] netlink: 'syz.2.5582': attribute type 17 has an invalid length. [ 1056.664462][T24048] hsr_slave_0: entered promiscuous mode [ 1056.673476][T24048] hsr_slave_1: entered promiscuous mode [ 1056.673967][T24048] debugfs: 'hsr0' already exists in 'hsr' [ 1056.673981][T24048] Cannot create hsr debugfs directory [ 1056.861966][T24077] bridge0: port 4(syz_tun) entered blocking state [ 1056.862056][T24077] bridge0: port 4(syz_tun) entered listening state [ 1056.896426][T24077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.990287][T24077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.208803][T24085] fuse: Bad value for 'fd' [ 1057.278031][T24077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.297921][T24077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.341379][T24077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1057.341400][T24077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.379463][T24077] veth1_macvtap: left promiscuous mode [ 1057.383265][T24077] veth0_macvtap: left promiscuous mode [ 1057.401268][T24077] veth0_macvtap: entered promiscuous mode [ 1057.405495][T24077] veth1_macvtap: entered promiscuous mode [ 1057.479052][T24077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1057.517614][T24077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1057.553833][T24077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1057.615647][T24077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1057.632175][T24077] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1057.657144][T24088] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5585'. [ 1057.746504][T14222] bridge0: port 3(veth0) entered blocking state [ 1057.746641][T14222] bridge0: port 3(veth0) entered listening state [ 1057.751319][T14222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.751472][T14222] bridge0: port 1(bridge_slave_0) entered listening state [ 1057.803528][T14222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.803622][T14222] bridge0: port 2(bridge_slave_1) entered listening state [ 1057.917420][T24093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.919340][T24093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.009614][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1058.033306][T24093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.034532][T24093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.143276][T24091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5586'. [ 1058.297855][T14222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.297925][T14222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.297961][T14222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.297994][T14222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.335934][ T5615] Bluetooth: hci1: command tx timeout [ 1058.651054][ T6585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.651101][ T6585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.164562][ T6585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.164605][ T6585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.611601][ T31] audit: type=1326 audit(1790973353.663:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1059.611840][ T31] audit: type=1326 audit(1790973353.663:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1059.693312][ T31] audit: type=1326 audit(1790973353.743:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1059.693369][ T31] audit: type=1326 audit(1790973353.743:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1059.693408][ T31] audit: type=1326 audit(1790973353.743:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1059.693989][ T6585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.694022][ T6585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.765115][ T31] audit: type=1326 audit(1790973353.813:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1059.765194][ T31] audit: type=1326 audit(1790973353.813:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1059.765233][ T31] audit: type=1326 audit(1790973353.813:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1059.881473][ T31] audit: type=1326 audit(1790973353.933:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1059.881597][ T31] audit: type=1326 audit(1790973353.933:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.0.5592" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1060.312429][ T6585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.312474][ T6585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.406153][ T5615] Bluetooth: hci1: command tx timeout [ 1060.877980][T24119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.885420][T24119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.451074][ T6585] bond2: left allmulticast mode [ 1061.468347][ T6585] bond2: left promiscuous mode [ 1061.468661][ T6585] bridge0: port 4(bond2) entered disabled state [ 1061.511267][ T6585] bond1: left allmulticast mode [ 1061.511323][ T6585] bond1: left promiscuous mode [ 1061.511515][ T6585] bridge0: port 3(bond1) entered disabled state [ 1061.561451][ T6585] veth0: left allmulticast mode [ 1061.561475][ T6585] veth0: left promiscuous mode [ 1061.561622][ T6585] bridge0: port 1(veth0) entered disabled state [ 1061.612168][ T6585] bridge_slave_1: left allmulticast mode [ 1061.612201][ T6585] bridge_slave_1: left promiscuous mode [ 1061.612394][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.615013][T24136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.652965][T24136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.723396][ T6585] bridge0: left allmulticast mode [ 1061.787972][T24142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.788244][T24142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.507564][ T5615] Bluetooth: hci1: command tx timeout [ 1063.000031][ T6585] bond0 (unregistering): (slave 30): Releasing backup interface [ 1063.022061][ T6585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.024246][ T6585] bond0 (unregistering): Released all slaves [ 1063.052596][ T6585] bond1 (unregistering): Released all slaves [ 1063.091771][ T6585] bond2 (unregistering): Released all slaves [ 1063.150611][ T6585] bond3 (unregistering): Released all slaves [ 1063.180175][ T6585] bond4 (unregistering): Released all slaves [ 1063.293065][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1063.565365][T24173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.600686][T24173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.864553][ T6585] tipc: Left network mode [ 1065.128766][T24197] bond3: entered promiscuous mode [ 1065.128789][T24197] bond3: entered allmulticast mode [ 1065.129154][T24197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1065.592422][T24213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.592849][T24213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.045565][ T6585] hsr_slave_0: left promiscuous mode [ 1067.069553][ T6585] hsr_slave_1: left promiscuous mode [ 1067.070610][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.070706][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.123810][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.124536][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.273566][ T6585] veth1_macvtap: left promiscuous mode [ 1067.273626][ T6585] veth0_macvtap: left promiscuous mode [ 1067.278215][T24238] FAULT_INJECTION: forcing a failure. [ 1067.278215][T24238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.278254][T24238] CPU: 0 UID: 0 PID: 24238 Comm: syz.0.5620 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.278282][T24238] Tainted: [L]=SOFTLOCKUP [ 1067.278289][T24238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1067.278302][T24238] Call Trace: [ 1067.278312][T24238] [ 1067.278321][T24238] dump_stack_lvl+0xe8/0x150 [ 1067.278357][T24238] should_fail_ex+0x410/0x560 [ 1067.278388][T24238] _copy_from_user+0x2d/0xb0 [ 1067.278416][T24238] ___sys_recvmsg+0x173/0x5a0 [ 1067.278454][T24238] ? __pfx____sys_recvmsg+0x10/0x10 [ 1067.278487][T24238] ? lock_acquire+0x115/0x350 [ 1067.278535][T24238] do_recvmmsg+0x31a/0x7f0 [ 1067.278571][T24238] ? __pfx_do_recvmmsg+0x10/0x10 [ 1067.278610][T24238] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1067.278639][T24238] ? __fget_files+0x3a2/0x420 [ 1067.278686][T24238] __x64_sys_recvmmsg+0x198/0x250 [ 1067.278718][T24238] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1067.278757][T24238] do_syscall_64+0x166/0x520 [ 1067.278784][T24238] ? trace_irq_disable+0x3b/0x140 [ 1067.278805][T24238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.278826][T24238] ? clear_bhb_loop+0x70/0xc0 [ 1067.278849][T24238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.278869][T24238] RIP: 0033:0x7fc3f6f9e159 [ 1067.278889][T24238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.278906][T24238] RSP: 002b:00007fc3f7e0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1067.278929][T24238] RAX: ffffffffffffffda RBX: 00007fc3f7226090 RCX: 00007fc3f6f9e159 [ 1067.278943][T24238] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1067.278956][T24238] RBP: 00007fc3f7e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.278968][T24238] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1067.278979][T24238] R13: 00007fc3f7226128 R14: 00007fc3f7226090 R15: 00007fc3f734fa48 [ 1067.279009][T24238] [ 1067.838247][T24253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.838698][T24253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.414454][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 1068.414479][ T31] audit: type=1326 