last executing test programs: 11m40.655923447s ago: executing program 2 (id=553): semop(0x0, &(0x7f0000000080), 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) 11m40.484308045s ago: executing program 2 (id=556): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, 0x0, 0x0, 0x42, 0x0) 11m40.225817039s ago: executing program 2 (id=560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f00), 0x0, 0x40408d1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0xfedc, 0xe}, &(0x7f00000009c0)=0x90) 11m40.005558695s ago: executing program 2 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 11m39.731699137s ago: executing program 2 (id=569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) 11m38.703933304s ago: executing program 2 (id=584): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, 0x0, 0x0, 0x42, 0x0) 11m38.259257456s ago: executing program 32 (id=584): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, 0x0, 0x0, 0x42, 0x0) 9.272614739s ago: executing program 3 (id=5397): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)={0x40, 0xa, 0x6, "001329bf77d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x7, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x8404) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000001180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b703000000000100850000008e00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x1000, 0x7, 0x21, 0xffff7fa3}, {0x339e, 0x9a, 0x8, 0x1}, {0x7f, 0x9, 0x5, 0x4a62}]}) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000000)={0x200001fe0000, 0x2}) mmap$KVM_VCPU(&(0x7f0000001000/0x4000)=nil, 0x930, 0x3000008, 0x12, r10, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000040)={0x0, 0x6}, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.824055535s ago: executing program 1 (id=5403): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x8000, 0x1, 0x1, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x64010100}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) io_setup(0x8, &(0x7f00000001c0)=0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r10, &(0x7f0000000040)="c292dfb4929a", 0x6, 0x7, 0x0, 0x2}]) write$binfmt_misc(r10, &(0x7f0000000300)="2aeda85dfc7c517e3095846fd46ff3b27f1552ef9f5114eb140442b87996298342f37c93e30d143e18490063ce6d7eca728670ba70c50a8ba3dbffd464af93cc4d8e9ac21e90ccfbe886acdc474bc6dff63ee0e7d6edc43da0835349b41bb68657403f9fc436d514f074dccb2751fa032bac7671a9c45b44e38d7c1de312a21a9358dd12c2a0c6a27701a5e8fcc0f47a35d9ba6a8ccd24c2a4c00d8d4a95b39248b00da1950d41b5a3b263e4d53023427494d3ccb083db2a38430c5de8172a7acccc93080e56953fea4f3b55fca6876b566469f1b22ef50d07e26a7e312b72ca1cf2df493d88", 0xe6) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030026bd7000fcdbdf251500000008000300", @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) 6.371750564s ago: executing program 1 (id=5416): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='net/fib_trie\x00') preadv(r0, &(0x7f0000002440)=[{&(0x7f0000002080)=""/36, 0x24}], 0x1, 0x9f, 0x6) kexec_load(0x3, 0x22, &(0x7f00000002c0), 0x80000) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x405}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec77a000) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) read$FUSE(r3, &(0x7f0000004840)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x418, 0x2b0, 0xa8, 0xffffffff, 0xa8, 0x190, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, &(0x7f0000000000), {[{{@ip={@remote, @loopback, 0xff000000, 0xffffffff, 'bridge_slave_0\x00', 'dvmrp0\x00', {}, {0xff}, 0x72, 0x1, 0x2}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @empty, @loopback, @gre_key=0x10, @icmp_id=0x66}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 'pim6reg0\x00', 'macvlan0\x00', {}, {}, 0xc, 0x2, 0x1}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0xa, 0x9], 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x19, @ipv4=@remote, @ipv4=@multicast2, @icmp_id=0x68, @gre_key=0x2}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x1}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb, 0x2, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @loopback, @private=0xa010100, @icmp_id=0x67, @port=0x4e23}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x0, 0x6, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @empty, @broadcast, @icmp_id=0x68, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x25, 0x0, 0x0) 4.399958491s ago: executing program 4 (id=5429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000040fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.324411524s ago: executing program 4 (id=5431): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x3000000) 3.967449012s ago: executing program 4 (id=5437): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x9000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x9000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) (async) 3.771749465s ago: executing program 4 (id=5438): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) pidfd_getfd(r0, r0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) 3.302212087s ago: executing program 1 (id=5440): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r0, &(0x7f0000000040)=""/41, 0x66) getdents64(r0, &(0x7f0000001600)=""/4105, 0x1009) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) 3.175870591s ago: executing program 0 (id=5441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7d, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1000000, 0x20002f8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006120a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160005000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d36a80, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3.175619371s ago: executing program 3 (id=5442): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5], 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350073797a5f74756e000000000077eef46608000a00", @ANYRES32=r1], 0x3c}}, 0x8000) 2.962662629s ago: executing program 1 (id=5443): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x15c, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xb}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x7}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x42}}, @filter_kind_options=@f_basic={{0xa}, {0x104, 0x2, [@TCA_BASIC_ACT={0x100, 0x3, [@m_sample={0x50, 0x1e, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x11, 0x6, "64a8416e1a2ad4f08a507ade20"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xac, 0x0, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x39, 0x6, "2dbf268a304e872a0d7f589c8901efee8571a53c4f0062991873d363eeca75f7594e303fa6758fe5d09d4f9ffd072918848212ec18"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000006c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x4}}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 2.959387808s ago: executing program 3 (id=5444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000001c0)={{0xeeef0000, 0x6000, 0x9, 0x4, 0xae, 0x88, 0x9c, 0x7, 0x8, 0xf, 0x2, 0x8d}, {0x200000, 0x7000, 0x8, 0xc, 0x6, 0x3, 0x6, 0x0, 0x3, 0x2, 0x8, 0x80}, {0x41000, 0x80a0000, 0xb, 0x5, 0xfd, 0x25, 0x2, 0x1, 0x40, 0x9, 0xc, 0x4}, {0x8000000, 0x30000, 0xf, 0x4, 0x4, 0x9, 0x2, 0x40, 0x1, 0x3, 0x1}, {0xd000, 0x30000, 0xa, 0x10, 0x5, 0x81, 0x1, 0xaf, 0x0, 0x8d, 0x52, 0x6}, {0x4000, 0xffff1000, 0xa, 0x81, 0x1, 0x4, 0x1, 0x2, 0x3, 0x3, 0x1}, {0xeeee8000, 0x26000, 0xb, 0x61, 0x0, 0x81, 0xbf, 0x4, 0x1, 0x4, 0xfe, 0x2}, {0x3000, 0xeeeff000, 0x14, 0x1, 0xf, 0xbe, 0xa, 0x3, 0x2, 0x2, 0x8, 0xfd}, {0x6000, 0x4}, {0x50000, 0x8}, 0xa0000020, 0x0, 0x10000, 0x2080, 0x1, 0x1000, 0xfec00000, 0x1, [0x3, 0x4, 0x9, 0x3]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@deltfilter={0x2c40, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x2c08, 0x2, [@TCA_CGROUP_ACT={0x2c04, 0x1, [@m_connmark={0xe0, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x30, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x2af0, 0x5, 0x0, 0x0, {{0xa}, {0x2ac4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x9, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6, [{0x1, 0x9, 0x0, 0x0, 0x1, 0x2}, {0x3, 0xe, 0x1, 0x1, 0x7, 0x51b}]}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x0, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x5, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x9, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x4, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x10001, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x3, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x8}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x4, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x8, 0x3, 0x6, 0x2, 0x8}, 0x8, 0x8, [{0x100, 0x4, 0x4, 0x585, 0x4, 0x8}]}, [{0x1000, 0x1, 0x8, 0x4, 0x2, 0x9}, {0xbd, 0x2, 0xb, 0xfffffffb, 0x200, 0x8}, {0x0, 0x8, 0x2d2b476, 0xffffffff, 0xfff, 0x9}, {0x136a, 0x1, 0x8, 0x5, 0x9e9, 0x10}, {0x1000, 0x2, 0x8, 0xfffffff9, 0xfffff46e, 0x5}, {0x1, 0xa, 0x0, 0x3, 0x3ff, 0x200}, {0xa, 0x9, 0xe, 0x2, 0x4, 0x2}, {0x3ff, 0x2, 0x1, 0xb, 0x9, 0x5}, {0x5, 0x0, 0x7, 0x6, 0x200}, {0x800, 0x5, 0x2, 0x36, 0xf, 0xf}, {0x5, 0x5, 0x5, 0x6, 0xa, 0x9}, {0x1ff8, 0x3, 0x81, 0x2, 0x5, 0xc340}, {0x3, 0x9, 0x3, 0x0, 0x9c, 0x56}, {0x3, 0x6, 0x3446, 0x2, 0xc, 0x5}, {0x1, 0x9f1, 0x2, 0x1d, 0x10, 0x8}, {0x4, 0xdf2e, 0xffffffff, 0x5, 0x81, 0x6}, {0x5, 0x7, 0x3, 0x80000000, 0x4cb, 0x5}, {0x28000000, 0x0, 0x0, 0x3, 0x526c5f17, 0x3590}, {0x1, 0x0, 0x3, 0x8604, 0x1be, 0x1}, {0x2, 0x1, 0xc, 0xd6, 0x3, 0x8001}, {0x2, 0x6, 0x14769376, 0x4, 0x8, 0x3}, {0xf, 0xfffffffd, 0x8, 0x10000, 0xff, 0x6}, {0x80, 0xdc1, 0x2, 0x0, 0x1000, 0xc6e6}, {0x1d4b, 0x4, 0x9, 0x2, 0x3, 0x100}, {0x8, 0x8000, 0x16, 0x4, 0x3, 0x9}, {0x20000, 0x0, 0x7f, 0x1, 0xd, 0x3e8}, {0xd, 0xc, 0x8, 0x8, 0x4, 0x9}, {0x7b79, 0x1, 0x3d, 0x1, 0xad000000, 0x4}, {0x3ea0, 0x221b, 0x3ff, 0x7, 0x0, 0x4}, {0x2, 0x0, 0x3ff, 0x200, 0x0, 0x824}, {0x1, 0x1, 0x7ff, 0x5, 0x1ff, 0x40}, {0x80000001, 0x6, 0x6dd1, 0x6, 0x9, 0x10000}, {0x4, 0x8000, 0x6, 0x9f37, 0x4, 0xa}, {0x1108, 0x124b, 0x6, 0x4, 0x0, 0xaa}, {0x3, 0xe8, 0xb300000, 0xc2a0, 0x6, 0x3}, {0x1ff, 0x4, 0x2, 0x7f, 0x6, 0x8}, {0x4, 0x2, 0x0, 0xfffffffb, 0x1, 0x4}, {0x9, 0x3, 0x9, 0x5, 0xffffffff, 0x7}, {0x243, 0x4, 0x1, 0x10000, 0x8, 0x8}, {0xfffffdd9, 0xfffffff9, 0x8c, 0x6, 0x5, 0x5}, {0x1, 0xe, 0x5, 0x7fffffff, 0x401, 0x1}, {0x2, 0x4, 0x3ff, 0x6, 0x33, 0xe313}, {0x4, 0x800, 0x9, 0x5, 0x4, 0x1}, {0x0, 0x1000, 0xc, 0x3ff, 0x5b6, 0xf}, {0x1, 0x34, 0xc, 0xc0, 0x6843, 0x270}, {0xe59f, 0x9, 0x80, 0x2, 0x8, 0x8001}, {0x952, 0x5, 0xfffffffe, 0x5fcb6280, 0x80}, {0x10001, 0x0, 0x3ff, 0x2, 0x7f, 0x7fffffff}, {0x403, 0xa, 0x1027, 0x9, 0xbfec, 0x1}, {0xb, 0x6, 0x4, 0xff, 0x1, 0x80}, {0x0, 0xfffffffa, 0x27, 0x3, 0xffff8001, 0x4}, {0x2, 0x4, 0x77b, 0x7fff}, {0xffffffff, 0x40, 0x8, 0x800, 0xffffff81, 0x2}, {0x2, 0x6, 0x87, 0xc93, 0x9, 0x101}, {0x1, 0x87, 0x5, 0x6, 0x2, 0x7}, {0xe9ec, 0xd3a2, 0x6, 0x7, 0x9, 0x9}, {0x1, 0x1, 0x3, 0x401, 0x7ff, 0xd}, {0x100, 0xfffffffe, 0x7, 0x1, 0x524, 0x3}, {0x6, 0x8, 0x8, 0x7, 0x80, 0x3ff}, {0x3, 0x86a6, 0xeb84, 0x0, 0x2, 0x5}, {0x3, 0x9, 0xe, 0x7fffffff, 0x1fe, 0x9}, {0xbf, 0x5, 0x9, 0x6445, 0x6, 0x3}, {0x5, 0x3, 0x93, 0x80d, 0x7e87a331, 0x7}, {0x9, 0x0, 0x1, 0x7f, 0x3, 0xf}, {0x0, 0x8, 0xffffffff, 0x10001, 0xffff, 0x2}, {0xffff, 0x8, 0x5, 0x8, 0xc}, {0x1000, 0x5f, 0x1, 0x80000001, 0x8ca, 0xe3}, {0x10, 0x0, 0x192, 0xc8b, 0x7, 0x400}, {0x1, 0x1, 0x9, 0xffffff00, 0x4, 0x2}, {0x612, 0x198a, 0x81, 0x401, 0x100, 0xae}, {0xb5, 0xc, 0x7, 0x4, 0x6, 0x6e3}, {0x379, 0x5, 0xa, 0xf, 0x1, 0x401}, {0x10001, 0x761, 0x9, 0x6, 0x0, 0x6}, {0x0, 0x0, 0x8, 0xffff, 0x9, 0x1}, {0x1, 0x76b, 0x3, 0x0, 0x8000, 0x8}, {0x2bf50efc, 0x85a, 0x10001, 0x89c1, 0x4, 0xc530}, {0xfffffffc, 0x3, 0xf, 0x467a79b4, 0x5cb, 0x394}, {0x34, 0x9, 0x9, 0xff, 0xff, 0x5}, {0x7ff, 0x4, 0x3, 0x80000000, 0x83a}, {0x8, 0xf, 0x1fffe, 0x3, 0x3, 0xfff}, {0x101, 0x1b20, 0xfffffffd, 0x9, 0xfffffff7, 0x1}, {0x6, 0xa, 0xfffffff9, 0xb, 0x9, 0x2}, {0x81, 0x80, 0x6, 0xea2, 0xffffffff, 0x7ff}, {0xb8cf, 0xcfc6, 0xcdd2, 0x9, 0x4, 0x3}, {0x1, 0x9, 0xfff, 0xe723, 0xb, 0x3}, {0xa, 0x7, 0x9fa, 0x400, 0x7fff, 0x3ff}, {0x2, 0x978, 0x3, 0x80000000, 0x4, 0x3}, {0x4, 0x10001, 0x4, 0x7, 0x5, 0x6}, {0x10001, 0xfffffff7, 0x400, 0x5, 0x7, 0x3}, {0x6, 0x1, 0xd, 0x8, 0x10000, 0x2}, {0xffff7a4d, 0x9, 0x0, 0x4, 0x1, 0x2}, {0x200, 0x6000, 0x5, 0x1, 0x8, 0x3}, {0x54d3, 0x2, 0x5, 0x100, 0x7, 0x3}, {0x1, 0x0, 0xee2, 0x8, 0x6, 0x153}, {0x2, 0x5, 0xf5db, 0x8, 0x9, 0xfff}, {0xdc5d, 0x4, 0x8, 0x3, 0x2, 0xfff}, {0x3ff, 0xdf06, 0x2, 0x2e800, 0x0, 0x2}, {0x7, 0x1000000, 0x8, 0x1, 0x4, 0xe}, {0x0, 0x4, 0x3, 0xd, 0x800, 0x8000}, {0x48, 0x8, 0x6, 0x3, 0x3, 0x40}, {0xe3, 0x204000, 0x6, 0x9, 0xfffffda7, 0x80000001}, {0xfffffffa, 0x230, 0x8, 0x2, 0xffff25b1, 0x8}, {0x8, 0xe54, 0x7f71, 0x6, 0x80, 0xa}, {0xc, 0x5, 0x0, 0x5, 0x28000000, 0x901b}, {0x4, 0x5c65, 0x80000001, 0x3, 0x0, 0x7}, {0x3, 0x3, 0x2, 0x6, 0xfffff74c, 0x7}, {0x8000, 0x3e, 0x9, 0x7fffffff, 0x8000, 0x29}, {0xfff, 0xffff, 0x2, 0x3, 0xd8b, 0x7}, {0x7, 0xd3d3, 0x100, 0x0, 0x6, 0xd}, {0x7, 0x7fff, 0x0, 0x6, 0xffffffff, 0x4}, {0xffffffc0, 0x2, 0x0, 0x1, 0x822, 0x2a5e}, {0x1d, 0x2, 0xd, 0x8, 0x2, 0x7}, {0x80, 0x5, 0x9, 0xfffff97f, 0xa6, 0x7ff}, {0x5, 0x1, 0x7f, 0x3ff, 0x5, 0x2}, {0x9, 0x1, 0x76c6, 0x347, 0x200, 0x2}, {0x9, 0x2e, 0x2, 0x1745, 0x8, 0x7fffffff}, {0x445, 0x9, 0x80000000, 0x3, 0x6, 0x8}, {0x4, 0xfffffffd, 0x5, 0x2, 0x5, 0x5}, {0x2a8d, 0x6, 0x40, 0x80000001, 0xa3, 0x1}, {0x10000, 0x0, 0x7, 0x2, 0x0, 0x5}, {0x9, 0xffffffff, 0x7, 0x101, 0x81, 0x65d7d626}, {0x6, 0x8, 0x3, 0x1, 0xfff, 0x2}, {0x0, 0x1ff, 0x5, 0xfff, 0x6, 0xffffffff}, {0x4, 0xffffffff, 0x1, 0x6, 0xfffffffc, 0xfff}, {0x8, 0x6, 0x71f1, 0x0, 0x2, 0x3}, {0x6, 0x1, 0x7ff, 0x8, 0x3, 0x4}, {0xe, 0x7f, 0xfb, 0x0, 0x6}, {0x7, 0x2, 0x1e3, 0x3, 0x9, 0x61b8ce35}], [{0x3, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5}, {}, {}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x7, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x1}, {0x5}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x2c40}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 2.787549197s ago: executing program 0 (id=5445): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0xfd68) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) syz_clone3(0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) (fail_nth: 