last executing test programs:

8.779382174s ago: executing program 1 (id=2566):
r0 = socket(0x2d, 0x2, 0x0)
bind$xdp(r0, &(0x7f0000000000)={0x2d, 0x3, 0x0, 0xc}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c3790000ffff0000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'macvtap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffdc9}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x0, 0x80, 0x5, 0x2, 0x1, 0xa, 0x9}}, {0x0, 0x2, [0xff7b, 0x41e, 0x7, 0x7, 0x6]}}, {{0x0, 0x1, {0x2, 0x2, 0x2, 0x2, 0x2, 0x80000001, 0x8a7}}, {0x0, 0x2, [0xfffd, 0x0, 0x5, 0x1, 0x43a5]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x58081}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000500)={0xc, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'tunl0\x00', <r6=>0x0, 0x20, 0x700, 0x80000000, 0x646, {{0x16, 0x4, 0x0, 0x19, 0x58, 0x67, 0x0, 0xfc, 0x2f, 0x0, @remote, @multicast1, {[@noop, @timestamp_addr={0x44, 0x1c, 0xb5, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x6}, {@broadcast, 0x2}]}, @ssrr={0x89, 0x27, 0xa5, [@loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @broadcast]}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000001}, 0x200000f0)

8.453849198s ago: executing program 1 (id=2568):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x6c, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x3, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "d4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xa, 0xfff0, 0x40}, [@obex={0x5, 0x24, 0x15, 0x7}, @country_functional={0xe, 0x24, 0x7, 0x9, 0x8, [0x6, 0x4, 0x7, 0x0]}, @obex={0x5, 0x24, 0x15, 0x7ff}, @ncm={0x6, 0x24, 0x1a, 0x1945, 0x10}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x20}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0xda, 0x4, 0x8, 0x78}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x280a}}, {0x58, &(0x7f00000002c0)=@string={0x58, 0x3, "c0767b6a5c95025aa324180345ab080ca4ace289b72d73b381b6cd4eafd417b6e522e2f8ef63540d4f63ef10d2de61fcdb2560d0d589b7c9bd69aa8ac4804f618bf43ba6931c6ae41a8b868ac7c433feb4494ed6dbf9"}}, {0x2e, &(0x7f0000000340)=@string={0x2e, 0x3, "88485d820144daccc11cebac5d76c60fa1b71c8c3983f9d12f3fd95817c7c643cd9ae9e7ba3f97eb8b87cfbf"}}, {0x67, &(0x7f00000003c0)=@string={0x67, 0x3, "94185715026c58894171a6a17a6026fa83093bb89808d1c0145d510671e0cdd28fc73f6576428d555fbe838ef04763c69c62db960cc085bdaf41647fca579748028681f8d390e64dd9ee38d3ecdb3dd870f7589b72a1536e6275caa0810f7665d530d957d0"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x448}}, {0x54, &(0x7f0000000480)=@string={0x54, 0x3, "860ab8233633f6d107644bce4eff02fe80b0964b8f1340244b6c33122fec894bb2e5f8193b73f145e21cb7042f94a1516d85fbbc21759b147d2f01fddced4cf4b9880bf1b84ca1ee9f91d53fb2f5e8b2a8c6"}}]})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x40, 0xe, 0x1, "93"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, <r3=>0xffffffffffffffff}, 0x4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000005c0)=0xc)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feffffff"]}]}, 0x1c}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

6.353749217s ago: executing program 3 (id=2580):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x20200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000003}, {0x10040002, 0x1, 0x7, 0x5}], 0x10, 0x80}, 0x94)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x400041, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000)=<r6=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x6, 0x5635}]})
timer_create(0x2, 0x0, 0x0)
timer_delete(r6)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x4f}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfff8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008090}, 0x0)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608304c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0x8, 0x9, 0xbb8, 0xbb, 0x100}}]})
r11 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r11, 0x4})
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x72cb, 0xffffffff}, 0xc)
write$eventfd(r11, &(0x7f0000000080)=0x430f, 0x8)
ioctl$BLKPBSZGET(r9, 0x127b, &(0x7f0000000280))

6.196873474s ago: executing program 2 (id=2582):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000100000007000000830b040a1c01027f00000100000000001c000000000000000000000008"], 0x40}, 0x0)

6.011902677s ago: executing program 4 (id=2585):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
syz_pidfd_open(r0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x70)
wait4(r0, 0x0, 0x1000000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0xfff9)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a00030000000000000000000a"], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)
waitid(0x0, r0, &(0x7f0000000040), 0x40000000, 0x0)
r2 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x51, r3})
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x21}, 0xc)
socket$inet6(0xa, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee9, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0)
r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

6.008723841s ago: executing program 2 (id=2586):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x8, @sliced={0x3, [0x557, 0x1ff, 0x4, 0x9, 0xc90, 0x3, 0x40, 0x40, 0x7, 0x1, 0xc295, 0x5, 0x0, 0x44, 0x20b, 0x28, 0x5, 0x6, 0x2, 0x3, 0x8, 0x10, 0x1, 0x7f, 0x7, 0x8, 0xfffd, 0x8001, 0x1ff, 0x4, 0x0, 0xd538, 0x7, 0xffff, 0x9, 0x10, 0x3, 0xa, 0x101, 0x0, 0x1, 0x6880, 0x5, 0x3, 0xc, 0x400, 0x9, 0x7f], 0x7}}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) (rerun: 64)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2, r1}, 0xc)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a44a9, &(0x7f0000000140)={[{@inode32}, {@noswap}]})
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000edffffff0b0000000c0000"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28)
fcntl$getown(r3, 0x9) (async)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) (async, rerun: 32)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (rerun: 32)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={<r8=>0x0, <r9=>0x0, <r10=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r7, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38, 0x40044}}], 0x1, 0x4) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async, rerun: 64)
splice(r6, 0x0, r11, 0x0, 0x39000, 0x0) (async, rerun: 64)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x0, 0x0, 0xff}}, 0x18}}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x1000, &(0x7f000028e000/0x1000)=nil})

5.779738013s ago: executing program 1 (id=2588):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0xffffffc3, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x73}, 0x8)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850400000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0xfdfd, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})

5.527298359s ago: executing program 4 (id=2589):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101900)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x1, 0xa2, 0x0, 0x10000}}) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x1, 0xa2, 0x0, 0x10000}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x5, 0x3, 0xf}}) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x5, 0x3, 0xf}})
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0xa8, 0x9, 0x9, 0x6, @tick=0x6, {0x1, 0x5}, {0x0, 0x2}, @control={0x6, 0x8, 0x3}}], 0x1c)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x1a, @time={0xc4, 0x8}, 0x1, {0xf, 0xff}, 0x50, 0x0, 0x3})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x480000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000001c0)={{0x4, 0x5}, 'port0\x00', 0x12, 0x8, 0x4, 0x9, 0x8, 0x3, 0x4, 0x0, 0x2, 0x3})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=<r3=>0x0)
move_pages(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff7000/0x3000)=nil], &(0x7f0000000300)=[0x5, 0x6, 0x9], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x6) (async)
move_pages(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff7000/0x3000)=nil], &(0x7f0000000300)=[0x5, 0x6, 0x9], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x6)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000380)={0xe, 0x7, 0x5, 0x900}) (async)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000380)={0xe, 0x7, 0x5, 0x900, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x106, 0x1}}, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x4081, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x4081, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c804) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c804)
listen(r5, 0x7fffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4808004}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r9, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x4}}}}}, 0x28}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r4, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r11=>r4, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl0\x00', <r12=>r7, 0x29, 0x3, 0x0, 0x3, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x6, 0x7}})
setsockopt$inet6_mreq(r11, 0x29, 0xe, &(0x7f00000008c0)={@rand_addr=' \x01\x00', r12}, 0x14)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r11}, 0x8) (async)
r13 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r11}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x17, 0x5, 0x0, 0x2, 0x3480e, r11, 0x3, '\x00', 0x0, r11, 0x3, 0x0, 0x4, 0x0, @void, @value, @value=r13}, 0x50)
recvmsg(r5, &(0x7f0000000d80)={&(0x7f00000009c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/187, 0xbb}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000bc0)=""/27, 0x1b}, {&(0x7f0000000c00)=""/45, 0x2d}, {&(0x7f0000000c40)=""/81, 0x51}], 0x5, &(0x7f0000000d40)}, 0x40000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000dc0)=0xff) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000dc0)=0xff)

5.393930211s ago: executing program 4 (id=2590):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000001b40)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4)
sendto(r0, &(0x7f00000005c0)="120000001200e706017b00000000000000a1", 0x12, 0x240048d0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)=""/249, 0xf9}, 0x7}], 0x1, 0x40, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
io_uring_setup(0x4fce, &(0x7f0000000040)={0x0, 0x3cab, 0x1, 0x3, 0x190})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x137)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0xf)
sendmmsg$unix(r4, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000010}}], 0x1, 0x40)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x2d, 0x20040040)
recvmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@fadd={0x58, 0x114, 0x6, {{0x400000a1, 0x203ff}, 0x0, 0x0, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x82, 0x8, 0x36, 0x1000}}], 0x58}, 0x0)
r6 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[], 0x0)
syz_usb_control_io$sierra_net(r6, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[])
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)

5.168352758s ago: executing program 2 (id=2591):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r4, &(0x7f0000001480)={&(0x7f0000000fc0)={0xa, 0x4e23, 0x5, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x300000}}], 0x18}, 0x4000000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r6=>0x0)
r7 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMERASE64(r7, 0x40104d14, &(0x7f0000000000)={0xf, 0xfffffffffffffffd})
timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r6], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

4.269554831s ago: executing program 1 (id=2592):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001000ffff27bd7000fedbdf2500000000e5e92ea4eb9fbe0bafac7c169178e149eb23bdde0cd76d65", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB, @ANYRES8=r2], 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0xc0c5)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r3, &(0x7f0000000100), 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44)
shutdown(r4, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = syz_clone(0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0xff08, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x29, 0x2, {0x5}}, 0xb)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r10 = socket$kcm(0xa, 0x922000000003, 0x11)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000"], 0x94}}, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b160000000000000000020000084000048010000180090001006c6173740000c9002c0001800a0001006d617463680000001c000280060003001d8b000008000240000000000800010074746c000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x44840}, 0x40400c4)
write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

4.107591505s ago: executing program 0 (id=2593):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x80000006, 0xff, 0x0, 0xb}]}, 0x10) (fail_nth: 5)

3.933134608s ago: executing program 3 (id=2594):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8184)
bpf$BPF_PROG_DETACH(0x9, &(0x7f000000a140)={@fallback, 0xffffffffffffffff, 0x19, 0x20}, 0x20)
r1 = fanotify_init(0x68, 0x0)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2c42, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

3.585053739s ago: executing program 2 (id=2595):
r0 = socket(0x23, 0x80002, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000500), r0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4)
read$char_usb(r1, &(0x7f0000000500)=""/238, 0xee)
write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0x8}}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
sendmsg$inet_sctp(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000029b597947cefc5f8c215e1e3008000000084000000", @ANYRES32=0x0], 0x20, 0x4048800}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43)
setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000040)=0x4800, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "3bf38c2e5b5a1cd1", "2f154e9a8896412a6bd29dde0e392d98", 't!b ', "84e74a3980f2b5e6"}, 0x28)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001"], 0xe0}, 0x1, 0x0, 0x0, 0x4040814}, 0x4000)
ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000000100))
write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27)

3.507881598s ago: executing program 0 (id=2596):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x4, 0x10100)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x40, 0x941ee211c1e2967}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x845}, 0x400c000)
ioctl$OTPGETREGIONCOUNT(r1, 0x40044d0e, &(0x7f0000000040))
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$MEMISLOCKED(r1, 0x80084d17, &(0x7f00000000c0)={0x0, 0xdb8})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90002000ad9000008000240000000000900010073797a30000000000900020073797a3200000000140005"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000000)=ANY=[@ANYBLOB='gid'])
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xfffffff0}]}}]}, 0x48}}, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xa})

3.331659612s ago: executing program 4 (id=2597):
socket(0x10, 0x3, 0x0)
io_uring_setup(0x647e, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.864401797s ago: executing program 3 (id=2598):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x20, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x3, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0xd, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f0000000000))
syz_usb_control_io(r2, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f00000004c0))

2.69979567s ago: executing program 4 (id=2599):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x6c, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x3, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "d4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xa, 0xfff0, 0x40}, [@obex={0x5, 0x24, 0x15, 0x7}, @country_functional={0xe, 0x24, 0x7, 0x9, 0x8, [0x6, 0x4, 0x7, 0x0]}, @obex={0x5, 0x24, 0x15, 0x7ff}, @ncm={0x6, 0x24, 0x1a, 0x1945, 0x10}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x20}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0xda, 0x4, 0x8, 0x78}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x280a}}, {0x58, &(0x7f00000002c0)=@string={0x58, 0x3, "c0767b6a5c95025aa324180345ab080ca4ace289b72d73b381b6cd4eafd417b6e522e2f8ef63540d4f63ef10d2de61fcdb2560d0d589b7c9bd69aa8ac4804f618bf43ba6931c6ae41a8b868ac7c433feb4494ed6dbf9"}}, {0x2e, &(0x7f0000000340)=@string={0x2e, 0x3, "88485d820144daccc11cebac5d76c60fa1b71c8c3983f9d12f3fd95817c7c643cd9ae9e7ba3f97eb8b87cfbf"}}, {0x67, &(0x7f00000003c0)=@string={0x67, 0x3, "94185715026c58894171a6a17a6026fa83093bb89808d1c0145d510671e0cdd28fc73f6576428d555fbe838ef04763c69c62db960cc085bdaf41647fca579748028681f8d390e64dd9ee38d3ecdb3dd870f7589b72a1536e6275caa0810f7665d530d957d0"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x448}}, {0x54, &(0x7f0000000480)=@string={0x54, 0x3, "860ab8233633f6d107644bce4eff02fe80b0964b8f1340244b6c33122fec894bb2e5f8193b73f145e21cb7042f94a1516d85fbbc21759b147d2f01fddced4cf4b9880bf1b84ca1ee9f91d53fb2f5e8b2a8c6"}}]})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x40, 0xe, 0x1, "93"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, <r3=>0xffffffffffffffff}, 0x4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000005c0)=0xc)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feffffff"]}]}, 0x1c}}, 0x0)

2.655601973s ago: executing program 1 (id=2600):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x20ffc, 0x9, 0x6070, 0x4, 0xfffd, 0xec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x108)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
accept(r1, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x20d3e, 0xa, 0xfffffffffffffffa, 0x4, 0x4000002, 0x0, 0x1000, 0xfffffffffffffff2, 0x4bfb, 0x40000000004, 0x7ff, 0x2, 0x3a, 0x5, 0x1, 0x100000090], 0xffff1000, 0xb0457})
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r4, 0x5, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x3, 0xfb, 0x2, 0x101}, 0xc)

2.423564359s ago: executing program 0 (id=2601):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000ec000000080000000200000000000000", @ANYRES32, @ANYBLOB="000000008839957b424400000000000100000f7ed364f27c17d4f4f042b7c900000000000000207f2e58c0c452a19c2e91251e12bb0fea98a01e5a9ca2009da8c320400c525819525b1e16b201c12cf3d2036c954b4aac56559b0597c7c491301256eca2cbf22234e77afafb339b92b4776d3cdcbdfec181238fdf3b28ba279fd6801c0c00f0a58f7aff2cdbb7e5b2cdeb424d5ebb033e6fc60c2b26fb25c60a02a24e714f4dc6ff74f21149061195672a4ab944f02702f3d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
r2 = socket(0x10, 0x2, 0x0)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r5, 0x5501)
write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x9}]}}}]}, 0x48}}, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
ftruncate(r7, 0x7)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000000)={0xa0000001})
epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0)
fcntl$setflags(r4, 0x2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r9 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/direct\x00', 0x2, 0x0)
writev(r9, &(0x7f0000000ac0)=[{&(0x7f0000000900)=' ', 0x1}], 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

1.908098951s ago: executing program 4 (id=2602):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123502, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x27, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xc0, 0x1}}}}}]}}]}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, <r4=>0xffffffffffffffff}, 0x4)
r5 = open(&(0x7f0000000b80)='./file0\x00', 0x80040, 0xd4)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1c, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000000380)='syzkaller\x00', 0xfa8, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xc, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0x1, r5], &(0x7f0000000c00)=[{0x5, 0x2, 0x4, 0x7}], 0x10, 0x100}, 0x94)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="4022280000002830c263138526792c3cbdeaab918d0fb74237cc6e"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="210027bd7022fbdadf250400000008000400010000000800020003"], 0x24}, 0x1, 0x0, 0x0, 0x440c5}, 0xc810)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r9 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r9)
ppoll(&(0x7f0000000600)=[{r9, 0x1000}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r9})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r10, 0x74, 0xffffffffffffffff}, 0x10)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1)

1.898809129s ago: executing program 2 (id=2603):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
ppoll(&(0x7f0000000240)=[{r1, 0x1438e}], 0x1, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = signalfd4(r1, &(0x7f0000000100)={[0x5]}, 0x8, 0x800)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3)
r4 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80000002})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r6 = open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x9801)
close(r6)

1.223627167s ago: executing program 0 (id=2604):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001e00)=[@in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e20, 0x37, @private2={0xfc, 0x2, '\x00', 0x3}}], 0x2c)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001e00)=[@in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e20, 0x37, @private2={0xfc, 0x2, '\x00', 0x3}}], 0x2c) (async)

1.095427086s ago: executing program 0 (id=2605):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r4, &(0x7f0000001480)={&(0x7f0000000fc0)={0xa, 0x4e23, 0x5, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x300000}}], 0x18}, 0x4000000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r6=>0x0)
r7 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMERASE64(r7, 0x40104d14, &(0x7f0000000000)={0xf, 0xfffffffffffffffd})
timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r6], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