audit(1790973362.463:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1068.414585][ T31] audit: type=1326 audit(1790973362.463:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1068.480319][ T31] audit: type=1326 audit(1790973362.533:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1068.480359][ T31] audit: type=1326 audit(1790973362.533:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1068.480381][ T31] audit: type=1326 audit(1790973362.533:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1068.482299][ T31] audit: type=1326 audit(1790973362.533:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1068.482547][ T31] audit: type=1326 audit(1790973362.533:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1068.482641][ T31] audit: type=1326 audit(1790973362.533:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1068.482771][ T31] audit: type=1326 audit(1790973362.533:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1068.482964][ T31] audit: type=1326 audit(1790973362.533:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.0.5625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f6f9e159 code=0x7ffc0000 [ 1069.254325][T24282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.254712][T24282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.335579][T24284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.336329][T24284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.390187][T24290] FAULT_INJECTION: forcing a failure. [ 1069.390187][T24290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.390214][T24290] CPU: 0 UID: 0 PID: 24290 Comm: syz.3.5629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1069.390231][T24290] Tainted: [L]=SOFTLOCKUP [ 1069.390235][T24290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1069.390243][T24290] Call Trace: [ 1069.390249][T24290] [ 1069.390255][T24290] dump_stack_lvl+0xe8/0x150 [ 1069.390278][T24290] should_fail_ex+0x410/0x560 [ 1069.390298][T24290] _copy_from_user+0x2d/0xb0 [ 1069.390314][T24290] kstrtouint_from_user+0xd6/0x180 [ 1069.390329][T24290] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1069.390346][T24290] ? lock_acquire+0x115/0x350 [ 1069.390361][T24290] proc_fail_nth_write+0x8e/0x210 [ 1069.390375][T24290] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1069.390390][T24290] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1069.390401][T24290] vfs_write+0x296/0xba0 [ 1069.390417][T24290] ? __pfx_vfs_write+0x10/0x10 [ 1069.390442][T24290] ? __fget_files+0x2a/0x420 [ 1069.390462][T24290] ? __fget_files+0x3a2/0x420 [ 1069.390476][T24290] ? __fget_files+0x2a/0x420 [ 1069.390494][T24290] ksys_write+0x150/0x270 [ 1069.390507][T24290] ? __pfx_ksys_write+0x10/0x10 [ 1069.390523][T24290] do_syscall_64+0x166/0x520 [ 1069.390540][T24290] ? trace_irq_disable+0x3b/0x140 [ 1069.390552][T24290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.390564][T24290] ? clear_bhb_loop+0x70/0xc0 [ 1069.390579][T24290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.390594][T24290] RIP: 0033:0x7fcdcbb5e98e [ 1069.390606][T24290] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1069.390616][T24290] RSP: 002b:00007fcdccaeafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1069.390630][T24290] RAX: ffffffffffffffda RBX: 00007fcdccaeb6c0 RCX: 00007fcdcbb5e98e [ 1069.390638][T24290] RDX: 0000000000000001 RSI: 00007fcdccaeb0a0 RDI: 0000000000000004 [ 1069.390646][T24290] RBP: 00007fcdccaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.390653][T24290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.390660][T24290] R13: 00007fcdcbe26038 R14: 00007fcdcbe25fa0 R15: 00007fcdcbf4fa48 [ 1069.390677][T24290] [ 1069.818449][T24297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5628'. [ 1069.900408][T24298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5628'. [ 1070.215288][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5633'. [ 1070.584420][T24048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1070.607669][ T6585] IPVS: stop unused estimator thread 0... [ 1070.610782][T24048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.659411][T24048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1070.663358][T24048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.664352][T24048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1070.706007][T24048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1070.707032][T24048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1070.742886][T24048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1070.790439][T24324] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 1070.790439][T24324] program syz.0.5636 not setting count and/or reply_len properly [ 1070.876620][T24328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.877064][T24328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.251833][T24048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.289757][T24048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.301913][T14222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.302045][T14222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.341172][T14229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.341271][T14229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.456624][T24048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.559299][T24048] veth0_vlan: entered promiscuous mode [ 1071.573534][T24048] veth1_vlan: entered promiscuous mode [ 1071.613630][T24048] veth0_macvtap: entered promiscuous mode [ 1071.630653][T24048] veth1_macvtap: entered promiscuous mode [ 1071.726407][T24048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.755178][T24048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.837797][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.947776][T14215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.947835][T14215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.959877][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.188074][T14229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.188111][T14229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.269778][T14226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.269809][T14226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.429317][T24373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1072.443766][T24373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1072.444008][T24373] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1072.461501][T24373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1072.461791][T24373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1072.462008][T24373] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1072.478200][T24377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5651'. [ 1072.504968][T24373] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1072.657224][T24386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1073.175660][T24414] FAULT_INJECTION: forcing a failure. [ 1073.175660][T24414] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1073.178410][T24414] CPU: 1 UID: 0 PID: 24414 Comm: syz.3.5663 Tainted: G L syzkaller #0 PREEMPT(full) [ 1073.178445][T24414] Tainted: [L]=SOFTLOCKUP [ 1073.178452][T24414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1073.178464][T24414] Call Trace: [ 1073.178473][T24414] [ 1073.178483][T24414] dump_stack_lvl+0xe8/0x150 [ 1073.178519][T24414] should_fail_ex+0x410/0x560 [ 1073.178549][T24414] prepare_alloc_pages+0x223/0x600 [ 1073.178577][T24414] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1073.178601][T24414] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1073.178624][T24414] ? __pfx_policy_nodemask+0x10/0x10 [ 1073.178651][T24414] ? __lock_acquire+0x747/0x2de0 [ 1073.178674][T24414] alloc_pages_mpol+0x21e/0x390 [ 1073.178714][T24414] folio_alloc_mpol_noprof+0x39/0x160 [ 1073.178740][T24414] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1073.178767][T24414] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1073.178792][T24414] ? lock_acquire+0x115/0x350 [ 1073.178818][T24414] do_pte_missing+0x173a/0x34b0 [ 1073.178855][T24414] handle_mm_fault+0x1a53/0x3750 [ 1073.178891][T24414] ? handle_mm_fault+0xf1/0x3750 [ 1073.178930][T24414] ? __pfx_handle_mm_fault+0x10/0x10 [ 1073.178957][T24414] ? lock_vma_under_rcu+0x45a/0x500 [ 1073.179010][T24414] do_user_addr_fault+0xa4f/0x1340 [ 1073.179044][T24414] ? trace_page_fault_user+0x84/0x1e0 [ 1073.179065][T24414] exc_page_fault+0x6a/0xc0 [ 1073.179092][T24414] asm_exc_page_fault+0x26/0x30 [ 1073.179110][T24414] RIP: 0033:0x7fcdcbb6d287 [ 1073.179128][T24414] Code: ae a2 de 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 1073.179143][T24414] RSP: 002b:00007fcdccaeaf58 EFLAGS: 00010206 [ 1073.179162][T24414] RAX: 0000200000c61000 RBX: 0000000000000009 RCX: 00000000000025f5 [ 1073.179174][T24414] RDX: 00000000000025f5 RSI: 00007fcdcbc04c80 RDI: 0000200000c61000 [ 1073.179188][T24414] RBP: 00007fcdcbc547f0 R08: 0000200000c61000 R09: 0000000000000004 [ 1073.179202][T24414] R10: 0000000000000000 R11: 0000000000000008 R12: 0000200000bff000 [ 1073.179215][T24414] R13: 0000000000000008 R14: 0000000000000002 R15: 000000000039a000 [ 1073.179242][T24414] [ 1073.180235][T24414] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1073.988691][T24430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1073.999921][T24430] program syz.3.5668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1074.453982][T24446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.454272][T24446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.488983][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 