3) 2.583651491s ago: executing program 1 (id=5446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) io_setup(0x205, &(0x7f0000002500)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$smackfs_load(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)=0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r5 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x2) ioprio_set$uid(0x3, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x8, 0x1, r6, 0x0}]) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x40084149, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x5c) close(0xffffffffffffffff) memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x0}]) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) 2.282581439s ago: executing program 5 (id=5448): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000040000000700000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="e8538af31213ceeed5bc00c9e57d86c1992054f80b7935ec3b4536b393fd1e9a71383cb1165a016ea9136d510892226f092239add3acc818b3bedd7c29cd614f1e296baf5a3fcb57", 0x48}], 0x1, 0x0, 0x0, 0x8044}, 0x40000) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8000, 0x10, 0x3, 0x8, {{0x11, 0x4, 0x1, 0x1, 0x44, 0x66, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0xfd, 0x0}, {[@rr={0x7, 0x17, 0x5c, [@dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010100, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}]}, @lsrr={0x83, 0x17, 0xd6, [@loopback, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r10, &(0x7f0000000000)=0x8, r10, 0x0, 0x4, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1000c15cf7ff1608000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1, '\x00', r9, r10, 0x1, 0x5, 0x1}, 0x50) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003548000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.184385604s ago: executing program 3 (id=5449): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r4, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/131, 0x83}], 0x1}, 0x4eb}], 0x1, 0x2, 0x0) 2.184041567s ago: executing program 4 (id=5450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xf5ff, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003"], 0x4c}}, 0xc050) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400600027c035c9cc652bdcea3ea5a7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecb84ec95ee5de6ccd40dd6e4f1ef3d93452a92782f9ffcdb020e6f3baf432b25a55e08", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4c000) prlimit64(r4, 0x1, &(0x7f0000000080)={0x240000000000}, 0x0) 2.174823617s ago: executing program 0 (id=5451): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) unshare(0x6040600) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe800, 0x0}, 0x10) 2.049144617s ago: executing program 5 (id=5452): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) 1.824181008s ago: executing program 5 (id=5453): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x8, 0x1, 0x6, 0x4, 0x9, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.821417155s ago: executing program 5 (id=5454): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350073797a5f74756e000000000077eef46608000a00", @ANYRES32=r1], 0x3c}}, 0x8000) 1.799412598s ago: executing program 3 (id=5455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.799196302s ago: executing program 0 (id=5456): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x15c, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xb}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x7}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x42}}, @filter_kind_options=@f_basic={{0xa}, {0x104, 0x2, [@TCA_BASIC_ACT={0x100, 0x3, [@m_sample={0x50, 0x1e, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x11, 0x6, "64a8416e1a2ad4f08a507ade20"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xac, 0x0, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x39, 0x6, "2dbf268a304e872a0d7f589c8901efee8571a53c4f0062991873d363eeca75f7594e303fa6758fe5d09d4f9ffd072918848212ec18"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000006c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x4}}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 974.826378ms ago: executing program 1 (id=5457): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x582, 0x7a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xcb, 0x40, 0x2, {0x8, 0xb, 0x0, 0x2, 0x1, 0xb, 0x20, 0xa6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0xcd, 0x4, {0x8, 0x25, 0x1, 0x81, 0x60, 0x68, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0xf8, 0x4, {0x8, 0x25, 0x1, 0x41, 0x3, 0xe1, 0x5}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 903.222517ms ago: executing program 5 (id=5458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000540)="43210098") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f00000021c0), 0x5f1, 0x40, 0x0) recvfrom$packet(r6, &(0x7f00000000c0)=""/118, 0x76, 0x0, &(0x7f0000000140)={0x11, 0x2, r2, 0x1, 0x2, 0x6, @local}, 0x14) io_setup(0x8, &(0x7f00000001c0)=0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r8, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x6, &(0x7f00000001c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x2d}, @call={0x85, 0x0, 0x0, 0x7f}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], &(0x7f0000000200)='GPL\x00', 0x2, 0x96, &(0x7f0000000300)=""/150, 0x40f00, 0xd, '\x00', r2, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x10, 0x7fff, 0xfffffff9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x2, 0xd, 0x9}, {0x2, 0x4, 0x6, 0x8}, {0x4, 0x2, 0x6, 0x4}, {0x3, 0x4, 0x6, 0xa}, {0x4, 0x5, 0x9, 0x5}, {0x3, 0x4, 0xc}, {0x5, 0x2, 0x9, 0x8}, {0x5, 0x6, 0x0, 0x9}], 0x10, 0xf}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r9, r5, 0x5, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) 884.463035ms ago: executing program 3 (id=5459): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = io_uring_setup(0x35a4, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, [], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netkit}, 0x1c) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000340)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001980)={0x3, 0x0, [{0x0, 0x75, &(0x7f0000000580)=""/117}, {0x40000, 0x1000, &(0x7f0000000900)=""/4096}, {0x100000, 0x4a, &(0x7f0000001900)=""/74}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) 882.955282ms ago: executing program 4 (id=5460): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x8000000000000}) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x132ad5bf, 0x1}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) readv(r9, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) unshare(0x22020600) preadv(r7, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0x4, 0x2) r10 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x163502) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x12}) io_setup(0x6, &(0x7f0000000280)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r11, 0x0, 0x0) 676.498655ms ago: executing program 5 (id=5461): r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000580)={0x5, 0x7, 0x4}) (fail_nth: 3) 674.427861ms ago: executing program 0 (id=5462): prlimit64(0x0, 0x0, &(0x7f0000000080)={0x7, 0x10}, &(0x7f0000000140)) 0s ago: executing program 0 (id=5463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, 0x2c, 0x9, 0x70bd27, 0x25dfdbfe, {0x7}, [@nested={0x28, 0xf0, 0x0, 0x1, [@typed={0x4, 0xcb}, @generic="26c50309873a427713825cb617f0b973be9b3cf816907ae5b6fa4158696967c4"]}]}, 0x3c}}, 0x1) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0xec, 0x10, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x10003}, [@IFLA_PORT_SELF={0xb0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xab, 0x2, '^\x0f\n,/\x00\x94\xa4\x96AQ;\xfc\xd1]+\xe9\xaeqd\xe8\x04\x8eC.\x99\x84[\xffO\v\x8a\xa5\x7f\xe3Aw\xa2\x99\x18LKR\xa1\xf4^\xcdw\\\x9d\x91\xf8\xadY~xHJ\x94\a\xa4\xf93\xdf\x8f\xe6\xd6\xe2<`W\x9e\xb2\xf6B\aV\x1a\x1d\xd8\x8e\x04\xf2\xb6\xe0\xe9\xfbw\x17b\xb5q\xcd\xef!\xdd\xd2)\x1e\xce\xb1\x00\x9c\x14\t\'^c,\x03\x9dP\xe2\xf0\x9e\x00\xe3\xb24\xbc\xcb\x05Q\a\x14\r\xc0\xe2\xb5r6{\x19\x8c\xf8J\xea\xc9Z\xfd\xdc\xfbT\t\xd3\x85\xe0\t\x9b\xbfp\xad\xd6\xb7\xe9\x00Y\x9eg+c\xd8\xdf\xd3b\xc8\x8a'}]}, @IFLA_MTU={0x8, 0x4, 0x419}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0xec, 0x10, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x10003}, [@IFLA_PORT_SELF={0xb0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xab, 0x2, '^\x0f\n,/\x00\x94\xa4\x96AQ;\xfc\xd1]+\xe9\xaeqd\xe8\x04\x8eC.\x99\x84[\xffO\v\x8a\xa5\x7f\xe3Aw\xa2\x99\x18LKR\xa1\xf4^\xcdw\\\x9d\x91\xf8\xadY~xHJ\x94\a\xa4\xf93\xdf\x8f\xe6\xd6\xe2<`W\x9e\xb2\xf6B\aV\x1a\x1d\xd8\x8e\x04\xf2\xb6\xe0\xe9\xfbw\x17b\xb5q\xcd\xef!\xdd\xd2)\x1e\xce\xb1\x00\x9c\x14\t\'^c,\x03\x9dP\xe2\xf0\x9e\x00\xe3\xb24\xbc\xcb\x05Q\a\x14\r\xc0\xe2\xb5r6{\x19\x8c\xf8J\xea\xc9Z\xfd\xdc\xfbT\t\xd3\x85\xe0\t\x9b\xbfp\xad\xd6\xb7\xe9\x00Y\x9eg+c\xd8\xdf\xd3b\xc8\x8a'}]}, @IFLA_MTU={0x8, 0x4, 0x419}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) close(r1) fcntl$setstatus(r1, 0x4, 0x2c00) r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r4, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r5, 0x8b26, &(0x7f0000000040)) (async) ioctl(r5, 0x8b26, &(0x7f0000000040)) gettid() (async) r6 = gettid() sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@can_newroute={0x3c, 0x18, 0x800, 0x70bd2d, 0x25dfdbfb, {0x1d, 0x1, 0x6}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "b750f8a10f0e10eb"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0x2, 0xfffffffffffffff7}}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0x1, 0x3, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000011) fcntl$setown(r1, 0x8, r6) (async) fcntl$setown(r1, 0x8, r6) ptrace(0x4218, r6) kernel console output (not intermixed with test programs): ult+0x75b/0x1340 [ 738.588608][T18628] exc_page_fault+0x6a/0xc0 [ 738.588634][T18628] asm_exc_page_fault+0x26/0x30 [ 738.588656][T18628] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 738.588688][T18628] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 738.588707][T18628] RSP: 0018:ffffc90005b5f9f8 EFLAGS: 00050206 [ 738.588729][T18628] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 738.588745][T18628] RDX: 0000000000000001 RSI: 0000200000004400 RDI: ffffc90005b5fa80 [ 738.588761][T18628] RBP: ffffc90005b5fc90 R08: ffffc90005b5fab7 R09: 1ffff92000b6bf56 [ 738.588778][T18628] R10: dffffc0000000000 R11: fffff52000b6bf57 R12: ffffc90005b5fd00 [ 738.588794][T18628] R13: 1ffff92000b6bf4c R14: ffffc90005b5fa80 R15: 0000200000004400 [ 738.588831][T18628] _copy_from_user+0x7a/0xb0 [ 738.588855][T18628] ___sys_sendmsg+0x1c6/0x360 [ 738.588888][T18628] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.588920][T18628] ? kstrtouint+0x6e/0xe0 [ 738.588980][T18628] ? __fget_files+0x2a/0x420 [ 738.589009][T18628] ? __fget_files+0x3a6/0x420 [ 738.589049][T18628] __sys_sendmmsg+0x282/0x4e0 [ 738.589082][T18628] ? __pfx___sys_sendmmsg+0x10/0x10 [ 738.589118][T18628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 738.589165][T18628] ? ksys_write+0x248/0x270 [ 738.589202][T18628] ? __pfx_ksys_write+0x10/0x10 [ 738.589243][T18628] __x64_sys_sendmmsg+0xa0/0xc0 [ 738.589270][T18628] do_syscall_64+0x14d/0xf80 [ 738.589293][T18628] ? trace_irq_disable+0x3b/0x150 [ 738.589320][T18628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.589342][T18628] ? clear_bhb_loop+0x40/0x90 [ 738.589370][T18628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.589392][T18628] RIP: 0033:0x7f0ffc6ec819 [ 738.589413][T18628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.589432][T18628] RSP: 002b:00007f0ffa93e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 738.589461][T18628] RAX: ffffffffffffffda RBX: 00007f0ffc965fa0 RCX: 00007f0ffc6ec819 [ 738.589478][T18628] RDX: 0400000000000203 RSI: 0000200000004400 RDI: 0000000000000003 [ 738.589493][T18628] RBP: 00007f0ffa93e090 R08: 0000000000000000 R09: 0000000000000000 [ 738.589508][T18628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.589521][T18628] R13: 00007f0ffc966038 R14: 00007f0ffc965fa0 R15: 00007ffcf9b2a758 [ 738.589559][T18628] [ 739.170178][T18639] FAULT_INJECTION: forcing a failure. [ 739.170178][T18639] name failslab, interval 1, probability 0, space 0, times 0 [ 739.170220][T18639] CPU: 1 UID: 0 PID: 18639 Comm: syz.1.4892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 739.170250][T18639] Tainted: [L]=SOFTLOCKUP [ 739.170259][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 739.170272][T18639] Call Trace: [ 739.170281][T18639] [ 739.170291][T18639] dump_stack_lvl+0xe8/0x150 [ 739.170330][T18639] should_fail_ex+0x46b/0x600 [ 739.170366][T18639] should_failslab+0xa8/0x100 [ 739.170392][T18639] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 739.170417][T18639] ? __get_vm_area_node+0x171/0x350 [ 739.170465][T18639] __get_vm_area_node+0x171/0x350 [ 739.170504][T18639] __vmalloc_node_range_noprof+0x372/0x1730 [ 739.170539][T18639] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 739.170585][T18639] ? __lock_acquire+0x6b5/0x2cf0 [ 739.170617][T18639] ? kernel_text_address+0xa5/0xe0 [ 739.170649][T18639] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 739.170682][T18639] ? arch_stack_walk+0xfb/0x150 [ 739.170719][T18639] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 739.170752][T18639] __vmalloc_noprof+0xd2/0x120 [ 739.170786][T18639] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 739.170819][T18639] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 739.170856][T18639] bpf_prog_alloc+0x3c/0x1a0 [ 739.170888][T18639] bpf_prog_load+0x7ba/0x1ae0 [ 739.170936][T18639] ? __pfx_bpf_prog_load+0x10/0x10 [ 739.170990][T18639] ? bpf_lsm_bpf+0x9/0x20 [ 739.171013][T18639] ? security_bpf+0x7e/0x2d0 [ 739.171042][T18639] __sys_bpf+0x618/0x950 [ 739.171073][T18639] ? __pfx___sys_bpf+0x10/0x10 [ 739.171097][T18639] ? rt_mutex_slowunlock+0x1cb/0x300 [ 739.171147][T18639] ? ksys_write+0x248/0x270 [ 739.171183][T18639] ? __pfx_ksys_write+0x10/0x10 [ 739.171226][T18639] __x64_sys_bpf+0x7c/0x90 [ 739.171253][T18639] do_syscall_64+0x14d/0xf80 [ 739.171277][T18639] ? trace_irq_disable+0x3b/0x150 [ 739.171304][T18639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.171328][T18639] ? clear_bhb_loop+0x40/0x90 [ 739.171356][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.171379][T18639] RIP: 0033:0x7fefeefec819 [ 739.171400][T18639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.171419][T18639] RSP: 002b:00007fefed23e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.171451][T18639] RAX: ffffffffffffffda RBX: 00007fefef265fa0 RCX: 00007fefeefec819 [ 739.171468][T18639] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 739.171483][T18639] RBP: 00007fefed23e090 R08: 0000000000000000 R09: 0000000000000000 [ 739.171497][T18639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.171511][T18639] R13: 00007fefef266038 R14: 00007fefef265fa0 R15: 00007fff8de9beb8 [ 739.171547][T18639] [ 739.171686][T18639] syz.1.4892: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 739.171759][T18639] CPU: 1 UID: 0 PID: 18639 Comm: syz.1.4892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 739.171789][T18639] Tainted: [L]=SOFTLOCKUP [ 739.171797][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 739.171810][T18639] Call Trace: [ 739.171820][T18639] [ 739.171829][T18639] dump_stack_lvl+0xe8/0x150 [ 739.171864][T18639] warn_alloc+0x263/0x3e0 [ 739.171897][T18639] ? __pfx_warn_alloc+0x10/0x10 [ 739.171919][T18639] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 739.171942][T18639] ? __get_vm_area_node+0x171/0x350 [ 739.171980][T18639] ? __get_vm_area_node+0x2e1/0x350 [ 739.172021][T18639] __vmalloc_node_range_noprof+0x397/0x1730 [ 739.172071][T18639] ? __lock_acquire+0x6b5/0x2cf0 [ 739.172103][T18639] ? kernel_text_address+0xa5/0xe0 [ 739.172133][T18639] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 739.172167][T18639] ? arch_stack_walk+0xfb/0x150 [ 739.172204][T18639] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 739.172232][T18639] __vmalloc_noprof+0xd2/0x120 [ 739.172266][T18639] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 739.172300][T18639] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 739.172335][T18639] bpf_prog_alloc+0x3c/0x1a0 [ 739.172368][T18639] bpf_prog_load+0x7ba/0x1ae0 [ 739.172414][T18639] ? __pfx_bpf_prog_load+0x10/0x10 [ 739.172478][T18639] ? bpf_lsm_bpf+0x9/0x20 [ 739.172501][T18639] ? security_bpf+0x7e/0x2d0 [ 739.172529][T18639] __sys_bpf+0x618/0x950 [ 739.172560][T18639] ? __pfx___sys_bpf+0x10/0x10 [ 739.172585][T18639] ? rt_mutex_slowunlock+0x1cb/0x300 [ 739.172634][T18639] ? ksys_write+0x248/0x270 [ 739.172670][T18639] ? __pfx_ksys_write+0x10/0x10 [ 739.172711][T18639] __x64_sys_bpf+0x7c/0x90 [ 739.172737][T18639] do_syscall_64+0x14d/0xf80 [ 739.172760][T18639] ? trace_irq_disable+0x3b/0x150 [ 739.172786][T18639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.172809][T18639] ? clear_bhb_loop+0x40/0x90 [ 739.172836][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.172858][T18639] RIP: 0033:0x7fefeefec819 [ 739.172877][T18639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.172894][T18639] RSP: 002b:00007fefed23e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.172915][T18639] RAX: ffffffffffffffda RBX: 00007fefef265fa0 RCX: 00007fefeefec819 [ 739.172932][T18639] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 739.172946][T18639] RBP: 00007fefed23e090 R08: 0000000000000000 R09: 0000000000000000 [ 739.172959][T18639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.172973][T18639] R13: 00007fefef266038 R14: 00007fefef265fa0 R15: 00007fff8de9beb8 [ 739.173008][T18639] [ 739.173016][T18639] Mem-Info: [ 739.173026][T18639] active_anon:3140 inactive_anon:7401 isolated_anon:0 [ 739.173026][T18639] active_file:17067 inactive_file:42055 isolated_file:0 [ 739.173026][T18639] unevictable:768 dirty:162 writeback:0 [ 739.173026][T18639] slab_reclaimable:12593 slab_unreclaimable:104482 [ 739.173026][T18639] mapped:33114 shmem:4233 pagetables:3644 [ 739.173026][T18639] sec_pagetables:0 bounce:0 [ 739.173026][T18639] kernel_misc_reclaimable:0 [ 739.173026][T18639] free:1193850 free_pcp:6714 free_cma:0 [ 739.173083][T18639] Node 0 active_anon:12560kB inactive_anon:29604kB active_file:68064kB inactive_file:168220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132456kB dirty:648kB writeback:0kB shmem:15396kB kernel_stack:14232kB pagetables:14396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 739.173133][T18639] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 739.173180][T18639] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 739.173243][T18639] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 739.173283][T18639] Node 0 DMA32 free:821100kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12560kB inactive_anon:29604kB active_file:68064kB inactive_file:168220kB unevictable:1536kB writepending:648kB zspages:0kB present:3129332kB managed:2566456kB mlocked:0kB bounce:0kB free_pcp:26856kB local_pcp:14108kB free_cma:0kB [ 739.173351][T18639] lowmem_reserve[]: 0 0 0 0 0 [ 739.173387][T18639] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:416kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 739.173455][T18639] lowmem_reserve[]: 0 0 0 0 0 [ 739.173492][T18639] Node 1 Normal free:3938940kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 739.173557][T18639] lowmem_reserve[]: 0 0 0 0 0 [ 739.173595][T18639] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 739.173720][T18639] Node 0 DMA32: 5*4kB (ME) 25*8kB (UM) 151*16kB (UME) 393*32kB (UME) 278*64kB (UME) 451*128kB (UME) 517*256kB (UM) 382*512kB (UME) 237*1024kB (UME) 38*2048kB (UM) 20*4096kB (UM) = 821100kB [ 739.173890][T18639] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 739.173996][T18639] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3938940kB [ 739.174165][T18639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.174182][T18639] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 739.174201][T18639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.174219][T18639] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 739.174237][T18639] 63353 total pagecache pages [ 739.174246][T18639] 2 pages in swap cache [ 739.174254][T18639] Free swap = 124984kB [ 739.174263][T18639] Total swap = 124996kB [ 739.174272][T18639] 2097051 pages RAM [ 739.174281][T18639] 0 pages HighMem/MovableOnly [ 739.174289][T18639] 423718 pages reserved [ 739.174298][T18639] 0 pages cma reserved [ 741.755243][T18682] FAULT_INJECTION: forcing a failure. [ 741.755243][T18682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.755287][T18682] CPU: 1 UID: 0 PID: 18682 Comm: syz.0.4911 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 741.755318][T18682] Tainted: [L]=SOFTLOCKUP [ 741.755325][T18682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.755338][T18682] Call Trace: [ 741.755347][T18682] [ 741.755356][T18682] dump_stack_lvl+0xe8/0x150 [ 741.755394][T18682] should_fail_ex+0x46b/0x600 [ 741.755440][T18682] _copy_from_user+0x2d/0xb0 [ 741.755463][T18682] __copy_msghdr+0x3c5/0x5b0 [ 741.755493][T18682] ___sys_sendmsg+0x213/0x360 [ 741.755525][T18682] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.755586][T18682] ? __fget_files+0x2a/0x420 [ 741.755614][T18682] ? __fget_files+0x3a6/0x420 [ 741.755653][T18682] __x64_sys_sendmsg+0x1c3/0x2a0 [ 741.755679][T18682] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.755714][T18682] ? __pfx_ksys_write+0x10/0x10 [ 741.755757][T18682] do_syscall_64+0x14d/0xf80 [ 741.755779][T18682] ? trace_irq_disable+0x3b/0x150 [ 741.755805][T18682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.755826][T18682] ? clear_bhb_loop+0x40/0x90 [ 741.755854][T18682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.755877][T18682] RIP: 0033:0x7fd4fae9c819 [ 741.755898][T18682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.755917][T18682] RSP: 002b:00007fd4f90ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.755942][T18682] RAX: ffffffffffffffda RBX: 00007fd4fb115fa0 RCX: 00007fd4fae9c819 [ 741.755958][T18682] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 741.755973][T18682] RBP: 00007fd4f90ee090 R08: 0000000000000000 R09: 0000000000000000 [ 741.755987][T18682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.756001][T18682] R13: 00007fd4fb116038 R14: 00007fd4fb115fa0 R15: 00007ffd192079a8 [ 741.756037][T18682] [ 742.305252][T18693] tmpfs: Unknown parameter 'usrquota 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 1 13 ram13 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 1 14 ram14 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 1 15 ram15 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 0 loop0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 1 loop1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 2 loop2 2 0 14 55 0 0 0 0 0 60 55 0 0 0 0 0 0 [ 742.305252][T18693] 7 3 loop3 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 4 loop4 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 5 loop5 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 6 loop6 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 7 loop7 2 0 14 62 0 0 0 0 0 70 62 0 0 0 0 0 0 [ 742.305252][T18693] 7 8 loop8 2 0 16 64 0 0 0 0 0 70 64 0 0 0 0 0 0 [ 742.305252][T18693] 7 9 loop9 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 10 loop10 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 11 loop11 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 12 loop12 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 13 loop13 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 742.305252][T18693] 7 14 loop14 0 0 0 0 0 0 0 0 0 0 [ 742.455449][T15170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 742.466879][T15170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 742.475254][T15170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 742.484834][T15170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 742.493479][T15170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 742.571146][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4915'. [ 742.574738][ T5981] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 742.703678][T18697] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 742.724712][ T5981] usb 1-1: Using ep0 maxpacket: 32 [ 742.727064][ T5981] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 742.727124][ T5981] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 742.727153][ T5981] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 742.727254][ T5981] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 742.730511][ T5981] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 742.730540][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.730562][ T5981] usb 1-1: Product: syz [ 742.730578][ T5981] usb 1-1: Manufacturer: syz [ 742.730595][ T5981] usb 1-1: SerialNumber: syz [ 742.854070][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 742.879431][ T5981] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input8 [ 743.015145][T13306] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 743.084706][ T5981] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 743.084730][ T5981] (id 0x00) [ 743.206172][T13306] usb 2-1: Using ep0 maxpacket: 8 [ 743.220646][ T5981] rc_core: IR keymap rc-imon-pad not found [ 743.220668][ T5981] Registered IR keymap rc-empty [ 743.220756][ T5981] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 743.220775][ T5981] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 743.271167][T13306] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 743.271200][T13306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.271222][T13306] usb 2-1: Product: syz [ 743.271238][T13306] usb 2-1: Manufacturer: syz [ 743.271254][T13306] usb 2-1: SerialNumber: syz [ 743.333937][T13306] usb 2-1: config 0 descriptor?? [ 743.384227][T13306] gspca_main: se401-2.14.0 probing 047d:5003 [ 743.589325][ T5981] imon:send_packet: packet tx failed (-71) [ 743.605102][ T5981] imon 1-1:155.0: remote input dev register failed [ 743.605297][ T5981] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 743.646220][T18700] wlan1 speed is unknown, defaulting to 1000 [ 743.741035][T18706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4919'. [ 743.785993][T18706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.786592][T18706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.841939][T13306] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 743.842050][T13306] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 743.867346][ T5981] imon 1-1:155.0: unable to initialize intf0, err 0 [ 743.867372][ T5981] imon:imon_probe: failed to initialize context! [ 743.867386][ T5981] imon 1-1:155.0: unable to register, err -19 [ 743.884878][T13306] usb 2-1: USB disconnect, device number 90 [ 743.920327][ T5981] usb 1-1: USB disconnect, device number 90 [ 744.568719][T18729] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 744.656146][T15170] Bluetooth: hci1: command tx timeout [ 744.761006][T18736] FAULT_INJECTION: forcing a failure. [ 744.761006][T18736] name failslab, interval 1, probability 0, space 0, times 0 [ 744.761047][T18736] CPU: 1 UID: 0 PID: 18736 Comm: syz.0.4930 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 744.761077][T18736] Tainted: [L]=SOFTLOCKUP [ 744.761086][T18736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 744.761099][T18736] Call Trace: [ 744.761108][T18736] [ 744.761118][T18736] dump_stack_lvl+0xe8/0x150 [ 744.761157][T18736] should_fail_ex+0x46b/0x600 [ 744.761194][T18736] should_failslab+0xa8/0x100 [ 744.761220][T18736] __kmalloc_noprof+0xdf/0x7b0 [ 744.761241][T18736] ? kfree+0x4d/0x6c0 [ 744.761270][T18736] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 744.761307][T18736] tomoyo_realpath_from_path+0xe3/0x5d0 [ 744.761346][T18736] ? tomoyo_path_number_perm+0x219/0x630 [ 744.761371][T18736] tomoyo_path_number_perm+0x246/0x630 [ 744.761398][T18736] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 744.761425][T18736] ? __lock_acquire+0x6b5/0x2cf0 [ 744.761485][T18736] ? __fget_files+0x2a/0x420 [ 744.761519][T18736] ? __fget_files+0x2a/0x420 [ 744.761546][T18736] ? __fget_files+0x3a6/0x420 [ 744.761582][T18736] ? __fget_files+0x2a/0x420 [ 744.761616][T18736] security_file_ioctl+0xc3/0x2a0 [ 