911.113577ms ago: executing program 2 (id=2606):
r0 = syz_open_dev$media(&(0x7f0000000340), 0x8, 0x8000)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000380))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (rerun: 64)
lsetxattr(0x0, 0x0, 0x0, 0x0, 0x1) (async)
write$binfmt_misc(r2, &(0x7f0000000080)="8cb2fce97aad66212d4e2eee9692e2d1d9c66e94414314ff0e44a996dbfee710ceeb961586cc36ca8b4a1424e13a3d5963fb23be2f54aea4a838642095d4a88b100a240ece8b8284b3f5bf7de077d3b21bceb0d5f95615a7e50b6382418c17479fe3b15b21fd076f4b7e801da9a5b1d96322340792e22d24154012b76cc36bded619d5a18b99746a93048b76de56ba73b38a180819c4b50f2dc358b1963e6f3ba8a0078872b1b577a4c992db46107a60106113fbcbcad7cfbf5a314d71a09d4c25b4bac355a2d2235dcbad3020a79d1997933372fecfcbc7aeefc6a12df4ea99065a38e77fde8150a09ea4ead7fa076921c52d26caa6f8dd7f22600e45e47573dba7b2c19a4528c9f4452bccf37f944d3cf12cd2ca662d298ab4d878d0deb498bcc44d0062950bb0863c40465f998c86af9bf028bb3ed87832c0c6280e6051d05217545eccf7f02e436646d1dc9532cb621829d1defe49e6b261f22b9e6e1cdf9ea37b0c7fd65a3efec296d51708aed8a654558d86ef41fcf5fa51a188c36e3cc178928e0cc7b73beece38cccaa562bbac046429247bd1294cb957ec13b599d5d21ab75a8cd16cfbdfb85ac7a2a4d18032fdfa571727185c036752d95f12486f60f55b896d1df67ce529d5d3ae82f45bbf0aea980a72102fe00152a0f0a5dfb4ec99364403e104fd63ffc12bf802c7571a836a6ef995a047f104ca97f6851179a697146286c5396146ce2c41948dfaa023dcfea7851f8b98b98ffee7b588e97d00fd7612481be4a07bec0a1889e37cf669bf758f986fac0ee69615f6c725918af87135585fbc90db380bb81baeb95d85a2e8329661dc88cd34b69ef301006cbe7d5e01a37f451f7735e15089bd8040f6a50c38bc4f93d56883a85972d4fe197dc43c69dc5abdb9cd460a1e32dbc61cd237e536c2e2ba6c5f7352efcea0733073c6d11233b5a6ff841e0b373763e668b4a382f0b1b0a2785206433a9b53b9ec7063e3581b551e9763da8385fb7f10ecac9295fced6c9b410cbdf8e042961960ca7594ac76317edca3336c7730f6ab19933e04a24f09b8f131c1bbb0586a683d70f8210cdd1faf0c451083df10a771e621dbba92e02d5e95f8bc781b9de132d92054dd9f53495743e86466c01e8f53a18110336f74e113e29290428e380c737c8251a1a7f56d1ac04dac8b81ecf0cf8fb24f2698fffe589a0ffe991afdff242d382d55a9cddc8aa67d125f829172954ea9b0a931cc0aac6eaa2b0d5920677119fcbbf20d9a515b435ba4c3eeb90b6085c818b564241a3336ec8d0d332d932d966fe98c4302b9d3e9b0c6ba24cb64d33e928befa3f131fe8db2e61136d5a580c507581e8f6f870be176149d1852a4029293c4b970df0a961b8c5e2c240ebfee4cae24242308b423d630daf6c4abe7f9d40ccfd9bed0f102a7285d8a588ae69080ebadf65f2f2076b4d0e91b8353fd3be86f6df2792304370b0fad635c3e23f0e046163643fffd23da7b22914bc91fd58d982a3f76aac55a8723e9b607b0c36e078e1b46787356e5114592516d863ad4cb9606bc10a18b0e61b151772277710148354964881ec538bae1de2adaae8bfac550142bfc2fec6722600c104738195c134fa626bb7ae8ee4dea973625e304e46882bc3181a50afe692af2b9b9b6de9ceb7e3a4d0dc4e1aa0f6ff84528e2e6f0b239571c23a4df42a01d6664ae25ccd092bcf18d9322365176c293379af456e5776a1490dadf025d73641e6d0fec50be7f56d02e95ca9dc46462967c5e00d4dcc084935ae606c320834a82cac4651e176c9bdee10c7376f087c63394c1bb704f44236e9ea710d299c8bb1424b7d60ceaac4b52c60dce429b9be693335fdc4f0f9c72db1323b09a3f2f987303d3e2e3809f022dd6b5a829a1feba9060e7fe5bdc014693be96812c4717d20143aad7ee7745c4b813992f50985471343087cae8572323f0db45b67d5a317659f9c8bbe0641b192eb47e46872f5087c7cd2fd68bbbde2382169b9d8dca81dd2c256e32578067ba236326efbfca4b16b573a5aa856d4e3aa4d24d0c1c7cba0d08134328061428df8e01e9ff2f86bfb37de9f620bb1b7a4265225a9dcfa5fba1cfed5802666fe1325d212b2c3a46b917270d261a4dd686970c3453b0fed4b1f16fc9a9f12d6b4baa11d65d9fd9acd14904a69528385caaf88a81d23d7203a26ed86a6a663c36579d42fd0e2f1bb30fdc582c765cd99f7e7105c3a518645d28f912b7411eca9cbec097ff1cd8d3706f0a8e37aebbdbb78d6edbeba7a6abd1ca5c45e8ebce8edcc8af3cf3eeb7f7e01801ee8496a813d7e6b2b631369e675ca801d5916fabbac99e3a5934db42d957d55408a5c3e8906efd4659a45e44a00e533a3dce7df2459349fa69fa8af1839f10132f9aaca90722176d763304b2fe207c9c8dd8eb17accda3989f2df11245d75d9837e3c2ce23cb653d0a8a30d66752e6ccc3c522107dce6a2068219c428c1c8f93d8f5d05ce6cef19d63dfc6352aa471abd1e1c405b63854c1e419f9355b0d44a93798ab90e2dfa4a3c6347b3ce27aca37aeb3cc62f9ca189b861da4098fe8c635a5725ec14cb3a16b2d1ddd108c8f182e4a6719c71a58f64e9f9a8e43dcc8bfbe7671b816fb8a21511b7d05e0f956bbf2d4529dccd247536b50e85f1e973298fdf106a45b1ed200364ee304c050c09b2c25a65ba393bf223979c4ff783a03433b34346ebfbb573b794d7de4758209f04957dc87a66830702a1c0e4c88e69fc9e39b25ccd9cf47d9ddb8ff7cb6399b721256da719b204ce6cf801063554a5292b1cd15a2d36fcff19473e4e36e6d774db692009ea2333ee593f189d0b806b8d9ad99f29baecb5bf1ec3703bf2a0d0dfabbb9462827dd4e8915018acf860075ba271f778b49720573f994322616b1151a4cbc7ac1b2a40bbf33a5b034aac2a12d4820a4d4877d730c7ebee0bb73ae8a8a9623fd75c4312ee5fe8c5949175746a7403c7181669da1ef0282f34a8c178dba2e871f63e58147343327781ddf8ccaa0c0996a7bd5297c3fdded2325d12239a170675b6de092757042335c1320745f9df3599c033443113028fc1edc64d562fd55f37653385c7918d2796955b7e6f1147e810597625ef59f4c16c3b5f759b0fb0ecc86f45ab597f616d0a6b67496519c6196ed83857207ff9d01b7afcbb1f35367423dc15d9d0d094bc84e27bdc643cb555b55e82f1130843e3750ce71c659f2167c17e5e14115555be7c1f542ca1e21295565ef304af5bb0048053dcda67c1248ff0a8f3717169d122785446ced0eae52307e49e47e0a48cabed6869bfca96ef10d43b55156e79475a05a2347903d1e628bf35a5c9323cc49de538e74bbc8f178210076389ef162d41c7c28a5995b37f1c733b046c526eafb67a3b5ff5957024e7365cd749f4218c5fb912cb4bae86f47e3c61dba9333e09e60106ca0af8c8ee75a72631e8c395fd0c28a61b92d942173c7ab8d4ec37dca33507e494f0ea2e3e9d11ed269a9b161f03476e24d2af1aeec1570e2122db6cd44fad4660734317ec108f290164495407861002feacef42e889cb0fc7cb4d98757c8acc4a9c7b68c2331e3fb5160815ba14d84d8b5108f3d8d3c48f0b5281bf30e5b63772edd3c307804c701107c31c53c10ac5a871f392ddf5ea2defe0709aa10f70bf4b2e33bc54152cf217d22649d3a538e8e8c54d55707e4a9f181ad47d4cb795f8531548bf9d7a9b41a38aa1c38cdd4add98fea76f010f0ad4ae93d12ebf6074392d9bbb4a8f46c88e55551855a90ab9b4e78a1879f23f247ed4ae8acc0d6a6b705da3f457e9245588b4ee879316df7aa28c4e656cccb58dcd901bf7c3ce2c30d167947e7c3a9932b900f95f7b0f2ac6e5dd619ae627c544cf3fbe6e98f4e135a470487cc611648825174889df801a00df4da66d125d85d0b26d32775bd3c973e65054ccc4a22ffefe958f6ccab00c11e64ab9adc350d28c9455946ffcd7265037c32660c9d091330a3a64c1e31c3b412d80e807a9ec765874c73177ccec6f4c0770c7b73a1701c20ff7b0c1054725f1ec8bbf5ae9121963bfe32aea6a2d58b220054e646ecd31eca8a329703a3bb8d6ea24f4f75b54e3d99e4652d661c81d2117a800bfcbfef1a7fe462ffda24127c4baf7fe86a06d872b66c645f994f186631374a210f79ad66a89843327c216031c9fe96185ea809869fb51e71b4c30fc0851ee48dd7cfeecbcf1478f32251595eebb3b0d47ed98bdc4371563680f21896626db72e1bfcd5e221c1933effae8ae0400f02ecf61345dd653de5a7693b59120dada467f5b9804ac129b30d874680c7f9f7929a6e3f12cd8c3eacd6c100fc7f0b6d734d7ec5072cfb32ef0ba7ef01e84751a62314f8b27af643d15c1a632c981b190c3fff3ba6b9f69d910958f530c724aa4500a9fb3e21199cb35493681c1f24c7907281d1c204928c5eb40947f05963d710e424d4291c0f7fb34d8a11fe1f059d808c7fedb9163faa6196f2a32d2d2d9999b938db1e92f87eec6baaeb1c1d71fe92bbaeab59a794338ec8fcd3a3a6f4be8b2078165d565729468b06489ac0b7fa5321113551bea0d75f3baa8197bd9914085b7de8bf9b16b8518ade19589cf0c56f647d724613c299c2db90109db3e4da0e3ece3fef1ccf6ca93ffed65442e61b4e476a89589e68b4255fd8d633033ad293fa33c0125c24c2e82f4969098dde723f7a5e17d33d5e9cd4a487b3ad6adde18721b0fb1a531ff719d89af6035c304bd872852b4135cc6acb6f551c04398df680de65d799b1dfcac507c6958c6e2c2af7114bcbfb2e0a7193800094293b84d0626ca88ffa8b49ecd25e827cadf4d5963d1c822ee859bfb6ccd27f4dc610f7131efa2a47534063b3c1de64b997eda439140c5ba9f83e91748afdbf1d4b3ae62cf3414ccf4294a6c7e1356bd25ec5a749a4d10d4c3527e189c0492ec1d60962064ac9d76073eba20605c6572b54a8371a20041a6d033f8078b82baff096a44c70aed96a55e5fc8026f85c2aa877cfeb2ffc1eb77ba597b5139e25615f081e407d33adef740ff8538726da22e897b9211e5f6bca218ce1719cb50b81a3c7f5408e47bd54e9f317aeb5d25596a0490fd79510a31d85dd3c15b335198725d7446b3237cf86ca08a772b11134abae2e12e7315d7597e5225adb92d74c4d465c8666bfc465515d99876cb7485481fc1434a9f71ee032afbbf6be39f77a4e8465f4457cb9521535a9de9d9112e735abe6e22904531e35d10049ddf4bc19d39480bb98ea3abe0899ca11db45c81e65dc3c6f02769f75130fd3d420057beb7d5c2bc29cb72dc9a6366845a794d74a5b2ce1dba7e293cab79076b295049cf86985588241d1d359e039fffbbd6ce36216cb0e07a2df2b5c85c4fd79300feff530cd4f6b8d764f753515d2fcc1fc9ea46efc20bf19939e45e24132b0d0b3c2d05cb9a531ce2979dd5389bda29ac2279424d93fb8baaff3c4309afdb6b07190626634542eeae6d3dee20da2ada8bef334efdb67bd5fba7aa258df68705b9810ea0bdeb168e47b2c9136a942471dc4c221b557d43bf9a539237d259af723415bd0082e66f2163018cedc4c03dbedd811917152e0953f1eef3f7d576b7548680068033ae573d8a9e2b9f5cf82e013a3fc82af6003ade590fb858903c7d5836ec5c8b38e18c14064e347040e9a1dc1f364fd682a500159dad4b0f78e9028fb73665798213dd9efc6dcbe110ad0da6557e200b10073fcbb56de2f02d877916f4869a37f6206", 0x1000) (async)
rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_macvtap\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r5, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x2}}, 0x30) (async, rerun: 32)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x4, 0x7f, 0x7fff}) (rerun: 32)

799.426456ms ago: executing program 0 (id=2607):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
r1 = syz_usb_connect$hid(0x0, 0xb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400f32415000000000000109022400010000e80b0904000501030002000921fd7f080122610309058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x40)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @dev}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r6, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
add_key$user(&(0x7f00000010c0), &(0x7f0000001040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)

631.602826ms ago: executing program 3 (id=2608):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x7, 0xe, 0x8, {0x0, 0x1, 0x800, 0x4, 0x4, 0x3}, {0x1, 0x0, 0x80, 0x8, 0x3, 0x9}, 0x1, 0x4, 0x9fb}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (fail_nth: 5)

175.463397ms ago: executing program 3 (id=2609):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x8000}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

94.377874ms ago: executing program 1 (id=2610):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0x11dc0, &(0x7f0000000300)=ANY=[], 0x0)

0s ago: executing program 3 (id=2611):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000010000000000000061f300008500000053000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000475a0000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000400)='usrquota')
socket$can_j1939(0x1d, 0x2, 0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)="5af1adf482a49b66a7a061ef77152000c19d1acf0c409b4f750aa4df8bd8b8dbee870f6ee0ccb2a58363e6b22e3f92642e92fd7401fede8a3347d714227878346d5916bceebe0ef9892ebca55d447895d7d745ad59d64f32e2343e5e554a6c78e79bac2a51ba50074ca7780779b1cff78bbbb280122286afb88b452fd61df1e170abe1c9a90b0fb69c9b20e0dda4255e0d645c9f0b72a4e55742a93f3e4b23a4b7e342b4d8d8d76dd69f2cd13c8d389b1a8cf0962d435d5985a9d9dc3c7b08c91bb84f7d410e3ce455052768aaa062787188a230f9cdafec61a9c749e0a14317c9830a6df7bc34b90618ba79d6f725c1", 0xf0, r0}, 0x68)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000029", @ANYRES64=r1], 0xb2)

kernel console output (not intermixed with test programs):