1074.489072][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 1074.489105][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 1074.489154][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 1074.489186][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 1075.174542][T24457] syzkaller0: entered promiscuous mode [ 1075.174569][T24457] syzkaller0: entered allmulticast mode [ 1075.208214][T14226] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.209539][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.210162][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.210303][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.558491][T24471] [U]  [ 1075.564686][T24471] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5678'. [ 1075.664889][T24474] FAULT_INJECTION: forcing a failure. [ 1075.664889][T24474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.664931][T24474] CPU: 1 UID: 0 PID: 24474 Comm: syz.3.5680 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.664958][T24474] Tainted: [L]=SOFTLOCKUP [ 1075.664964][T24474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.664976][T24474] Call Trace: [ 1075.664985][T24474] [ 1075.664995][T24474] dump_stack_lvl+0xe8/0x150 [ 1075.665030][T24474] should_fail_ex+0x410/0x560 [ 1075.665057][T24474] _copy_from_user+0x2d/0xb0 [ 1075.665085][T24474] ___sys_recvmsg+0x173/0x5a0 [ 1075.665122][T24474] ? __pfx____sys_recvmsg+0x10/0x10 [ 1075.665159][T24474] ? lock_acquire+0x115/0x350 [ 1075.665205][T24474] do_recvmmsg+0x31a/0x7f0 [ 1075.665238][T24474] ? __pfx_do_recvmmsg+0x10/0x10 [ 1075.665274][T24474] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1075.665314][T24474] ? __fget_files+0x3a2/0x420 [ 1075.665350][T24474] __x64_sys_recvmmsg+0x198/0x250 [ 1075.665379][T24474] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1075.665416][T24474] do_syscall_64+0x166/0x520 [ 1075.665443][T24474] ? trace_irq_disable+0x3b/0x140 [ 1075.665464][T24474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.665483][T24474] ? clear_bhb_loop+0x70/0xc0 [ 1075.665507][T24474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.665526][T24474] RIP: 0033:0x7fcdcbb9e159 [ 1075.665543][T24474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.665561][T24474] RSP: 002b:00007fcdccaca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1075.665584][T24474] RAX: ffffffffffffffda RBX: 00007fcdcbe26090 RCX: 00007fcdcbb9e159 [ 1075.665611][T24474] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1075.665624][T24474] RBP: 00007fcdccaca090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.665637][T24474] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1075.665649][T24474] R13: 00007fcdcbe26128 R14: 00007fcdcbe26090 R15: 00007fcdcbf4fa48 [ 1075.665679][T24474] [ 1075.888331][T24478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.893282][T24478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.931932][T24478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.932439][T24478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.251929][T24495] bond1 (unregistering): Released all slaves [ 1076.547737][T24511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.548326][T24511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.566830][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 1076.669202][T24515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.671510][T24515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.811884][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5695'. [ 1077.709108][T24533] IPv6: Can't replace route, no match found [ 1077.825271][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1078.226578][T24552] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5709'. [ 1078.228785][T24552] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5709'. [ 1078.235641][T24552] bridge0: left promiscuous mode [ 1078.269304][T24552] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5709'. [ 1078.314490][T24553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.324798][T24553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.371151][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1078.371174][ T31] audit: type=1326 audit(1790973372.423:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.373649][ T31] audit: type=1326 audit(1790973372.423:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.397332][ T31] audit: type=1326 audit(1790973372.433:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.397409][ T31] audit: type=1326 audit(1790973372.433:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.397450][ T31] audit: type=1326 audit(1790973372.433:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.438674][T24558] syzkaller1: entered promiscuous mode [ 1078.438702][T24558] syzkaller1: entered allmulticast mode [ 1078.440575][ T31] audit: type=1326 audit(1790973372.493:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.440623][ T31] audit: type=1326 audit(1790973372.493:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.440661][ T31] audit: type=1326 audit(1790973372.493:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.459436][ T31] audit: type=1326 audit(1790973372.513:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.459492][ T31] audit: type=1326 audit(1790973372.513:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24555 comm="syz.5.5710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1078.645946][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 1078.739663][T24561] netlink: 'syz.3.5711': attribute type 1 has an invalid length. [ 1079.467205][T24580] syz_tun: entered allmulticast mode [ 1079.480491][T24580] FAULT_INJECTION: forcing a failure. [ 1079.480491][T24580] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.480606][T24580] CPU: 0 UID: 0 PID: 24580 Comm: syz.0.5718 Tainted: G L syzkaller #0 PREEMPT(full) [ 1079.480636][T24580] Tainted: [L]=SOFTLOCKUP [ 1079.480644][T24580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1079.480657][T24580] Call Trace: [ 1079.480666][T24580] [ 1079.480675][T24580] dump_stack_lvl+0xe8/0x150 [ 1079.480712][T24580] should_fail_ex+0x410/0x560 [ 1079.480742][T24580] should_failslab+0xa8/0x100 [ 1079.480769][T24580] ? dst_alloc+0x105/0x170 [ 1079.480791][T24580] kmem_cache_alloc_noprof+0xa1/0x600 [ 1079.480825][T24580] ? dst_alloc+0x105/0x170 [ 1079.480850][T24580] dst_alloc+0x105/0x170 [ 1079.480868][T24580] ? ip_check_mc_rcu+0x49f/0x7c0 [ 1079.480901][T24580] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1079.480933][T24580] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1079.480956][T24580] ip_route_output_key_hash+0x18d/0x2a0 [ 1079.480981][T24580] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1079.481007][T24580] ? lock_acquire+0x115/0x350 [ 1079.481038][T24580] ip_route_output_flow+0x2a/0x150 [ 1079.481056][T24580] ? security_sk_classify_flow+0x6d/0x150 [ 1079.481081][T24580] udp_sendmsg+0x144a/0x2140 [ 1079.481121][T24580] ? __pfx_udp_sendmsg+0x10/0x10 [ 1079.481170][T24580] ? __css_rstat_updated+0x237/0x540 [ 1079.481201][T24580] ? current_check_autobind_udp_socket+0x271/0x5b0 [ 1079.481243][T24580] ? aa_sock_msg_perm+0xfc/0x210 [ 1079.481267][T24580] ? sock_rps_record_flow+0x19/0x350 [ 1079.481290][T24580] ? inet_sendmsg+0x23e/0x320 [ 1079.481314][T24580] ? apparmor_socket_sendmsg+0x98/0x360 [ 1079.481338][T24580] ? __pfx_inet_sendmsg+0x10/0x10 [ 1079.481358][T24580] sock_sendmsg_nosec+0x10e/0x180 [ 1079.481381][T24580] ____sys_sendmsg+0x54e/0x850 [ 1079.481422][T24580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1079.481458][T24580] ? import_iovec+0x73/0xa0 [ 1079.481489][T24580] ___sys_sendmsg+0x2a5/0x360 [ 1079.481521][T24580] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.481546][T24580] ? __lock_acquire+0x747/0x2de0 [ 1079.481612][T24580] __sys_sendmmsg+0x273/0x4d0 [ 1079.481641][T24580] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1079.481673][T24580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1079.481709][T24580] ? ksys_write+0x242/0x270 [ 1079.481729][T24580] ? __pfx_ksys_write+0x10/0x10 [ 1079.481750][T24580] __x64_sys_sendmmsg+0xa0/0xc0 [ 1079.481773][T24580] do_syscall_64+0x166/0x520 [ 1079.481797][T24580] ? trace_irq_disable+0x3b/0x140 [ 1079.481816][T24580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.481837][T24580] ? clear_bhb_loop+0x70/0xc0 [ 1079.481860][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.481880][T24580] RIP: 0033:0x7fc3f6f9e159 [ 1079.481900][T24580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.481917][T24580] RSP: 002b:00007fc3f7e2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1079.481938][T24580] RAX: ffffffffffffffda RBX: 00007fc3f7225fa0 RCX: 00007fc3f6f9e159 [ 1079.481953][T24580] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 1079.481966][T24580] RBP: 00007fc3f7e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.481978][T24580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1079.481991][T24580] R13: 00007fc3f7226038 R14: 00007fc3f7225fa0 R15: 00007fc3f734fa48 [ 1079.482021][T24580] [ 1079.493668][T24579] syz_tun: left allmulticast mode [ 1080.415554][T24611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5731'. [ 1080.487435][T24613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.495613][T24613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.690851][T24622] netlink: 'syz.3.5730': attribute type 30 has an invalid length. [ 1081.476466][T24634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.476892][T24634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.837924][T24647] xt_bpf: check failed: parse error [ 1081.932568][T24648] netlink: 'syz.5.5740': attribute type 1 has an invalid length. [ 1081.932603][T24648] netlink: 'syz.5.5740': attribute type 1 has an invalid length. [ 1082.057556][T24653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5743'. [ 1082.459868][T24662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.460129][T24662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.468750][T24661] netlink: 'syz.3.5746': attribute type 10 has an invalid length. [ 1082.468801][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.468948][T24661] netlink: 'syz.3.5746': attribute type 10 has an invalid length. [ 1082.468967][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.469100][T24661] netlink: 'syz.3.5746': attribute type 10 has an invalid length. [ 1082.469118][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.469245][T24661] netlink: 'syz.3.5746': attribute type 10 has an invalid length. [ 1082.469264][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.469393][T24661] netlink: 'syz.3.5746': attribute type 10 has an invalid length. [ 1082.469411][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.469548][T24661] netlink: 'syz.3.5746': attribute type 10 has an invalid length. [ 1082.469566][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.469713][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.469847][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.469988][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.470167][T24661] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1082.823414][T24667] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1083.050432][T24679] bridge0: port 3(syz_tun) entered blocking state [ 1083.050533][T24679] bridge0: port 3(syz_tun) entered disabled state [ 1083.050680][T24679] syz_tun: entered allmulticast mode [ 1083.054008][T24679] syz_tun: entered promiscuous mode [ 1083.054417][T24679] bridge0: port 3(syz_tun) entered blocking state [ 1083.054472][T24679] bridge0: port 3(syz_tun) entered forwarding state [ 1083.212275][T24682] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1083.357256][T24684] FAULT_INJECTION: forcing a failure. [ 1083.357256][T24684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.357297][T24684] CPU: 1 UID: 0 PID: 24684 Comm: syz.3.5756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.357325][T24684] Tainted: [L]=SOFTLOCKUP [ 1083.357333][T24684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1083.357346][T24684] Call Trace: [ 1083.357355][T24684] [ 1083.357365][T24684] dump_stack_lvl+0xe8/0x150 [ 1083.357403][T24684] should_fail_ex+0x410/0x560 [ 1083.357434][T24684] _copy_from_user+0x2d/0xb0 [ 1083.357464][T24684] kstrtouint_from_user+0xd6/0x180 [ 1083.357490][T24684] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1083.357521][T24684] ? lock_acquire+0x115/0x350 [ 1083.357557][T24684] proc_fail_nth_write+0x8e/0x210 [ 1083.357581][T24684] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1083.357613][T24684] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1083.357635][T24684] vfs_write+0x296/0xba0 [ 1083.357663][T24684] ? __pfx_vfs_write+0x10/0x10 [ 1083.357697][T24684] ? __fget_files+0x2a/0x420 [ 1083.357730][T24684] ? __fget_files+0x3a2/0x420 [ 1083.357758][T24684] ? __fget_files+0x2a/0x420 [ 1083.357793][T24684] ksys_write+0x150/0x270 [ 1083.357814][T24684] ? __pfx_ksys_write+0x10/0x10 [ 1083.357843][T24684] do_syscall_64+0x166/0x520 [ 1083.357870][T24684] ? trace_irq_disable+0x3b/0x140 [ 1083.357891][T24684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.357912][T24684] ? clear_bhb_loop+0x70/0xc0 [ 1083.357934][T24684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.357953][T24684] RIP: 0033:0x7fcdcbb5e98e [ 1083.357972][T24684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1083.357987][T24684] RSP: 002b:00007fcdccaeafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1083.358008][T24684] RAX: ffffffffffffffda RBX: 00007fcdccaeb6c0 RCX: 00007fcdcbb5e98e [ 1083.358023][T24684] RDX: 0000000000000001 RSI: 00007fcdccaeb0a0 RDI: 0000000000000003 [ 1083.358035][T24684] RBP: 00007fcdccaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.358046][T24684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.358058][T24684] R13: 00007fcdcbe26038 R14: 00007fcdcbe25fa0 R15: 00007fcdcbf4fa48 [ 1083.358090][T24684] [ 1083.553720][T24691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5755'. [ 1083.810172][ T31] kauditd_printk_skb: 167 callbacks suppressed [ 1083.810196][ T31] audit: type=1326 audit(1790973377.863:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1083.810244][ T31] audit: type=1326 audit(1790973377.863:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1083.813557][ T31] audit: type=1326 audit(1790973377.863:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1083.813611][ T31] audit: type=1326 audit(1790973377.863:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1083.813650][ T31] audit: type=1326 audit(1790973377.863:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1083.851207][ T31] audit: type=1326 audit(1790973377.873:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1083.851264][ T31] audit: type=1326 audit(1790973377.873:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1083.851301][ T31] audit: type=1326 audit(1790973377.873:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1083.904378][ T31] audit: type=1326 audit(1790973377.933:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1083.904417][ T31] audit: type=1326 audit(1790973377.933:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24695 comm="syz.2.5758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2f9e159 code=0x7ffc0000 [ 1084.715350][T24716] FAULT_INJECTION: forcing a failure. [ 1084.715350][T24716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.715381][T24716] CPU: 1 UID: 0 PID: 24716 Comm: syz.2.5764 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.715397][T24716] Tainted: [L]=SOFTLOCKUP [ 1084.715401][T24716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.715408][T24716] Call Trace: [ 1084.715414][T24716] [ 1084.715420][T24716] dump_stack_lvl+0xe8/0x150 [ 1084.715443][T24716] should_fail_ex+0x410/0x560 [ 1084.715460][T24716] _copy_from_user+0x2d/0xb0 [ 1084.715477][T24716] io_submit_one+0xd2/0x13d0 [ 1084.715494][T24716] ? lockdep_hardirqs_on+0x7b/0x110 [ 1084.715510][T24716] ? irqentry_exit+0x218/0x910 [ 1084.715588][T24716] ? __pfx_io_submit_one+0x10/0x10 [ 1084.715612][T24716] ? lock_acquire+0x115/0x350 [ 1084.715634][T24716] ? __might_fault+0xaf/0x130 [ 1084.715652][T24716] __se_sys_io_submit+0x195/0x340 [ 1084.715667][T24716] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1084.715678][T24716] ? ksys_write+0x242/0x270 [ 1084.715715][T24716] do_syscall_64+0x166/0x520 [ 1084.715740][T24716] ? trace_irq_disable+0x3b/0x140 [ 1084.715759][T24716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.715778][T24716] ? clear_bhb_loop+0x70/0xc0 [ 1084.715794][T24716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.715806][T24716] RIP: 0033:0x7fd8f2f9e159 [ 1084.715818][T24716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.715829][T24716] RSP: 002b:00007fd8f3e7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1084.715842][T24716] RAX: ffffffffffffffda RBX: 00007fd8f3225fa0 RCX: 00007fd8f2f9e159 [ 1084.715851][T24716] RDX: 00002000000000c0 RSI: 00000000000000f3 RDI: 00007fd8f3e5e000 [ 1084.715859][T24716] RBP: 00007fd8f3e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.715866][T24716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.715873][T24716] R13: 00007fd8f3226038 R14: 00007fd8f3225fa0 R15: 00007fd8f334fa48 [ 1084.715890][T24716] [ 1086.031081][T24740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.166549][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1086.526141][T24748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5775'. [ 1087.084444][T24771] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5784'. [ 1087.098825][T24771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5784'. [ 1087.220290][T24779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 1087.261937][T24781] FAULT_INJECTION: forcing a failure. [ 1087.261937][T24781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.261966][T24781] CPU: 0 UID: 0 PID: 24781 Comm: syz.2.5788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.261982][T24781] Tainted: [L]=SOFTLOCKUP [ 1087.261986][T24781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1087.261994][T24781] Call Trace: [ 1087.261999][T24781] [ 1087.262006][T24781] dump_stack_lvl+0xe8/0x150 [ 1087.262029][T24781] should_fail_ex+0x410/0x560 [ 1087.262047][T24781] _copy_from_iter+0x1d3/0x1660 [ 1087.262062][T24781] ? __alloc_skb+0x27a/0x7a0 [ 1087.262079][T24781] ? __alloc_skb+0x27a/0x7a0 [ 1087.262096][T24781] ? __alloc_skb+0x27a/0x7a0 [ 1087.262112][T24781] ? __pfx__copy_from_iter+0x10/0x10 [ 1087.262124][T24781] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1087.262135][T24781] ? __alloc_skb+0x27a/0x7a0 [ 1087.262147][T24781] ? __alloc_skb+0x27a/0x7a0 [ 1087.262163][T24781] ? netlink_sendmsg+0x650/0xb40 [ 1087.262176][T24781] ? skb_put+0x112/0x210 [ 1087.262191][T24781] netlink_sendmsg+0x6c0/0xb40 [ 1087.262207][T24781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.262222][T24781] ? apparmor_socket_sendmsg+0x98/0x360 [ 1087.262236][T24781] ? lock_acquire+0x115/0x350 [ 1087.262249][T24781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.262260][T24781] sock_sendmsg_nosec+0x13a/0x180 [ 1087.262274][T24781] sock_write_iter+0x2de/0x3e0 [ 1087.262287][T24781] ? __pfx_sock_write_iter+0x10/0x10 [ 1087.262301][T24781] ? bpf_lsm_file_permission+0x9/0x20 [ 1087.262318][T24781] ? security_file_permission+0x75/0x260 [ 1087.262336][T24781] vfs_write+0x612/0xba0 [ 1087.262351][T24781] ? __pfx_vfs_write+0x10/0x10 [ 1087.262373][T24781] ? __fget_files+0x2a/0x420 [ 1087.262394][T24781] ksys_write+0x150/0x270 [ 1087.262406][T24781] ? __pfx_ksys_write+0x10/0x10 [ 1087.262422][T24781] do_syscall_64+0x166/0x520 [ 1087.262439][T24781] ? trace_irq_disable+0x3b/0x140 [ 1087.262453][T24781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.262465][T24781] ? clear_bhb_loop+0x70/0xc0 [ 1087.262478][T24781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.262489][T24781] RIP: 0033:0x7fd8f2f9e159 [ 1087.262501][T24781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.262512][T24781] RSP: 002b:00007fd8f3e7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1087.262525][T24781] RAX: ffffffffffffffda RBX: 00007fd8f3225fa0 RCX: 00007fd8f2f9e159 [ 1087.262533][T24781] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 1087.262540][T24781] RBP: 00007fd8f3e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.262547][T24781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.262554][T24781] R13: 00007fd8f3226038 R14: 00007fd8f3225fa0 R15: 00007fd8f334fa48 [ 1087.262570][T24781] [ 1087.456727][ C0] bridge0: port 4(syz_tun) entered learning state [ 1087.876885][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5791'. [ 1088.101474][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1088.104963][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1088.105117][ C1] bridge0: port 3(veth0) entered learning state [ 1088.442629][T24787] fuse: Bad value for 'fd' [ 1088.713016][T24811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.716401][T24811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.953375][T24817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5801'. [ 1089.023312][T24821] net_ratelimit: 58 callbacks suppressed [ 1089.023336][T24821] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1089.035308][T24819] pim6reg: entered allmulticast mode [ 1089.358880][T13977] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1089.401847][T24840] FAULT_INJECTION: forcing a failure. [ 1089.401847][T24840] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.401874][T24840] CPU: 0 UID: 0 PID: 24840 Comm: syz.2.5808 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.401892][T24840] Tainted: [L]=SOFTLOCKUP [ 1089.401899][T24840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1089.401911][T24840] Call Trace: [ 1089.401953][T24840] [ 1089.401963][T24840] dump_stack_lvl+0xe8/0x150 [ 1089.401996][T24840] should_fail_ex+0x410/0x560 [ 1089.402024][T24840] should_failslab+0xa8/0x100 [ 1089.402050][T24840] __kvmalloc_node_noprof+0x176/0x820 [ 1089.402077][T24840] ? alloc_netdev_mqs+0xa9/0x12a0 [ 1089.402099][T24840] ? alloc_netdev_mqs+0xa9/0x12a0 [ 1089.402128][T24840] alloc_netdev_mqs+0xa9/0x12a0 [ 1089.402140][T24840] ? __pfx_snprintf+0x10/0x10 [ 1089.402153][T24840] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 1089.402241][T24840] rtnl_create_link+0x321/0xd70 [ 1089.402258][T24840] rtnl_newlink_create+0x258/0x7b0 [ 1089.402277][T24840] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1089.402294][T24840] ? __pfx___mutex_lock+0x10/0x10 [ 1089.402315][T24840] ? ns_capable+0x89/0xe0 [ 1089.402334][T24840] rtnl_newlink+0x166d/0x1c30 [ 1089.402355][T24840] ? __pfx_rtnl_newlink+0x10/0x10 [ 1089.402368][T24840] ? do_syscall_64+0x166/0x520 [ 1089.402383][T24840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.402413][T24840] ? kasan_quarantine_put+0xbb/0x1f0 [ 1089.402429][T24840] ? lockdep_hardirqs_on+0x7b/0x110 [ 1089.402445][T24840] ? nlmon_xmit+0xb0/0x100 [ 1089.402460][T24840] ? kmem_cache_free+0x182/0x650 [ 1089.402477][T24840] ? __lock_acquire+0x747/0x2de0 [ 1089.402495][T24840] ? __local_bh_enable_ip+0xd6/0x140 [ 1089.402510][T24840] ? lockdep_hardirqs_on+0x7b/0x110 [ 1089.402523][T24840] ? __dev_queue_xmit+0x29b/0x3920 [ 1089.402534][T24840] ? __local_bh_enable_ip+0xd6/0x140 [ 1089.402551][T24840] ? lock_acquire+0x115/0x350 [ 1089.402570][T24840] ? __pfx_rtnl_newlink+0x10/0x10 [ 1089.402583][T24840] rtnetlink_rcv_msg+0x802/0xc00 [ 1089.402599][T24840] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1089.402613][T24840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1089.402626][T24840] ? ref_tracker_free+0x689/0x830 [ 1089.402642][T24840] ? __pfx_ref_tracker_free+0x10/0x10 [ 1089.402661][T24840] netlink_rcv_skb+0x226/0x4a0 [ 1089.402674][T24840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1089.402689][T24840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1089.402707][T24840] ? netlink_deliver_tap+0x2e/0x1b0 [ 1089.402719][T24840] ? netlink_deliver_tap+0x2e/0x1b0 [ 1089.402732][T24840] netlink_unicast+0x7bd/0x940 [ 1089.402755][T24840] netlink_sendmsg+0x813/0xb40 [ 1089.402771][T24840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.402786][T24840] ? apparmor_socket_sendmsg+0x98/0x360 [ 1089.402802][T24840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.402813][T24840] sock_sendmsg_nosec+0x13a/0x180 [ 1089.402827][T24840] ____sys_sendmsg+0x54e/0x850 [ 1089.402846][T24840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1089.402866][T24840] ? import_iovec+0x73/0xa0 [ 1089.402883][T24840] ___sys_sendmsg+0x2a5/0x360 [ 1089.402897][T24840] ? __lock_acquire+0x747/0x2de0 [ 1089.402911][T24840] ? __pfx____sys_sendmsg+0x10/0x10 [ 1089.402950][T24840] ? __fget_files+0x2a/0x420 [ 1089.402967][T24840] ? __fget_files+0x3a2/0x420 [ 1089.402986][T24840] __x64_sys_sendmsg+0x1b1/0x290 [ 1089.403003][T24840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1089.403028][T24840] do_syscall_64+0x166/0x520 [ 1089.403042][T24840] ? trace_irq_disable+0x3b/0x140 [ 1089.403055][T24840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.403066][T24840] ? clear_bhb_loop+0x70/0xc0 [ 1089.403080][T24840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.403091][T24840] RIP: 0033:0x7fd8f2f9e159 [ 1089.403104][T24840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.403115][T24840] RSP: 002b:00007fd8f3e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1089.403128][T24840] RAX: ffffffffffffffda RBX: 00007fd8f3225fa0 RCX: 00007fd8f2f9e159 [ 1089.403142][T24840] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1089.403149][T24840] RBP: 00007fd8f3e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.403156][T24840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.403163][T24840] R13: 00007fd8f3226038 R14: 00007fd8f3225fa0 R15: 00007fd8f334fa48 [ 1089.403180][T24840] [ 1089.426146][T24841] validate_nla: 61 callbacks suppressed [ 1089.426190][T24841] netlink: 'syz.3.5807': attribute type 1 has an invalid length. [ 1089.616375][T13977] usb 2-1: Using ep0 maxpacket: 8 [ 1089.627529][T13977] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1089.645221][T13977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.883771][T13977] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1089.883794][T13977] pvrusb2: ********** [ 1089.883802][T13977] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1089.883815][T13977] pvrusb2: Important functionality might not be entirely working. [ 1089.883825][T13977] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1089.883838][T13977] pvrusb2: ********** [ 1089.970155][ T2348] pvrusb2: Invalid write control endpoint [ 1090.062248][ T2348] pvrusb2: Invalid write control endpoint [ 1090.062268][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1090.062275][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1090.062280][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1090.062287][ T2348] pvrusb2: Device being rendered inoperable [ 1090.062334][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1090.062393][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1090.063529][ T2348] pvrusb2: Attached sub-driver cx25840 [ 1090.063541][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1090.063547][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1090.200310][T24829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.200566][T24829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.353614][T24856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.353909][T24856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.356542][T24854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5812'. [ 1090.387177][T24856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.388106][T24856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.611811][T24868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.613219][T24868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.914098][T24866] bridge0: port 4(syz_tun) entered disabled state [ 1090.944316][T24866] bridge0: port 3(veth0) entered disabled state [ 1090.944466][T24866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.944582][T24866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.427077][T24866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1091.468401][T24866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1091.599693][T24877] usb usb7: usbfs: process 24877 (syz.3.5817) did not claim interface 0 before use [ 1091.948352][T24883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.948833][T24883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.952869][T24866] tipc: Resetting bearer [ 1092.086065][T14230] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.086131][T14230] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.086169][T14230] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.086193][T14230] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.086235][T14230] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.086255][T14230] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.086273][T14230] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.086286][T14230] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.147387][T13990] usb 2-1: USB disconnect, device number 24 [ 1092.519616][T24891] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1092.630208][T24896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1092.632170][T24896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1092.834820][T24899] fuse: fd is not a fuse device [ 1092.961459][T24909] netlink: 'syz.0.5827': attribute type 10 has an invalid length. [ 1093.069687][T24912] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5828'. [ 1093.232486][T24914] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5829'. [ 1093.343516][T24918] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1093.364967][T24918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.368271][T24918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.351167][T24938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5839'. [ 1094.715926][T24944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.716324][T24944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.075108][ T31] kauditd_printk_skb: 239 callbacks suppressed [ 1095.075131][ T31] audit: type=1326 audit(1790973389.123:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1095.075396][ T31] audit: type=1326 audit(1790973389.123:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1095.139787][ T31] audit: type=1326 audit(1790973389.193:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1095.176912][ T31] audit: type=1326 audit(1790973389.233:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1095.177570][ T31] audit: type=1326 audit(1790973389.233:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1095.177960][ T31] audit: type=1326 audit(1790973389.233:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1095.178342][ T31] audit: type=1326 audit(1790973389.233:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1095.180063][ T31] audit: type=1326 audit(1790973389.233:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1095.180370][ T31] audit: type=1326 audit(1790973389.233:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1095.182201][ T31] audit: type=1326 audit(1790973389.233:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8449b9e159 code=0x7ffc0000 [ 1096.667150][T24973] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5852'. [ 1096.869897][T24976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.871170][T24976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.986137][T13990] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1097.146620][T13990] usb 2-1: Using ep0 maxpacket: 16 [ 1097.147396][T13990] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1097.149709][T13990] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1097.149742][T13990] usb 2-1: config 0 has no interface number 0 [ 1097.149799][T13990] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1097.149828][T13990] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1097.210426][T13990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.210463][T13990] usb 2-1: Product: syz [ 1097.210480][T13990] usb 2-1: Manufacturer: syz [ 1097.210496][T13990] usb 2-1: SerialNumber: syz [ 1097.259941][T13990] usb 2-1: config 0 descriptor?? [ 1097.282469][T24974] raw-gadget.22 gadget.1: fail, usb_ep_enable returned -22 [ 1097.282624][T24974] raw-gadget.22 gadget.1: fail, usb_ep_enable returned -22 [ 1097.454879][T24989] FAULT_INJECTION: forcing a failure. [ 1097.454879][T24989] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.454908][T24989] CPU: 1 UID: 0 PID: 24989 Comm: syz.3.5860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.454924][T24989] Tainted: [L]=SOFTLOCKUP [ 1097.454929][T24989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1097.454943][T24989] Call Trace: [ 1097.454952][T24989] [ 1097.454962][T24989] dump_stack_lvl+0xe8/0x150 [ 1097.455000][T24989] should_fail_ex+0x410/0x560 [ 1097.455026][T24989] should_failslab+0xa8/0x100 [ 1097.455044][T24989] __kvmalloc_node_noprof+0x176/0x820 [ 1097.455060][T24989] ? __rhashtable_init_noprof+0x545/0xaf0 [ 1097.455074][T24989] ? __rhashtable_init_noprof+0x545/0xaf0 [ 1097.455100][T24989] __rhashtable_init_noprof+0x545/0xaf0 [ 1097.455136][T24989] __rhltable_init_noprof+0x26/0x70 [ 1097.455162][T24989] nf_tables_newtable+0x6e0/0x1990 [ 1097.455294][T24989] nfnetlink_rcv+0x1288/0x28c0 [ 1097.455342][T24989] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1097.455381][T24989] ? lock_acquire+0x115/0x350 [ 1097.455412][T24989] ? netlink_deliver_tap+0x2e/0x1b0 [ 1097.455433][T24989] ? netlink_deliver_tap+0x2e/0x1b0 [ 1097.455459][T24989] netlink_unicast+0x7bd/0x940 [ 1097.455488][T24989] netlink_sendmsg+0x813/0xb40 [ 1097.455504][T24989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1097.455519][T24989] ? apparmor_socket_sendmsg+0x98/0x360 [ 1097.455535][T24989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1097.455554][T24989] sock_sendmsg_nosec+0x13a/0x180 [ 1097.455583][T24989] ____sys_sendmsg+0x54e/0x850 [ 1097.455617][T24989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1097.455642][T24989] ? import_iovec+0x73/0xa0 [ 1097.455658][T24989] ___sys_sendmsg+0x2a5/0x360 [ 1097.455672][T24989] ? __lock_acquire+0x747/0x2de0 [ 1097.455694][T24989] ? __pfx____sys_sendmsg+0x10/0x10 [ 1097.455746][T24989] ? __fget_files+0x2a/0x420 [ 1097.455771][T24989] ? __fget_files+0x3a2/0x420 [ 1097.455802][T24989] __x64_sys_sendmsg+0x1b1/0x290 [ 1097.455830][T24989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1097.455873][T24989] do_syscall_64+0x166/0x520 [ 1097.455901][T24989] ? trace_irq_disable+0x3b/0x140 [ 1097.455923][T24989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.455944][T24989] ? clear_bhb_loop+0x70/0xc0 [ 1097.455969][T24989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.455989][T24989] RIP: 0033:0x7fcdcbb9e159 [ 1097.456009][T24989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.456028][T24989] RSP: 002b:00007fcdccaeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.456050][T24989] RAX: ffffffffffffffda RBX: 00007fcdcbe25fa0 RCX: 00007fcdcbb9e159 [ 1097.456065][T24989] RDX: 00000000040080c0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1097.456079][T24989] RBP: 00007fcdccaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.456093][T24989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.456106][T24989] R13: 00007fcdcbe26038 R14: 00007fcdcbe25fa0 R15: 00007fcdcbf4fa48 [ 1097.456146][T24989] [ 1097.526761][T24989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5860'. [ 1097.526801][T24989] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5860'. [ 1097.806417][T24974] raw-gadget.22 gadget.1: fail, usb_ep_enable returned -22 [ 1097.811373][T24974] raw-gadget.22 gadget.1: fail, usb_ep_enable returned -22 [ 1098.034389][T13990] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1098.529959][ C1] blk_print_req_error: 131 callbacks suppressed [ 1098.529987][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1098.533784][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1098.533873][ C1] buffer_io_error: 130 callbacks suppressed [ 1098.533881][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.554652][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1098.554725][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1098.554744][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1098.554796][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1098.554815][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1098.554860][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 1098.554870][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1098.554899][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 1098.554913][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1098.554970][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 1098.554989][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1098.555022][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 1098.847468][T25000] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5865'. [ 1098.890599][T13990] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1098.890766][T13990] asix 2-1:0.34: probe with driver asix failed with error -71 [ 1098.925627][T13990] usb 2-1: USB disconnect, device number 25 [ 1099.833179][T25014] Cannot find set identified by id 1 to match [ 1100.043636][T25020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5872'. [ 1100.136315][T13982] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1100.239806][T25027] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5873'. [ 1100.293370][T13982] usb 2-1: Using ep0 maxpacket: 16 [ 1100.294129][T13982] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1100.311572][T13982] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1100.311595][T13982] usb 2-1: config 0 has no interface number 0 [ 1100.331708][T13982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.331741][T13982] usb 2-1: Product: syz [ 1100.331757][T13982] usb 2-1: Manufacturer: syz [ 1100.331772][T13982] usb 2-1: SerialNumber: syz [ 1100.366522][T13982] usb 2-1: config 0 descriptor?? [ 1100.383123][T13982] hub 2-1:0.132: bad descriptor, ignoring hub [ 1100.383180][T13982] hub 2-1:0.132: probe with driver hub failed with error -5 [ 1100.409679][T13982] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input117 [ 1100.603053][T25011] netlink: 'syz.1.5869': attribute type 4 has an invalid length. [ 1100.603077][T25011] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1100.656867][T25011] .