744.761644][T18736] __se_sys_ioctl+0x47/0x170 [ 744.761671][T18736] do_syscall_64+0x14d/0xf80 [ 744.761695][T18736] ? trace_irq_disable+0x3b/0x150 [ 744.761722][T18736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.761744][T18736] ? clear_bhb_loop+0x40/0x90 [ 744.761773][T18736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.761795][T18736] RIP: 0033:0x7fd4fae9c819 [ 744.761817][T18736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.761837][T18736] RSP: 002b:00007fd4f90ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.761861][T18736] RAX: ffffffffffffffda RBX: 00007fd4fb115fa0 RCX: 00007fd4fae9c819 [ 744.761878][T18736] RDX: 0000200000000000 RSI: 000000004038ae7a RDI: 0000000000000004 [ 744.761893][T18736] RBP: 00007fd4f90ee090 R08: 0000000000000000 R09: 0000000000000000 [ 744.761907][T18736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.761920][T18736] R13: 00007fd4fb116038 R14: 00007fd4fb115fa0 R15: 00007ffd192079a8 [ 744.761957][T18736] [ 744.761966][T18736] ERROR: Out of memory at tomoyo_realpath_from_path. [ 745.072289][ T1858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.295265][ T5981] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 745.404036][ T37] audit: type=1326 audit(1775137317.860:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.404097][ T37] audit: type=1326 audit(1775137317.860:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.426294][ T37] audit: type=1326 audit(1775137317.890:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.426346][ T37] audit: type=1326 audit(1775137317.890:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.456212][ T37] audit: type=1326 audit(1775137317.920:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.456265][ T37] audit: type=1326 audit(1775137317.920:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.456306][ T37] audit: type=1326 audit(1775137317.920:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.456346][ T37] audit: type=1326 audit(1775137317.920:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.456386][ T37] audit: type=1326 audit(1775137317.920:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.456426][ T37] audit: type=1326 audit(1775137317.920:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18750 comm="syz.0.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd4fae9c819 code=0x7ffc0000 [ 745.554977][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.555018][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.555060][ T5981] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 745.555085][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.669936][ T5981] usb 6-1: config 0 descriptor?? [ 745.851930][ T1858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.887764][T18759] netlink: 'syz.3.4935': attribute type 14 has an invalid length. [ 746.252750][T18761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.253317][T18761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.746482][T15170] Bluetooth: hci1: command tx timeout [ 747.802157][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.802239][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.529080][ T1858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.814789][T15170] Bluetooth: hci1: command tx timeout [ 748.982919][ T1858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.687755][ T5981] usbhid 6-1:0.0: can't add hid device: -71 [ 750.687902][ T5981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 750.750814][ T5981] usb 6-1: USB disconnect, device number 75 [ 750.765679][T18785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4941'. [ 750.897547][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 750.897568][ T37] audit: type=1326 audit(1775137323.360:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18784 comm="syz.1.4942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefeefec819 code=0x0 [ 750.899389][T15170] Bluetooth: hci1: command tx timeout [ 750.900082][T18700] chnl_net:caif_netlink_parms(): no params data found [ 751.033859][T18787] libceph: resolve ' [ 751.033859][T18787] -&fYǝa2i [ 751.033859][T18787] .?&*&' (ret=-3): failed [ 751.055776][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4942'. [ 751.693306][T18700] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.693535][T18700] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.693750][T18700] bridge_slave_0: entered allmulticast mode [ 751.707636][T18700] bridge_slave_0: entered promiscuous mode [ 751.727258][T18700] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.727438][T18700] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.727665][T18700] bridge_slave_1: entered allmulticast mode [ 751.771468][T18700] bridge_slave_1: entered promiscuous mode [ 751.783352][ T1858] bridge_slave_1: left allmulticast mode [ 751.783384][ T1858] bridge_slave_1: left promiscuous mode [ 751.783666][ T1858] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.884379][ T1858] bridge_slave_0: left allmulticast mode [ 751.884411][ T1858] bridge_slave_0: left promiscuous mode [ 751.905220][ T1858] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.339251][T18823] FAULT_INJECTION: forcing a failure. [ 752.339251][T18823] name failslab, interval 1, probability 0, space 0, times 0 [ 752.339290][T18823] CPU: 0 UID: 0 PID: 18823 Comm: syz.5.4951 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 752.339319][T18823] Tainted: [L]=SOFTLOCKUP [ 752.339327][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 752.339340][T18823] Call Trace: [ 752.339349][T18823] [ 752.339358][T18823] dump_stack_lvl+0xe8/0x150 [ 752.339394][T18823] should_fail_ex+0x46b/0x600 [ 752.339428][T18823] should_failslab+0xa8/0x100 [ 752.339461][T18823] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 752.339494][T18823] ? __alloc_skb+0x1d0/0x7d0 [ 752.339513][T18823] ? lockdep_hardirqs_on+0x7a/0x110 [ 752.339542][T18823] __alloc_skb+0x1d0/0x7d0 [ 752.339568][T18823] netlink_sendmsg+0x5d4/0xb40 [ 752.339611][T18823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.339643][T18823] ? unwind_get_return_address+0x4d/0x90 [ 752.339665][T18823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 752.339700][T18823] ____sys_sendmsg+0x94c/0x9c0 [ 752.339733][T18823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.339767][T18823] ? import_iovec+0x73/0xa0 [ 752.339805][T18823] ___sys_sendmsg+0x2a5/0x360 [ 752.339836][T18823] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.339897][T18823] ? __fget_files+0x2a/0x420 [ 752.339925][T18823] ? __fget_files+0x3a6/0x420 [ 752.339963][T18823] __x64_sys_sendmsg+0x1c3/0x2a0 [ 752.339992][T18823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 752.340028][T18823] ? __pfx_ksys_write+0x10/0x10 [ 752.340088][T18823] do_syscall_64+0x14d/0xf80 [ 752.340109][T18823] ? trace_irq_disable+0x3b/0x150 [ 752.340134][T18823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.340161][T18823] ? clear_bhb_loop+0x40/0x90 [ 752.340186][T18823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.340206][T18823] RIP: 0033:0x7f0ffc6ec819 [ 752.340227][T18823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.340245][T18823] RSP: 002b:00007f0ffa93e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.340268][T18823] RAX: ffffffffffffffda RBX: 00007f0ffc965fa0 RCX: 00007f0ffc6ec819 [ 752.340285][T18823] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 752.340298][T18823] RBP: 00007f0ffa93e090 R08: 0000000000000000 R09: 0000000000000000 [ 752.340310][T18823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.340322][T18823] R13: 00007f0ffc966038 R14: 00007f0ffc965fa0 R15: 00007ffcf9b2a758 [ 752.340355][T18823] [ 755.915525][ T1858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.978647][ T1858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.998352][ T1858] bond0 (unregistering): Released all slaves [ 756.011328][ T1858] bond1 (unregistering): Released all slaves [ 756.073739][T18838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.095543][ T5797] Bluetooth: hci1: command 0x0405 tx timeout [ 756.241112][T18700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.267391][T18700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.444172][T18700] team0: Port device team_slave_0 added [ 756.497085][T18700] team0: Port device team_slave_1 added [ 756.986766][T18700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.986785][T18700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.986811][T18700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.990387][T18700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.990407][T18700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.990424][T18700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.994811][ T5874] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 757.195514][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.195552][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.195576][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.195622][ T5874] usb 1-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 757.195644][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.265497][ T5874] usb 1-1: config 0 descriptor?? [ 757.507698][T18878] netlink: 'syz.5.4969': attribute type 1 has an invalid length. [ 757.601812][T18879] netlink: 400 bytes leftover after parsing attributes in process `syz.5.4969'. [ 757.670143][T18881] binder: 18880:18881 ioctl c0306201 2000000003c0 returned -14 [ 757.682489][ T5867] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 757.732480][ T5874] hid_parser_main: 5 callbacks suppressed [ 757.732508][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.732548][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.732575][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.732600][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.732627][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.732652][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.732678][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.732703][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.732730][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.732756][ T5874] lg-g15 0003:046D:C22E.0005: unknown main item tag 0x0 [ 757.734370][ T5874] lg-g15 0003:046D:C22E.0005: collection stack underflow [ 757.734404][ T5874] lg-g15 0003:046D:C22E.0005: item 0 0 0 12 parsing failed [ 757.763089][ T5874] lg-g15 0003:046D:C22E.0005: probe with driver lg-g15 failed with error -22 [ 757.895758][ T5867] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 757.895793][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.895814][ T5867] usb 2-1: Product: syz [ 757.895830][ T5867] usb 2-1: Manufacturer: syz [ 757.895845][ T5867] usb 2-1: SerialNumber: syz [ 757.955412][ T5867] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 757.957049][T12383] usb 1-1: USB disconnect, device number 91 [ 758.003887][ T5866] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 758.385269][T18700] hsr_slave_0: entered promiscuous mode [ 758.386708][T18700] hsr_slave_1: entered promiscuous mode [ 758.389527][T18700] debugfs: 'hsr0' already exists in 'hsr' [ 758.389555][T18700] Cannot create hsr debugfs directory [ 759.689502][ T5866] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 759.689890][ T5866] ath9k_htc: Failed to initialize the device [ 759.767587][ T1858] hsr_slave_0: left promiscuous mode [ 759.817369][ T1858] hsr_slave_1: left promiscuous mode [ 759.825565][ T1858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.825592][ T1858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.879439][ T5866] usb 2-1: ath9k_htc: USB layer deinitialized [ 759.885710][ T1858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.885737][ T1858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.083338][ T1858] veth1_macvtap: left promiscuous mode [ 760.083486][ T1858] veth0_macvtap: left promiscuous mode [ 760.083791][ T1858] veth1_vlan: left promiscuous mode [ 760.084014][ T1858] veth0_vlan: left promiscuous mode [ 760.874669][ T5867] usb 2-1: USB disconnect, device number 91 [ 761.405572][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4982'. [ 762.144809][T12383] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 762.305104][T12383] usb 1-1: Using ep0 maxpacket: 16 [ 762.308086][T12383] usb 1-1: unable to get BOS descriptor or descriptor too short [ 762.309667][T12383] usb 1-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 762.309726][T12383] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 762.314133][T12383] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 762.314162][T12383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.314184][T12383] usb 1-1: Product: syz [ 762.314199][T12383] usb 1-1: Manufacturer: syz [ 762.314215][T12383] usb 1-1: SerialNumber: syz [ 762.341367][T18937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 762.576831][T12383] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 762.576896][T12383] usb 1-1: MIDIStreaming interface descriptor not found [ 762.676763][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4987'. [ 762.802512][T12383] usb 1-1: USB disconnect, device number 92 [ 762.962462][T18948] udevd[18948]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.235102][T18953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4990'. [ 763.346847][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4990'. [ 763.420429][ T1858] team0 (unregistering): Port device team_slave_1 removed [ 763.566632][ T1858] team0 (unregistering): Port device team_slave_0 removed [ 763.918705][T18943] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 764.112827][T18965] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 765.252282][T18988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 765.935461][T15170] Bluetooth: hci0: command 0x0406 tx timeout [ 766.795637][T19012] netlink: zone id is out of range [ 766.795648][T19012] netlink: zone id is out of range [ 766.796046][T19012] netlink: set zone limit has 8 unknown bytes [ 767.045813][T12383] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 768.757533][T12383] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 768.757567][T12383] usb 1-1: config 0 has no interface number 0 [ 