74]  ? __pfx___se_sys_prctl+0x10/0x10
[  624.743561][T12974]  ? __x64_sys_prctl+0x20/0xc0
[  624.743595][T12974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.743621][T12974]  do_syscall_64+0x174/0x580
[  624.743650][T12974]  ? trace_irq_disable+0x3b/0x140
[  624.743685][T12974]  ? clear_bhb_loop+0x40/0x90
[  624.743714][T12974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.743736][T12974] RIP: 0033:0x7fdb0a47de59
[  624.743757][T12974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  624.743775][T12974] RSP: 002b:00007fdb086d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  624.743798][T12974] RAX: ffffffffffffffda RBX: 00007fdb0a705fa0 RCX: 00007fdb0a47de59
[  624.743814][T12974] RDX: 0000000000000000 RSI: 0000200000001900 RDI: 0000000000000010
[  624.743829][T12974] RBP: 00007fdb086d6090 R08: 0000000000000000 R09: 0000000000000000
[  624.743845][T12974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.743859][T12974] R13: 00007fdb0a706038 R14: 00007fdb0a705fa0 R15: 00007ffe99d389e8
[  624.743895][T12974]  </TASK>
[  624.751830][ T5716] usb 4-1: USB disconnect, device number 37
[  625.679491][ T5717] usb 3-1: USB disconnect, device number 56
[  627.508967][T13004] FAULT_INJECTION: forcing a failure.
[  627.508967][T13004] name failslab, interval 1, probability 0, space 0, times 0
[  627.509007][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.3.2238 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  627.509037][T13004] Tainted: [L]=SOFTLOCKUP
[  627.509051][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  627.509066][T13004] Call Trace:
[  627.509075][T13004]  <TASK>
[  627.509104][T13004]  dump_stack_lvl+0xe8/0x150
[  627.509155][T13004]  should_fail_ex+0x467/0x600
[  627.509193][T13004]  should_failslab+0xa8/0x100
[  627.509225][T13004]  kmem_cache_alloc_noprof+0xa4/0x650
[  627.509262][T13004]  ? skb_clone+0x212/0x3a0
[  627.509283][T13004]  ? skb_clone+0x212/0x3a0
[  627.509313][T13004]  skb_clone+0x212/0x3a0
[  627.509340][T13004]  __netlink_deliver_tap+0x413/0x860
[  627.509390][T13004]  ? netlink_deliver_tap+0x2e/0x1b0
[  627.509427][T13004]  netlink_deliver_tap+0x19c/0x1b0
[  627.509466][T13004]  netlink_unicast+0x7b8/0x990
[  627.509511][T13004]  netlink_sendmsg+0x813/0xb40
[  627.509543][T13004]  ? __pfx_netlink_sendmsg+0x10/0x10
[  627.509568][T13004]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  627.509601][T13004]  ? __kernel_text_address+0xd/0x30
[  627.509624][T13004]  ? unwind_get_return_address+0x4d/0x90
[  627.509653][T13004]  ? __pfx_netlink_sendmsg+0x10/0x10
[  627.509675][T13004]  sock_sendmsg_nosec+0x13a/0x180
[  627.509707][T13004]  ____sys_sendmsg+0x565/0x870
[  627.509744][T13004]  ? __might_fault+0xaf/0x130
[  627.509775][T13004]  ? __pfx_____sys_sendmsg+0x10/0x10
[  627.509822][T13004]  ? import_iovec+0x73/0xa0
[  627.509852][T13004]  ___sys_sendmsg+0x2a5/0x360
[  627.509888][T13004]  ? __lock_acquire+0x683/0x2ce0
[  627.509916][T13004]  ? __pfx____sys_sendmsg+0x10/0x10
[  627.509988][T13004]  ? __fget_files+0x2a/0x420
[  627.510011][T13004]  ? __fget_files+0x3a8/0x420
[  627.510045][T13004]  __x64_sys_sendmsg+0x1b7/0x290
[  627.510085][T13004]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  627.510147][T13004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.510174][T13004]  do_syscall_64+0x174/0x580
[  627.510205][T13004]  ? trace_irq_disable+0x3b/0x140
[  627.510242][T13004]  ? clear_bhb_loop+0x40/0x90
[  627.510271][T13004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.510293][T13004] RIP: 0033:0x7fab5eb2de59
[  627.510326][T13004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.510345][T13004] RSP: 002b:00007fab5cd86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  627.510368][T13004] RAX: ffffffffffffffda RBX: 00007fab5edb5fa0 RCX: 00007fab5eb2de59
[  627.510383][T13004] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  627.510396][T13004] RBP: 00007fab5cd86090 R08: 0000000000000000 R09: 0000000000000000
[  627.510409][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.510422][T13004] R13: 00007fab5edb6038 R14: 00007fab5edb5fa0 R15: 00007fffc71ddd88
[  627.510456][T13004]  </TASK>
[  628.482436][T13016] FAULT_INJECTION: forcing a failure.
[  628.482436][T13016] name failslab, interval 1, probability 0, space 0, times 0
[  628.482476][T13016] CPU: 1 UID: 0 PID: 13016 Comm: syz.0.2243 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  628.482506][T13016] Tainted: [L]=SOFTLOCKUP
[  628.482514][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  628.482538][T13016] Call Trace:
[  628.482547][T13016]  <TASK>
[  628.482556][T13016]  dump_stack_lvl+0xe8/0x150
[  628.482596][T13016]  should_fail_ex+0x467/0x600
[  628.482633][T13016]  should_failslab+0xa8/0x100
[  628.482661][T13016]  __kmalloc_noprof+0xfe/0x780
[  628.482687][T13016]  ? tomoyo_encode+0x2ad/0x570
[  628.482711][T13016]  ? tomoyo_encode+0x2ad/0x570
[  628.482742][T13016]  tomoyo_encode+0x2ad/0x570
[  628.482773][T13016]  tomoyo_realpath_from_path+0x5fa/0x640
[  628.482808][T13016]  ? tomoyo_path_number_perm+0x219/0x5f0
[  628.482843][T13016]  tomoyo_path_number_perm+0x246/0x5f0
[  628.482881][T13016]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  628.482914][T13016]  ? __lock_acquire+0x683/0x2ce0
[  628.482948][T13016]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  628.482977][T13016]  ? hook_file_ioctl+0x1f3/0x600
[  628.483006][T13016]  ? lockdep_hardirqs_on+0x7a/0x110
[  628.483055][T13016]  ? __fget_files+0x2a/0x420
[  628.483079][T13016]  ? __fget_files+0x2a/0x420
[  628.483098][T13016]  ? __fget_files+0x3a8/0x420
[  628.483116][T13016]  ? __fget_files+0x2a/0x420
[  628.483141][T13016]  security_file_ioctl+0xc3/0x2a0
[  628.483166][T13016]  __se_sys_ioctl+0x47/0x170
[  628.483194][T13016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.483218][T13016]  do_syscall_64+0x174/0x580
[  628.483248][T13016]  ? trace_irq_disable+0x3b/0x140
[  628.483282][T13016]  ? clear_bhb_loop+0x40/0x90
[  628.483310][T13016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.483332][T13016] RIP: 0033:0x7f37b9d9de59
[  628.483354][T13016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.483373][T13016] RSP: 002b:00007f37b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  628.483396][T13016] RAX: ffffffffffffffda RBX: 00007f37ba025fa0 RCX: 00007f37b9d9de59
[  628.483411][T13016] RDX: 0000200000000240 RSI: 00000000c0745645 RDI: 0000000000000003
[  628.483425][T13016] RBP: 00007f37b7ff6090 R08: 0000000000000000 R09: 0000000000000000
[  628.483437][T13016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.483450][T13016] R13: 00007f37ba026038 R14: 00007f37ba025fa0 R15: 00007ffc2ba2b558
[  628.483483][T13016]  </TASK>
[  628.492974][T13016] ERROR: Out of memory at tomoyo_realpath_from_path.
[  629.036972][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'.
[  629.036998][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'.
[  629.037024][T13026] netlink: 'syz.0.2245': attribute type 7 has an invalid length.
[  629.374181][   T66] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  629.389354][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'.
[  629.389402][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'.
[  629.389448][T13026] netlink: 'syz.0.2245': attribute type 7 has an invalid length.
[  629.411634][   T66] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  629.414385][   T66] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  629.414439][   T66] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  631.618972][T13048] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  631.854016][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2256'.
[  631.970681][T13047] netlink: zone id is out of range
[  631.970812][T13047] netlink: del zone limit has 4 unknown bytes
[  632.095817][T13058] ip6tnl1: entered allmulticast mode
[  632.520294][T13075] FAULT_INJECTION: forcing a failure.
[  632.520294][T13075] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.520361][T13075] CPU: 0 UID: 0 PID: 13075 Comm: syz.0.2258 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  632.520414][T13075] Tainted: [L]=SOFTLOCKUP
[  632.520423][T13075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  632.520437][T13075] Call Trace:
[  632.520446][T13075]  <TASK>
[  632.520456][T13075]  dump_stack_lvl+0xe8/0x150
[  632.520498][T13075]  should_fail_ex+0x467/0x600
[  632.520536][T13075]  _copy_from_iter+0x1d3/0x1660
[  632.520574][T13075]  ? rcu_is_watching+0x15/0xb0
[  632.520603][T13075]  ? trace_kmem_cache_alloc+0x29/0xe0
[  632.520644][T13075]  ? __pfx__copy_from_iter+0x10/0x10
[  632.520685][T13075]  ? __alloc_skb+0x276/0x7a0
[  632.520716][T13075]  ? __alloc_skb+0x276/0x7a0
[  632.520754][T13075]  ? netlink_sendmsg+0x650/0xb40
[  632.520777][T13075]  ? skb_put+0x112/0x210
[  632.520813][T13075]  netlink_sendmsg+0x6c0/0xb40
[  632.520845][T13075]  ? __pfx_netlink_sendmsg+0x10/0x10
[  632.520870][T13075]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  632.520910][T13075]  ? __pfx_netlink_sendmsg+0x10/0x10
[  632.520932][T13075]  sock_sendmsg_nosec+0x13a/0x180
[  632.520965][T13075]  ____sys_sendmsg+0x565/0x870
[  632.520999][T13075]  ? __import_iovec+0x51a/0x7e0
[  632.521031][T13075]  ? __pfx_____sys_sendmsg+0x10/0x10
[  632.521077][T13075]  ? import_iovec+0x73/0xa0
[  632.521105][T13075]  ___sys_sendmsg+0x2a5/0x360
[  632.521149][T13075]  ? __pfx____sys_sendmsg+0x10/0x10
[  632.521222][T13075]  ? __fget_files+0x2a/0x420
[  632.521245][T13075]  ? __fget_files+0x3a8/0x420
[  632.521278][T13075]  __x64_sys_sendmsg+0x1b7/0x290
[  632.521318][T13075]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  632.521374][T13075]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.521399][T13075]  do_syscall_64+0x174/0x580
[  632.521433][T13075]  ? clear_bhb_loop+0x40/0x90
[  632.521461][T13075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.521484][T13075] RIP: 0033:0x7f37b9d9de59
[  632.521506][T13075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  632.521525][T13075] RSP: 002b:00007f37b7fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  632.521549][T13075] RAX: ffffffffffffffda RBX: 00007f37ba026180 RCX: 00007f37b9d9de59
[  632.521566][T13075] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[  632.521581][T13075] RBP: 00007f37b7fb4090 R08: 0000000000000000 R09: 0000000000000000
[  632.521596][T13075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  632.521609][T13075] R13: 00007f37ba026218 R14: 00007f37ba026180 R15: 00007ffc2ba2b558
[  632.521645][T13075]  </TASK>
[  633.281339][   T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  633.451769][   T31] usb 4-1: device descriptor read/64, error -71
[  633.700967][   T31] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  633.830771][   T31] usb 4-1: device descriptor read/64, error -71
[  633.842654][ T4911] Bluetooth: hci5: unexpected event for opcode 0x1405
[  633.941345][   T31] usb usb4-port1: attempt power cycle
[  634.345346][T13107] fuse: Bad value for 'fd'
[  634.347450][   T37] kauditd_printk_skb: 67 callbacks suppressed
[  634.347470][   T37] audit: type=1326 audit(1783106354.953:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.347609][   T37] audit: type=1326 audit(1783106354.953:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.348210][   T37] audit: type=1326 audit(1783106354.953:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.348380][   T37] audit: type=1326 audit(1783106354.953:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.348538][   T37] audit: type=1326 audit(1783106354.953:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.348708][   T37] audit: type=1326 audit(1783106354.953:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.348867][   T37] audit: type=1326 audit(1783106354.953:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.349177][   T37] audit: type=1326 audit(1783106354.953:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.349582][   T37] audit: type=1326 audit(1783106354.953:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.353682][   T37] audit: type=1326 audit(1783106354.953:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13106 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  634.371712][   T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  634.445103][   T31] usb 4-1: device descriptor read/8, error -71
[  634.860955][   T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  635.061477][   T31] usb 4-1: device descriptor read/8, error -71
[  635.760617][   T31] usb usb4-port1: unable to enumerate USB device
[  636.220470][T13126] netlink: 'syz.3.2281': attribute type 5 has an invalid length.
[  636.220493][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2281'.
[  636.291717][T13126] syz.3.2281 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  636.331137][ T5716] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  636.485042][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  636.485072][ T5716] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  636.485113][ T5716] usb 2-1: config 1 has no interface number 0
[  636.485160][ T5716] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  636.488089][ T5716] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  636.488122][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.488144][ T5716] usb 2-1: Product: syz
[  636.488159][ T5716] usb 2-1: Manufacturer: syz
[  636.488175][ T5716] usb 2-1: SerialNumber: syz
[  636.753124][T13140] netlink: 'syz.2.2285': attribute type 11 has an invalid length.
[  636.870097][T13113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.985495][T13113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.273125][T13153] comedi comedi2: comedi_config --init_data is deprecated
[  637.918334][T13170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2296'.
[  637.983063][   T31] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  638.167376][   T31] usb 1-1: Using ep0 maxpacket: 16
[  638.272445][   T31] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  638.273581][   T31] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  638.274646][   T31] usb 1-1: config 0 has no interface number 0
[  639.081197][   T31] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  639.081234][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.081256][   T31] usb 1-1: Product: syz
[  639.081272][   T31] usb 1-1: Manufacturer: syz
[  639.081288][   T31] usb 1-1: SerialNumber: syz
[  639.147581][   T31] usb 1-1: config 0 descriptor??
[  639.166955][   T31] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  639.167032][   T31] uvcvideo 1-1:0.105: No valid video chain found.
[  639.386747][T13163] netlink: 'syz.0.2294': attribute type 3 has an invalid length.
[  639.441592][ T7891] usb 1-1: USB disconnect, device number 48
[  639.604387][ T5716] usb 2-1: selecting invalid altsetting 1
[  639.605719][ T5716] cdc_ncm 2-1:1.1: bind() failure
[  639.666893][ T5716] usb 2-1: USB disconnect, device number 38
[  639.811315][T13175] FAULT_INJECTION: forcing a failure.
[  639.811315][T13175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  639.811360][T13175] CPU: 1 UID: 0 PID: 13175 Comm: syz.1.2297 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  639.811390][T13175] Tainted: [L]=SOFTLOCKUP
[  639.811399][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  639.811413][T13175] Call Trace:
[  639.811422][T13175]  <TASK>
[  639.811433][T13175]  dump_stack_lvl+0xe8/0x150
[  639.811475][T13175]  should_fail_ex+0x467/0x600
[  639.811512][T13175]  _copy_to_user+0x31/0xb0
[  639.811540][T13175]  bpf_test_finish+0x1cf/0x690
[  639.811585][T13175]  ? __pfx_bpf_test_finish+0x10/0x10
[  639.811626][T13175]  ? bpf_prog_test_run_skb+0x903/0x2230
[  639.811667][T13175]  bpf_prog_test_run_skb+0x11fe/0x2230
[  639.811726][T13175]  ? __fget_files+0x3a8/0x420
[  639.811748][T13175]  ? __fget_files+0x2a/0x420
[  639.811776][T13175]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  639.811819][T13175]  bpf_prog_test_run+0x2cb/0x340
[  639.811849][T13175]  __sys_bpf+0xa22/0xd90
[  639.811880][T13175]  ? __pfx___sys_bpf+0x10/0x10
[  639.811906][T13175]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  639.811945][T13175]  ? rt_mutex_slowunlock+0x219/0x460
[  639.811989][T13175]  ? ksys_write+0x248/0x270
[  639.812028][T13175]  ? __pfx_ksys_write+0x10/0x10
[  639.812062][T13175]  __x64_sys_bpf+0xba/0xd0
[  639.812097][T13175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.812122][T13175]  do_syscall_64+0x174/0x580
[  639.812156][T13175]  ? trace_irq_disable+0x3b/0x140
[  639.812191][T13175]  ? clear_bhb_loop+0x40/0x90
[  639.812220][T13175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.812243][T13175] RIP: 0033:0x7fdb0a47de59
[  639.812264][T13175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  639.812285][T13175] RSP: 002b:00007fdb086d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  639.812309][T13175] RAX: ffffffffffffffda RBX: 00007fdb0a705fa0 RCX: 00007fdb0a47de59
[  639.812325][T13175] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  639.812339][T13175] RBP: 00007fdb086d6090 R08: 0000000000000000 R09: 0000000000000000
[  639.812353][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  639.812366][T13175] R13: 00007fdb0a706038 R14: 00007fdb0a705fa0 R15: 00007ffe99d389e8
[  639.812399][T13175]  </TASK>
[  640.348885][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'.
[  640.435023][T13179] 9p: Bad value for 'rfdno'
[  640.699491][   T37] kauditd_printk_skb: 323 callbacks suppressed
[  640.699513][   T37] audit: type=1326 audit(1783106361.237:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a47de59 code=0x7ffc0000
[  640.699565][   T37] audit: type=1326 audit(1783106361.237:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a47de59 code=0x7ffc0000
[  640.779921][   T37] audit: type=1326 audit(1783106361.237:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb0a47de59 code=0x7ffc0000
[  640.779975][   T37] audit: type=1326 audit(1783106361.294:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a47de59 code=0x7ffc0000
[  640.811105][   T37] audit: type=1326 audit(1783106361.351:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a47de59 code=0x7ffc0000
[  640.811447][   T37] audit: type=1326 audit(1783106361.351:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb0a47dbc2 code=0x7ffc0000
[  640.812044][   T37] audit: type=1326 audit(1783106361.351:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdb0a47dc57 code=0x7ffc0000
[  640.819256][   T37] audit: type=1326 audit(1783106361.351:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdb0a43ab51 code=0x7ffc0000
[  640.825796][   T37] audit: type=1326 audit(1783106361.360:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fdb0a47ec49 code=0x7ffc0000
[  640.846009][   T37] audit: type=1326 audit(1783106361.360:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdb0a43abbb code=0x7ffc0000
[  641.148284][ T7891] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  641.247823][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2305'.
[  641.317529][ T7891] usb 1-1: Using ep0 maxpacket: 16
[  641.318281][ T7891] usb 1-1: too many configurations: 123, using maximum allowed: 8
[  641.319573][ T7891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.320712][ T7891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.321832][ T7891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.322965][ T7891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.325914][ T7891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.356398][T13201] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  641.356477][T13201] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  641.374493][ T7891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.384735][T13201] bond2: entered allmulticast mode
[  641.426430][ T7891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.449460][ T7891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.453093][ T7891] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  641.453125][ T7891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  641.453147][ T7891] usb 1-1: SerialNumber: syz
[  641.495291][ T7891] usb 1-1: config 0 descriptor??
[  641.520993][ T7891] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33
[  642.769909][ T4947] bcm5974 1-1:0.0: could not read from device
[  642.807018][T11478] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  642.835895][ T7891] usb 1-1: USB disconnect, device number 49
[  642.972407][T11478] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  642.972437][T11478] usb 2-1: config 0 has no interface number 0
[  642.975495][T11478] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  642.975527][T11478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.975550][T11478] usb 2-1: Product: syz
[  642.975565][T11478] usb 2-1: Manufacturer: syz
[  642.975580][T11478] usb 2-1: SerialNumber: syz
[  643.110132][T11478] usb 2-1: config 0 descriptor??
[  643.169473][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'.
[  643.179071][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'.
[  643.519831][T11478] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  643.525128][T11478] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  643.525283][T11478] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  643.525379][T11478] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  643.704210][T13223] fuse: Bad value for 'fd'
[  643.834268][T13227] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2313'.
[  644.006980][T11478] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  645.021241][T13235] __vm_enough_memory: pid: 13235, comm: syz.4.2316, bytes: 21199858757632 not enough memory for the allocation
[  645.023250][T13235] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2316'.
[  645.386868][T13237] FAULT_INJECTION: forcing a failure.
[  645.386868][T13237] name failslab, interval 1, probability 0, space 0, times 0
[  645.386909][T13237] CPU: 1 UID: 0 PID: 13237 Comm: syz.0.2317 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  645.386941][T13237] Tainted: [L]=SOFTLOCKUP
[  645.386950][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  645.386965][T13237] Call Trace:
[  645.386973][T13237]  <TASK>
[  645.386983][T13237]  dump_stack_lvl+0xe8/0x150
[  645.387024][T13237]  should_fail_ex+0x467/0x600
[  645.387062][T13237]  should_failslab+0xa8/0x100
[  645.387090][T13237]  kmem_cache_alloc_noprof+0xa4/0x650
[  645.387128][T13237]  ? vm_area_dup+0x28/0x670
[  645.387156][T13237]  ? vm_area_dup+0x28/0x670
[  645.387186][T13237]  vm_area_dup+0x28/0x670
[  645.387210][T13237]  ? __split_vma+0x1d5/0xa40
[  645.387243][T13237]  __split_vma+0x1e4/0xa40
[  645.387280][T13237]  ? mas_next_slot+0xc94/0xd70
[  645.387318][T13237]  ? __pfx___split_vma+0x10/0x10
[  645.387360][T13237]  ? mas_find+0xab1/0xcf0
[  645.387397][T13237]  vms_gather_munmap_vmas+0x4e3/0x1370
[  645.387441][T13237]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  645.387483][T13237]  ? mas_find+0xa23/0xcf0
[  645.387521][T13237]  mmap_region+0x914/0x2310
[  645.387565][T13237]  ? __lock_acquire+0x683/0x2ce0
[  645.387593][T13237]  ? __pfx_mmap_region+0x10/0x10
[  645.387639][T13237]  ? __lock_acquire+0x683/0x2ce0
[  645.387672][T13237]  ? do_raw_spin_lock+0x12b/0x2f0
[  645.387708][T13237]  ? unwind_next_frame+0x8f/0x2550
[  645.387741][T13237]  ? is_bpf_text_address+0x26/0x2b0
[  645.387848][T13237]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  645.387894][T13237]  ? __lock_acquire+0x683/0x2ce0
[  645.387919][T13237]  ? cap_mmap_addr+0xaf/0x100
[  645.387942][T13237]  ? bpf_lsm_mmap_addr+0x9/0x50
[  645.387975][T13237]  ? security_mmap_addr+0x71/0x240
[  645.388009][T13237]  do_mmap+0xc1e/0x10b0
[  645.388053][T13237]  ? __pfx_do_mmap+0x10/0x10
[  645.388085][T13237]  ? rwbase_write_lock+0x550/0x720
[  645.388133][T13237]  vm_mmap_pgoff+0x275/0x4e0
[  645.388175][T13237]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  645.388204][T13237]  ? ksys_write+0x248/0x270
[  645.388233][T13237]  ? __pfx_ksys_write+0x10/0x10
[  645.388265][T13237]  ? __x64_sys_mmap+0x7f/0x140
[  645.388298][T13237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.388325][T13237]  do_syscall_64+0x174/0x580
[  645.388356][T13237]  ? trace_irq_disable+0x3b/0x140
[  645.388391][T13237]  ? clear_bhb_loop+0x40/0x90
[  645.388419][T13237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.388443][T13237] RIP: 0033:0x7f37b9d9de59
[  645.388465][T13237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.388486][T13237] RSP: 002b:00007f37b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  645.388510][T13237] RAX: ffffffffffffffda RBX: 00007f37ba025fa0 RCX: 00007f37b9d9de59
[  645.388527][T13237] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 0000200000002000
[  645.388540][T13237] RBP: 00007f37b7ff6090 R08: ffffffffffffffff R09: 0000000000000000
[  645.388554][T13237] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001
[  645.388567][T13237] R13: 00007f37ba026038 R14: 00007f37ba025fa0 R15: 00007ffc2ba2b558
[  645.388600][T13237]  </TASK>
[  646.068648][   T36] usb 2-1: USB disconnect, device number 39
[  646.074421][T13246] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2322'.
[  646.161048][   T36] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  646.163765][   T36] keyspan 2-1:0.133: device disconnected
[  646.296445][T13251] fuse: Bad value for 'fd'
[  646.986129][T13278] FAULT_INJECTION: forcing a failure.
[  646.986129][T13278] name failslab, interval 1, probability 0, space 0, times 0
[  646.986189][T13278] CPU: 0 UID: 0 PID: 13278 Comm: syz.2.2332 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  646.986220][T13278] Tainted: [L]=SOFTLOCKUP
[  646.986229][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  646.986243][T13278] Call Trace:
[  646.986252][T13278]  <TASK>
[  646.986264][T13278]  dump_stack_lvl+0xe8/0x150
[  646.986305][T13278]  should_fail_ex+0x467/0x600
[  646.986342][T13278]  should_failslab+0xa8/0x100
[  646.986370][T13278]  kmem_cache_alloc_noprof+0xa4/0x650
[  646.986407][T13278]  ? skb_clone+0x212/0x3a0
[  646.986428][T13278]  ? skb_clone+0x212/0x3a0
[  646.986457][T13278]  skb_clone+0x212/0x3a0
[  646.986483][T13278]  __netlink_deliver_tap+0x413/0x860
[  646.986532][T13278]  ? netlink_deliver_tap+0x2e/0x1b0
[  646.986569][T13278]  netlink_deliver_tap+0x19c/0x1b0
[  646.986607][T13278]  netlink_unicast+0x7b8/0x990
[  646.986651][T13278]  netlink_sendmsg+0x813/0xb40
[  646.986683][T13278]  ? __pfx_netlink_sendmsg+0x10/0x10
[  646.986708][T13278]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  646.986740][T13278]  ? __kernel_text_address+0xd/0x30
[  646.986762][T13278]  ? unwind_get_return_address+0x4d/0x90
[  646.986790][T13278]  ? __pfx_netlink_sendmsg+0x10/0x10
[  646.986812][T13278]  sock_sendmsg_nosec+0x13a/0x180
[  646.986843][T13278]  ____sys_sendmsg+0x565/0x870
[  646.986879][T13278]  ? __might_fault+0xaf/0x130
[  646.986915][T13278]  ? __pfx_____sys_sendmsg+0x10/0x10
[  646.986960][T13278]  ? import_iovec+0x73/0xa0
[  646.986989][T13278]  ___sys_sendmsg+0x2a5/0x360
[  646.987024][T13278]  ? __lock_acquire+0x683/0x2ce0
[  646.987052][T13278]  ? __pfx____sys_sendmsg+0x10/0x10
[  646.987126][T13278]  ? __fget_files+0x2a/0x420
[  646.987147][T13278]  ? __fget_files+0x3a8/0x420
[  646.987181][T13278]  __x64_sys_sendmsg+0x1b7/0x290
[  646.987221][T13278]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  646.987277][T13278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.987303][T13278]  do_syscall_64+0x174/0x580
[  646.987334][T13278]  ? trace_irq_disable+0x3b/0x140