`: renamed from bond0 (while UP) [ 1100.765105][T13982] usb 2-1: USB disconnect, device number 26 [ 1100.937688][T25034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.949034][T25032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.949447][T25032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.982431][T25030] bridge3: entered promiscuous mode [ 1100.982465][T25030] bridge3: entered allmulticast mode [ 1101.125869][T25038] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5876'. [ 1101.882634][T25052] FAULT_INJECTION: forcing a failure. [ 1101.882634][T25052] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.882669][T25052] CPU: 1 UID: 0 PID: 25052 Comm: syz.1.5882 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.882684][T25052] Tainted: [L]=SOFTLOCKUP [ 1101.882689][T25052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.882696][T25052] Call Trace: [ 1101.882702][T25052] [ 1101.882708][T25052] dump_stack_lvl+0xe8/0x150 [ 1101.882731][T25052] should_fail_ex+0x410/0x560 [ 1101.882749][T25052] should_failslab+0xa8/0x100 [ 1101.882766][T25052] __kmalloc_cache_noprof+0xa3/0x600 [ 1101.882780][T25052] ? snd_ctl_notify+0x21f/0x4d0 [ 1101.882795][T25052] ? snd_ctl_notify+0x21f/0x4d0 [ 1101.882810][T25052] snd_ctl_notify+0x21f/0x4d0 [ 1101.882827][T25052] __snd_ctl_add_replace+0x611/0x950 [ 1101.882845][T25052] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 1101.882876][T25052] ? snd_ctl_elem_add+0x43a/0xa80 [ 1101.882908][T25052] ? snd_ctl_elem_add+0x524/0xa80 [ 1101.882940][T25052] snd_ctl_elem_add+0x762/0xa80 [ 1101.882977][T25052] snd_ctl_ioctl+0xee9/0x1e00 [ 1101.883003][T25052] ? stack_trace_save+0xa9/0x100 [ 1101.883022][T25052] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1101.883043][T25052] ? kasan_save_track+0x4f/0x80 [ 1101.883071][T25052] ? stack_depot_save_flags+0x33/0x7f0 [ 1101.883094][T25052] ? __lock_acquire+0x747/0x2de0 [ 1101.883110][T25052] ? kasan_save_track+0x4f/0x80 [ 1101.883120][T25052] ? kasan_save_track+0x3e/0x80 [ 1101.883136][T25052] ? kasan_save_free_info+0x40/0x50 [ 1101.883152][T25052] ? __kasan_slab_free+0x5c/0x80 [ 1101.883166][T25052] ? kfree+0x1c5/0x650 [ 1101.883181][T25052] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1101.883207][T25052] ? security_file_ioctl+0xc3/0x2a0 [ 1101.883219][T25052] ? __se_sys_ioctl+0x47/0x170 [ 1101.883231][T25052] ? do_syscall_64+0x166/0x520 [ 1101.883246][T25052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.883284][T25052] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1101.883297][T25052] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1101.883311][T25052] ? do_vfs_ioctl+0x116f/0x1530 [ 1101.883324][T25052] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1101.883342][T25052] ? hook_file_ioctl+0x1f2/0x600 [ 1101.883367][T25052] ? __fget_files+0x2a/0x420 [ 1101.883385][T25052] ? __fget_files+0x2a/0x420 [ 1101.883398][T25052] ? __fget_files+0x3a2/0x420 [ 1101.883412][T25052] ? __fget_files+0x2a/0x420 [ 1101.883428][T25052] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1101.883444][T25052] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1101.883458][T25052] __se_sys_ioctl+0xfc/0x170 [ 1101.883471][T25052] do_syscall_64+0x166/0x520 [ 1101.883484][T25052] ? trace_irq_disable+0x3b/0x140 [ 1101.883497][T25052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.883508][T25052] ? clear_bhb_loop+0x70/0xc0 [ 1101.883527][T25052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.883546][T25052] RIP: 0033:0x7f73bed9e159 [ 1101.883567][T25052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.883584][T25052] RSP: 002b:00007f73bfcf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.883606][T25052] RAX: ffffffffffffffda RBX: 00007f73bf025fa0 RCX: 00007f73bed9e159 [ 1101.883620][T25052] RDX: 0000200000000340 RSI: 00000000c1105517 RDI: 0000000000000003 [ 1101.883633][T25052] RBP: 00007f73bfcf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.883642][T25052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1101.883649][T25052] R13: 00007f73bf026038 R14: 00007f73bf025fa0 R15: 00007f73bf14fa48 [ 1101.883672][T25052] [ 1101.883681][T25052] snd_dummy snd_dummy.0: No memory available to allocate event [ 1102.339327][T25059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5883'. [ 1102.593747][T25063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5884'. [ 1102.622978][T25063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5884'. [ 1103.195508][T25071] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5888'. [ 1103.460035][T25075] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 1103.460060][T25075] Unsupported pkey algo: 106 [ 1103.749768][T25083] FAULT_INJECTION: forcing a failure. [ 1103.749768][T25083] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.749803][T25083] CPU: 1 UID: 0 PID: 25083 Comm: syz.3.5891 Tainted: G L syzkaller #0 PREEMPT(full) [ 1103.749829][T25083] Tainted: [L]=SOFTLOCKUP [ 1103.749835][T25083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1103.749846][T25083] Call Trace: [ 1103.749852][T25083] [ 1103.749859][T25083] dump_stack_lvl+0xe8/0x150 [ 1103.749883][T25083] should_fail_ex+0x410/0x560 [ 1103.749901][T25083] should_failslab+0xa8/0x100 [ 1103.749919][T25083] __kmalloc_cache_noprof+0xa3/0x600 [ 1103.749933][T25083] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1103.749944][T25083] ? do_check_common+0x348/0x55c0 [ 1103.749959][T25083] ? do_check_common+0x348/0x55c0 [ 1103.749976][T25083] do_check_common+0x348/0x55c0 [ 1103.750006][T25083] ? bpf_compute_live_registers+0x1f40/0x1ff0 [ 1103.750020][T25083] ? bpf_insn_def32+0x1ae/0x650 [ 1103.750052][T25083] ? mark_fastcall_patterns+0xf32/0xf90 [ 1103.750067][T25083] ? __pfx_do_check_common+0x10/0x10 [ 1103.750088][T25083] do_check_main+0xa2/0x1f0 [ 1103.750102][T25083] bpf_check+0x2777/0x2ef0 [ 1103.750123][T25083] ? __pfx_bpf_check+0x10/0x10 [ 1103.750137][T25083] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1103.750155][T25083] bpf_prog_load+0x14d6/0x1c20 [ 1103.750176][T25083] ? __pfx_bpf_prog_load+0x10/0x10 [ 1103.750201][T25083] __sys_bpf+0xd0d/0xd90 [ 1103.750218][T25083] ? __pfx___sys_bpf+0x10/0x10 [ 1103.750236][T25083] ? __fget_files+0x2a/0x420 [ 1103.750261][T25083] ? ksys_write+0x242/0x270 [ 1103.750273][T25083] ? __pfx_ksys_write+0x10/0x10 [ 1103.750286][T25083] __x64_sys_bpf+0xba/0xd0 [ 1103.750299][T25083] do_syscall_64+0x166/0x520 [ 1103.750316][T25083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.750328][T25083] ? clear_bhb_loop+0x70/0xc0 [ 1103.750340][T25083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.750351][T25083] RIP: 0033:0x7fcdcbb9e159 [ 1103.750365][T25083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.750375][T25083] RSP: 002b:00007fcdccaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1103.750388][T25083] RAX: ffffffffffffffda RBX: 00007fcdcbe25fa0 RCX: 00007fcdcbb9e159 [ 1103.750397][T25083] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1103.750404][T25083] RBP: 00007fcdccaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.750411][T25083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1103.750423][T25083] R13: 00007fcdcbe26038 R14: 00007fcdcbe25fa0 R15: 00007fcdcbf4fa48 [ 1103.750439][T25083] [ 1103.752047][T25081] fuse: Unknown parameter '000000000000000000050x0000000000000005' [ 1104.247925][T14230] wlan0: Trigger new scan to find an IBSS to join [ 1105.273981][ T5619] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 1105.381945][T25114] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5901'. [ 1106.202629][T25127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1106.202646][T25127] IPv6: NLM_F_CREATE should be set when creating new route [ 1106.206780][T25127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1106.506157][ T1815] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1106.664375][T25141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.664906][T25141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.667443][ T1815] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1106.667490][ T1815] usb 2-1: too many configurations: 253, using maximum allowed: 8 [ 1106.669638][ T1815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.672549][ T1815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.673665][ T1815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.674747][ T1815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.677502][ T1815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.681357][ T1815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.687471][ T1815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.691357][ T1815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.691420][ T1815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.702958][ T1815] usb 2-1: config 0 descriptor?? [ 1106.929854][ T1815] usbhid 2-1:0.0: can't add hid device: -71 [ 1106.929975][ T1815] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1106.956467][ T1815] usb 2-1: USB disconnect, device number 27 [ 1106.980770][T25146] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1107.199906][T25154] vti0: entered promiscuous mode [ 1107.199925][T25154] vti0: entered allmulticast mode [ 1107.289212][T11105] wlan0: Trigger new scan to find an IBSS to join [ 1107.468846][T25162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.470978][T25162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.485946][ T1815] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1107.647034][ T1815] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1107.648161][ T1815] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 1107.648191][ T1815] usb 2-1: config 4 has no interface number 0 [ 1107.648226][ T1815] usb 2-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1107.648243][ T1815] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x8D has invalid maxpacket 256, setting to 64 [ 1107.648259][ T1815] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1107.650473][ T1815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.650499][ T1815] usb 2-1: Product: syz [ 1107.650508][ T1815] usb 2-1: Manufacturer: syz [ 1107.650516][ T1815] usb 2-1: SerialNumber: syz [ 1107.881722][T25168] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 1107.881722][T25168] program syz.0.5922 not setting count and/or reply_len properly [ 1108.021919][T25173] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5924'. [ 1108.157037][ T1815] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1108.206359][ T1815] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1108.208264][ T1815] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1108.208310][ T1815] usb 2-1: media controller created [ 1108.212865][ T1815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1108.350463][ T1815] DVB: Unable to find symbol dib7000p_attach() [ 1108.350486][ T1815] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1108.352247][T25181] ------------[ cut here ]------------ [ 1108.352265][T25181] usb 2-1: BOGUS control dir, pipe 80001c80 doesn't match bRequestType c0 [ 1108.352288][T25181] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.3.5925/25181 [ 1108.397202][T25181] Modules linked in: [ 1108.402612][T25181] CPU: 0 UID: 0 PID: 25181 Comm: syz.3.5925 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.416650][T25181] Tainted: [L]=SOFTLOCKUP [ 1108.421611][T25181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1108.432278][T25181] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1108.438054][T25181] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1108.461524][T25181] RSP: 0018:ffffc90003c47958 EFLAGS: 00010246 [ 1108.467715][T25181] RAX: 0000000000000000 RBX: ffff888033b77800 RCX: 0000000080001c80 [ 1108.476468][T25181] RDX: ffff888021ed70a0 RSI: ffffffff8cc533c0 RDI: ffffffff90881860 [ 1108.484667][T25181] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1108.493302][T25181] R10: ffffc90003c47a40 R11: fffff52000788f54 R12: 1ffff110056bb860 [ 1108.501457][T25181] R13: ffff88802b5dc300 R14: ffff888021ed70a0 R15: 0000000080001c80 [ 1108.510402][T25181] FS: 00007fcdccaca6c0(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 1108.519661][T25181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.527089][T25181] CR2: 000000110c3c04c7 CR3: 0000000062d54000 CR4: 00000000003526f0 [ 1108.535776][T25181] Call Trace: [ 1108.539215][T25181] [ 1108.542499][T25181] usb_start_wait_urb+0x13f/0x5b0 [ 1108.548164][T25181] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1108.554187][T25181] usb_control_msg+0x234/0x3e0 [ 1108.559581][T25181] dib0700_i2c_xfer+0xbb9/0xf80 [ 1108.564586][T25181] __i2c_transfer+0x7bf/0x1fe0 [ 1108.569839][T25181] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1108.576622][T25181] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1108.583061][T25181] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1108.589362][T25181] ? i2c_transfer+0xc7/0x2d0 [ 1108.594013][T25181] i2c_transfer+0x1cb/0x2d0 [ 1108.598723][T25181] i2cdev_ioctl_rdwr+0x460/0x740 [ 1108.603826][T25181] i2cdev_ioctl+0x6a5/0x880 [ 1108.608707][T25181] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1108.614110][T25181] ? __fget_files+0x3a2/0x420 [ 1108.619026][T25181] ? __fget_files+0x2a/0x420 [ 1108.623754][T25181] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1108.629041][T25181] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1108.634240][T25181] __se_sys_ioctl+0xfc/0x170 [ 1108.639237][T25181] do_syscall_64+0x166/0x520 [ 1108.643975][T25181] ? trace_irq_disable+0x3b/0x140 [ 1108.649423][T25181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.656138][T25181] ? clear_bhb_loop+0x70/0xc0 [ 1108.661002][T25181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.667724][T25181] RIP: 0033:0x7fcdcbb9e159 [ 1108.672200][T25181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.695405][T25181] RSP: 002b:00007fcdccaca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.705115][T25181] RAX: ffffffffffffffda RBX: 00007fcdcbe26090 RCX: 00007fcdcbb9e159 [ 1108.714490][T25181] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 000000000000000a [ 1108.723632][T25181] RBP: 00007fcdcbc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1108.733581][T25181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.743795][T25181] R13: 00007fcdcbe26128 R14: 00007fcdcbe26090 R15: 00007fcdcbf4fa48 [ 1108.752761][T25181] [ 1108.756063][T25181] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1108.763803][T25181] CPU: 0 UID: 0 PID: 25181 Comm: syz.3.5925 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.775987][T25181] Tainted: [L]=SOFTLOCKUP [ 1108.780502][T25181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1108.791276][T25181] Call Trace: [ 1108.794577][T25181] [ 1108.797583][T25181] vpanic+0x56d/0xa60 [ 1108.801570][T25181] ? __pfx__printk+0x10/0x10 [ 1108.806157][T25181] ? __pfx_vpanic+0x10/0x10 [ 1108.810661][T25181] ? is_bpf_text_address+0x292/0x2b0 [ 1108.815960][T25181] ? is_bpf_text_address+0x26/0x2b0 [ 1108.821524][T25181] panic+0xc5/0xd0 [ 1108.825477][T25181] ? __pfx_panic+0x10/0x10 [ 1108.830047][T25181] __warn+0x315/0x4c0 [ 1108.834136][T25181] ? usb_submit_urb+0x1057/0x18b0 [ 1108.839248][T25181] ? usb_submit_urb+0x1057/0x18b0 [ 1108.844274][T25181] __report_bug+0x276/0x570 [ 1108.848849][T25181] ? usb_submit_urb+0x1057/0x18b0 [ 1108.853899][T25181] ? __pfx___report_bug+0x10/0x10 [ 1108.859019][T25181] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1108.865069][T25181] ? kasan_save_track+0x4f/0x80 [ 1108.870149][T25181] report_bug_entry+0x19b/0x290 [ 1108.875156][T25181] ? usb_submit_urb+0x1100/0x18b0 [ 1108.880466][T25181] ? usb_submit_urb+0x1105/0x18b0 [ 1108.885664][T25181] handle_bug+0xce/0x200 [ 1108.891097][T25181] exc_invalid_op+0x1a/0x50 [ 1108.895722][T25181] asm_exc_invalid_op+0x1a/0x20 [ 1108.901152][T25181] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1108.907601][T25181] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1108.928270][T25181] RSP: 0018:ffffc90003c47958 EFLAGS: 00010246 [ 1108.934424][T25181] RAX: 0000000000000000 RBX: ffff888033b77800 RCX: 0000000080001c80 [ 1108.942662][T25181] RDX: ffff888021ed70a0 RSI: ffffffff8cc533c0 RDI: ffffffff90881860 [ 1108.950974][T25181] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1108.959175][T25181] R10: ffffc90003c47a40 R11: fffff52000788f54 R12: 1ffff110056bb860 [ 1108.967626][T25181] R13: ffff88802b5dc300 R14: ffff888021ed70a0 R15: 0000000080001c80 [ 1108.976010][T25181] ? usb_submit_urb+0x1091/0x18b0 [ 1108.981054][T25181] usb_start_wait_urb+0x13f/0x5b0 [ 1108.986112][T25181] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1108.991982][T25181] usb_control_msg+0x234/0x3e0 [ 1108.997451][T25181] dib0700_i2c_xfer+0xbb9/0xf80 [ 1109.002339][T25181] __i2c_transfer+0x7bf/0x1fe0 [ 1109.007818][T25181] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1109.014429][T25181] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1109.021096][T25181] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1109.026584][T25181] ? i2c_transfer+0xc7/0x2d0 [ 1109.031378][T25181] i2c_transfer+0x1cb/0x2d0 [ 1109.035961][T25181] i2cdev_ioctl_rdwr+0x460/0x740 [ 1109.040961][T25181] i2cdev_ioctl+0x6a5/0x880 [ 1109.045500][T25181] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1109.051297][T25181] ? __fget_files+0x3a2/0x420 [ 1109.056027][T25181] ? __fget_files+0x2a/0x420 [ 1109.060782][T25181] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1109.066006][T25181] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1109.071087][T25181] __se_sys_ioctl+0xfc/0x170 [ 1109.075799][T25181] do_syscall_64+0x166/0x520 [ 1109.080679][T25181] ? trace_irq_disable+0x3b/0x140 [ 1109.085708][T25181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.091896][T25181] ? clear_bhb_loop+0x70/0xc0 [ 1109.096582][T25181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.102567][T25181] RIP: 0033:0x7fcdcbb9e159 [ 1109.107166][T25181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.126866][T25181] RSP: 002b:00007fcdccaca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.135469][T25181] RAX: ffffffffffffffda RBX: 00007fcdcbe26090 RCX: 00007fcdcbb9e159 [ 1109.143706][T25181] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 000000000000000a [ 1109.152050][T25181] RBP: 00007fcdcbc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1109.160212][T25181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.168370][T25181] R13: 00007fcdcbe26128 R14: 00007fcdcbe26090 R15: 00007fcdcbf4fa48 [ 1109.176713][T25181] [ 1109.180316][T25181] Kernel Offset: disabled [ 1109.184725][T25181] Rebooting in 86400 seconds..