768.757616][T12383] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 768.762151][T12383] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 768.762187][T12383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.762208][T12383] usb 1-1: Product: syz [ 768.762223][T12383] usb 1-1: Manufacturer: syz [ 768.762239][T12383] usb 1-1: SerialNumber: syz [ 768.841997][T12383] usb 1-1: config 0 descriptor?? [ 768.873514][T12383] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 768.922331][T12383] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 769.010047][ T5803] wlan1 speed is unknown, defaulting to 1000 [ 769.253773][T14595] usb 1-1: USB disconnect, device number 93 [ 769.285361][T14595] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 769.305078][T14595] kobil_sct 1-1:0.148: device disconnected [ 769.535862][T12383] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 769.685685][T12383] usb 2-1: Using ep0 maxpacket: 8 [ 769.690428][T12383] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 769.690458][T12383] usb 2-1: config 2 has no interface number 0 [ 769.690511][T12383] usb 2-1: config 2 interface 31 has no altsetting 0 [ 769.725501][T12383] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 769.725535][T12383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.725557][T12383] usb 2-1: Product: syz [ 769.725573][T12383] usb 2-1: Manufacturer: syz [ 769.725588][T12383] usb 2-1: SerialNumber: syz [ 769.754781][ T5867] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 769.905431][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 769.907802][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 769.907839][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33863, setting to 1024 [ 769.913458][ T5867] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 769.913491][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.913512][ T5867] usb 4-1: Product: syz [ 769.913527][ T5867] usb 4-1: Manufacturer: syz [ 769.913542][ T5867] usb 4-1: SerialNumber: syz [ 769.919631][ T5867] usb 4-1: config 0 descriptor?? [ 769.942159][ T5867] hub 4-1:0.0: bad descriptor, ignoring hub [ 769.942201][ T5867] hub 4-1:0.0: probe with driver hub failed with error -5 [ 770.011769][ T5867] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 770.517982][T12383] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 770.558762][T12383] usb 2-1: USB disconnect, device number 92 [ 770.814000][T19053] 8021q: VLANs not supported on ipvlan0 [ 770.914365][T18700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 770.989211][T19058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5009'. [ 771.095868][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5009'. [ 771.159607][T18700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 771.817553][T18700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 771.945638][T18700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 772.006335][T19076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5021'. [ 772.076220][ T5874] usb 4-1: USB disconnect, device number 92 [ 772.551561][T18700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.592596][T18700] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.609160][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.613541][ T9580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.643372][T12164] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.643551][T12164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.945156][T19112] 8021q: VLANs not supported on ipvlan0 [ 772.954696][ T5803] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 773.015377][T19113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5029'. [ 773.018373][T19116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5031'. [ 773.069538][T19113] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5029'. [ 773.110111][ T5803] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 773.110133][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.110145][ T5803] usb 4-1: Product: syz [ 773.110154][ T5803] usb 4-1: Manufacturer: syz [ 773.110163][ T5803] usb 4-1: SerialNumber: syz [ 773.121237][ T5803] usb 4-1: config 0 descriptor?? [ 773.135564][ T5803] hub 4-1:0.0: bad descriptor, ignoring hub [ 773.135602][ T5803] hub 4-1:0.0: probe with driver hub failed with error -5 [ 773.136788][ T5803] f81232 4-1:0.0: f81534a converter detected [ 773.152844][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5031'. [ 773.459812][ T5803] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 773.459846][ T5803] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 773.529179][ T5803] usb 4-1: USB disconnect, device number 93 [ 773.531996][ T5803] f81232 4-1:0.0: device disconnected [ 775.240909][T18700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.832813][T19144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5039'. [ 776.042807][T18700] veth0_vlan: entered promiscuous mode [ 776.064203][T18700] veth1_vlan: entered promiscuous mode [ 776.117360][T18700] veth0_macvtap: entered promiscuous mode [ 776.138399][T18700] veth1_macvtap: entered promiscuous mode [ 776.188746][T18700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.220301][T18700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.242002][T10146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.242310][T10146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.242354][T10146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.242393][T10146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.314186][T19153] 8021q: VLANs not supported on ipvlan0 [ 776.376606][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5043'. [ 776.846426][ T1858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.846451][ T1858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.981784][T19165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5047'. [ 777.100064][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.100089][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.472696][T19185] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 777.487666][T19185] usb usb2: Process 19185 (syz.1.5054) called USBDEVFS_RESETEP for active endpoint 0x81 [ 777.615475][ T5874] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 777.630354][T19187] 8021q: VLANs not supported on ipvlan0 [ 777.670244][T19192] FAULT_INJECTION: forcing a failure. [ 777.670244][T19192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.670271][T19192] CPU: 1 UID: 0 PID: 19192 Comm: syz.3.5056 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 777.670289][T19192] Tainted: [L]=SOFTLOCKUP [ 777.670294][T19192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 777.670302][T19192] Call Trace: [ 777.670308][T19192] [ 777.670313][T19192] dump_stack_lvl+0xe8/0x150 [ 777.670338][T19192] should_fail_ex+0x46b/0x600 [ 777.670358][T19192] _copy_to_user+0x31/0xb0 [ 777.670372][T19192] simple_read_from_buffer+0xe1/0x170 [ 777.670391][T19192] proc_fail_nth_read+0x1be/0x230 [ 777.670410][T19192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 777.670427][T19192] ? rw_verify_area+0x2ac/0x4e0 [ 777.670445][T19192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 777.670461][T19192] vfs_read+0x212/0xa80 [ 777.670484][T19192] ? __pfx_vfs_read+0x10/0x10 [ 777.670504][T19192] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 777.670518][T19192] ? lockdep_hardirqs_on+0x7a/0x110 [ 777.670532][T19192] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 777.670545][T19192] ? mutex_lock_nested+0x152/0x1d0 [ 777.670561][T19192] ? fdget_pos+0x252/0x320 [ 777.670583][T19192] ksys_read+0x156/0x270 [ 777.670603][T19192] ? __pfx_ksys_read+0x10/0x10 [ 777.670619][T19192] ? fput+0xa0/0xd0 [ 777.670641][T19192] do_syscall_64+0x14d/0xf80 [ 777.670653][T19192] ? trace_irq_disable+0x3b/0x150 [ 777.670668][T19192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.670681][T19192] ? clear_bhb_loop+0x40/0x90 [ 777.670696][T19192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.670708][T19192] RIP: 0033:0x7fe9e7d0d04e [ 777.670721][T19192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 777.670732][T19192] RSP: 002b:00007fe9e5f9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 777.670747][T19192] RAX: ffffffffffffffda RBX: 00007fe9e5f9e6c0 RCX: 00007fe9e7d0d04e [ 777.670756][T19192] RDX: 000000000000000f RSI: 00007fe9e5f9e0a0 RDI: 0000000000000005 [ 777.670764][T19192] RBP: 00007fe9e5f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 777.670772][T19192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.670779][T19192] R13: 00007fe9e7fc6038 R14: 00007fe9e7fc5fa0 R15: 00007ffc7ead8e38 [ 777.670798][T19192] [ 777.771595][T19189] netlink: 'syz.5.5058': attribute type 83 has an invalid length. [ 777.844640][ T5874] usb 1-1: device descriptor read/64, error -71 [ 777.915834][ T5981] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 778.067356][ T5981] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.067387][ T5981] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 778.067437][ T5981] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.069679][ T5981] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.069701][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.069713][ T5981] usb 5-1: Product: syz [ 778.069722][ T5981] usb 5-1: Manufacturer: syz [ 778.069731][ T5981] usb 5-1: SerialNumber: syz [ 778.095205][ T5874] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 778.205119][T14595] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 778.208761][T19204] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 778.208782][T19204] macsec0: entered promiscuous mode [ 778.208794][T19204] macsec0: entered allmulticast mode [ 778.238805][ T5874] usb 1-1: device descriptor read/64, error -71 [ 778.332155][ T5981] usb 5-1: 0:2 : does not exist [ 778.344991][ T5874] usb usb1-port1: attempt power cycle [ 778.356934][T14595] usb 4-1: Using ep0 maxpacket: 8 [ 778.361507][T14595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.361540][T14595] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 778.361582][T14595] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.00 [ 778.361605][T14595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.379203][T14595] usb 4-1: config 0 descriptor?? [ 778.489484][ T5981] usb 5-1: USB disconnect, device number 47 [ 778.685555][ T5874] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 778.718937][ T5874] usb 1-1: device descriptor read/8, error -71 [ 778.791779][T14595] hid_parser_main: 120 callbacks suppressed [ 778.791808][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.791839][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.791867][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.791893][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.791929][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.791956][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.791981][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.792008][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.792033][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.792059][T14595] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 778.886277][T14595] apple 0003:05AC:0238.0006: hidraw0: USB HID v0.0b Device [HID 05ac:0238] on usb-dummy_hcd.3-1/input0 [ 778.995736][ T5803] usb 4-1: USB disconnect, device number 94 [ 779.011073][ T5874] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 779.038370][ T5874] usb 1-1: device descriptor read/8, error -71 [ 779.146573][ T5874] usb usb1-port1: unable to enumerate USB device [ 780.831302][T19248] 8021q: VLANs not supported on ipvlan0 [ 781.084701][ T5981] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 781.152835][T19253] dummy0: entered promiscuous mode [ 781.152854][T19253] dummy0: entered allmulticast mode [ 781.179205][T19254] FAULT_INJECTION: forcing a failure. [ 781.179205][T19254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.179232][T19254] CPU: 1 UID: 0 PID: 19254 Comm: syz.5.5078 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 781.179250][T19254] Tainted: [L]=SOFTLOCKUP [ 781.179255][T19254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 781.179263][T19254] Call Trace: [ 781.179268][T19254] [ 781.179274][T19254] dump_stack_lvl+0xe8/0x150 [ 781.179298][T19254] should_fail_ex+0x46b/0x600 [ 781.179319][T19254] _copy_from_user+0x2d/0xb0 [ 781.179332][T19254] copy_bpf_fprog_from_user+0x17c/0x2d0 [ 781.179347][T19254] ? __local_bh_enable+0x1e1/0x2f0 [ 781.179366][T19254] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 781.179382][T19254] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 781.179403][T19254] sk_setsockopt+0xe27/0x2bb0 [ 781.179422][T19254] ? __pfx_sk_setsockopt+0x10/0x10 [ 781.179440][T19254] ? __lock_acquire+0x6b5/0x2cf0 [ 781.179462][T19254] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.179479][T19254] udp_lib_setsockopt+0xf6/0x980 [ 781.179497][T19254] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 781.179514][T19254] ? __fget_files+0x2a/0x420 [ 781.179534][T19254] udp_setsockopt+0x77/0xc0 [ 781.179547][T19254] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 781.179559][T19254] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 781.179578][T19254] do_sock_setsockopt+0x17c/0x1b0 [ 781.179594][T19254] __x64_sys_setsockopt+0x143/0x1b0 [ 781.179611][T19254] do_syscall_64+0x14d/0xf80 [ 781.179625][T19254] ? trace_irq_disable+0x3b/0x150 [ 781.179656][T19254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.179670][T19254] ? clear_bhb_loop+0x40/0x90 [ 781.179685][T19254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.179697][T19254] RIP: 0033:0x7f0ffc6ec819 [ 781.179711][T19254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.179722][T19254] RSP: 002b:00007f0ffa93e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 781.179737][T19254] RAX: ffffffffffffffda RBX: 00007f0ffc965fa0 RCX: 00007f0ffc6ec819 [ 781.179746][T19254] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000004 [ 781.179755][T19254] RBP: 00007f0ffa93e090 R08: 0000000000000010 R09: 0000000000000000 [ 781.179762][T19254] R10: 00002000000a2000 R11: 0000000000000246 R12: 0000000000000001 [ 781.179770][T19254] R13: 00007f0ffc966038 R14: 00007f0ffc965fa0 R15: 00007ffcf9b2a758 [ 781.179789][T19254] [ 781.237299][ T5981] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.237336][ T5981] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 781.237408][ T5981] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.244447][ T5981] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 781.244480][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.244669][ T5981] usb 1-1: Product: syz [ 781.244686][ T5981] usb 1-1: Manufacturer: syz [ 781.244701][ T5981] usb 1-1: SerialNumber: syz [ 781.756577][ T5981] usb 1-1: 0:2 : does not exist [ 781.839277][ T5981] usb 1-1: USB disconnect, device number 98 [ 781.950165][T18864] udevd[18864]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 782.545771][ T5803] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 782.712123][ T5803] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.712155][ T5803] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.716199][ T5803] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 782.716229][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 782.716314][ T5803] usb 6-1: SerialNumber: syz [ 782.739319][ T5803] usb 6-1: 0:2 : does not exist [ 782.739405][ T5803] usb 6-1: unit 1 not found! [ 782.918100][T19284] netlink: 'syz.1.5090': attribute type 10 has an invalid length. [ 782.918142][T19284] syz_tun: entered promiscuous mode [ 782.956824][T19284] bond5: (slave syz_tun): Releasing backup interface [ 783.056724][T19284] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 783.387274][T19299] FAULT_INJECTION: forcing a failure. [ 783.387274][T19299] name fail_futex, interval 1, probability 0, space 0, times 0 [ 783.387301][T19299] CPU: 0 UID: 0 PID: 19299 Comm: syz.3.5099 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 783.387321][T19299] Tainted: [L]=SOFTLOCKUP [ 783.387327][T19299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 783.387334][T19299] Call Trace: [ 783.387339][T19299] [ 783.387345][T19299] dump_stack_lvl+0xe8/0x150 [ 783.387368][T19299] should_fail_ex+0x46b/0x600 [ 783.387388][T19299] get_futex_key+0x1ac/0x1690 [ 783.387414][T19299] ? __pfx_get_futex_key+0x10/0x10 [ 783.387432][T19299] ? __kasan_kmalloc+0x93/0xb0 [ 783.387451][T19299] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 783.387468][T19299] futex_lock_pi+0x25b/0xb10 [ 783.387482][T19299] ? __lock_acquire+0x6b5/0x2cf0 [ 783.387500][T19299] ? __pfx_futex_lock_pi+0x10/0x10 [ 783.387525][T19299] ? __lock_acquire+0x6b5/0x2cf0 [ 783.387540][T19299] ? __pfx_futex_wake_mark+0x10/0x10 [ 783.387568][T19299] do_futex+0x292/0x420 [ 783.387580][T19299] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 783.387597][T19299] ? __pfx_do_futex+0x10/0x10 [ 783.387608][T19299] ? rt_mutex_slowunlock+0x1cb/0x300 [ 783.387626][T19299] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 783.387650][T19299] __se_sys_futex+0x3a8/0x450 [ 783.387675][T19299] ? ksys_write+0x248/0x270 [ 783.387705][T19299] ? __pfx___se_sys_futex+0x10/0x10 [ 783.387728][T19299] ? __pfx_ksys_write+0x10/0x10 [ 783.387764][T19299] ? __x64_sys_futex+0x21/0xf0 [ 783.387785][T19299] do_syscall_64+0x14d/0xf80 [ 783.387805][T19299] ? trace_irq_disable+0x3b/0x150 [ 783.387828][T19299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.387850][T19299] ? clear_bhb_loop+0x40/0x90 [ 783.387873][T19299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.387886][T19299] RIP: 0033:0x7fe9e7d4c819 [ 783.387899][T19299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.387910][T19299] RSP: 002b:00007fe9e5f9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 783.387924][T19299] RAX: ffffffffffffffda RBX: 00007fe9e7fc5fa0 RCX: 00007fe9e7d4c819 [ 783.387934][T19299] RDX: 00000000007ffffe RSI: 0000000000000006 RDI: 000020000000cffc [ 783.387942][T19299] RBP: 00007fe9e5f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 783.387950][T19299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.387958][T19299] R13: 00007fe9e7fc6038 R14: 00007fe9e7fc5fa0 R15: 00007ffc7ead8e38 [ 783.387976][T19299] [ 784.040815][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5105'. [ 784.090087][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5104'. [ 784.131611][ T1858] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.131906][ T1858] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.131953][ T1858] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.131993][ T1858] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.132059][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5104'. [ 784.407213][ T5803] usb 6-1: USB disconnect, device number 76 [ 784.811585][T19331] tmpfs: Unknown parameter 'usrquotatual_nci' [ 785.075971][ T5803] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 785.170600][T19342] netlink: 'syz.4.5115': attribute type 10 has an invalid length. [ 785.196945][T19342] syz_tun: entered promiscuous mode [ 785.207021][T19342] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 785.222749][ T5803] usb 4-1: device descriptor read/64, error -71 [ 785.457098][ T5803] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 785.535275][ T5874] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 785.615913][ T5803] usb 4-1: device descriptor read/64, error -71 [ 785.700604][ T5874] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 785.700640][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.700663][ T5874] usb 5-1: Product: syz [ 785.700679][ T5874] usb 5-1: Manufacturer: syz [ 785.700695][ T5874] usb 5-1: SerialNumber: syz [ 785.735420][ T5803] usb usb4-port1: attempt power cycle [ 785.762627][ T5874] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 785.792740][T13306] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 786.105317][ T5803] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 786.127541][ T5803] usb 4-1: device descriptor read/8, error -71 [ 786.366355][ T5803] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 786.396961][ T5803] usb 4-1: device descriptor read/8, error -71 [ 786.547551][ T5803] usb usb4-port1: unable to enumerate USB device [ 787.476772][T13306] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 787.496311][T13306] ath9k_htc: Failed to initialize the device [ 787.497881][T19365] binder: 19362:19365 ioctl 4018620d 0 returned -22 [ 787.630814][T13306] usb 5-1: ath9k_htc: USB layer deinitialized [ 788.106326][T19376] io-wq is not configured for unbound workers [ 788.715155][ T5899] usb 5-1: USB disconnect, device number 48 [ 789.291539][T19399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5135'. [ 789.776575][ T5899] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 789.944997][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 789.955411][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 789.955446][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 789.955474][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 789.955498][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 789.955522][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 790.162558][ T5899] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 790.162596][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.162618][ T5899] usb 5-1: Product: syz [ 790.162634][ T5899] usb 5-1: Manufacturer: syz [ 790.162650][ T5899] usb 5-1: SerialNumber: syz [ 790.207146][ T5899] usb 5-1: config 0 descriptor?? [ 791.400533][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 791.400594][ T5899] input input11: Device does not respond to id packet M [ 791.429405][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 791.429467][ T5899] input input11: Device does not respond to id packet P [ 791.429938][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 791.429989][ T5899] input input11: Device does not respond to id packet B [ 791.430445][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 791.430496][ T5899] input input11: Device does not respond to id packet N [ 791.431114][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 791.431599][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 791.432094][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 791.474924][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 791.528485][ T5899] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 791.572840][ T5899] usb 5-1: USB disconnect, device number 49 [ 791.834974][ T5981] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 791.985102][ T5981] usb 6-1: Using ep0 maxpacket: 32 [ 791.990974][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 792.013517][ T5981] usb 6-1: config 2 has an invalid interface number: 88 but max is 1 [ 792.013548][ T5981] usb 6-1: config 2 has an invalid interface number: 3 but max is 1 [ 792.013569][ T5981] usb 6-1: config 2 has no interface number 0 [ 792.013585][ T5981] usb 6-1: config 2 has no interface number 1 [ 792.014135][ T5981] usb 6-1: config 2 interface 88 altsetting 9 endpoint 0x7 has invalid maxpacket 2023, setting to 1024 [ 792.014168][ T5981] usb 6-1: config 2 interface 88 has no altsetting 0 [ 792.014188][ T5981] usb 6-1: config 2 interface 3 has no altsetting 0 [ 792.077497][ T5981] usb 6-1: New USB device found, idVendor=10b8, idProduct=2384, bcdDevice=5d.89 [ 792.077532][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.077551][ T5981] usb 6-1: Product: syz [ 792.077564][ T5981] usb 6-1: Manufacturer: syz [ 792.077578][ T5981] usb 6-1: SerialNumber: syz [ 792.254895][T13306] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 792.332265][T19447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.348872][ T5981] dvb-usb: found a 'DiBcom NIM9090MD reference design' in cold state, will try to load a firmware [ 792.409656][T13306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 792.416196][ T5981] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 792.416236][ T5981] dib0700: firmware download failed at 7 with -22 [ 792.438162][ T5866] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 792.473687][ T5981] dvb-usb: found a 'DiBcom NIM9090MD reference design' in cold state, will try to load a firmware [ 792.486918][ T5981] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 792.486970][ T5981] dib0700: firmware download failed at 7 with -22 [ 792.489775][T13306] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 792.489808][T13306] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 792.489830][T13306] usb 4-1: Product: syz [ 792.489846][T13306] usb 4-1: Manufacturer: syz [ 792.489861][T13306] usb 4-1: SerialNumber: syz [ 792.493133][ T5981] usb 6-1: USB disconnect, device number 77 [ 792.502574][T13306] usb 4-1: config 0 descriptor?? [ 792.535904][T19438] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 792.551087][T13306] hub 4-1:0.0: bad descriptor, ignoring hub [ 792.551126][T13306] hub 4-1:0.0: probe with driver hub failed with error -5 [ 792.705679][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 792.707278][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 792.707299][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 792.710945][ T5866] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 792.710963][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.710975][ T5866] usb 1-1: Product: syz [ 792.710984][ T5866] usb 1-1: Manufacturer: syz [ 792.710994][ T5866] usb 1-1: SerialNumber: syz [ 792.745136][ T5866] usb 1-1: config 0 descriptor?? [ 792.756330][ T5866] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 792.756363][ T5866] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 793.123213][T19463] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.5158'. [ 793.188333][T19467] netlink: zone id is out of range [ 793.188346][T19467] netlink: zone id is out of range [ 793.188757][T19467] netlink: set zone limit has 8 unknown bytes [ 793.295068][ T5899] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 793.346503][ T5866] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 793.346999][ T5866] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 793.347541][ T5866] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 793.347560][ T5866] em28xx 1-1:0.0: No AC97 audio processor [ 793.369629][ T5866] usb 1-1: USB disconnect, device number 99 [ 793.373966][ T5866] em28xx 1-1:0.0: Disconnecting em28xx [ 793.387200][ T5866] em28xx 1-1:0.0: Freeing device [ 793.450829][ T5899] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 793.450854][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.450870][ T5899] usb 6-1: config 0 has no interface number 0 [ 793.450899][ T5899] usb 6-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 43 [ 793.450915][ T5899] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 793.450941][ T5899] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 793.450955][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.455141][T12383] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 793.532955][ T5899] usb 6-1: config 0 descriptor?? [ 793.534046][T19459] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 793.578677][ T5899] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 793.613912][T12383] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 793.613946][T12383] usb 5-1: config 0 has no interface number 0 [ 793.613997][T12383] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 793.617377][T12383] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 793.617409][T12383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.617431][T12383] usb 5-1: Product: syz [ 793.617447][T12383] usb 5-1: Manufacturer: syz [ 793.617463][T12383] usb 5-1: SerialNumber: syz [ 793.679814][T12383] usb 5-1: config 0 descriptor?? [ 793.692853][T12383] kobil_sct 5-1:0.148: KOBIL USB smart card terminal converter detected [ 793.713636][T12383] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 793.753085][T19459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.753670][T19459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.755155][ T5866] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 793.894107][T19467] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5161'. [ 793.904682][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 793.911224][ T5866] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 793.911245][ T5866] usb 1-1: config 2 has no