[  646.987369][T13278]  ? clear_bhb_loop+0x40/0x90
[  646.987397][T13278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.987421][T13278] RIP: 0033:0x7f91331dde59
[  646.987443][T13278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.987463][T13278] RSP: 002b:00007f9131436028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  646.987487][T13278] RAX: ffffffffffffffda RBX: 00007f9133465fa0 RCX: 00007f91331dde59
[  646.987504][T13278] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  646.987519][T13278] RBP: 00007f9131436090 R08: 0000000000000000 R09: 0000000000000000
[  646.987533][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  646.987546][T13278] R13: 00007f9133466038 R14: 00007f9133465fa0 R15: 00007ffe0b37dec8
[  646.987582][T13278]  </TASK>
[  646.989696][T13278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2332'.
[  647.304633][   T36] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  647.356488][T13282] sg_write: data in/out 629088/136 bytes for SCSI command 0xd-- guessing data in;
[  647.356488][T13282]    program syz.3.2335 not setting count and/or reply_len properly
[  647.490868][   T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  647.490898][   T36] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  647.490980][   T36] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  647.491004][   T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.500714][   T36] usb 2-1: config 0 descriptor??
[  647.552607][   T36] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  647.553123][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  647.644403][   T36] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  647.645743][   T36] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  647.645884][   T36] usb 2-1: media controller created
[  647.690751][   T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  647.789952][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  647.790105][   T36] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  647.821938][   T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34
[  647.845666][   T36] dvb-usb: schedule remote query interval to 150 msecs.
[  647.845692][   T36] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  647.892776][T13296] dvb-usb: bulk message failed: -22 (2/0)
[  648.012139][   T36] dvb-usb: bulk message failed: -22 (1/0)
[  648.012205][   T36] dvb-usb: error while querying for an remote control event.
[  648.198601][ T5731] dvb-usb: bulk message failed: -22 (1/0)
[  648.198636][ T5731] dvb-usb: error while querying for an remote control event.
[  648.337216][ T5731] usb 2-1: USB disconnect, device number 40
[  648.397016][   T36] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[  648.399105][T13308] sctp: [Deprecated]: syz.3.2341 (pid 13308) Use of struct sctp_assoc_value in delayed_ack socket option.
[  648.399105][T13308] Use struct sctp_sack_info instead
[  648.503509][ T5731] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  648.540904][   T36] usb 3-1: device descriptor read/64, error -71
[  648.807868][   T36] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  648.872495][   T31] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  648.949742][   T36] usb 3-1: device descriptor read/64, error -71
[  649.051287][   T31] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  649.051318][   T31] usb 1-1: config 0 has no interface number 0
[  649.054852][   T31] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  649.054883][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.054905][   T31] usb 1-1: Product: syz
[  649.054921][   T31] usb 1-1: Manufacturer: syz
[  649.054936][   T31] usb 1-1: SerialNumber: syz
[  649.082486][   T36] usb usb3-port1: attempt power cycle
[  649.124168][   T31] usb 1-1: config 0 descriptor??
[  649.520396][   T36] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  649.522535][   T31] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  649.547232][   T36] usb 3-1: device descriptor read/8, error -71
[  649.547682][   T31] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  649.547777][   T31] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  649.547923][   T31] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  649.812865][   T36] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  649.836581][   T31] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  649.837667][   T36] usb 3-1: device descriptor read/8, error -71
[  649.968249][   T36] usb usb3-port1: unable to enumerate USB device
[  651.239138][ T5718] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  651.407388][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short
[  651.408924][ T5718] usb 4-1: not running at top speed; connect to a high speed hub
[  651.410844][ T5718] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  651.430853][ T5718] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 0.40
[  651.430941][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.430992][ T5718] usb 4-1: Product: syz
[  651.431009][ T5718] usb 4-1: Manufacturer: syz
[  651.431025][ T5718] usb 4-1: SerialNumber: syz
[  652.838976][ T5718] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  652.846225][ T5718] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  652.923971][   T11] usb 1-1: USB disconnect, device number 50
[  652.967786][ T5718] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  652.967875][ T5718] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  652.967890][ T5718] usb 4-1: [5] FU [Headset Playback Volume] ch = 1, val = 0/1/1
[  653.084586][   T11] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  653.087223][   T11] keyspan 1-1:0.133: device disconnected
[  653.372747][ T5718] usb 4-1: USB disconnect, device number 42
[  653.830090][T13348] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.441226][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2356'.
[  654.895375][T13373] FAULT_INJECTION: forcing a failure.
[  654.895375][T13373] name failslab, interval 1, probability 0, space 0, times 0
[  654.895417][T13373] CPU: 1 UID: 0 PID: 13373 Comm: syz.2.2362 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  654.895447][T13373] Tainted: [L]=SOFTLOCKUP
[  654.895456][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  654.895471][T13373] Call Trace:
[  654.895480][T13373]  <TASK>
[  654.895491][T13373]  dump_stack_lvl+0xe8/0x150
[  654.895532][T13373]  should_fail_ex+0x467/0x600
[  654.895570][T13373]  should_failslab+0xa8/0x100
[  654.895600][T13373]  __kmalloc_cache_noprof+0xa0/0x6b0
[  654.895628][T13373]  ? ip6_setup_cork+0x613/0xf60
[  654.895659][T13373]  ? ip6_setup_cork+0x613/0xf60
[  654.895698][T13373]  ip6_setup_cork+0x613/0xf60
[  654.895732][T13373]  ? __local_bh_enable+0x1e1/0x2f0
[  654.895764][T13373]  ip6_append_data+0x175/0x270
[  654.895806][T13373]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  654.895837][T13373]  udpv6_sendmsg+0xca2/0x2610
[  654.895887][T13373]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  654.895917][T13373]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  654.895983][T13373]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  654.896018][T13373]  ? inet_send_prepare+0x1b4/0x260
[  654.896047][T13373]  ? inet6_sendmsg+0xe4/0x120
[  654.896071][T13373]  ? __pfx_inet6_sendmsg+0x10/0x10
[  654.896095][T13373]  sock_sendmsg_nosec+0x90/0x180
[  654.896125][T13373]  ____sys_sendmsg+0x565/0x870
[  654.896170][T13373]  ? __pfx_____sys_sendmsg+0x10/0x10
[  654.896215][T13373]  ? import_iovec+0x73/0xa0
[  654.896243][T13373]  ___sys_sendmsg+0x2a5/0x360
[  654.896278][T13373]  ? __lock_acquire+0x683/0x2ce0
[  654.896307][T13373]  ? __pfx____sys_sendmsg+0x10/0x10
[  654.896349][T13373]  ? kstrtouint+0x6e/0xe0
[  654.896419][T13373]  ? __fget_files+0x2a/0x420
[  654.896458][T13373]  ? __fget_files+0x3a8/0x420
[  654.896490][T13373]  __sys_sendmmsg+0x279/0x4d0
[  654.896517][T13373]  ? __pfx___sys_sendmmsg+0x10/0x10
[  654.896549][T13373]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  654.896587][T13373]  ? ksys_write+0x248/0x270
[  654.896615][T13373]  ? __pfx_ksys_write+0x10/0x10
[  654.896648][T13373]  __x64_sys_sendmmsg+0xa0/0xc0
[  654.896670][T13373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.896694][T13373]  do_syscall_64+0x174/0x580
[  654.896724][T13373]  ? trace_irq_disable+0x3b/0x140
[  654.896759][T13373]  ? clear_bhb_loop+0x40/0x90
[  654.896794][T13373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.896816][T13373] RIP: 0033:0x7f91331dde59
[  654.896838][T13373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.896857][T13373] RSP: 002b:00007f9131436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  654.896881][T13373] RAX: ffffffffffffffda RBX: 00007f9133465fa0 RCX: 00007f91331dde59
[  654.896896][T13373] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000003
[  654.896910][T13373] RBP: 00007f9131436090 R08: 0000000000000000 R09: 0000000000000000
[  654.896923][T13373] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001
[  654.896936][T13373] R13: 00007f9133466038 R14: 00007f9133465fa0 R15: 00007ffe0b37dec8
[  654.896970][T13373]  </TASK>
[  655.412967][T13348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  655.481904][T13348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  655.708737][ T5716] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  655.795706][ T5736] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  655.876494][ T5716] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  655.876516][ T5716] usb 4-1: config 0 has no interface number 0
[  655.880458][ T5716] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  655.880490][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.880510][ T5716] usb 4-1: Product: syz
[  655.880526][ T5716] usb 4-1: Manufacturer: syz
[  655.880541][ T5716] usb 4-1: SerialNumber: syz
[  655.932947][ T5716] usb 4-1: config 0 descriptor??
[  655.935843][   T66] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  655.951700][ T5736] usb 3-1: device descriptor read/64, error -71
[  656.121411][T13384] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  656.217865][ T5736] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  656.373591][ T5716] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[  656.399750][ T5716] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[  656.399847][ T5716] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[  656.400007][ T5716] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[  656.410526][ T5716] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  656.539771][ T5736] usb 3-1: device descriptor read/64, error -71
[  656.651459][ T5736] usb usb3-port1: attempt power cycle
[  656.933309][ T5716] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  657.033503][ T5736] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  657.063044][ T5736] usb 3-1: device descriptor read/8, error -71
[  657.094650][ T5716] usb 1-1: Using ep0 maxpacket: 16
[  657.097005][ T5716] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  657.097037][ T5716] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  657.097051][ T5716] usb 1-1: config 0 has no interface number 0
[  657.099720][ T5716] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  657.099751][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.099766][ T5716] usb 1-1: Product: syz
[  657.099815][ T5716] usb 1-1: Manufacturer: syz
[  657.099827][ T5716] usb 1-1: SerialNumber: syz
[  657.168459][ T5716] usb 1-1: config 0 descriptor??
[  657.193309][ T5716] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  657.193351][ T5716] uvcvideo 1-1:0.105: No valid video chain found.
[  657.354869][ T5736] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  657.383835][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  657.384049][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  657.384086][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  657.384167][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  657.386229][ T5736] usb 3-1: device descriptor read/8, error -71
[  657.441124][T13390] netlink: 'syz.0.2369': attribute type 3 has an invalid length.
[  657.509660][   T11] usb 1-1: USB disconnect, device number 51
[  657.509934][ T5736] usb usb3-port1: unable to enumerate USB device
[  658.840344][ T5731] usb 4-1: USB disconnect, device number 43
[  658.885610][ T5731] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  658.891073][ T5731] keyspan 4-1:0.133: device disconnected
[  660.603405][ T5736] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  660.776669][ T5736] usb 4-1: Using ep0 maxpacket: 16
[  660.781623][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short
[  660.783276][ T5736] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  660.783301][ T5736] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  660.786981][ T5736] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  660.787009][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.787030][ T5736] usb 4-1: Product: syz
[  660.787046][ T5736] usb 4-1: Manufacturer: syz
[  660.787061][ T5736] usb 4-1: SerialNumber: syz
[  660.826176][T13432] 9pnet_fd: Insufficient options for proto=fd
[  661.102579][T13417] syz.3.2379: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  661.102659][T13417] CPU: 1 UID: 0 PID: 13417 Comm: syz.3.2379 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  661.102695][T13417] Tainted: [L]=SOFTLOCKUP
[  661.102705][T13417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  661.102719][T13417] Call Trace:
[  661.102728][T13417]  <TASK>
[  661.102739][T13417]  dump_stack_lvl+0xe8/0x150
[  661.102781][T13417]  warn_alloc+0x24c/0x270
[  661.102812][T13417]  ? __pfx_warn_alloc+0x10/0x10
[  661.102838][T13417]  ? kasan_save_track+0x4f/0x80
[  661.102875][T13417]  ? xskq_create+0x56/0x170
[  661.102902][T13417]  ? xsk_init_queue+0x8a/0xe0
[  661.102927][T13417]  ? xsk_setsockopt+0x52a/0x960
[  661.102952][T13417]  ? do_sock_setsockopt+0x17c/0x1b0
[  661.102985][T13417]  ? __x64_sys_setsockopt+0x143/0x1b0
[  661.103017][T13417]  ? do_syscall_64+0x174/0x580
[  661.103047][T13417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.103079][T13417]  __vmalloc_node_range_noprof+0x12c/0x1730
[  661.103147][T13417]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  661.103193][T13417]  ? __kmalloc_cache_noprof+0x3d2/0x6b0
[  661.103228][T13417]  vmalloc_user_noprof+0xad/0xe0
[  661.103266][T13417]  ? xskq_create+0xbf/0x170
[  661.103295][T13417]  xskq_create+0xbf/0x170
[  661.103328][T13417]  xsk_init_queue+0x8a/0xe0
[  661.103358][T13417]  xsk_setsockopt+0x52a/0x960
[  661.103384][T13417]  ? __fget_files+0x2a/0x420
[  661.103407][T13417]  ? __pfx_xsk_setsockopt+0x10/0x10
[  661.103447][T13417]  ? __fget_files+0x2a/0x420
[  661.103468][T13417]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  661.103499][T13417]  ? __pfx_xsk_setsockopt+0x10/0x10
[  661.103528][T13417]  do_sock_setsockopt+0x17c/0x1b0
[  661.103566][T13417]  __x64_sys_setsockopt+0x143/0x1b0
[  661.103602][T13417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.103627][T13417]  do_syscall_64+0x174/0x580
[  661.103656][T13417]  ? trace_irq_disable+0x3b/0x140
[  661.103692][T13417]  ? clear_bhb_loop+0x40/0x90
[  661.103721][T13417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.103744][T13417] RIP: 0033:0x7fab5eb2de59
[  661.103765][T13417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  661.103785][T13417] RSP: 002b:00007fab5cd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  661.103808][T13417] RAX: ffffffffffffffda RBX: 00007fab5edb5fa0 RCX: 00007fab5eb2de59
[  661.103825][T13417] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  661.103838][T13417] RBP: 00007fab5ebc3e6f R08: 0000000000000004 R09: 0000000000000000
[  661.103853][T13417] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  661.103866][T13417] R13: 00007fab5edb6038 R14: 00007fab5edb5fa0 R15: 00007fffc71ddd88
[  661.103902][T13417]  </TASK>
[  661.104055][T13417] Mem-Info:
[  661.104068][T13417] active_anon:235 inactive_anon:34116 isolated_anon:0
[  661.104068][T13417]  active_file:22377 inactive_file:37127 isolated_file:0
[  661.104068][T13417]  unevictable:768 dirty:228 writeback:0
[  661.104068][T13417]  slab_reclaimable:12282 slab_unreclaimable:102892
[  661.104068][T13417]  mapped:30480 shmem:29544 pagetables:1448
[  661.104068][T13417]  sec_pagetables:0 bounce:0
[  661.104068][T13417]  kernel_misc_reclaimable:0
[  661.104068][T13417]  free:1276664 free_pcp:3839 free_cma:0
[  661.104189][T13417] Node 0 active_anon:940kB inactive_anon:136464kB active_file:89316kB inactive_file:148508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121920kB dirty:912kB writeback:0kB shmem:116640kB kernel_stack:13464kB pagetables:5636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  661.104255][T13417] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  661.104361][T13417] Node 0 DMA free:15328kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  661.104428][T13417] lowmem_reserve[]: 0 2500 2502 2502 2502
[  661.104468][T13417] Node 0 DMA32 free:1147104kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:940kB inactive_anon:136464kB active_file:89316kB inactive_file:148508kB unevictable:1536kB writepending:912kB zspages:0kB present:3129332kB managed:2560812kB mlocked:0kB bounce:0kB free_pcp:14952kB local_pcp:3276kB free_cma:0kB
[  661.104589][T13417] lowmem_reserve[]: 0 0 1 1 1
[  661.104628][T13417] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[  661.104919][T13417] lowmem_reserve[]: 0 0 0 0 0
[  661.104962][T13417] Node 1 Normal free:3944224kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:380kB local_pcp:380kB free_cma:0kB
[  661.105459][T13417] lowmem_reserve[]: 0 0 0 0 0
[  661.105503][T13417] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  661.105772][T13417] Node 0 DMA32: 2297*4kB (UM) 780*8kB (UM) 519*16kB (UM) 320*32kB (UME) 219*64kB (UME) 147*128kB (UM) 132*256kB (UME) 46*512kB (UME) 21*1024kB (M) 9*2048kB (UME) 240*4096kB (UM) = 1147124kB
[  661.106008][T13417] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  661.106175][T13417] Node 1 Normal: 2*4kB (M) 7*8kB (UM) 6*16kB (UM) 6*32kB (UM) 7*64kB (UM) 2*128kB (U) 1*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3944224kB
[  661.106742][T13417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  661.106820][T13417] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  661.106840][T13417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  661.106859][T13417] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  661.106877][T13417] 89044 total pagecache pages
[  661.106887][T13417] 0 pages in swap cache
[  661.106896][T13417] Free swap  = 124996kB
[  661.106905][T13417] Total swap = 124996kB
[  661.106916][T13417] 2097051 pages RAM
[  661.106924][T13417] 0 pages HighMem/MovableOnly
[  661.106985][T13417] 424768 pages reserved
[  661.106995][T13417] 0 pages cma reserved
[  661.446997][ T5736] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  661.447047][ T5736] cdc_ncm 4-1:1.0: bind() failure
[  661.887566][ T5736] usb 4-1: USB disconnect, device number 44
[  662.318009][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'.
[  662.318034][T13461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2394'.
[  662.318329][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'.
[  662.318347][T13461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2394'.
[  662.418423][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'.
[  662.418451][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'.
[  662.531259][ T5736] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  662.696633][ T5736] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  662.696666][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.752368][ T5736] usb 2-1: config 0 descriptor??
[  662.768010][ T5736] cp210x 2-1:0.0: cp210x converter detected
[  663.008578][ T5736] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121
[  663.008637][ T5736] cp210x 2-1:0.0: querying part number failed
[  663.051660][ T5736] usb 2-1: cp210x converter now attached to ttyUSB0
[  663.221990][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2404'.
[  663.342587][ T5736] usb 2-1: USB disconnect, device number 41
[  663.369830][ T5736] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  663.384425][ T5736] cp210x 2-1:0.0: device disconnected
[  663.394172][T13489] FAULT_INJECTION: forcing a failure.
[  663.394172][T13489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  663.394212][T13489] CPU: 0 UID: 0 PID: 13489 Comm: syz.2.2406 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  663.394241][T13489] Tainted: [L]=SOFTLOCKUP
[  663.394250][T13489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  663.394263][T13489] Call Trace:
[  663.394271][T13489]  <TASK>
[  663.394281][T13489]  dump_stack_lvl+0xe8/0x150
[  663.394320][T13489]  should_fail_ex+0x467/0x600
[  663.394362][T13489]  _copy_from_user+0x2d/0xb0
[  663.394386][T13489]  ___sys_sendmsg+0x1c6/0x360
[  663.394421][T13489]  ? __lock_acquire+0x683/0x2ce0
[  663.394448][T13489]  ? __pfx____sys_sendmsg+0x10/0x10
[  663.394487][T13489]  ? kstrtouint+0x6e/0xe0
[  663.394544][T13489]  ? __fget_files+0x2a/0x420
[  663.394564][T13489]  ? __fget_files+0x3a8/0x420
[  663.394595][T13489]  __sys_sendmmsg+0x279/0x4d0
[  663.394621][T13489]  ? __pfx___sys_sendmmsg+0x10/0x10
[  663.394652][T13489]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  663.394695][T13489]  ? ksys_write+0x248/0x270
[  663.394725][T13489]  ? __pfx_ksys_write+0x10/0x10
[  663.394758][T13489]  __x64_sys_sendmmsg+0xa0/0xc0
[  663.394779][T13489]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.394803][T13489]  do_syscall_64+0x174/0x580
[  663.394834][T13489]  ? trace_irq_disable+0x3b/0x140
[  663.394869][T13489]  ? clear_bhb_loop+0x40/0x90
[  663.394895][T13489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.394917][T13489] RIP: 0033:0x7f91331dde59
[  663.394938][T13489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.394957][T13489] RSP: 002b:00007f9131436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  663.394980][T13489] RAX: ffffffffffffffda RBX: 00007f9133465fa0 RCX: 00007f91331dde59
[  663.394996][T13489] RDX: 0000000000000001 RSI: 0000200000001d40 RDI: 0000000000000003
[  663.395010][T13489] RBP: 00007f9131436090 R08: 0000000000000000 R09: 0000000000000000
[  663.395023][T13489] R10: 0000000000004854 R11: 0000000000000246 R12: 0000000000000001
[  663.395036][T13489] R13: 00007f9133466038 R14: 00007f9133465fa0 R15: 00007ffe0b37dec8
[  663.395068][T13489]  </TASK>
[  663.765719][T13500] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2410'.
[  663.945942][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'.
[  664.422673][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'.
[  664.448435][   T11] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  664.568113][ T5716] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  664.619948][   T11] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  664.619985][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.620001][   T11] usb 3-1: Product: syz
[  664.620021][   T11] usb 3-1: Manufacturer: syz
[  664.620032][   T11] usb 3-1: SerialNumber: syz
[  664.666092][   T11] usb 3-1: config 0 descriptor??
[  664.683341][   T11] ch341 3-1:0.0: ch341-uart converter detected
[  664.740913][ T5716] usb 1-1: Using ep0 maxpacket: 16
[  664.743756][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short
[  664.745091][ T5716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  664.745116][ T5716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  664.745166][ T5716] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  664.748671][ T5716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  664.748698][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.748766][ T5716] usb 1-1: Product: syz
[  664.748778][ T5716] usb 1-1: Manufacturer: syz
[  664.748788][ T5716] usb 1-1: SerialNumber: syz
[  664.898950][T13522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.900088][T13522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.910648][   T11] usb 3-1: failed to receive control message: -121
[  664.912808][   T11] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  665.610525][T13559] netlink: 'syz.4.2430': attribute type 1 has an invalid length.
[  665.735646][T13559] bond3: entered promiscuous mode
[  665.736392][T13559] 8021q: adding VLAN 0 to HW filter on device bond3
[  665.951520][T13568] 8021q: adding VLAN 0 to HW filter on device bond3
[  665.952600][T13568] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  665.952625][T13568] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  666.009273][T13568] bond3: (slave ip6gre1): making interface the new active one
[  666.009299][T13568] ip6gre1: entered promiscuous mode
[  666.080411][T13568] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  666.526339][T13582] FAULT_INJECTION: forcing a failure.
[  666.526339][T13582] name failslab, interval 1, probability 0, space 0, times 0
[  666.526380][T13582] CPU: 0 UID: 0 PID: 13582 Comm: syz.1.2439 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  666.526414][T13582] Tainted: [L]=SOFTLOCKUP
[  666.526423][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  666.526436][T13582] Call Trace:
[  666.526445][T13582]  <TASK>
[  666.526455][T13582]  dump_stack_lvl+0xe8/0x150
[  666.526497][T13582]  should_fail_ex+0x467/0x600
[  666.526535][T13582]  should_failslab+0xa8/0x100
[  666.526562][T13582]  kmem_cache_alloc_node_noprof+0xae/0x670
[  666.526601][T13582]  ? __alloc_skb+0x1d7/0x7a0
[  666.526629][T13582]  ? __alloc_skb+0x1d7/0x7a0
[  666.526666][T13582]  __alloc_skb+0x1d7/0x7a0
[  666.526701][T13582]  netlink_dump+0x1e7/0xee0
[  666.526743][T13582]  ? __netlink_lookup+0xc6/0x8b0
[  666.526779][T13582]  ? __pfx_netlink_dump+0x10/0x10
[  666.526836][T13582]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  666.526876][T13582]  __netlink_dump_start+0x589/0x7b0
[  666.526918][T13582]  rtnetlink_rcv_msg+0xa48/0xc00
[  666.526948][T13582]  ? kmem_cache_alloc_node_noprof+0x3eb/0x670
[  666.526984][T13582]  ? __pfx_tc_dump_chain+0x10/0x10
[  666.527006][T13582]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  666.527034][T13582]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  666.527062][T13582]  ? __pfx_rtnl_dumpit+0x10/0x10
[  666.527088][T13582]  ? __pfx_tc_dump_chain+0x10/0x10
[  666.527121][T13582]  netlink_rcv_skb+0x226/0x4a0
[  666.527153][T13582]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  666.527182][T13582]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  666.527226][T13582]  ? netlink_deliver_tap+0x2e/0x1b0
[  666.527260][T13582]  ? netlink_deliver_tap+0x2e/0x1b0
[  666.527297][T13582]  netlink_unicast+0x7f5/0x990
[  666.527337][T13582]  netlink_sendmsg+0x813/0xb40
[  666.527368][T13582]  ? __pfx_netlink_sendmsg+0x10/0x10
[  666.527390][T13582]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  666.527421][T13582]  ? __kernel_text_address+0xd/0x30
[  666.527441][T13582]  ? unwind_get_return_address+0x4d/0x90
[  666.527468][T13582]  ? __pfx_netlink_sendmsg+0x10/0x10
[  666.527487][T13582]  sock_sendmsg_nosec+0x13a/0x180
[  666.527516][T13582]  ____sys_sendmsg+0x565/0x870
[  666.527548][T13582]  ? __might_fault+0xaf/0x130
[  666.527575][T13582]  ? __pfx_____sys_sendmsg+0x10/0x10
[  666.527618][T13582]  ? import_iovec+0x73/0xa0
[  666.527644][T13582]  ___sys_sendmsg+0x2a5/0x360
[  666.527676][T13582]  ? __lock_acquire+0x683/0x2ce0
[  666.527702][T13582]  ? __pfx____sys_sendmsg+0x10/0x10
[  666.527781][T13582]  ? __fget_files+0x2a/0x420
[  666.527801][T13582]  ? __fget_files+0x3a8/0x420
[  666.527833][T13582]  __x64_sys_sendmsg+0x1b7/0x290
[  666.527870][T13582]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  666.527921][T13582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.527946][T13582]  do_syscall_64+0x174/0x580
[  666.527975][T13582]  ? trace_irq_disable+0x3b/0x140
[  666.528008][T13582]  ? clear_bhb_loop+0x40/0x90
[  666.528034][T13582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.528055][T13582] RIP: 0033:0x7fdb0a47de59
[  666.528075][T13582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.528092][T13582] RSP: 002b:00007fdb086d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  666.528115][T13582] RAX: ffffffffffffffda RBX: 00007fdb0a705fa0 RCX: 00007fdb0a47de59
[  666.528130][T13582] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003
[  666.528142][T13582] RBP: 00007fdb086d6090 R08: 0000000000000000 R09: 0000000000000000
[  666.528155][T13582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.528167][T13582] R13: 00007fdb0a706038 R14: 00007fdb0a705fa0 R15: 00007ffe99d389e8
[  666.528201][T13582]  </TASK>
[  666.928542][T13586] FAULT_INJECTION: forcing a failure.
[  666.928542][T13586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  666.928579][T13586] CPU: 1 UID: 0 PID: 13586 Comm: syz.3.2440 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  666.928604][T13586] Tainted: [L]=SOFTLOCKUP
[  666.928611][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  666.928622][T13586] Call Trace:
[  666.928630][T13586]  <TASK>
[  666.928638][T13586]  dump_stack_lvl+0xe8/0x150
[  666.928676][T13586]  should_fail_ex+0x467/0x600
[  666.928715][T13586]  _copy_to_user+0x31/0xb0
[  666.928737][T13586]  simple_read_from_buffer+0xe1/0x170
[  666.928762][T13586]  proc_fail_nth_read+0x1be/0x230
[  666.928788][T13586]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  666.928813][T13586]  ? rw_verify_area+0x250/0x4d0
[  666.928840][T13586]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  666.928860][T13586]  vfs_read+0x219/0xa90
[  666.928894][T13586]  ? __pfx_vfs_read+0x10/0x10
[  666.928921][T13586]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  666.928952][T13586]  ? lockdep_hardirqs_on+0x7a/0x110
[  666.928981][T13586]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  666.929008][T13586]  ? mutex_lock_nested+0x152/0x1d0
[  666.929029][T13586]  ? fdget_pos+0x252/0x320
[  666.929060][T13586]  ksys_read+0x156/0x270
[  666.929090][T13586]  ? __pfx_ksys_read+0x10/0x10
[  666.929125][T13586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.929150][T13586]  do_syscall_64+0x174/0x580
[  666.929181][T13586]  ? trace_irq_disable+0x3b/0x140
[  666.929215][T13586]  ? clear_bhb_loop+0x40/0x90
[  666.929244][T13586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.929268][T13586] RIP: 0033:0x7fab5eaee68e
[  666.929290][T13586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  666.929310][T13586] RSP: 002b:00007fab5cd64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  666.929334][T13586] RAX: ffffffffffffffda RBX: 00007fab5cd656c0 RCX: 00007fab5eaee68e
[  666.929352][T13586] RDX: 000000000000000f RSI: 00007fab5cd650a0 RDI: 0000000000000005
[  666.929366][T13586] RBP: 00007fab5cd65090 R08: 0000000000000000 R09: 0000000000000000
[  666.929380][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.929393][T13586] R13: 00007fab5edb6128 R14: 00007fab5edb6090 R15: 00007fffc71ddd88
[  666.929441][T13586]  </TASK>
[  667.202344][T13590] cgroup: Invalid name
[  667.523116][   T11] usb 3-1: USB disconnect, device number 65
[  667.574657][ T5716] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  667.574726][ T5716] cdc_ncm 1-1:1.0: bind() failure
[  667.614746][   T11] ch341 3-1:0.0: device disconnected
[  667.702702][ T5716] usb 1-1: USB disconnect, device number 52
[  667.818786][   T37] kauditd_printk_skb: 32 callbacks suppressed
[  667.818805][   T37] audit: type=1326 audit(1783106386.364:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13605 comm="syz.2.2448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f91331d7bd7 code=0x0
[  668.266426][T13625] FAULT_INJECTION: forcing a failure.
[  668.266426][T13625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  668.266483][T13625] CPU: 1 UID: 0 PID: 13625 Comm: syz.3.2456 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  668.266512][T13625] Tainted: [L]=SOFTLOCKUP
[  668.266519][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  668.266533][T13625] Call Trace:
[  668.266541][T13625]  <TASK>
[  668.266550][T13625]  dump_stack_lvl+0xe8/0x150
[  668.266589][T13625]  should_fail_ex+0x467/0x600
[  668.266628][T13625]  _copy_to_user+0x31/0xb0
[  668.266656][T13625]  simple_read_from_buffer+0xe1/0x170
[  668.266685][T13625]  proc_fail_nth_read+0x1be/0x230
[  668.266712][T13625]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  668.266738][T13625]  ? rw_verify_area+0x250/0x4d0
[  668.266763][T13625]  ? tun_chr_write_iter+0x190/0x200
[  668.266794][T13625]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  668.266816][T13625]  vfs_read+0x219/0xa90
[  668.266851][T13625]  ? __pfx_vfs_read+0x10/0x10
[  668.266880][T13625]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  668.266913][T13625]  ? lockdep_hardirqs_on+0x7a/0x110
[  668.266944][T13625]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  668.266975][T13625]  ? mutex_lock_nested+0x152/0x1d0
[  668.266998][T13625]  ? fdget_pos+0x252/0x320
[  668.267030][T13625]  ksys_read+0x156/0x270
[  668.267059][T13625]  ? __pfx_ksys_read+0x10/0x10
[  668.267095][T13625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.267129][T13625]  do_syscall_64+0x174/0x580
[  668.267158][T13625]  ? trace_irq_disable+0x3b/0x140
[  668.267194][T13625]  ? clear_bhb_loop+0x40/0x90
[  668.267222][T13625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.267246][T13625] RIP: 0033:0x7fab5eaee68e
[  668.267267][T13625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  668.267286][T13625] RSP: 002b:00007fab5cd85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  668.267310][T13625] RAX: ffffffffffffffda RBX: 00007fab5cd866c0 RCX: 00007fab5eaee68e
[  668.267327][T13625] RDX: 000000000000000f RSI: 00007fab5cd860a0 RDI: 0000000000000003
[  668.267341][T13625] RBP: 00007fab5cd86090 R08: 0000000000000000 R09: 0000000000000000
[  668.267355][T13625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  668.267368][T13625] R13: 00007fab5edb6038 R14: 00007fab5edb5fa0 R15: 00007fffc71ddd88
[  668.267404][T13625]  </TASK>
[  668.977725][ T5717] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  669.058691][T13648] FAULT_INJECTION: forcing a failure.
[  669.058691][T13648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  669.058727][T13648] CPU: 1 UID: 0 PID: 13648 Comm: syz.2.2467 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  669.058752][T13648] Tainted: [L]=SOFTLOCKUP
[  669.058759][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  669.058771][T13648] Call Trace:
[  669.058778][T13648]  <TASK>
[  669.058786][T13648]  dump_stack_lvl+0xe8/0x150
[  669.058819][T13648]  should_fail_ex+0x467/0x600
[  669.058848][T13648]  _copy_from_user+0x2d/0xb0
[  669.058867][T13648]  do_handle_open+0xf2/0xac0
[  669.058894][T13648]  ? __pfx_do_handle_open+0x10/0x10
[  669.058918][T13648]  ? ksys_write+0x248/0x270
[  669.058941][T13648]  ? __pfx_ksys_write+0x10/0x10
[  669.058967][T13648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.058987][T13648]  do_syscall_64+0x174/0x580
[  669.059013][T13648]  ? trace_irq_disable+0x3b/0x140
[  669.059053][T13648]  ? clear_bhb_loop+0x40/0x90
[  669.059074][T13648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.059091][T13648] RIP: 0033:0x7f91331dde59
[  669.059107][T13648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  669.059124][T13648] RSP: 002b:00007f9131436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  669.059142][T13648] RAX: ffffffffffffffda RBX: 00007f9133465fa0 RCX: 00007f91331dde59
[  669.059155][T13648] RDX: 0000000000400040 RSI: 0000200000000900 RDI: 0000000000000003
[  669.059167][T13648] RBP: 00007f9131436090 R08: 0000000000000000 R09: 0000000000000000
[  669.059178][T13648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  669.059188][T13648] R13: 00007f9133466038 R14: 00007f9133465fa0 R15: 00007ffe0b37dec8
[  669.059215][T13648]  </TASK>
[  669.151301][ T5717] usb 1-1: Using ep0 maxpacket: 32
[  669.228123][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short
[  669.251996][ T5717] usb 1-1: unable to read config index 0 descriptor/start: -61
[  669.252087][ T5717] usb 1-1: can't read configurations, error -61
[  669.409316][ T5717] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  669.580268][ T5717] usb 1-1: Using ep0 maxpacket: 32
[  669.596638][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short
[  669.599346][ T5717] usb 1-1: unable to read config index 0 descriptor/start: -61
[  669.599384][ T5717] usb 1-1: can't read configurations, error -61
[  669.599805][ T5717] usb usb1-port1: attempt power cycle
[  669.961778][ T5717] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  669.984444][ T5717] usb 1-1: Using ep0 maxpacket: 32
[  669.987737][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short
[  669.991330][ T5717] usb 1-1: unable to read config index 0 descriptor/start: -61
[  669.991369][ T5717] usb 1-1: can't read configurations, error -61
[  670.125999][ T5717] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  670.147701][ T5717] usb 1-1: Using ep0 maxpacket: 32
[  670.165346][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short
[  670.169013][ T5717] usb 1-1: unable to read config index 0 descriptor/start: -61
[  670.169120][ T5717] usb 1-1: can't read configurations, error -61
[  670.187991][ T5717] usb usb1-port1: unable to enumerate USB device
[  670.651968][T13674] netlink: 'syz.2.2475': attribute type 1 has an invalid length.
[  670.733882][T13674] bond3: entered promiscuous mode
[  670.737881][T13674] 8021q: adding VLAN 0 to HW filter on device bond3
[  670.790858][T13676] macvtap1: entered allmulticast mode
[  670.949250][T13674] bond3: (slave bridge2): making interface the new active one
[  670.949276][T13674] bridge2: entered promiscuous mode
[  670.993872][T13674] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  671.190946][T13687] 9p: Bad value for 'rfdno'
[  671.265484][T13691] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  671.391564][   T31] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  671.499221][T13696] __nla_validate_parse: 5 callbacks suppressed
[  671.499241][T13696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2484'.
[  671.519581][T13698] netlink: 'syz.4.2485': attribute type 2 has an invalid length.
[  671.580628][   T31] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  671.580683][   T31] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  671.580712][   T31] usb 2-1: config 2 interface 0 has no altsetting 0
[  671.584846][   T31] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  671.584881][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.584904][   T31] usb 2-1: Product: syz
[  671.584920][   T31] usb 2-1: Manufacturer: syz
[  671.584936][   T31] usb 2-1: SerialNumber: syz
[  671.939238][T13700] overlayfs: failed to clone lowerpath
[  671.953682][   T31] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22
[  671.976656][   T31] usb 2-1: USB disconnect, device number 42
[  672.041794][ T5736] IPVS: starting estimator thread 0...
[  672.139344][T13702] IPVS: using max 8 ests per chain, 19200 per kthread
[  672.539712][ T5718] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  672.702770][ T5718] usb 3-1: Using ep0 maxpacket: 8
[  672.705303][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  672.705359][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  672.705387][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  672.705413][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  672.716530][ T5718] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  672.716618][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  672.716675][ T5718] usb 3-1: Product: syz
[  672.716716][ T5718] usb 3-1: Manufacturer: syz
[  672.716753][ T5718] usb 3-1: SerialNumber: syz
[  672.815396][ T5718] usb 3-1: config 0 descriptor??
[  672.905427][T13722] 9p: Bad value for 'rfdno'
[  672.931063][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  672.951486][ T5718] rc_core: IR keymap rc-imon-rsc not found
[  672.951505][ T5718] Registered IR keymap rc-empty
[  672.972717][ T5718] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  672.997353][ T5718] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35
[  673.022450][ T5718] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90
[  673.191463][ T5718] usb 3-1: USB disconnect, device number 66
[  673.268847][T13739] FAULT_INJECTION: forcing a failure.
[  673.268847][T13739] name failslab, interval 1, probability 0, space 0, times 0
[  673.268886][T13739] CPU: 0 UID: 0 PID: 13739 Comm: syz.1.2498 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  673.268915][T13739] Tainted: [L]=SOFTLOCKUP
[  673.268924][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  673.268937][T13739] Call Trace:
[  673.268945][T13739]  <TASK>
[  673.268954][T13739]  dump_stack_lvl+0xe8/0x150
[  673.268992][T13739]  should_fail_ex+0x467/0x600
[  673.269029][T13739]  should_failslab+0xa8/0x100
[  673.269054][T13739]  __kmalloc_cache_noprof+0xa0/0x6b0
[  673.269077][T13739]  ? dev_ingress_queue_create+0xfe/0x190
[  673.269100][T13739]  ? dev_ingress_queue_create+0xfe/0x190
[  673.269131][T13739]  dev_ingress_queue_create+0xfe/0x190
[  673.269158][T13739]  tc_modify_qdisc+0x643/0x2390
[  673.269199][T13739]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  673.269246][T13739]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  673.269287][T13739]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  673.269315][T13739]  rtnetlink_rcv_msg+0x7b9/0xc00
[  673.269344][T13739]  ? kmem_cache_alloc_node_noprof+0x3eb/0x670
[  673.269382][T13739]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  673.269412][T13739]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  673.269444][T13739]  ? __lock_acquire+0x683/0x2ce0
[  673.269484][T13739]  netlink_rcv_skb+0x226/0x4a0
[  673.269520][T13739]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  673.269551][T13739]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  673.269597][T13739]  ? netlink_deliver_tap+0x2e/0x1b0
[  673.269630][T13739]  ? netlink_deliver_tap+0x2e/0x1b0
[  673.269669][T13739]  netlink_unicast+0x7f5/0x990
[  673.269710][T13739]  netlink_sendmsg+0x813/0xb40
[  673.269739][T13739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  673.269762][T13739]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  673.269791][T13739]  ? __kernel_text_address+0xd/0x30
[  673.269817][T13739]  ? unwind_get_return_address+0x4d/0x90
[  673.269844][T13739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  673.269863][T13739]  sock_sendmsg_nosec+0x13a/0x180
[  673.269894][T13739]  ____sys_sendmsg+0x565/0x870
[  673.269929][T13739]  ? __might_fault+0xaf/0x130
[  673.269958][T13739]  ? __pfx_____sys_sendmsg+0x10/0x10
[  673.270004][T13739]  ? import_iovec+0x73/0xa0
[  673.270031][T13739]  ___sys_sendmsg+0x2a5/0x360
[  673.270065][T13739]  ? __lock_acquire+0x683/0x2ce0
[  673.270091][T13739]  ? __pfx____sys_sendmsg+0x10/0x10
[  673.270162][T13739]  ? __fget_files+0x2a/0x420
[  673.270183][T13739]  ? __fget_files+0x3a8/0x420
[  673.270216][T13739]  __x64_sys_sendmsg+0x1b7/0x290
[  673.270254][T13739]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  673.270309][T13739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.270334][T13739]  do_syscall_64+0x174/0x580
[  673.270365][T13739]  ? trace_irq_disable+0x3b/0x140
[  673.270401][T13739]  ? clear_bhb_loop+0x40/0x90
[  673.270429][T13739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.270451][T13739] RIP: 0033:0x7fdb0a47de59
[  673.270473][T13739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.270493][T13739] RSP: 002b:00007fdb086d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  673.270515][T13739] RAX: ffffffffffffffda RBX: 00007fdb0a705fa0 RCX: 00007fdb0a47de59
[  673.270531][T13739] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003
[  673.270544][T13739] RBP: 00007fdb086d6090 R08: 0000000000000000 R09: 0000000000000000
[  673.270557][T13739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  673.270569][T13739] R13: 00007fdb0a706038 R14: 00007fdb0a705fa0 R15: 00007ffe99d389e8
[  673.270602][T13739]  </TASK>
[  673.886833][T13748] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  674.110415][   T11] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  674.251199][   T11] usb 2-1: device descriptor read/64, error -71
[  674.511080][   T11] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  674.597773][ T5717] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  674.662761][   T11] usb 2-1: device descriptor read/64, error -71
[  674.760953][ T5717] usb 4-1: Using ep0 maxpacket: 16
[  674.763125][ T5717] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  674.763151][ T5717] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  674.765716][ T5717] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  674.765744][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.765765][ T5717] usb 4-1: Product: syz
[  674.765782][ T5717] usb 4-1: Manufacturer: syz
[  674.765793][ T5717] usb 4-1: SerialNumber: syz
[  674.785365][   T11] usb usb2-port1: attempt power cycle
[  674.865604][ T5717] usb 4-1: 0:2 : does not exist
[  675.024497][ T5718] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  675.108113][ T5717] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  675.187668][ T5718] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  675.187700][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.187722][ T5718] usb 3-1: Product: syz
[  675.187737][ T5718] usb 3-1: Manufacturer: syz
[  675.187751][ T5718] usb 3-1: SerialNumber: syz
[  675.250998][ T5718] usb 3-1: config 0 descriptor??
[  675.257308][ T5718] ch341 3-1:0.0: ch341-uart converter detected
[  675.297727][ T5717] usb 4-1: USB disconnect, device number 45
[  675.301961][   T11] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  675.339568][   T11] usb 2-1: device descriptor read/8, error -71
[  675.495123][T13784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  675.512711][T13784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  675.517502][ T5718] usb 3-1: failed to receive control message: -121
[  675.517563][ T5718] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  675.597684][   T11] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  675.642746][   T11] usb 2-1: device descriptor read/8, error -71
[  675.757299][   T11] usb usb2-port1: unable to enumerate USB device
[  675.762871][ T5731] usb 3-1: USB disconnect, device number 67
[  675.785413][ T5731] ch341 3-1:0.0: device disconnected
[  675.821517][T12831] udevd[12831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  676.148527][   T37] audit: type=1326 audit(1783106394.055:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  676.148687][   T37] audit: type=1326 audit(1783106394.055:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  676.149131][   T37] audit: type=1326 audit(1783106394.055:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37b9d5e68e code=0x7ffc0000
[  676.150811][   T37] audit: type=1326 audit(1783106394.055:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f37b9d5e68e code=0x7ffc0000
[  676.150964][T13803] FAULT_INJECTION: forcing a failure.
[  676.150964][T13803] name failslab, interval 1, probability 0, space 0, times 0
[  676.150966][   T37] audit: type=1326 audit(1783106394.055:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  676.151000][T13803] CPU: 0 UID: 0 PID: 13803 Comm: syz.0.2525 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  676.151030][T13803] Tainted: [L]=SOFTLOCKUP
[  676.151038][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  676.151053][T13803] Call Trace:
[  676.151062][T13803]  <TASK>
[  676.151072][T13803]  dump_stack_lvl+0xe8/0x150
[  676.151114][T13803]  should_fail_ex+0x467/0x600
[  676.151152][T13803]  should_failslab+0xa8/0x100
[  676.151180][T13803]  __kmalloc_noprof+0xfe/0x780
[  676.151201][T13803]  ? rcu_is_watching+0x15/0xb0
[  676.151229][T13803]  ? tomoyo_realpath_from_path+0xef/0x640
[  676.151255][T13803]  ? tomoyo_realpath_from_path+0xef/0x640
[  676.151292][T13803]  tomoyo_realpath_from_path+0xef/0x640
[  676.151331][T13803]  ? tomoyo_path_number_perm+0x219/0x5f0
[  676.151368][T13803]  tomoyo_path_number_perm+0x246/0x5f0
[  676.151406][T13803]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  676.151441][T13803]  ? __lock_acquire+0x683/0x2ce0
[  676.151467][T13803]  ? __seccomp_filter+0xd14/0x1e00
[  676.151505][T13803]  ? hook_file_ioctl+0x1f3/0x600
[  676.151559][T13803]  ? __fget_files+0x2a/0x420
[  676.151585][T13803]  ? __fget_files+0x2a/0x420
[  676.151605][T13803]  ? __fget_files+0x3a8/0x420
[  676.151626][T13803]  ? __fget_files+0x2a/0x420
[  676.151651][T13803]  security_file_ioctl+0xc3/0x2a0
[  676.151676][T13803]  __se_sys_ioctl+0x47/0x170
[  676.151708][T13803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.151734][T13803]  do_syscall_64+0x174/0x580
[  676.151764][T13803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.151788][T13803]  ? clear_bhb_loop+0x40/0x90
[  676.151816][T13803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.151838][T13803] RIP: 0033:0x7f37b9d9de59
[  676.151860][T13803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  676.151878][T13803] RSP: 002b:00007f37b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  676.151903][T13803] RAX: ffffffffffffffda RBX: 00007f37ba025fa0 RCX: 00007f37b9d9de59
[  676.151920][T13803] RDX: 0000000000000000 RSI: 0000000040042103 RDI: 0000000000000003
[  676.151944][T13803] RBP: 00007f37b7ff6090 R08: 0000000000000000 R09: 0000000000000000
[  676.151959][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  676.151973][T13803] R13: 00007f37ba026038 R14: 00007f37ba025fa0 R15: 00007ffc2ba2b558
[  676.152009][T13803]  </TASK>
[  676.153164][T13803] ERROR: Out of memory at tomoyo_realpath_from_path.
[  676.154197][   T37] audit: type=1326 audit(1783106394.055:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f37b9d5e68e code=0x7ffc0000
[  676.154369][   T37] audit: type=1326 audit(1783106394.055:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f37b9d5e68e code=0x7ffc0000
[  676.154483][   T37] audit: type=1326 audit(1783106394.055:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f37b9d5e68e code=0x7ffc0000
[  676.154694][   T37] audit: type=1326 audit(1783106394.055:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  676.662134][T13807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2526'.
[  676.725507][T13808] program syz.0.2526 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  676.756855][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'.
[  676.760744][T13810] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size.
[  677.380763][T13815] FAULT_INJECTION: forcing a failure.
[  677.380763][T13815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  677.380804][T13815] CPU: 0 UID: 0 PID: 13815 Comm: syz.1.2529 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  677.380833][T13815] Tainted: [L]=SOFTLOCKUP
[  677.380842][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  677.380855][T13815] Call Trace:
[  677.380865][T13815]  <TASK>
[  677.380875][T13815]  dump_stack_lvl+0xe8/0x150
[  677.380914][T13815]  should_fail_ex+0x467/0x600
[  677.380953][T13815]  _copy_to_user+0x31/0xb0
[  677.380980][T13815]  simple_read_from_buffer+0xe1/0x170
[  677.381009][T13815]  proc_fail_nth_read+0x1be/0x230
[  677.381035][T13815]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  677.381062][T13815]  ? rw_verify_area+0x250/0x4d0
[  677.381094][T13815]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  677.381117][T13815]  vfs_read+0x219/0xa90
[  677.381154][T13815]  ? __pfx_vfs_read+0x10/0x10
[  677.381183][T13815]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  677.381216][T13815]  ? lockdep_hardirqs_on+0x7a/0x110
[  677.381247][T13815]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  677.381279][T13815]  ? mutex_lock_nested+0x152/0x1d0
[  677.381301][T13815]  ? fdget_pos+0x252/0x320
[  677.381334][T13815]  ksys_read+0x156/0x270
[  677.381369][T13815]  ? __pfx_ksys_read+0x10/0x10
[  677.381394][T13815]  ? __pfx_do_pagemap_cmd+0x10/0x10
[  677.381432][T13815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.381459][T13815]  do_syscall_64+0x174/0x580
[  677.381490][T13815]  ? trace_irq_disable+0x3b/0x140
[  677.381526][T13815]  ? clear_bhb_loop+0x40/0x90
[  677.381554][T13815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.381578][T13815] RIP: 0033:0x7fdb0a43e68e
[  677.381599][T13815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  677.381619][T13815] RSP: 002b:00007fdb086d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  677.381643][T13815] RAX: ffffffffffffffda RBX: 00007fdb086d66c0 RCX: 00007fdb0a43e68e
[  677.381659][T13815] RDX: 000000000000000f RSI: 00007fdb086d60a0 RDI: 0000000000000004
[  677.381673][T13815] RBP: 00007fdb086d6090 R08: 0000000000000000 R09: 0000000000000000
[  677.381686][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.381698][T13815] R13: 00007fdb0a706038 R14: 00007fdb0a705fa0 R15: 00007ffe99d389e8
[  677.381733][T13815]  </TASK>
[  678.315893][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2540'.
[  678.337263][T13841] 9p: Bad value for 'rfdno'
[  678.563978][ T5717] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  678.703093][ T5717] usb 4-1: device descriptor read/64, error -71
[  678.865761][T13856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  678.963039][ T5717] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  678.996971][ T5718] kernel write not supported for file /snd/seq (pid: 5718 comm: kworker/0:6)
[  679.078890][   T37] audit: type=1326 audit(1783106396.760:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13864 comm="syz.0.2548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9d9de59 code=0x7ffc0000
[  679.115775][ T5717] usb 4-1: device descriptor read/64, error -71
[  679.235196][ T5717] usb usb4-port1: attempt power cycle
[  679.258458][T13872] FAULT_INJECTION: forcing a failure.
[  679.258458][T13872] name failslab, interval 1, probability 0, space 0, times 0
[  679.258496][T13872] CPU: 0 UID: 0 PID: 13872 Comm: syz.0.2551 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  679.258526][T13872] Tainted: [L]=SOFTLOCKUP
[  679.258534][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  679.258547][T13872] Call Trace:
[  679.258555][T13872]  <TASK>
[  679.258565][T13872]  dump_stack_lvl+0xe8/0x150
[  679.258606][T13872]  should_fail_ex+0x467/0x600
[  679.258647][T13872]  should_failslab+0xa8/0x100
[  679.258675][T13872]  kmem_cache_alloc_noprof+0xa4/0x650
[  679.258707][T13872]  ? skb_clone+0x212/0x3a0
[  679.258742][T13872]  ? skb_clone+0x212/0x3a0
[  679.258763][T13872]  skb_clone+0x212/0x3a0
[  679.258777][T13872]  ? dev_queue_xmit_nit+0x25c/0xac0
[  679.258804][T13872]  dev_queue_xmit_nit+0x28d/0xac0
[  679.258827][T13872]  ? dev_queue_xmit_nit+0x2d/0xac0
[  679.258857][T13872]  dev_hard_start_xmit+0x1be/0x870
[  679.258875][T13872]  ? validate_xmit_skb+0xcac/0x14f0
[  679.258900][T13872]  __dev_queue_xmit+0x1549/0x3890
[  679.258928][T13872]  ? __dev_queue_xmit+0x291/0x3890
[  679.258954][T13872]  ? __pfx___dev_queue_xmit+0x10/0x10