interface number 0 [ 793.911284][ T5866] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 793.911300][ T5866] usb 1-1: config 2 interface 88 has no altsetting 0 [ 793.951583][ T5866] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 793.951798][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.951812][ T5866] usb 1-1: Product: syz [ 793.951821][ T5866] usb 1-1: Manufacturer: syz [ 793.951830][ T5866] usb 1-1: SerialNumber: syz [ 793.976742][ T5899] usb 4-1: USB disconnect, device number 99 [ 794.029072][T19477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5159'. [ 794.055511][T19472] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 794.875539][ T5866] asix 1-1:2.88: probe with driver asix failed with error -71 [ 794.879212][T12164] usb 6-1: Failed to submit usb control message: -110 [ 794.879257][T12164] usb 6-1: unable to send the bmi data to the device: -110 [ 794.879276][T12164] usb 6-1: unable to get target info from device [ 794.879293][T12164] usb 6-1: could not get target info (-110) [ 794.879697][T12164] usb 6-1: could not probe fw (-110) [ 794.936237][ T5866] usb 1-1: USB disconnect, device number 100 [ 794.965235][ T5874] usb 5-1: USB disconnect, device number 50 [ 795.027669][T19487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5167'. [ 795.027700][T19487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5167'. [ 795.124013][ T5874] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 795.127387][ T5874] kobil_sct 5-1:0.148: device disconnected [ 795.220313][T19493] input: syz1 as /devices/virtual/input/input12 [ 797.784115][T19509] binder: 19507:19509 ioctl c0306201 200000000240 returned -14 [ 797.795795][T19510] FAULT_INJECTION: forcing a failure. [ 797.795795][T19510] name failslab, interval 1, probability 0, space 0, times 0 [ 797.795837][T19510] CPU: 0 UID: 0 PID: 19510 Comm: syz.4.5177 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 797.795868][T19510] Tainted: [L]=SOFTLOCKUP [ 797.795886][T19510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 797.795900][T19510] Call Trace: [ 797.795910][T19510] [ 797.795920][T19510] dump_stack_lvl+0xe8/0x150 [ 797.795960][T19510] should_fail_ex+0x46b/0x600 [ 797.795999][T19510] should_failslab+0xa8/0x100 [ 797.796026][T19510] __kmalloc_cache_noprof+0x84/0x690 [ 797.796050][T19510] ? device_add+0xbe/0xb80 [ 797.796084][T19510] device_add+0xbe/0xb80 [ 797.796108][T19510] ? device_initialize+0x282/0x470 [ 797.796141][T19510] tty_register_device_attr+0x422/0x950 [ 797.796172][T19510] ? __pfx_tty_register_device_attr+0x10/0x10 [ 797.796204][T19510] ? tty_port_init+0x140/0x1b0 [ 797.796226][T19510] ? gsm_dlci_alloc+0x341/0x650 [ 797.796253][T19510] gsm_activate_mux+0x110/0x2a0 [ 797.796288][T19510] gsmld_ioctl+0x127f/0x18d0 [ 797.796336][T19510] ? __pfx_gsmld_ioctl+0x10/0x10 [ 797.796383][T19510] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 797.796420][T19510] ? ldsem_down_read+0x12/0x40 [ 797.796449][T19510] ? __pfx_gsmld_ioctl+0x10/0x10 [ 797.796481][T19510] tty_ioctl+0x9cb/0xde0 [ 797.796514][T19510] ? __pfx_tty_ioctl+0x10/0x10 [ 797.796546][T19510] __se_sys_ioctl+0xff/0x170 [ 797.796572][T19510] do_syscall_64+0x14d/0xf80 [ 797.796595][T19510] ? trace_irq_disable+0x3b/0x150 [ 797.796622][T19510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.796644][T19510] ? clear_bhb_loop+0x40/0x90 [ 797.796672][T19510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.796695][T19510] RIP: 0033:0x7f73f2d6c819 [ 797.796717][T19510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.796737][T19510] RSP: 002b:00007f73f0fbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.796762][T19510] RAX: ffffffffffffffda RBX: 00007f73f2fe5fa0 RCX: 00007f73f2d6c819 [ 797.796779][T19510] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 797.796794][T19510] RBP: 00007f73f0fbe090 R08: 0000000000000000 R09: 0000000000000000 [ 797.796809][T19510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.796824][T19510] R13: 00007f73f2fe6038 R14: 00007f73f2fe5fa0 R15: 00007ffd0df53f68 [ 797.796862][T19510] [ 798.103915][T13306] usb 6-1: USB disconnect, device number 78 [ 798.209498][ T5874] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 798.354706][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 798.357226][ T5874] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 798.357254][ T5874] usb 1-1: config 2 has no interface number 0 [ 798.357305][ T5874] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 798.357342][ T5874] usb 1-1: config 2 interface 88 has no altsetting 0 [ 798.360648][ T5874] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 798.360737][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.360759][ T5874] usb 1-1: Product: syz [ 798.360774][ T5874] usb 1-1: Manufacturer: syz [ 798.360791][ T5874] usb 1-1: SerialNumber: syz [ 798.377858][T19512] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 799.211580][ T5874] asix 1-1:2.88: probe with driver asix failed with error -71 [ 799.275246][ T5874] usb 1-1: USB disconnect, device number 101 [ 799.635122][ T5899] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 800.047769][ T5899] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 800.047803][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.076330][ T5899] usb 6-1: config 0 descriptor?? [ 800.098297][ T5899] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 801.123681][T19547] IPVS: stopping backup sync thread 19548 ... [ 801.282547][T19551] FAULT_INJECTION: forcing a failure. [ 801.282547][T19551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.282588][T19551] CPU: 0 UID: 0 PID: 19551 Comm: syz.0.5189 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 801.282620][T19551] Tainted: [L]=SOFTLOCKUP [ 801.282628][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 801.282641][T19551] Call Trace: [ 801.282650][T19551] [ 801.282660][T19551] dump_stack_lvl+0xe8/0x150 [ 801.282698][T19551] should_fail_ex+0x46b/0x600 [ 801.282736][T19551] _copy_to_user+0x31/0xb0 [ 801.282761][T19551] simple_read_from_buffer+0xe1/0x170 [ 801.282805][T19551] proc_fail_nth_read+0x1be/0x230 [ 801.282837][T19551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.282869][T19551] ? rw_verify_area+0x2ac/0x4e0 [ 801.282902][T19551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.282932][T19551] vfs_read+0x212/0xa80 [ 801.282975][T19551] ? __pfx_vfs_read+0x10/0x10 [ 801.283011][T19551] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 801.283037][T19551] ? lockdep_hardirqs_on+0x7a/0x110 [ 801.283061][T19551] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 801.283086][T19551] ? mutex_lock_nested+0x152/0x1d0 [ 801.283117][T19551] ? fdget_pos+0x252/0x320 [ 801.283155][T19551] ksys_read+0x156/0x270 [ 801.283191][T19551] ? __pfx_ksys_read+0x10/0x10 [ 801.283223][T19551] ? __pfx_tty_ioctl+0x10/0x10 [ 801.283268][T19551] do_syscall_64+0x14d/0xf80 [ 801.283291][T19551] ? trace_irq_disable+0x3b/0x150 [ 801.283315][T19551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.283338][T19551] ? clear_bhb_loop+0x40/0x90 [ 801.283366][T19551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.283389][T19551] RIP: 0033:0x7fd4fae5d04e [ 801.283410][T19551] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.283430][T19551] RSP: 002b:00007fd4f90edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.283455][T19551] RAX: ffffffffffffffda RBX: 00007fd4f90ee6c0 RCX: 00007fd4fae5d04e [ 801.283471][T19551] RDX: 000000000000000f RSI: 00007fd4f90ee0a0 RDI: 0000000000000004 [ 801.283485][T19551] RBP: 00007fd4f90ee090 R08: 0000000000000000 R09: 0000000000000000 [ 801.283499][T19551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.283513][T19551] R13: 00007fd4fb116038 R14: 00007fd4fb115fa0 R15: 00007ffd192079a8 [ 801.283548][T19551] [ 801.391741][ T5899] gspca_cpia1: usb_control_msg 03, error -32 [ 801.411359][ T5899] gspca_cpia1: usb_control_msg 03, error -71 [ 801.411809][ T5899] gspca_cpia1: usb_control_msg 01, error -71 [ 801.411825][ T5899] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 801.437761][ T5899] usb 6-1: USB disconnect, device number 79 [ 801.961632][T19563] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 803.539212][T19590] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 803.647824][T19592] wlan1 speed is unknown, defaulting to 1000 [ 803.684752][ T5899] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 803.814675][ T5899] usb 5-1: device descriptor read/64, error -71 [ 804.054692][ T5899] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 804.225109][ T5899] usb 5-1: device descriptor read/64, error -71 [ 804.470699][ T5899] usb usb5-port1: attempt power cycle [ 804.741458][T19608] hfs: unable to load iocharset "io#harset" [ 804.934701][ T5899] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 804.955721][ T5899] usb 5-1: device descriptor read/8, error -71 [ 806.081811][ T5899] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 806.096159][ T5899] usb 5-1: device descriptor read/8, error -71 [ 806.142446][T10985] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 806.205153][ T5899] usb usb5-port1: unable to enumerate USB device [ 806.220846][T19636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5216'. [ 806.220880][T19636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5216'. [ 806.298722][T10985] usb 1-1: Using ep0 maxpacket: 16 [ 806.301087][T10985] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.301115][T10985] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.304214][T10985] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 806.304244][T10985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.304267][T10985] usb 1-1: Product: syz [ 806.304283][T10985] usb 1-1: Manufacturer: syz [ 806.304298][T10985] usb 1-1: SerialNumber: syz [ 806.583526][T10985] usb 1-1: 0:2 : does not exist [ 806.599916][T10985] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 806.687157][T10985] usb 1-1: USB disconnect, device number 102 [ 806.797682][T19645] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 806.846442][T19386] udevd[19386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.154671][ T5899] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 807.244886][ T5803] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 807.304639][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 807.316084][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.316116][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.329007][ T5899] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.329040][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.329062][ T5899] usb 4-1: Product: syz [ 807.329078][ T5899] usb 4-1: Manufacturer: syz [ 807.329093][ T5899] usb 4-1: SerialNumber: syz [ 807.405671][ T5803] usb 6-1: Using ep0 maxpacket: 16 [ 807.411054][ T5803] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.411083][ T5803] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.439891][ T5803] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.439924][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.439947][ T5803] usb 6-1: Product: syz [ 807.439964][ T5803] usb 6-1: Manufacturer: syz [ 807.439980][ T5803] usb 6-1: SerialNumber: syz [ 807.595422][ T5899] usb 4-1: 0:2 : does not exist [ 807.620830][ T5899] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 807.686841][T19674] netlink: 'syz.0.5231': attribute type 18 has an invalid length. [ 807.693340][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5231'. [ 807.736337][ T5899] usb 4-1: USB disconnect, device number 100 [ 807.743774][ T5803] usb 6-1: 0:2 : does not exist [ 807.774695][T10985] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 807.825539][ T5803] usb 6-1: USB disconnect, device number 80 [ 807.924813][T18864] udevd[18864]: setting owner of /dev/bus/usb/006/080 to uid=0, gid=0 failed: No such file or directory [ 807.931802][T19386] udevd[19386]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.946642][T19676] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 807.964407][T10985] usb 5-1: Using ep0 maxpacket: 8 [ 807.982547][T10985] usb 5-1: config 2 has an invalid interface number: 39 but max is 1 [ 807.982581][T10985] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 807.982601][T10985] usb 5-1: config 2 has an invalid interface number: 56 but max is 1 [ 807.982623][T10985] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 807.982642][T10985] usb 5-1: config 2 has an invalid descriptor of length 207, skipping remainder of the config [ 807.982663][T10985] usb 5-1: config 2 has no interface number 0 [ 807.982682][T10985] usb 5-1: config 2 has no interface number 1 [ 807.982778][T10985] usb 5-1: config 2 interface 39 altsetting 127 endpoint 0x4 has an invalid bInterval 137, changing to 7 [ 807.982811][T10985] usb 5-1: config 2 interface 39 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 807.982854][T10985] usb 5-1: config 2 interface 56 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 32 [ 807.982879][T10985] usb 5-1: config 2 interface 56 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 807.982902][T10985] usb 5-1: config 2 interface 56 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 807.982926][T10985] usb 5-1: config 2 interface 56 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 807.982948][T10985] usb 5-1: config 2 interface 56 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 8 [ 807.982972][T10985] usb 5-1: config 2 interface 56 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 807.982994][T10985] usb 5-1: config 2 interface 56 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 807.983016][T10985] usb 5-1: config 2 interface 56 altsetting 5 has an endpoint descriptor with address 0x97, changing to 0x87 [ 807.983042][T10985] usb 5-1: config 2 interface 56 altsetting 5 has a duplicate endpoint with address 0x87, skipping [ 807.983064][T10985] usb 5-1: config 2 interface 56 altsetting 5 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 807.983091][T10985] usb 5-1: config 2 interface 39 has no altsetting 0 [ 807.983111][T10985] usb 5-1: config 2 interface 56 has no altsetting 0 [ 808.198768][T10985] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e14, bcdDevice=e7.7e [ 