[  679.258980][T13872]  ? __copy_skb_header+0xa3/0x4a0
[  679.259007][T13872]  ? __asan_memcpy+0x40/0x70
[  679.259029][T13872]  ? __skb_clone+0x5c/0x6c0
[  679.259048][T13872]  ? __skb_clone+0x449/0x6c0
[  679.259068][T13872]  ? skb_clone+0x246/0x3a0
[  679.259086][T13872]  __netlink_deliver_tap+0x5b4/0x860
[  679.259121][T13872]  ? netlink_deliver_tap+0x2e/0x1b0
[  679.259148][T13872]  netlink_deliver_tap+0x19c/0x1b0
[  679.259175][T13872]  netlink_unicast+0x7b8/0x990
[  679.259207][T13872]  netlink_sendmsg+0x813/0xb40
[  679.259224][T13872]  ? _parse_integer_limit+0x192/0x1e0
[  679.259253][T13872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.259271][T13872]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  679.259295][T13872]  ? get_pid_task+0x20/0x1f0
[  679.259320][T13872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.259335][T13872]  sock_sendmsg_nosec+0x13a/0x180
[  679.259359][T13872]  sock_write_iter+0x2e4/0x3f0
[  679.259379][T13872]  ? __pfx_sock_write_iter+0x10/0x10
[  679.259403][T13872]  ? bpf_lsm_file_permission+0x9/0x20
[  679.259427][T13872]  ? security_file_permission+0x75/0x260
[  679.259450][T13872]  vfs_write+0x61e/0xbb0
[  679.259477][T13872]  ? __pfx_vfs_write+0x10/0x10
[  679.259504][T13872]  ? __fget_files+0x2a/0x420
[  679.259527][T13872]  ksys_write+0x156/0x270
[  679.259548][T13872]  ? __pfx_ksys_write+0x10/0x10
[  679.259574][T13872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.259592][T13872]  do_syscall_64+0x174/0x580
[  679.259615][T13872]  ? trace_irq_disable+0x3b/0x140
[  679.259641][T13872]  ? clear_bhb_loop+0x40/0x90
[  679.259661][T13872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.259678][T13872] RIP: 0033:0x7f37b9d9de59
[  679.259693][T13872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.259707][T13872] RSP: 002b:00007f37b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  679.259729][T13872] RAX: ffffffffffffffda RBX: 00007f37ba025fa0 RCX: 00007f37b9d9de59
[  679.259741][T13872] RDX: 0000000000000027 RSI: 0000200000005c00 RDI: 0000000000000004
[  679.259751][T13872] RBP: 00007f37b7ff6090 R08: 0000000000000000 R09: 0000000000000000
[  679.259761][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  679.259771][T13872] R13: 00007f37ba026038 R14: 00007f37ba025fa0 R15: 00007ffc2ba2b558
[  679.259797][T13872]  </TASK>
[  679.623861][ T5717] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  679.646290][ T5717] usb 4-1: device descriptor read/8, error -71
[  679.705989][T13876] program syz.1.2552 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  679.765583][T13878] FAULT_INJECTION: forcing a failure.
[  679.765583][T13878] name failslab, interval 1, probability 0, space 0, times 0
[  679.765612][T13878] CPU: 0 UID: 0 PID: 13878 Comm: syz.0.2554 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  679.765634][T13878] Tainted: [L]=SOFTLOCKUP
[  679.765640][T13878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  679.765650][T13878] Call Trace:
[  679.765656][T13878]  <TASK>
[  679.765662][T13878]  dump_stack_lvl+0xe8/0x150
[  679.765698][T13878]  should_fail_ex+0x467/0x600
[  679.765725][T13878]  should_failslab+0xa8/0x100
[  679.765743][T13878]  kmem_cache_alloc_noprof+0xa4/0x650
[  679.765766][T13878]  ? skb_clone+0x212/0x3a0
[  679.765780][T13878]  ? skb_clone+0x212/0x3a0
[  679.765798][T13878]  skb_clone+0x212/0x3a0
[  679.765815][T13878]  __netlink_deliver_tap+0x413/0x860
[  679.765847][T13878]  ? netlink_deliver_tap+0x2e/0x1b0
[  679.765871][T13878]  netlink_deliver_tap+0x19c/0x1b0
[  679.765894][T13878]  netlink_unicast+0x7b8/0x990
[  679.765923][T13878]  netlink_sendmsg+0x813/0xb40
[  679.765943][T13878]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.765959][T13878]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  679.765980][T13878]  ? __kernel_text_address+0xd/0x30
[  679.765994][T13878]  ? unwind_get_return_address+0x4d/0x90
[  679.766013][T13878]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.766026][T13878]  sock_sendmsg_nosec+0x13a/0x180
[  679.766046][T13878]  ____sys_sendmsg+0x565/0x870
[  679.766068][T13878]  ? __might_fault+0xaf/0x130
[  679.766087][T13878]  ? __pfx_____sys_sendmsg+0x10/0x10
[  679.766116][T13878]  ? import_iovec+0x73/0xa0
[  679.766134][T13878]  ___sys_sendmsg+0x2a5/0x360
[  679.766156][T13878]  ? __lock_acquire+0x683/0x2ce0
[  679.766176][T13878]  ? __pfx____sys_sendmsg+0x10/0x10
[  679.766226][T13878]  ? __fget_files+0x2a/0x420
[  679.766241][T13878]  ? __fget_files+0x3a8/0x420
[  679.766263][T13878]  __x64_sys_sendmsg+0x1b7/0x290
[  679.766290][T13878]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  679.766328][T13878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.766345][T13878]  do_syscall_64+0x174/0x580
[  679.766367][T13878]  ? trace_irq_disable+0x3b/0x140
[  679.766396][T13878]  ? clear_bhb_loop+0x40/0x90
[  679.766415][T13878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.766431][T13878] RIP: 0033:0x7f37b9d9de59
[  679.766445][T13878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.766459][T13878] RSP: 002b:00007f37b7ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  679.766475][T13878] RAX: ffffffffffffffda RBX: 00007f37ba025fa0 RCX: 00007f37b9d9de59
[  679.766487][T13878] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  679.766497][T13878] RBP: 00007f37b7ff6090 R08: 0000000000000000 R09: 0000000000000000
[  679.766507][T13878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  679.766516][T13878] R13: 00007f37ba026038 R14: 00007f37ba025fa0 R15: 00007ffc2ba2b558
[  679.766540][T13878]  </TASK>
[  679.981485][ T5717] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  680.009487][ T5717] usb 4-1: device descriptor read/8, error -71
[  680.057574][ T5718] usb 3-1: new full-speed USB device number 68 using dummy_hcd
[  680.122097][T13880] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in;
[  680.122097][T13880]    program syz.1.2555 not setting count and/or reply_len properly
[  680.124163][ T5717] usb usb4-port1: unable to enumerate USB device
[  680.222455][ T5718] usb 3-1: config 0 has an invalid interface number: 160 but max is 0
[  680.222487][ T5718] usb 3-1: config 0 has no interface number 0
[  680.222536][ T5718] usb 3-1: config 0 interface 160 has no altsetting 0
[  680.230439][ T5718] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9c1a, bcdDevice=80.81
[  680.230472][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.230493][ T5718] usb 3-1: Product: syz
[  680.230509][ T5718] usb 3-1: Manufacturer: syz
[  680.230525][ T5718] usb 3-1: SerialNumber: syz
[  680.352887][ T5718] usb 3-1: config 0 descriptor??
[  680.485551][T13890] zonefs (nullb0) ERROR: Not a zoned block device
[  680.596025][T13875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  680.596698][T13875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.727897][T13875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  680.738452][T13875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.803853][ T5718] usb 3-1: No union descriptors
[  680.847864][ T5718] usb 3-1: USB disconnect, device number 68
[  681.019671][T13910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2566'.
[  681.957435][   T31] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  682.510363][   T31] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  682.510399][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.510414][   T31] usb 2-1: Product: syz
[  682.510425][   T31] usb 2-1: Manufacturer: syz
[  682.510436][   T31] usb 2-1: SerialNumber: syz
[  682.526835][T13926] 8021q: VLANs not supported on lo
[  682.528287][T13926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2570'.
[  682.720349][   T31] usb 2-1: config 0 descriptor??
[  682.773647][   T31] ch341 2-1:0.0: ch341-uart converter detected
[  682.929411][T13937] FAULT_INJECTION: forcing a failure.
[  682.929411][T13937] name failslab, interval 1, probability 0, space 0, times 0
[  682.929452][T13937] CPU: 0 UID: 0 PID: 13937 Comm: syz.3.2576 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  682.929494][T13937] Tainted: [L]=SOFTLOCKUP
[  682.929502][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  682.929517][T13937] Call Trace:
[  682.929526][T13937]  <TASK>
[  682.929535][T13937]  dump_stack_lvl+0xe8/0x150
[  682.929575][T13937]  should_fail_ex+0x467/0x600
[  682.929612][T13937]  should_failslab+0xa8/0x100
[  682.929631][T13937]  __kmalloc_noprof+0xfe/0x780
[  682.929646][T13937]  ? security_sk_alloc+0x52/0x360
[  682.929695][T13937]  ? security_sk_alloc+0x52/0x360
[  682.929735][T13937]  security_sk_alloc+0x52/0x360
[  682.929769][T13937]  sk_prot_alloc+0x101/0x210
[  682.929801][T13937]  ? sk_alloc+0x27/0x390
[  682.929825][T13937]  sk_alloc+0x3a/0x390
[  682.929872][T13937]  bpf_prog_test_run_skb+0x3a6/0x2230
[  682.929928][T13937]  ? __fget_files+0x3a8/0x420
[  682.929948][T13937]  ? __fget_files+0x2a/0x420
[  682.929976][T13937]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  682.930001][T13937]  bpf_prog_test_run+0x2cb/0x340
[  682.930056][T13937]  __sys_bpf+0xa22/0xd90
[  682.930089][T13937]  ? __pfx___sys_bpf+0x10/0x10
[  682.930114][T13937]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  682.930151][T13937]  ? rt_mutex_slowunlock+0x219/0x460
[  682.930200][T13937]  ? ksys_write+0x248/0x270
[  682.930243][T13937]  ? __pfx_ksys_write+0x10/0x10
[  682.930275][T13937]  __x64_sys_bpf+0xba/0xd0
[  682.930309][T13937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.930333][T13937]  do_syscall_64+0x174/0x580
[  682.930364][T13937]  ? trace_irq_disable+0x3b/0x140
[  682.930390][T13937]  ? clear_bhb_loop+0x40/0x90
[  682.930430][T13937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.930454][T13937] RIP: 0033:0x7fab5eb2de59
[  682.930475][T13937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.930494][T13937] RSP: 002b:00007fab5cd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  682.930516][T13937] RAX: ffffffffffffffda RBX: 00007fab5edb5fa0 RCX: 00007fab5eb2de59
[  682.930536][T13937] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  682.930546][T13937] RBP: 00007fab5cd86090 R08: 0000000000000000 R09: 0000000000000000
[  682.930556][T13937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.930565][T13937] R13: 00007fab5edb6038 R14: 00007fab5edb5fa0 R15: 00007fffc71ddd88
[  682.930611][T13937]  </TASK>
[  682.991845][T13917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.004036][T13917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.019136][   T31] usb 2-1: failed to receive control message: -121
[  683.019195][   T31] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  683.294362][ T5718] usb 2-1: USB disconnect, device number 47
[  683.300473][ T5718] ch341 2-1:0.0: device disconnected
[  683.320434][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2578'.
[  683.492701][   T37] kauditd_printk_skb: 23 callbacks suppressed
[  683.492722][   T37] audit: type=1326 audit(1783106400.831:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13945 comm="syz.3.2580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab5eb2de59 code=0x0
[  683.645106][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'.
[  683.781204][T13960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2585'.
[  684.194060][T13969] tmpfs: Unknown parameter '
[  684.194060][T13969] '
[  684.194347][T13969] tmpfs: Unknown parameter '
[  684.194347][T13969] '
[  684.224804][T13969] tmpfs: Unknown parameter '
[  684.224804][T13969] '
[  684.225129][T13969] tmpfs: Unknown parameter '
[  684.225129][T13969] '
[  684.225411][T13969] tmpfs: Unknown parameter '
[  684.225411][T13969] '
[  684.251867][T13969] tmpfs: Unknown parameter '
[  684.251867][T13969] '
[  684.268369][T13969] tmpfs: Unknown parameter '
[  684.268369][T13969] '
[  684.268733][T13969] tmpfs: Unknown parameter '
[  684.268733][T13969] '
[  684.269029][T13969] tmpfs: Unknown parameter '
[  684.269029][T13969] '
[  684.295095][T13969] tmpfs: Unknown parameter '
[  684.295095][T13969] '
[  684.295463][T13969] tmpfs: Unknown parameter '
[  684.295463][T13969] '
[  684.508075][T13977] overlayfs: failed to clone lowerpath
[  685.324719][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'.
[  685.324744][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'.
[  685.651365][T13986] FAULT_INJECTION: forcing a failure.
[  685.651365][T13986] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  685.651405][T13986] CPU: 0 UID: 0 PID: 13986 Comm: syz.0.2593 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  685.651435][T13986] Tainted: [L]=SOFTLOCKUP
[  685.651443][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  685.651457][T13986] Call Trace:
[  685.651465][T13986]  <TASK>
[  685.651475][T13986]  dump_stack_lvl+0xe8/0x150
[  685.651517][T13986]  should_fail_ex+0x467/0x600
[  685.651558][T13986]  prepare_alloc_pages+0x223/0x690
[  685.651590][T13986]  __alloc_frozen_pages_noprof+0x12f/0x380
[  685.651629][T13986]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  685.651654][T13986]  ? __alloc_frozen_pages_noprof+0x1db/0x380
[  685.651684][T13986]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  685.651715][T13986]  ? __pfx_policy_nodemask+0x10/0x10
[  685.651741][T13986]  ? lockdep_hardirqs_on+0x7a/0x110
[  685.651776][T13986]  __alloc_pages_noprof+0x10/0x100
[  685.651803][T13986]  alloc_pages_bulk_noprof+0x67e/0x890
[  685.651828][T13986]  ? alloc_pages_mpol+0x115/0x280
[  685.651859][T13986]  ? alloc_pages_noprof+0x161/0x2f0
[  685.651891][T13986]  __kasan_populate_vmalloc+0xb7/0x1c0
[  685.651925][T13986]  ? rt_spin_unlock+0x163/0x200
[  685.651953][T13986]  alloc_vmap_area+0xd1a/0x1420
[  685.652003][T13986]  ? __pfx_alloc_vmap_area+0x10/0x10
[  685.652037][T13986]  ? __kmalloc_cache_node_noprof+0x47b/0x6a0
[  685.652062][T13986]  ? __get_vm_area_node+0x136/0x300
[  685.652094][T13986]  ? __get_vm_area_node+0x136/0x300
[  685.652133][T13986]  __get_vm_area_node+0x1f2/0x300
[  685.652173][T13986]  __vmalloc_node_range_noprof+0x358/0x1730
[  685.652209][T13986]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  685.652237][T13986]  ? __lock_acquire+0x683/0x2ce0
[  685.652284][T13986]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  685.652320][T13986]  ? __might_fault+0xaf/0x130
[  685.652344][T13986]  ? __might_fault+0xaf/0x130
[  685.652374][T13986]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  685.652395][T13986]  __vmalloc_noprof+0xd2/0x120
[  685.652428][T13986]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  685.652456][T13986]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  685.652478][T13986]  ? bpf_prog_alloc+0x2a/0x1a0
[  685.652504][T13986]  bpf_prog_alloc+0x3c/0x1a0
[  685.652529][T13986]  __get_filter+0xf2/0x420
[  685.652561][T13986]  sk_attach_filter+0x24/0x140
[  685.652590][T13986]  sk_setsockopt+0x23d6/0x2c40
[  685.652636][T13986]  ? __pfx_sk_setsockopt+0x10/0x10
[  685.652669][T13986]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  685.652701][T13986]  ? lockdep_hardirqs_on+0x7a/0x110
[  685.652735][T13986]  ? __fget_files+0x2a/0x420
[  685.652770][T13986]  ? __fget_files+0x2a/0x420
[  685.652795][T13986]  ? __fget_files+0x2a/0x420
[  685.652815][T13986]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  685.652851][T13986]  do_sock_setsockopt+0x11b/0x1b0
[  685.652892][T13986]  __x64_sys_setsockopt+0x143/0x1b0
[  685.652928][T13986]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.652952][T13986]  do_syscall_64+0x174/0x580
[  685.652982][T13986]  ? trace_irq_disable+0x3b/0x140
[  685.653018][T13986]  ? clear_bhb_loop+0x40/0x90
[  685.653047][T13986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.653069][T13986] RIP: 0033:0x7f37b9d9de59
[  685.653091][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.653111][T13986] RSP: 002b:00007f37b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  685.653135][T13986] RAX: ffffffffffffffda RBX: 00007f37ba025fa0 RCX: 00007f37b9d9de59
[  685.653150][T13986] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003
[  685.653163][T13986] RBP: 00007f37b7ff6090 R08: 0000000000000010 R09: 0000000000000000
[  685.653177][T13986] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  685.653191][T13986] R13: 00007f37ba026038 R14: 00007f37ba025fa0 R15: 00007ffc2ba2b558
[  685.653226][T13986]  </TASK>
[  685.653467][T13986] syz.0.2593: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  685.653654][T13986] CPU: 0 UID: 0 PID: 13986 Comm: syz.0.2593 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  685.653683][T13986] Tainted: [L]=SOFTLOCKUP
[  685.653691][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  685.653704][T13986] Call Trace:
[  685.653712][T13986]  <TASK>
[  685.653721][T13986]  dump_stack_lvl+0xe8/0x150
[  685.653756][T13986]  warn_alloc+0x24c/0x270
[  685.653779][T13986]  ? kasan_quarantine_put+0xbb/0x1f0
[  685.653816][T13986]  ? __pfx_warn_alloc+0x10/0x10
[  685.653841][T13986]  ? __get_vm_area_node+0x20b/0x300
[  685.653881][T13986]  ? __get_vm_area_node+0x20b/0x300
[  685.653922][T13986]  __vmalloc_node_range_noprof+0x37d/0x1730
[  685.653963][T13986]  ? __lock_acquire+0x683/0x2ce0
[  685.654010][T13986]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  685.654046][T13986]  ? __might_fault+0xaf/0x130
[  685.654069][T13986]  ? __might_fault+0xaf/0x130
[  685.654099][T13986]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  685.654122][T13986]  __vmalloc_noprof+0xd2/0x120
[  685.654157][T13986]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  685.654184][T13986]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  685.654206][T13986]  ? bpf_prog_alloc+0x2a/0x1a0
[  685.654231][T13986]  bpf_prog_alloc+0x3c/0x1a0
[  685.654257][T13986]  __get_filter+0xf2/0x420
[  685.654289][T13986]  sk_attach_filter+0x24/0x140
[  685.654319][T13986]  sk_setsockopt+0x23d6/0x2c40
[  685.654359][T13986]  ? __pfx_sk_setsockopt+0x10/0x10
[  685.654391][T13986]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  685.654423][T13986]  ? lockdep_hardirqs_on+0x7a/0x110
[  685.654456][T13986]  ? __fget_files+0x2a/0x420
[  685.654486][T13986]  ? __fget_files+0x2a/0x420
[  685.654512][T13986]  ? __fget_files+0x2a/0x420
[  685.654529][T13986]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  685.654562][T13986]  do_sock_setsockopt+0x11b/0x1b0
[  685.654609][T13986]  __x64_sys_setsockopt+0x143/0x1b0
[  685.654644][T13986]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.654668][T13986]  do_syscall_64+0x174/0x580
[  685.654700][T13986]  ? trace_irq_disable+0x3b/0x140
[  685.654733][T13986]  ? clear_bhb_loop+0x40/0x90
[  685.654761][T13986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.654784][T13986] RIP: 0033:0x7f37b9d9de59
[  685.654805][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.654824][T13986] RSP: 002b:00007f37b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  685.654847][T13986] RAX: ffffffffffffffda RBX: 00007f37ba025fa0 RCX: 00007f37b9d9de59
[  685.654867][T13986] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003
[  685.654880][T13986] RBP: 00007f37b7ff6090 R08: 0000000000000010 R09: 0000000000000000
[  685.654894][T13986] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  685.654908][T13986] R13: 00007f37ba026038 R14: 00007f37ba025fa0 R15: 00007ffc2ba2b558
[  685.654944][T13986]  </TASK>
[  685.654984][T13986] Mem-Info:
[  685.654994][T13986] active_anon:205 inactive_anon:34602 isolated_anon:0
[  685.654994][T13986]  active_file:22398 inactive_file:37116 isolated_file:0
[  685.654994][T13986]  unevictable:768 dirty:232 writeback:0
[  685.654994][T13986]  slab_reclaimable:12386 slab_unreclaimable:101887
[  685.654994][T13986]  mapped:30645 shmem:29536 pagetables:1430
[  685.654994][T13986]  sec_pagetables:0 bounce:0
[  685.654994][T13986]  kernel_misc_reclaimable:0
[  685.654994][T13986]  free:1278529 free_pcp:1951 free_cma:0
[  685.655046][T13986] Node 0 active_anon:820kB inactive_anon:138408kB active_file:89400kB inactive_file:148464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122580kB dirty:928kB writeback:0kB shmem:116608kB kernel_stack:13444kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  685.655098][T13986] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  685.655147][T13986] Node 0 DMA free:15328kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  685.655204][T13986] lowmem_reserve[]: 0 2500 2502 2502 2502
[  685.655242][T13986] Node 0 DMA32 free:1154236kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:820kB inactive_anon:138408kB active_file:89400kB inactive_file:148464kB unevictable:1536kB writepending:928kB zspages:0kB present:3129332kB managed:2560812kB mlocked:0kB bounce:0kB free_pcp:7784kB local_pcp:1220kB free_cma:0kB
[  685.655305][T13986] lowmem_reserve[]: 0 0 1 1 1
[  685.655341][T13986] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[  685.655396][T13986] lowmem_reserve[]: 0 0 0 0 0
[  685.655432][T13986] Node 1 Normal free:3944552kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  685.655492][T13986] lowmem_reserve[]: 0 0 0 0 0
[  685.655528][T13986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  685.655688][T13986] Node 0 DMA32: 1563*4kB (UME) 796*8kB (UME) 385*16kB (UME) 455*32kB (UME) 244*64kB (UME) 157*128kB (UME) 133*256kB (UME) 45*512kB (UME) 22*1024kB (M) 11*2048kB (UME) 240*4096kB (UM) = 1154236kB
[  685.655857][T13986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  685.655966][T13986] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 5*16kB (UM) 7*32kB (UM) 6*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3944552kB
[  685.656138][T13986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  685.656156][T13986] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  685.656175][T13986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  685.656193][T13986] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  685.656210][T13986] 89046 total pagecache pages
[  685.656219][T13986] 0 pages in swap cache
[  685.656227][T13986] Free swap  = 124996kB
[  685.656236][T13986] Total swap = 124996kB
[  685.656246][T13986] 2097051 pages RAM
[  685.656253][T13986] 0 pages HighMem/MovableOnly
[  685.656260][T13986] 424768 pages reserved
[  685.656268][T13986] 0 pages cma reserved
[  686.948797][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'.
[  686.955152][T13994] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2595'.
[  686.987114][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2596'.
[  687.066751][T13997] proc: Bad value for 'gid'
[  687.346936][T11478] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  687.435487][   T31] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  687.439845][T14009] input: syz1 as /devices/virtual/input/input36
[  687.512610][T11478] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  687.512641][T11478] usb 4-1: config 1 has no interface number 0
[  687.512687][T11478] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  687.512715][T11478] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  687.512742][T11478] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  687.518632][T11478] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  687.518666][T11478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.518687][T11478] usb 4-1: Product: syz
[  687.518704][T11478] usb 4-1: Manufacturer: syz
[  687.518720][T11478] usb 4-1: SerialNumber: syz
[  687.580805][T14004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  687.655099][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  687.655133][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.655156][   T31] usb 2-1: Product: syz
[  687.656912][   T31] usb 2-1: Manufacturer: syz
[  687.656932][   T31] usb 2-1: SerialNumber: syz
[  687.826364][T14002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  687.853699][T11478] usb 4-1: No status endpoint found
[  688.139783][ T5736] usb 4-1: USB disconnect, device number 50
[  688.762815][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'.
[  688.762840][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'.
[  688.924624][   T31] cdc_ncm 2-1:1.0: bind() failure
[  689.001805][   T31] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  689.001856][   T31] cdc_ncm 2-1:1.1: bind() failure
[  689.051095][   T31] usb 2-1: USB disconnect, device number 48
[  689.213587][T14031] FAULT_INJECTION: forcing a failure.
[  689.213587][T14031] name failslab, interval 1, probability 0, space 0, times 0
[  689.213628][T14031] CPU: 1 UID: 0 PID: 14031 Comm: syz.3.2608 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  689.213659][T14031] Tainted: [L]=SOFTLOCKUP
[  689.213667][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  689.213681][T14031] Call Trace:
[  689.213689][T14031]  <TASK>
[  689.213699][T14031]  dump_stack_lvl+0xe8/0x150
[  689.213740][T14031]  should_fail_ex+0x467/0x600
[  689.213777][T14031]  should_failslab+0xa8/0x100
[  689.213805][T14031]  kmem_cache_alloc_node_noprof+0xae/0x670
[  689.213843][T14031]  ? __alloc_skb+0x1d7/0x7a0
[  689.213873][T14031]  ? __alloc_skb+0x1d7/0x7a0
[  689.213911][T14031]  __alloc_skb+0x1d7/0x7a0
[  689.213946][T14031]  netlink_ack+0x136/0xb30
[  689.213980][T14031]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  689.214018][T14031]  ? ref_tracker_free+0x668/0x820
[  689.214055][T14031]  ? __pfx_ref_tracker_free+0x10/0x10
[  689.214087][T14031]  ? __asan_memcpy+0x40/0x70
[  689.214126][T14031]  netlink_rcv_skb+0x2a4/0x4a0
[  689.214162][T14031]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  689.214194][T14031]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  689.214243][T14031]  ? netlink_deliver_tap+0x2e/0x1b0
[  689.214277][T14031]  ? netlink_deliver_tap+0x2e/0x1b0
[  689.214317][T14031]  netlink_unicast+0x7f5/0x990
[  689.214359][T14031]  netlink_sendmsg+0x813/0xb40
[  689.214392][T14031]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.214417][T14031]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  689.214449][T14031]  ? __kernel_text_address+0xd/0x30
[  689.214471][T14031]  ? unwind_get_return_address+0x4d/0x90
[  689.214499][T14031]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.214519][T14031]  sock_sendmsg_nosec+0x13a/0x180
[  689.214552][T14031]  ____sys_sendmsg+0x565/0x870
[  689.214588][T14031]  ? __might_fault+0xaf/0x130
[  689.214618][T14031]  ? __pfx_____sys_sendmsg+0x10/0x10
[  689.214663][T14031]  ? import_iovec+0x73/0xa0
[  689.214690][T14031]  ___sys_sendmsg+0x2a5/0x360
[  689.214724][T14031]  ? __lock_acquire+0x683/0x2ce0
[  689.214751][T14031]  ? __pfx____sys_sendmsg+0x10/0x10
[  689.214825][T14031]  ? __fget_files+0x2a/0x420
[  689.214847][T14031]  ? __fget_files+0x3a8/0x420
[  689.214879][T14031]  __x64_sys_sendmsg+0x1b7/0x290
[  689.214918][T14031]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  689.214972][T14031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.215005][T14031]  do_syscall_64+0x174/0x580
[  689.215037][T14031]  ? trace_irq_disable+0x3b/0x140
[  689.215071][T14031]  ? clear_bhb_loop+0x40/0x90
[  689.215099][T14031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.215123][T14031] RIP: 0033:0x7fab5eb2de59
[  689.215144][T14031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.215164][T14031] RSP: 002b:00007fab5cd86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  689.215188][T14031] RAX: ffffffffffffffda RBX: 00007fab5edb5fa0 RCX: 00007fab5eb2de59
[  689.215204][T14031] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000003
[  689.215218][T14031] RBP: 00007fab5cd86090 R08: 0000000000000000 R09: 0000000000000000
[  689.215231][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.215244][T14031] R13: 00007fab5edb6038 R14: 00007fab5edb5fa0 R15: 00007fffc71ddd88
[  689.215278][T14031]  </TASK>
[  689.513457][   T11] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  689.595519][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  689.595602][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  689.699186][   T11] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 195, changing to 11
[  689.699213][   T11] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 8909, setting to 1024
[  689.699233][   T11] usb 1-1: config 0 interface 0 has no altsetting 0
[  689.699258][   T11] usb 1-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[  689.699275][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.732648][   T11] usb 1-1: config 0 descriptor??
[  689.875309][   T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  690.118141][T14038] sg_write: data in/out 469212/136 bytes for SCSI command 0x0-- guessing data in;
[  690.118141][T14038]    program syz.3.2611 not setting count and/or reply_len properly
[  690.249085][   T11] hid (null): unknown global tag 0xe
[  690.249111][   T11] hid (null): global environment stack underflow
[  690.249163][   T11] hid (null): unknown global tag 0xc
[  690.273777][   T11] hid (null): unknown global tag 0xe4
[  690.274274][   T11] hid (null): unknown global tag 0x52
[  690.274288][   T11] hid (null): unknown global tag 0xe
[  690.274341][   T11] hid (null): invalid report_size 222345300
[  690.274352][   T11] hid (null): unknown global tag 0xf4
[  690.274369][   T11] hid (null): report_id 0 is invalid
[  690.370028][   T11] evision 0003:320F:5041.000B: unknown main item tag 0x0
[  690.370067][   T11] evision 0003:320F:5041.000B: unknown main item tag 0x0
[  690.370093][   T11] evision 0003:320F:5041.000B: unknown main item tag 0x0
[  690.370118][   T11] evision 0003:320F:5041.000B: unknown main item tag 0x0
[  690.370146][   T11] evision 0003:320F:5041.000B: unknown main item tag 0x0
[  690.370174][   T11] evision 0003:320F:5041.000B: unknown main item tag 0x0
[  690.370202][   T11] evision 0003:320F:5041.000B: unknown global tag 0xe
[  690.370218][   T11] evision 0003:320F:5041.000B: item 0 0 1 14 parsing failed
[  690.372764][   T11] evision 0003:320F:5041.000B: probe with driver evision failed with error -22
[  690.475007][T14039] BUG: Bad page state in process syz.1.2610  pfn:35fa1
[  690.475050][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000000a6 pfn:0x35fa1
[  690.475074][T14039] flags: 0x80000000000000(node=0|zone=1)
[  690.475102][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  690.475123][T14039] raw: 00000002000000a6 0000000000000001 00000000ffffffff 0000000000000000
[  690.475136][T14039] page dumped because: page_pool leak
[  690.475153][T14039] page_owner tracks the page as allocated
[  690.475161][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690474815006, free_ts 677279170371
[  690.475198][T14039]  post_alloc_hook+0x1f9/0x250
[  690.475234][T14039]  get_page_from_freelist+0x262a/0x26a0
[  690.475259][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  690.475283][T14039]  __alloc_pages_noprof+0x10/0x100
[  690.475306][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  690.475328][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  690.475354][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  690.475385][T14039]  do_xdp_generic+0x5f2/0xed0
[  690.475406][T14039]  tun_get_user+0x2463/0x4380
[  690.475433][T14039]  tun_chr_write_iter+0x119/0x200
[  690.475459][T14039]  vfs_write+0x61e/0xbb0
[  690.475482][T14039]  ksys_write+0x156/0x270
[  690.475505][T14039]  do_syscall_64+0x174/0x580
[  690.475534][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.475556][T14039] page last free pid 20 tgid 20 stack trace:
[  690.475570][T14039]  __free_frozen_pages+0x10e7/0x11c0
[  690.475601][T14039]  tlb_remove_table_rcu+0x85/0x100
[  690.475625][T14039]  rcu_cpu_kthread+0x950/0x1480
[  690.475648][T14039]  smpboot_thread_fn+0x57c/0xa80
[  690.475677][T14039]  kthread+0x388/0x470
[  690.475706][T14039]  ret_from_fork+0x514/0xb70
[  690.475737][T14039]  ret_from_fork_asm+0x1a/0x30
[  690.475777][T14039] Modules linked in:
[  690.475803][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  690.475834][T14039] Tainted: [L]=SOFTLOCKUP
[  690.475842][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  690.475857][T14039] Call Trace:
[  690.475866][T14039]  <TASK>
[  690.475877][T14039]  dump_stack_lvl+0xe8/0x150
[  690.475915][T14039]  bad_page+0x17f/0x1c0
[  690.475947][T14039]  __free_frozen_pages+0x1172/0x11c0
[  690.475995][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  690.476032][T14039]  ? compound_order+0x5b/0x90
[  690.476073][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  690.476123][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  690.476166][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  690.476189][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  690.476244][T14039]  do_xdp_generic+0x894/0xed0
[  690.476270][T14039]  ? __lock_acquire+0x683/0x2ce0
[  690.476305][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  690.476345][T14039]  ? tun_get_user+0x2336/0x4380
[  690.476384][T14039]  ? rcu_is_watching+0x15/0xb0
[  690.476409][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  690.476443][T14039]  ? tun_get_user+0x2336/0x4380
[  690.476474][T14039]  tun_get_user+0x2463/0x4380
[  690.476501][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  690.476561][T14039]  ? update_load_avg+0x1be/0x1950
[  690.476597][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  690.476630][T14039]  ? __lock_acquire+0x683/0x2ce0
[  690.476670][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  690.476707][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  690.476743][T14039]  ? tun_get+0x1c/0x2f0
[  690.476785][T14039]  ? tun_get+0x1c/0x2f0
[  690.476822][T14039]  ? tun_get+0x1c/0x2f0
[  690.476853][T14039]  ? tun_get+0x1c/0x2f0
[  690.476889][T14039]  tun_chr_write_iter+0x119/0x200
[  690.476923][T14039]  vfs_write+0x61e/0xbb0
[  690.476962][T14039]  ? __pfx_vfs_write+0x10/0x10
[  690.477001][T14039]  ? __fget_files+0x2a/0x420
[  690.477036][T14039]  ksys_write+0x156/0x270
[  690.477067][T14039]  ? __pfx_ksys_write+0x10/0x10
[  690.477107][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.477133][T14039]  do_syscall_64+0x174/0x580
[  690.477167][T14039]  ? clear_bhb_loop+0x40/0x90
[  690.477195][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.477218][T14039] RIP: 0033:0x7fdb0a43e68e
[  690.477241][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  690.477263][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  690.477286][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  690.477304][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  690.477318][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  690.477332][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.477345][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  690.477382][T14039]  </TASK>
[  690.958029][T14039] Disabling lock debugging due to kernel taint
[  690.958049][T14039] BUG: Bad page state in process syz.1.2610  pfn:35fa0
[  690.958067][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x44f pfn:0x35fa0
[  690.958089][T14039] flags: 0x80000000000000(node=0|zone=1)
[  690.958116][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  690.958138][T14039] raw: 000000000000044f 0000000000000001 00000000ffffffff 0000000000000000
[  690.958150][T14039] page dumped because: page_pool leak
[  690.958160][T14039] page_owner tracks the page as allocated
[  690.958169][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690474792498, free_ts 678343852135
[  690.958216][T14039]  post_alloc_hook+0x1f9/0x250
[  690.958254][T14039]  get_page_from_freelist+0x262a/0x26a0
[  690.958279][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  690.958303][T14039]  __alloc_pages_noprof+0x10/0x100
[  690.958325][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  690.958348][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  690.958376][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  690.958407][T14039]  do_xdp_generic+0x5f2/0xed0
[  690.958429][T14039]  tun_get_user+0x2463/0x4380
[  690.958458][T14039]  tun_chr_write_iter+0x119/0x200
[  690.958486][T14039]  vfs_write+0x61e/0xbb0
[  690.958510][T14039]  ksys_write+0x156/0x270
[  690.958562][T14039]  do_syscall_64+0x174/0x580
[  690.958594][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.958617][T14039] page last free pid 13809 tgid 13809 stack trace:
[  690.958631][T14039]  free_unref_folios+0xcd4/0x1910
[  690.958650][T14039]  folios_put_refs+0x815/0x920
[  690.958685][T14039]  shmem_undo_range+0x4e6/0x15d0
[  690.958715][T14039]  shmem_evict_inode+0x280/0xa80
[  690.958738][T14039]  evict+0x624/0xb50
[  690.958764][T14039]  dentry_kill+0x1b9/0x880
[  690.958791][T14039]  finish_dput+0x1a/0x260
[  690.958810][T14039]  __fput+0x699/0xa80
[  690.958827][T14039]  task_work_run+0x1d9/0x270
[  690.958861][T14039]  exit_to_user_mode_loop+0x1fa/0x730
[  690.958882][T14039]  do_syscall_64+0x353/0x580
[  690.958911][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.958934][T14039] Modules linked in:
[  690.958958][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  690.958992][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  690.959001][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  690.959015][T14039] Call Trace:
[  690.959025][T14039]  <TASK>
[  690.959035][T14039]  dump_stack_lvl+0xe8/0x150
[  690.959072][T14039]  bad_page+0x17f/0x1c0
[  690.959102][T14039]  __free_frozen_pages+0x1172/0x11c0
[  690.959142][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  690.959179][T14039]  ? compound_order+0x5b/0x90
[  690.959225][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  690.959263][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  690.959300][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  690.959320][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  690.959359][T14039]  do_xdp_generic+0x894/0xed0
[  690.959383][T14039]  ? __lock_acquire+0x683/0x2ce0
[  690.959410][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  690.959440][T14039]  ? tun_get_user+0x2336/0x4380
[  690.959474][T14039]  ? rcu_is_watching+0x15/0xb0
[  690.959499][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  690.959527][T14039]  ? tun_get_user+0x2336/0x4380
[  690.959556][T14039]  tun_get_user+0x2463/0x4380
[  690.959585][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  690.959631][T14039]  ? update_load_avg+0x1be/0x1950
[  690.959672][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  690.959704][T14039]  ? __lock_acquire+0x683/0x2ce0
[  690.959734][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  690.959769][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  690.959803][T14039]  ? tun_get+0x1c/0x2f0
[  690.959831][T14039]  ? tun_get+0x1c/0x2f0
[  690.959863][T14039]  ? tun_get+0x1c/0x2f0
[  690.959891][T14039]  ? tun_get+0x1c/0x2f0
[  690.959922][T14039]  tun_chr_write_iter+0x119/0x200
[  690.959953][T14039]  vfs_write+0x61e/0xbb0
[  690.959983][T14039]  ? __pfx_vfs_write+0x10/0x10
[  690.960013][T14039]  ? __fget_files+0x2a/0x420
[  690.960039][T14039]  ksys_write+0x156/0x270
[  690.960065][T14039]  ? __pfx_ksys_write+0x10/0x10
[  690.960096][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.960119][T14039]  do_syscall_64+0x174/0x580
[  690.960150][T14039]  ? clear_bhb_loop+0x40/0x90
[  690.960174][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.960197][T14039] RIP: 0033:0x7fdb0a43e68e
[  690.960226][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  690.960247][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  690.960271][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  690.960290][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  690.960306][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  690.960321][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.960336][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  690.960364][T14039]  </TASK>
[  690.960377][T14039] BUG: Bad page state in process syz.1.2610  pfn:539d1
[  690.960392][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x450 pfn:0x539d1
[  690.960411][T14039] flags: 0x80000000000000(node=0|zone=1)
[  690.960437][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  690.960457][T14039] raw: 0000000000000450 0000000000000001 00000000ffffffff 0000000000000000
[  690.960469][T14039] page dumped because: page_pool leak
[  690.960479][T14039] page_owner tracks the page as allocated
[  690.960489][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690474770373, free_ts 678343865918
[  690.960522][T14039]  post_alloc_hook+0x1f9/0x250
[  690.960557][T14039]  get_page_from_freelist+0x262a/0x26a0
[  690.960581][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  690.960605][T14039]  __alloc_pages_noprof+0x10/0x100
[  690.960628][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  690.960650][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  690.960677][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  690.960710][T14039]  do_xdp_generic+0x5f2/0xed0
[  690.960732][T14039]  tun_get_user+0x2463/0x4380
[  690.960759][T14039]  tun_chr_write_iter+0x119/0x200
[  690.960787][T14039]  vfs_write+0x61e/0xbb0
[  690.960810][T14039]  ksys_write+0x156/0x270
[  690.960834][T14039]  do_syscall_64+0x174/0x580
[  690.960864][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.960886][T14039] page last free pid 13809 tgid 13809 stack trace:
[  690.960900][T14039]  free_unref_folios+0xcd4/0x1910
[  690.960919][T14039]  folios_put_refs+0x815/0x920
[  690.960953][T14039]  shmem_undo_range+0x4e6/0x15d0
[  690.960984][T14039]  shmem_evict_inode+0x280/0xa80
[  690.961007][T14039]  evict+0x624/0xb50
[  690.961032][T14039]  dentry_kill+0x1b9/0x880
[  690.961060][T14039]  finish_dput+0x1a/0x260
[  690.961078][T14039]  __fput+0x699/0xa80
[  690.961096][T14039]  task_work_run+0x1d9/0x270
[  690.961128][T14039]  exit_to_user_mode_loop+0x1fa/0x730
[  690.961149][T14039]  do_syscall_64+0x353/0x580
[  690.961185][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.961215][T14039] Modules linked in:
[  690.961237][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  690.961270][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  690.961280][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  690.961294][T14039] Call Trace:
[  690.961303][T14039]  <TASK>
[  690.961312][T14039]  dump_stack_lvl+0xe8/0x150
[  690.961347][T14039]  bad_page+0x17f/0x1c0
[  690.961378][T14039]  __free_frozen_pages+0x1172/0x11c0
[  690.961420][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  690.961458][T14039]  ? compound_order+0x5b/0x90
[  690.961493][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  690.961530][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  690.961565][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  690.961585][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  690.961623][T14039]  do_xdp_generic+0x894/0xed0
[  690.961647][T14039]  ? __lock_acquire+0x683/0x2ce0
[  690.961673][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  690.961703][T14039]  ? tun_get_user+0x2336/0x4380
[  690.961737][T14039]  ? rcu_is_watching+0x15/0xb0
[  690.961762][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  690.961792][T14039]  ? tun_get_user+0x2336/0x4380
[  690.961820][T14039]  tun_get_user+0x2463/0x4380
[  690.961850][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  690.961895][T14039]  ? update_load_avg+0x1be/0x1950
[  690.961928][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  690.961959][T14039]  ? __lock_acquire+0x683/0x2ce0
[  690.961988][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  690.962021][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  690.962055][T14039]  ? tun_get+0x1c/0x2f0
[  690.962083][T14039]  ? tun_get+0x1c/0x2f0
[  690.962115][T14039]  ? tun_get+0x1c/0x2f0
[  690.962143][T14039]  ? tun_get+0x1c/0x2f0
[  690.962175][T14039]  tun_chr_write_iter+0x119/0x200
[  690.962215][T14039]  vfs_write+0x61e/0xbb0
[  690.962245][T14039]  ? __pfx_vfs_write+0x10/0x10
[  690.962277][T14039]  ? __fget_files+0x2a/0x420
[  690.962305][T14039]  ksys_write+0x156/0x270
[  690.962332][T14039]  ? __pfx_ksys_write+0x10/0x10
[  690.962363][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.962386][T14039]  do_syscall_64+0x174/0x580
[  690.962416][T14039]  ? clear_bhb_loop+0x40/0x90
[  690.962441][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.962464][T14039] RIP: 0033:0x7fdb0a43e68e
[  690.962483][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  690.962502][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  690.962525][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  690.962542][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  690.962557][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  690.962572][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.962587][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  690.962614][T14039]  </TASK>
[  690.962626][T14039] BUG: Bad page state in process syz.1.2610  pfn:539d0
[  690.962641][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x539d0
[  690.962663][T14039] flags: 0x80000000000000(node=0|zone=1)
[  690.962688][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  690.962709][T14039] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  690.962721][T14039] page dumped because: page_pool leak
[  690.962731][T14039] page_owner tracks the page as allocated
[  690.962740][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690474728040, free_ts 678248773777
[  690.962775][T14039]  post_alloc_hook+0x1f9/0x250
[  690.962807][T14039]  get_page_from_freelist+0x262a/0x26a0
[  690.962831][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  690.962855][T14039]  __alloc_pages_noprof+0x10/0x100
[  690.962878][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  690.962900][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  690.962927][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  690.962956][T14039]  do_xdp_generic+0x5f2/0xed0
[  690.962978][T14039]  tun_get_user+0x2463/0x4380
[  690.963005][T14039]  tun_chr_write_iter+0x119/0x200
[  690.963034][T14039]  vfs_write+0x61e/0xbb0
[  690.963057][T14039]  ksys_write+0x156/0x270
[  690.963080][T14039]  do_syscall_64+0x174/0x580
[  690.963116][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.963138][T14039] page last free pid 28 tgid 28 stack trace:
[  690.963150][T14039]  __free_frozen_pages+0x10e7/0x11c0
[  690.963185][T14039]  tlb_remove_table_rcu+0x85/0x100
[  690.963222][T14039]  rcu_cpu_kthread+0x950/0x1480
[  690.963244][T14039]  smpboot_thread_fn+0x57c/0xa80
[  690.963273][T14039]  kthread+0x388/0x470
[  690.963302][T14039]  ret_from_fork+0x514/0xb70
[  690.963334][T14039]  ret_from_fork_asm+0x1a/0x30
[  690.963356][T14039] Modules linked in:
[  690.963377][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  690.963408][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  690.963418][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  690.963431][T14039] Call Trace:
[  690.963439][T14039]  <TASK>
[  690.963448][T14039]  dump_stack_lvl+0xe8/0x150
[  690.963481][T14039]  bad_page+0x17f/0x1c0
[  690.963511][T14039]  __free_frozen_pages+0x1172/0x11c0
[  690.963553][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  690.963589][T14039]  ? compound_order+0x5b/0x90
[  690.963627][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  690.963662][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  690.963697][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  690.963716][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  690.963756][T14039]  do_xdp_generic+0x894/0xed0
[  690.963779][T14039]  ? __lock_acquire+0x683/0x2ce0
[  690.963805][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  690.963836][T14039]  ? tun_get_user+0x2336/0x4380
[  690.963869][T14039]  ? rcu_is_watching+0x15/0xb0
[  690.963894][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  690.963922][T14039]  ? tun_get_user+0x2336/0x4380
[  690.963951][T14039]  tun_get_user+0x2463/0x4380
[  690.963980][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  690.964026][T14039]  ? update_load_avg+0x1be/0x1950
[  690.964060][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  690.964090][T14039]  ? __lock_acquire+0x683/0x2ce0
[  690.964119][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  690.964152][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  690.964183][T14039]  ? tun_get+0x1c/0x2f0
[  690.964221][T14039]  ? tun_get+0x1c/0x2f0
[  690.964254][T14039]  ? tun_get+0x1c/0x2f0
[  690.964282][T14039]  ? tun_get+0x1c/0x2f0
[  690.964313][T14039]  tun_chr_write_iter+0x119/0x200
[  690.964345][T14039]  vfs_write+0x61e/0xbb0
[  690.964375][T14039]  ? __pfx_vfs_write+0x10/0x10
[  690.964406][T14039]  ? __fget_files+0x2a/0x420
[  690.964431][T14039]  ksys_write+0x156/0x270
[  690.964458][T14039]  ? __pfx_ksys_write+0x10/0x10
[  690.964488][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.964512][T14039]  do_syscall_64+0x174/0x580
[  690.964547][T14039]  ? clear_bhb_loop+0x40/0x90
[  690.964571][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.964594][T14039] RIP: 0033:0x7fdb0a43e68e
[  690.964612][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  690.964632][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  690.964654][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  690.964671][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  690.964687][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  690.964701][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.964715][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  690.964742][T14039]  </TASK>
[  691.286904][T14039] BUG: Bad page state in process syz.1.2610  pfn:656b9
[  691.286931][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x49a pfn:0x656b9
[  691.286954][T14039] flags: 0x80000000000000(node=0|zone=1)
[  691.286983][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  691.287003][T14039] raw: 000000000000049a 0000000000000001 00000000ffffffff 0000000000000000
[  691.287017][T14039] page dumped because: page_pool leak
[  691.287029][T14039] page_owner tracks the page as allocated
[  691.287038][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690471264416, free_ts 686742514326
[  691.287075][T14039]  post_alloc_hook+0x1f9/0x250
[  691.287112][T14039]  get_page_from_freelist+0x262a/0x26a0
[  691.287137][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  691.287163][T14039]  __alloc_pages_noprof+0x10/0x100
[  691.287193][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  691.287216][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  691.287243][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  691.287275][T14039]  do_xdp_generic+0x5f2/0xed0
[  691.287299][T14039]  tun_get_user+0x2463/0x4380
[  691.287328][T14039]  tun_chr_write_iter+0x119/0x200
[  691.287357][T14039]  vfs_write+0x61e/0xbb0
[  691.287380][T14039]  ksys_write+0x156/0x270
[  691.287405][T14039]  do_syscall_64+0x174/0x580
[  691.287435][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.287458][T14039] page last free pid 20 tgid 20 stack trace:
[  691.287470][T14039]  __free_frozen_pages+0x10e7/0x11c0
[  691.287504][T14039]  tlb_remove_table_rcu+0x85/0x100
[  691.287529][T14039]  rcu_cpu_kthread+0x950/0x1480
[  691.287551][T14039]  smpboot_thread_fn+0x57c/0xa80
[  691.287581][T14039]  kthread+0x388/0x470
[  691.287611][T14039]  ret_from_fork+0x514/0xb70
[  691.287645][T14039]  ret_from_fork_asm+0x1a/0x30
[  691.287665][T14039] Modules linked in:
[  691.287689][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  691.287723][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  691.287733][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  691.287747][T14039] Call Trace:
[  691.287757][T14039]  <TASK>
[  691.287766][T14039]  dump_stack_lvl+0xe8/0x150
[  691.287803][T14039]  bad_page+0x17f/0x1c0
[  691.287834][T14039]  __free_frozen_pages+0x1172/0x11c0
[  691.287875][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  691.287912][T14039]  ? compound_order+0x5b/0x90
[  691.287949][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  691.287986][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  691.288024][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  691.288045][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  691.288084][T14039]  do_xdp_generic+0x894/0xed0
[  691.288108][T14039]  ? __lock_acquire+0x683/0x2ce0
[  691.288135][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  691.288166][T14039]  ? tun_get_user+0x2336/0x4380
[  691.288208][T14039]  ? rcu_is_watching+0x15/0xb0
[  691.288234][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  691.288266][T14039]  ? tun_get_user+0x2336/0x4380
[  691.288295][T14039]  tun_get_user+0x2463/0x4380
[  691.288326][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  691.288375][T14039]  ? update_load_avg+0x1be/0x1950
[  691.288413][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  691.288444][T14039]  ? __lock_acquire+0x683/0x2ce0
[  691.288472][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  691.288508][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  691.288542][T14039]  ? tun_get+0x1c/0x2f0
[  691.288572][T14039]  ? tun_get+0x1c/0x2f0
[  691.288604][T14039]  ? tun_get+0x1c/0x2f0
[  691.288633][T14039]  ? tun_get+0x1c/0x2f0
[  691.288665][T14039]  tun_chr_write_iter+0x119/0x200
[  691.288697][T14039]  vfs_write+0x61e/0xbb0
[  691.288728][T14039]  ? __pfx_vfs_write+0x10/0x10
[  691.288760][T14039]  ? __fget_files+0x2a/0x420
[  691.288786][T14039]  ksys_write+0x156/0x270
[  691.288814][T14039]  ? __pfx_ksys_write+0x10/0x10
[  691.288846][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.288871][T14039]  do_syscall_64+0x174/0x580
[  691.288902][T14039]  ? clear_bhb_loop+0x40/0x90
[  691.288929][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.288952][T14039] RIP: 0033:0x7fdb0a43e68e
[  691.288972][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  691.288992][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  691.289017][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  691.289036][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  691.289052][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  691.289069][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.289083][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  691.289111][T14039]  </TASK>
[  691.317696][T14036] XFS (nullb0): Invalid superblock magic number
[  692.335732][T14039] BUG: Bad page state in process syz.1.2610  pfn:2b742
[  692.335751][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b742000 pfn:0x2b742
[  692.335768][T14039] flags: 0x80000000000000(node=0|zone=1)
[  692.335787][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  692.335802][T14039] raw: ffff88802b742000 0000000000000001 00000000ffffffff 0000000000000000
[  692.335811][T14039] page dumped because: page_pool leak
[  692.335818][T14039] page_owner tracks the page as allocated
[  692.335824][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690471242590, free_ts 686742974682
[  692.335849][T14039]  post_alloc_hook+0x1f9/0x250
[  692.335903][T14039]  get_page_from_freelist+0x262a/0x26a0
[  692.335928][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  692.335961][T14039]  __alloc_pages_noprof+0x10/0x100
[  692.335977][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  692.335991][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  692.336010][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  692.336032][T14039]  do_xdp_generic+0x5f2/0xed0
[  692.336048][T14039]  tun_get_user+0x2463/0x4380
[  692.336068][T14039]  tun_chr_write_iter+0x119/0x200
[  692.336087][T14039]  vfs_write+0x61e/0xbb0
[  692.336103][T14039]  ksys_write+0x156/0x270
[  692.336118][T14039]  do_syscall_64+0x174/0x580
[  692.336140][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.336154][T14039] page last free pid 20 tgid 20 stack trace:
[  692.336163][T14039]  __free_frozen_pages+0x10e7/0x11c0
[  692.336188][T14039]  tlb_remove_table_rcu+0x85/0x100
[  692.336204][T14039]  rcu_cpu_kthread+0x950/0x1480
[  692.336220][T14039]  smpboot_thread_fn+0x57c/0xa80
[  692.336239][T14039]  kthread+0x388/0x470
[  692.336260][T14039]  ret_from_fork+0x514/0xb70
[  692.336283][T14039]  ret_from_fork_asm+0x1a/0x30
[  692.336297][T14039] Modules linked in:
[  692.336313][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  692.336336][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  692.336343][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  692.336354][T14039] Call Trace:
[  692.336360][T14039]  <TASK>
[  692.336368][T14039]  dump_stack_lvl+0xe8/0x150
[  692.336392][T14039]  bad_page+0x17f/0x1c0
[  692.336414][T14039]  __free_frozen_pages+0x1172/0x11c0
[  692.336442][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  692.336467][T14039]  ? compound_order+0x5b/0x90
[  692.336493][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  692.336517][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  692.336548][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  692.336563][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  692.336589][T14039]  do_xdp_generic+0x894/0xed0
[  692.336605][T14039]  ? __lock_acquire+0x683/0x2ce0
[  692.336624][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  692.336644][T14039]  ? tun_get_user+0x2336/0x4380
[  692.336668][T14039]  ? rcu_is_watching+0x15/0xb0
[  692.336685][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  692.336705][T14039]  ? tun_get_user+0x2336/0x4380
[  692.336727][T14039]  tun_get_user+0x2463/0x4380
[  692.336747][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  692.336778][T14039]  ? update_load_avg+0x1be/0x1950
[  692.336802][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  692.336823][T14039]  ? __lock_acquire+0x683/0x2ce0
[  692.336842][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  692.336866][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  692.336889][T14039]  ? tun_get+0x1c/0x2f0
[  692.336908][T14039]  ? tun_get+0x1c/0x2f0
[  692.336930][T14039]  ? tun_get+0x1c/0x2f0
[  692.336949][T14039]  ? tun_get+0x1c/0x2f0
[  692.336970][T14039]  tun_chr_write_iter+0x119/0x200
[  692.336991][T14039]  vfs_write+0x61e/0xbb0
[  692.337012][T14039]  ? __pfx_vfs_write+0x10/0x10
[  692.337035][T14039]  ? __fget_files+0x2a/0x420
[  692.337054][T14039]  ksys_write+0x156/0x270
[  692.337093][T14039]  ? __pfx_ksys_write+0x10/0x10
[  692.337121][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.337145][T14039]  do_syscall_64+0x174/0x580
[  692.337180][T14039]  ? clear_bhb_loop+0x40/0x90
[  692.337198][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.337214][T14039] RIP: 0033:0x7fdb0a43e68e
[  692.337228][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  692.337241][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  692.337257][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  692.337269][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  692.337280][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  692.337290][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.337299][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  692.337318][T14039]  </TASK>
[  692.489419][T14039] BUG: Bad page state in process syz.1.2610  pfn:6456c
[  692.489437][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6456c
[  692.489453][T14039] flags: 0x80000000000000(node=0|zone=1)
[  692.489488][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  692.489508][T14039] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  692.489530][T14039] page dumped because: page_pool leak
[  692.489543][T14039] page_owner tracks the page as allocated
[  692.489552][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690471216627, free_ts 686766035129
[  692.489590][T14039]  post_alloc_hook+0x1f9/0x250
[  692.489619][T14039]  get_page_from_freelist+0x262a/0x26a0
[  692.489636][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  692.489653][T14039]  __alloc_pages_noprof+0x10/0x100
[  692.489669][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  692.489684][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  692.489704][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  692.489746][T14039]  do_xdp_generic+0x5f2/0xed0
[  692.489769][T14039]  tun_get_user+0x2463/0x4380
[  692.489799][T14039]  tun_chr_write_iter+0x119/0x200
[  692.489828][T14039]  vfs_write+0x61e/0xbb0
[  692.489851][T14039]  ksys_write+0x156/0x270
[  692.489888][T14039]  do_syscall_64+0x174/0x580
[  692.489910][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.489925][T14039] page last free pid 20 tgid 20 stack trace:
[  692.489934][T14039]  __free_frozen_pages+0x10e7/0x11c0
[  692.489958][T14039]  tlb_remove_table_rcu+0x85/0x100
[  692.489976][T14039]  rcu_cpu_kthread+0x950/0x1480
[  692.489991][T14039]  smpboot_thread_fn+0x57c/0xa80
[  692.490011][T14039]  kthread+0x388/0x470
[  692.490034][T14039]  ret_from_fork+0x514/0xb70
[  692.490057][T14039]  ret_from_fork_asm+0x1a/0x30
[  692.490071][T14039] Modules linked in:
[  692.490088][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  692.490111][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  692.490118][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  692.490129][T14039] Call Trace:
[  692.490136][T14039]  <TASK>
[  692.490144][T14039]  dump_stack_lvl+0xe8/0x150
[  692.490168][T14039]  bad_page+0x17f/0x1c0
[  692.490189][T14039]  __free_frozen_pages+0x1172/0x11c0
[  692.490218][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  692.490244][T14039]  ? compound_order+0x5b/0x90
[  692.490271][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  692.490296][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  692.490322][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  692.490337][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  692.490363][T14039]  do_xdp_generic+0x894/0xed0
[  692.490380][T14039]  ? __lock_acquire+0x683/0x2ce0
[  692.490398][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  692.490419][T14039]  ? tun_get_user+0x2336/0x4380
[  692.490442][T14039]  ? rcu_is_watching+0x15/0xb0
[  692.490460][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  692.490481][T14039]  ? tun_get_user+0x2336/0x4380
[  692.490501][T14039]  tun_get_user+0x2463/0x4380
[  692.490527][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  692.490560][T14039]  ? update_load_avg+0x1be/0x1950
[  692.490584][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  692.490605][T14039]  ? __lock_acquire+0x683/0x2ce0
[  692.490625][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  692.490649][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  692.490673][T14039]  ? tun_get+0x1c/0x2f0
[  692.490711][T14039]  ? tun_get+0x1c/0x2f0
[  692.490742][T14039]  ? tun_get+0x1c/0x2f0
[  692.490788][T14039]  ? tun_get+0x1c/0x2f0
[  692.490816][T14039]  tun_chr_write_iter+0x119/0x200
[  692.490839][T14039]  vfs_write+0x61e/0xbb0
[  692.490860][T14039]  ? __pfx_vfs_write+0x10/0x10
[  692.490894][T14039]  ? __fget_files+0x2a/0x420
[  692.490921][T14039]  ksys_write+0x156/0x270
[  692.490952][T14039]  ? __pfx_ksys_write+0x10/0x10
[  692.490982][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.491007][T14039]  do_syscall_64+0x174/0x580
[  692.491039][T14039]  ? clear_bhb_loop+0x40/0x90
[  692.491063][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.491088][T14039] RIP: 0033:0x7fdb0a43e68e
[  692.491102][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  692.491117][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  692.491134][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  692.491146][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  692.491157][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  692.491172][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.491181][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  692.491200][T14039]  </TASK>
[  692.764548][T14039] BUG: Bad page state in process syz.1.2610  pfn:35d6a
[  692.764572][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035d6adc0 pfn:0x35d6a
[  692.764598][T14039] flags: 0x80000000000000(node=0|zone=1)
[  692.764625][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  692.764646][T14039] raw: ffff888035d6adc0 0000000000000001 00000000ffffffff 0000000000000000
[  692.764659][T14039] page dumped because: page_pool leak
[  692.764670][T14039] page_owner tracks the page as allocated
[  692.764679][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690471194082, free_ts 686766056215
[  692.764718][T14039]  post_alloc_hook+0x1f9/0x250
[  692.764758][T14039]  get_page_from_freelist+0x262a/0x26a0
[  692.764837][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  692.764864][T14039]  __alloc_pages_noprof+0x10/0x100
[  692.764887][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  692.764910][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  692.764939][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  692.764973][T14039]  do_xdp_generic+0x5f2/0xed0
[  692.764995][T14039]  tun_get_user+0x2463/0x4380
[  692.765025][T14039]  tun_chr_write_iter+0x119/0x200
[  692.765053][T14039]  vfs_write+0x61e/0xbb0
[  692.765077][T14039]  ksys_write+0x156/0x270
[  692.765101][T14039]  do_syscall_64+0x174/0x580
[  692.765132][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.765155][T14039] page last free pid 20 tgid 20 stack trace:
[  692.765169][T14039]  __free_frozen_pages+0x10e7/0x11c0
[  692.765205][T14039]  tlb_remove_table_rcu+0x85/0x100
[  692.765231][T14039]  rcu_cpu_kthread+0x950/0x1480
[  692.765254][T14039]  smpboot_thread_fn+0x57c/0xa80
[  692.765283][T14039]  kthread+0x388/0x470
[  692.765314][T14039]  ret_from_fork+0x514/0xb70
[  692.765349][T14039]  ret_from_fork_asm+0x1a/0x30
[  692.765370][T14039] Modules linked in:
[  692.765395][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  692.765429][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  692.765439][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  692.765454][T14039] Call Trace:
[  692.765464][T14039]  <TASK>
[  692.765473][T14039]  dump_stack_lvl+0xe8/0x150
[  692.765519][T14039]  bad_page+0x17f/0x1c0
[  692.765549][T14039]  __free_frozen_pages+0x1172/0x11c0
[  692.765590][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  692.765627][T14039]  ? compound_order+0x5b/0x90
[  692.765664][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  692.765708][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  692.765745][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  692.765767][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  692.765805][T14039]  do_xdp_generic+0x894/0xed0
[  692.765830][T14039]  ? __lock_acquire+0x683/0x2ce0
[  692.765857][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  692.765893][T14039]  ? tun_get_user+0x2336/0x4380
[  692.765935][T14039]  ? rcu_is_watching+0x15/0xb0
[  692.765961][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  692.766007][T14039]  ? tun_get_user+0x2336/0x4380
[  692.766038][T14039]  tun_get_user+0x2463/0x4380
[  692.766069][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  692.766115][T14039]  ? update_load_avg+0x1be/0x1950
[  692.766149][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  692.766181][T14039]  ? __lock_acquire+0x683/0x2ce0
[  692.766209][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  692.766245][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  692.766279][T14039]  ? tun_get+0x1c/0x2f0
[  692.766307][T14039]  ? tun_get+0x1c/0x2f0
[  692.766340][T14039]  ? tun_get+0x1c/0x2f0
[  692.766368][T14039]  ? tun_get+0x1c/0x2f0
[  692.766399][T14039]  tun_chr_write_iter+0x119/0x200
[  692.766431][T14039]  vfs_write+0x61e/0xbb0
[  692.766462][T14039]  ? __pfx_vfs_write+0x10/0x10
[  692.766494][T14039]  ? __fget_files+0x2a/0x420
[  692.766528][T14039]  ksys_write+0x156/0x270
[  692.766555][T14039]  ? __pfx_ksys_write+0x10/0x10
[  692.766584][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.766609][T14039]  do_syscall_64+0x174/0x580
[  692.766641][T14039]  ? clear_bhb_loop+0x40/0x90
[  692.766668][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.766691][T14039] RIP: 0033:0x7fdb0a43e68e
[  692.766712][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  692.766733][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  692.766757][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  692.766775][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  692.766791][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  692.766806][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.766821][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  692.766848][T14039]  </TASK>
[  693.139197][T14039] BUG: Bad page state in process syz.1.2610  pfn:2580f
[  693.139221][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802580f000 pfn:0x2580f
[  693.139245][T14039] flags: 0x80000000000000(node=0|zone=1)
[  693.139272][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  693.139304][T14039] raw: ffff88802580f000 0000000000000001 00000000ffffffff 0000000000000000
[  693.139315][T14039] page dumped because: page_pool leak
[  693.139325][T14039] page_owner tracks the page as allocated
[  693.139333][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690471170515, free_ts 686766086982
[  693.139368][T14039]  post_alloc_hook+0x1f9/0x250
[  693.139405][T14039]  get_page_from_freelist+0x262a/0x26a0
[  693.139429][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  693.139462][T14039]  __alloc_pages_noprof+0x10/0x100
[  693.139484][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  693.139506][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  693.139551][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  693.139590][T14039]  do_xdp_generic+0x5f2/0xed0
[  693.139613][T14039]  tun_get_user+0x2463/0x4380
[  693.139642][T14039]  tun_chr_write_iter+0x119/0x200
[  693.139671][T14039]  vfs_write+0x61e/0xbb0
[  693.139695][T14039]  ksys_write+0x156/0x270
[  693.139719][T14039]  do_syscall_64+0x174/0x580
[  693.139750][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.139772][T14039] page last free pid 20 tgid 20 stack trace:
[  693.139785][T14039]  __free_frozen_pages+0x10e7/0x11c0
[  693.139820][T14039]  tlb_remove_table_rcu+0x85/0x100
[  693.139845][T14039]  rcu_cpu_kthread+0x950/0x1480
[  693.139868][T14039]  smpboot_thread_fn+0x57c/0xa80
[  693.139896][T14039]  kthread+0x388/0x470
[  693.139927][T14039]  ret_from_fork+0x514/0xb70
[  693.139958][T14039]  ret_from_fork_asm+0x1a/0x30
[  693.139979][T14039] Modules linked in:
[  693.140003][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  693.140034][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  693.140043][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  693.140057][T14039] Call Trace:
[  693.140066][T14039]  <TASK>
[  693.140076][T14039]  dump_stack_lvl+0xe8/0x150
[  693.140112][T14039]  bad_page+0x17f/0x1c0
[  693.140142][T14039]  __free_frozen_pages+0x1172/0x11c0
[  693.140184][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  693.140221][T14039]  ? compound_order+0x5b/0x90
[  693.140262][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  693.140300][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  693.140338][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  693.140359][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  693.140397][T14039]  do_xdp_generic+0x894/0xed0
[  693.140422][T14039]  ? __lock_acquire+0x683/0x2ce0
[  693.140449][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  693.140479][T14039]  ? tun_get_user+0x2336/0x4380
[  693.140513][T14039]  ? rcu_is_watching+0x15/0xb0
[  693.140539][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  693.140577][T14039]  ? tun_get_user+0x2336/0x4380
[  693.140605][T14039]  tun_get_user+0x2463/0x4380
[  693.140634][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  693.140680][T14039]  ? update_load_avg+0x1be/0x1950
[  693.140715][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  693.140745][T14039]  ? __lock_acquire+0x683/0x2ce0
[  693.140774][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  693.140808][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  693.140841][T14039]  ? tun_get+0x1c/0x2f0
[  693.140869][T14039]  ? tun_get+0x1c/0x2f0
[  693.140901][T14039]  ? tun_get+0x1c/0x2f0
[  693.140929][T14039]  ? tun_get+0x1c/0x2f0
[  693.140962][T14039]  tun_chr_write_iter+0x119/0x200
[  693.140991][T14039]  vfs_write+0x61e/0xbb0
[  693.141022][T14039]  ? __pfx_vfs_write+0x10/0x10
[  693.141053][T14039]  ? __fget_files+0x2a/0x420
[  693.141079][T14039]  ksys_write+0x156/0x270
[  693.141106][T14039]  ? __pfx_ksys_write+0x10/0x10
[  693.141137][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.141162][T14039]  do_syscall_64+0x174/0x580
[  693.141195][T14039]  ? clear_bhb_loop+0x40/0x90
[  693.141222][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.141245][T14039] RIP: 0033:0x7fdb0a43e68e
[  693.141263][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  693.141283][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  693.141307][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  693.141324][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  693.141339][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  693.141354][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  693.141369][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  693.141396][T14039]  </TASK>
[  693.595915][ T5736] usb 1-1: USB disconnect, device number 57
[  693.601965][T14039] BUG: Bad page state in process syz.1.2610  pfn:5d879
[  693.601987][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805d879dc0 pfn:0x5d879
[  693.602011][T14039] flags: 0x80000000000000(node=0|zone=1)
[  693.602037][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  693.602059][T14039] raw: ffff88805d879dc0 0000000000000001 00000000ffffffff 0000000000000000
[  693.602071][T14039] page dumped because: page_pool leak
[  693.602082][T14039] page_owner tracks the page as allocated
[  693.602091][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690471137623, free_ts 686766117616
[  693.602127][T14039]  post_alloc_hook+0x1f9/0x250
[  693.602165][T14039]  get_page_from_freelist+0x262a/0x26a0
[  693.602189][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  693.602212][T14039]  __alloc_pages_noprof+0x10/0x100
[  693.602234][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  693.602258][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  693.602285][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  693.602316][T14039]  do_xdp_generic+0x5f2/0xed0
[  693.602339][T14039]  tun_get_user+0x2463/0x4380
[  693.602369][T14039]  tun_chr_write_iter+0x119/0x200
[  693.602397][T14039]  vfs_write+0x61e/0xbb0
[  693.602421][T14039]  ksys_write+0x156/0x270
[  693.602443][T14039]  do_syscall_64+0x174/0x580
[  693.602472][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.602494][T14039] page last free pid 20 tgid 20 stack trace:
[  693.602506][T14039]  __free_frozen_pages+0x10e7/0x11c0
[  693.602550][T14039]  tlb_remove_table_rcu+0x85/0x100
[  693.602576][T14039]  rcu_cpu_kthread+0x950/0x1480
[  693.602599][T14039]  smpboot_thread_fn+0x57c/0xa80
[  693.602628][T14039]  kthread+0x388/0x470
[  693.602659][T14039]  ret_from_fork+0x514/0xb70
[  693.602692][T14039]  ret_from_fork_asm+0x1a/0x30
[  693.602714][T14039] Modules linked in:
[  693.602738][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  693.602771][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  693.602781][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  693.602795][T14039] Call Trace:
[  693.602805][T14039]  <TASK>
[  693.602815][T14039]  dump_stack_lvl+0xe8/0x150
[  693.602851][T14039]  bad_page+0x17f/0x1c0
[  693.602881][T14039]  __free_frozen_pages+0x1172/0x11c0
[  693.602923][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  693.602961][T14039]  ? compound_order+0x5b/0x90
[  693.602999][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  693.603036][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  693.603072][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  693.603088][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  693.603124][T14039]  do_xdp_generic+0x894/0xed0
[  693.603147][T14039]  ? __lock_acquire+0x683/0x2ce0
[  693.603174][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  693.603205][T14039]  ? tun_get_user+0x2336/0x4380
[  693.603240][T14039]  ? rcu_is_watching+0x15/0xb0
[  693.603266][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  693.603297][T14039]  ? tun_get_user+0x2336/0x4380
[  693.603326][T14039]  tun_get_user+0x2463/0x4380
[  693.603356][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  693.603403][T14039]  ? update_load_avg+0x1be/0x1950
[  693.603437][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  693.603475][T14039]  ? __lock_acquire+0x683/0x2ce0
[  693.603505][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  693.603547][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  693.603581][T14039]  ? tun_get+0x1c/0x2f0
[  693.603611][T14039]  ? tun_get+0x1c/0x2f0
[  693.603643][T14039]  ? tun_get+0x1c/0x2f0
[  693.603672][T14039]  ? tun_get+0x1c/0x2f0
[  693.603702][T14039]  tun_chr_write_iter+0x119/0x200
[  693.603732][T14039]  vfs_write+0x61e/0xbb0
[  693.603761][T14039]  ? __pfx_vfs_write+0x10/0x10
[  693.603789][T14039]  ? __fget_files+0x2a/0x420
[  693.603814][T14039]  ksys_write+0x156/0x270
[  693.603840][T14039]  ? __pfx_ksys_write+0x10/0x10
[  693.603869][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.603892][T14039]  do_syscall_64+0x174/0x580
[  693.603923][T14039]  ? clear_bhb_loop+0x40/0x90
[  693.603949][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.603971][T14039] RIP: 0033:0x7fdb0a43e68e
[  693.603990][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  693.604010][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  693.604034][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  693.604052][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  693.604068][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  693.604082][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  693.604097][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  693.604124][T14039]  </TASK>
[  693.800872][T14039] BUG: Bad page state in process syz.1.2610  pfn:5f51d
[  693.800897][T14039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5f51d
[  693.800921][T14039] flags: 0x80000000000000(node=0|zone=1)
[  693.800946][T14039] raw: 0080000000000000 dead000000000040 ffff88801ab68000 0000000000000000
[  693.800967][T14039] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  693.800980][T14039] page dumped because: page_pool leak
[  693.800991][T14039] page_owner tracks the page as allocated
[  693.801001][T14039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14039, tgid 14035 (syz.1.2610), ts 690471115279, free_ts 686766148354
[  693.801040][T14039]  post_alloc_hook+0x1f9/0x250
[  693.845934][T14039]  get_page_from_freelist+0x262a/0x26a0
[  693.845975][T14039]  __alloc_frozen_pages_noprof+0x18d/0x380
[  693.845998][T14039]  __alloc_pages_noprof+0x10/0x100
[  693.846021][T14039]  alloc_pages_bulk_noprof+0x67e/0x890
[  693.846044][T14039]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  693.846071][T14039]  skb_pp_cow_data+0xcd0/0x19a0
[  693.846101][T14039]  do_xdp_generic+0x5f2/0xed0
[  693.846124][T14039]  tun_get_user+0x2463/0x4380
[  693.846153][T14039]  tun_chr_write_iter+0x119/0x200
[  693.846181][T14039]  vfs_write+0x61e/0xbb0
[  693.846205][T14039]  ksys_write+0x156/0x270
[  693.846230][T14039]  do_syscall_64+0x174/0x580
[  693.846260][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.846282][T14039] page last free pid 20 tgid 20 stack trace:
[  693.846296][T14039]  __free_frozen_pages+0x10e7/0x11c0
[  693.846331][T14039]  tlb_remove_table_rcu+0x85/0x100
[  693.846355][T14039]  rcu_cpu_kthread+0x950/0x1480
[  693.846377][T14039]  smpboot_thread_fn+0x57c/0xa80
[  693.846405][T14039]  kthread+0x388/0x470
[  693.846436][T14039]  ret_from_fork+0x514/0xb70
[  693.846477][T14039]  ret_from_fork_asm+0x1a/0x30
[  693.846498][T14039] Modules linked in:
[  693.846522][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.2610 Tainted: G    B        L      syzkaller #0 PREEMPT_{RT,(full)} 
[  693.846556][T14039] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  693.846566][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  693.846580][T14039] Call Trace:
[  693.846589][T14039]  <TASK>
[  693.846599][T14039]  dump_stack_lvl+0xe8/0x150
[  693.846634][T14039]  bad_page+0x17f/0x1c0
[  693.846659][T14039]  __free_frozen_pages+0x1172/0x11c0
[  693.846691][T14039]  ? __pfx___free_frozen_pages+0x10/0x10
[  693.846720][T14039]  ? compound_order+0x5b/0x90
[  693.846751][T14039]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  693.846780][T14039]  bpf_xdp_adjust_tail+0x1ce/0x210
[  693.846808][T14039]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  693.846824][T14039]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  693.846853][T14039]  do_xdp_generic+0x894/0xed0
[  693.846872][T14039]  ? __lock_acquire+0x683/0x2ce0
[  693.846893][T14039]  ? __pfx_do_xdp_generic+0x10/0x10
[  693.846916][T14039]  ? tun_get_user+0x2336/0x4380
[  693.846943][T14039]  ? rcu_is_watching+0x15/0xb0
[  693.846965][T14039]  ? __local_bh_disable_ip+0x3c/0x420
[  693.846989][T14039]  ? tun_get_user+0x2336/0x4380
[  693.847011][T14039]  tun_get_user+0x2463/0x4380
[  693.847034][T14039]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  693.847071][T14039]  ? update_load_avg+0x1be/0x1950
[  693.847098][T14039]  ? __pfx_tun_get_user+0x10/0x10
[  693.847122][T14039]  ? __lock_acquire+0x683/0x2ce0
[  693.847145][T14039]  ? ref_tracker_alloc+0x353/0x4c0
[  693.847172][T14039]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  693.847198][T14039]  ? tun_get+0x1c/0x2f0
[  693.847550][T14039]  ? tun_get+0x1c/0x2f0
[  693.847642][T14039]  ? tun_get+0x1c/0x2f0
[  693.847686][T14039]  ? tun_get+0x1c/0x2f0
[  693.847723][T14039]  tun_chr_write_iter+0x119/0x200
[  693.847750][T14039]  vfs_write+0x61e/0xbb0
[  693.847774][T14039]  ? __pfx_vfs_write+0x10/0x10
[  693.847798][T14039]  ? __fget_files+0x2a/0x420
[  693.847818][T14039]  ksys_write+0x156/0x270
[  693.847840][T14039]  ? __pfx_ksys_write+0x10/0x10
[  693.847864][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.847883][T14039]  do_syscall_64+0x174/0x580
[  693.847911][T14039]  ? clear_bhb_loop+0x40/0x90
[  693.847932][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.847952][T14039] RIP: 0033:0x7fdb0a43e68e
[  693.847977][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  693.847993][T14039] RSP: 002b:00007fdb086b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  693.848013][T14039] RAX: ffffffffffffffda RBX: 00007fdb086b56c0 RCX: 00007fdb0a43e68e
[  693.848026][T14039] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8
[  693.848039][T14039] RBP: 00007fdb0a513e6f R08: 0000000000000000 R09: 0000000000000000
[  693.848050][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  693.848067][T14039] R13: 00007fdb0a706128 R14: 00007fdb0a706090 R15: 00007ffe99d389e8
[  693.848088][T14039]  </TASK>