808.198803][T10985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.198825][T10985] usb 5-1: Product: syz [ 808.198841][T10985] usb 5-1: Manufacturer: 〉 [ 808.198857][T10985] usb 5-1: SerialNumber: syz [ 808.306727][T19386] udevd[19386]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 808.579933][T19683] random: crng reseeded on system resumption [ 808.907140][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.907225][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.049556][T19689] netlink: 'syz.3.5237': attribute type 3 has an invalid length. [ 809.148182][T10985] dvb-usb: found a 'DiBcom STK7700P reference design' in cold state, will try to load a firmware [ 809.150009][T10985] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 809.150057][T10985] dib0700: firmware download failed at 7 with -22 [ 809.165370][T10985] dvb-usb: found a 'DiBcom STK7700P reference design' in cold state, will try to load a firmware [ 809.167370][T10985] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 809.167416][T10985] dib0700: firmware download failed at 7 with -22 [ 809.175769][T10985] usb 5-1: USB disconnect, device number 55 [ 809.364713][ T5874] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 809.935349][ T5803] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 809.977087][ T5874] usb 4-1: unable to get BOS descriptor or descriptor too short [ 809.977739][ T5874] usb 4-1: not running at top speed; connect to a high speed hub [ 809.979017][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.979042][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 809.982594][ T5874] usb 4-1: string descriptor 0 read error: -22 [ 809.982767][ T5874] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 809.982794][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.086966][ T5803] usb 1-1: unable to get BOS descriptor or descriptor too short [ 810.088228][ T5803] usb 1-1: config 125 has an invalid interface number: 38 but max is 0 [ 810.088256][ T5803] usb 1-1: config 125 has no interface number 0 [ 810.088290][ T5803] usb 1-1: config 125 interface 38 has no altsetting 0 [ 810.090501][ T5803] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 810.090529][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.090542][ T5803] usb 1-1: Product: syz [ 810.090551][ T5803] usb 1-1: Manufacturer: syz [ 810.090560][ T5803] usb 1-1: SerialNumber: syz [ 810.217947][T19702] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 810.304710][T13306] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 810.464706][T13306] usb 6-1: Using ep0 maxpacket: 16 [ 810.480682][T13306] usb 6-1: unable to get BOS descriptor or descriptor too short [ 810.482796][T13306] usb 6-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 810.482856][T13306] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 810.490751][ T5874] usb 4-1: USB disconnect, device number 101 [ 810.515206][T13306] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 810.515237][T13306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.515310][T13306] usb 6-1: Product: syz [ 810.515324][T13306] usb 6-1: Manufacturer: syz [ 810.515338][T13306] usb 6-1: SerialNumber: syz [ 810.642908][T19700] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 810.771415][ T5803] usb 1-1: USB disconnect, device number 103 [ 810.805553][T19710] syzkaller1: entered promiscuous mode [ 810.805578][T19710] syzkaller1: entered allmulticast mode [ 810.887310][T13306] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 810.887378][T13306] usb 6-1: MIDIStreaming interface descriptor not found [ 811.171706][T13306] usb 6-1: USB disconnect, device number 81 [ 811.407178][T18948] udevd[18948]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 811.633218][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5249'. [ 811.633240][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5249'. [ 811.633263][T19724] netlink: 'syz.1.5249': attribute type 18 has an invalid length. [ 811.808119][T19733] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 811.834925][T10985] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 811.984879][T10985] usb 5-1: Using ep0 maxpacket: 32 [ 811.987597][T10985] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 811.987626][T10985] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 811.987649][T10985] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 811.987672][T10985] usb 5-1: config 1 has no interface number 0 [ 811.988839][T10985] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 811.988872][T10985] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 811.988918][T10985] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 811.988943][T10985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.129663][T10985] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 812.306615][T10985] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 812.823782][ T5866] usb 5-1: USB disconnect, device number 56 [ 812.828055][ T5866] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 813.071039][T19753] FAULT_INJECTION: forcing a failure. [ 813.071039][T19753] name failslab, interval 1, probability 0, space 0, times 0 [ 813.071234][T19753] CPU: 1 UID: 0 PID: 19753 Comm: syz.0.5263 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 813.071267][T19753] Tainted: [L]=SOFTLOCKUP [ 813.071275][T19753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 813.071288][T19753] Call Trace: [ 813.071297][T19753] [ 813.071307][T19753] dump_stack_lvl+0xe8/0x150 [ 813.071347][T19753] should_fail_ex+0x46b/0x600 [ 813.071384][T19753] should_failslab+0xa8/0x100 [ 813.071411][T19753] kmem_cache_alloc_noprof+0x87/0x680 [ 813.071454][T19753] ? do_getname_kernel+0x54/0x230 [ 813.071487][T19753] do_getname_kernel+0x54/0x230 [ 813.071511][T19753] ? kern_path+0x1b/0x150 [ 813.071543][T19753] kern_path+0x25/0x150 [ 813.071575][T19753] tomoyo_mount_permission+0x795/0x9d0 [ 813.071607][T19753] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 813.071634][T19753] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 813.071727][T19753] security_sb_mount+0xe4/0x320 [ 813.071764][T19753] path_mount+0xbc/0x10e0 [ 813.071789][T19753] ? user_path_at+0xd4/0x160 [ 813.071827][T19753] ? user_path_at+0xd4/0x160 [ 813.071861][T19753] __se_sys_mount+0x31d/0x420 [ 813.071896][T19753] ? __pfx___se_sys_mount+0x10/0x10 [ 813.071933][T19753] ? __x64_sys_mount+0x20/0xc0 [ 813.071964][T19753] do_syscall_64+0x14d/0xf80 [ 813.071988][T19753] ? trace_irq_disable+0x3b/0x150 [ 813.072015][T19753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.072038][T19753] ? clear_bhb_loop+0x40/0x90 [ 813.072066][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.072088][T19753] RIP: 0033:0x7fd4fae9c819 [ 813.072109][T19753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.072128][T19753] RSP: 002b:00007fd4f90ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 813.072153][T19753] RAX: ffffffffffffffda RBX: 00007fd4fb115fa0 RCX: 00007fd4fae9c819 [ 813.072170][T19753] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000000 [ 813.072186][T19753] RBP: 00007fd4f90ee090 R08: 0000000000000000 R09: 0000000000000000 [ 813.072201][T19753] R10: 0000000000002042 R11: 0000000000000246 R12: 0000000000000001 [ 813.072221][T19753] R13: 00007fd4fb116038 R14: 00007fd4fb115fa0 R15: 00007ffd192079a8 [ 813.072259][T19753] [ 816.307156][ T37] audit: type=1326 audit(1775137388.770:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e7d4c819 code=0x7ffc0000 [ 816.307215][ T37] audit: type=1326 audit(1775137388.770:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e7d4c819 code=0x7ffc0000 [ 816.314342][ T37] audit: type=1326 audit(1775137388.770:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe9e7d09511 code=0x7ffc0000 [ 816.315261][ T37] audit: type=1326 audit(1775137388.770:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe9e7d4d609 code=0x7ffc0000 [ 816.316673][ T37] audit: type=1326 audit(1775137388.780:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe9e7d0957b code=0x7ffc0000 [ 816.322471][ T37] audit: type=1326 audit(1775137388.780:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e7d4c819 code=0x7ffc0000 [ 816.322525][ T37] audit: type=1326 audit(1775137388.780:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e7d4c819 code=0x7ffc0000 [ 816.322571][ T37] audit: type=1326 audit(1775137388.780:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe9e7d08c6c code=0x7ffc0000 [ 816.322626][ T37] audit: type=1326 audit(1775137388.780:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe9e7d08cce code=0x7ffc0000 [ 816.322672][ T37] audit: type=1326 audit(1775137388.780:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19808 comm="syz.3.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9e7d0d04e code=0x7ffc0000 [ 816.463860][ T5866] IPVS: starting estimator thread 0... [ 816.574706][ T5874] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 816.595296][T19814] IPVS: using max 13 ests per chain, 31200 per kthread [ 816.613341][T19820] netlink: 49 bytes leftover after parsing attributes in process `syz.5.5288'. [ 816.613355][T19820] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5288'. [ 816.641380][T19820] netlink: 49 bytes leftover after parsing attributes in process `syz.5.5288'. [ 816.736105][ T5874] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 816.736136][ T5874] usb 4-1: config 0 has no interface number 0 [ 816.740059][ T5874] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 816.740093][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.740115][ T5874] usb 4-1: Product: syz [ 816.740132][ T5874] usb 4-1: Manufacturer: syz [ 816.740148][ T5874] usb 4-1: SerialNumber: syz [ 816.762024][ T5874] usb 4-1: config 0 descriptor?? [ 816.789739][ T5874] usb 4-1: selecting invalid altsetting 1 [ 816.791380][ T5874] dvb_ttusb_budget: ttusb_init_controller: error [ 816.791398][ T5874] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 816.962773][T13306] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 817.851167][ T5874] DVB: Unable to find symbol stv0299_attach() [ 817.982785][ T5874] DVB: Unable to find symbol tda8083_attach() [ 817.982798][ T5874] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 818.025764][T13306] usb 1-1: Using ep0 maxpacket: 32 [ 818.032717][T13306] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 818.032759][T13306] usb 1-1: can't read configurations, error -61 [ 818.154715][T13306] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 818.197207][ T5874] usb 4-1: USB disconnect, device number 102 [ 818.314602][T13306] usb 1-1: Using ep0 maxpacket: 32 [ 818.319242][T13306] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 818.319284][T13306] usb 1-1: can't read configurations, error -61 [ 818.319734][T13306] usb usb1-port1: attempt power cycle [ 819.665655][T13306] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 819.881810][T13306] usb 1-1: device not accepting address 106, error -71 [ 821.474200][T19867] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 821.496030][T19867] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 822.419530][T19867] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 822.419806][T19867] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 822.821414][T19867] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 822.821567][T19867] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 822.929797][T19867] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 822.929900][T19867] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 823.020194][T19888] 8021q: VLANs not supported on ipvlan0 [ 823.022619][T19867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 823.022734][T19867] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 823.142101][T19867] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 823.215018][T15170] Bluetooth: hci5: command 0x0406 tx timeout [ 823.495612][ T5899] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 823.814975][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 823.820803][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.820833][ T5899] usb 1-1: config 0 has no interface number 0 [ 823.820881][ T5899] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 823.820907][ T5899] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 823.820952][ T5899] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 823.820977][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.898717][ T5899] usb 1-1: config 0 descriptor?? [ 823.996508][ T5899] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 824.122284][ T5803] usb 1-1: USB disconnect, device number 108 [ 824.172159][T19903] FAULT_INJECTION: forcing a failure. [ 824.172159][T19903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.172352][T19903] CPU: 0 UID: 0 PID: 19903 Comm: syz.5.5318 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 824.172385][T19903] Tainted: [L]=SOFTLOCKUP [ 824.172393][T19903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 824.172407][T19903] Call Trace: [ 824.172415][T19903] [ 824.172426][T19903] dump_stack_lvl+0xe8/0x150 [ 824.172465][T19903] should_fail_ex+0x46b/0x600 [ 824.172501][T19903] strncpy_from_user+0x36/0x2b0 [ 824.172543][T19903] do_getname+0x77/0x250 [ 824.172573][T19903] __se_sys_linkat+0x3a/0x2d0 [ 824.172603][T19903] do_syscall_64+0x14d/0xf80 [ 824.172628][T19903] ? trace_irq_disable+0x3b/0x150 [ 824.172654][T19903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.172678][T19903] ? clear_bhb_loop+0x40/0x90 [ 824.172706][T19903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.172728][T19903] RIP: 0033:0x7f0ffc6ec819 [ 824.172750][T19903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.172769][T19903] RSP: 002b:00007f0ffa93e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 824.172795][T19903] RAX: ffffffffffffffda RBX: 00007f0ffc965fa0 RCX: 00007f0ffc6ec819 [ 824.172812][T19903] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000004 [ 824.172826][T19903] RBP: 00007f0ffa93e090 R08: 0000000000000000 R09: 0000000000000000 [ 824.172840][T19903] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 824.172854][T19903] R13: 00007f0ffc966038 R14: 00007f0ffc965fa0 R15: 00007ffcf9b2a758 [ 824.172890][T19903] [ 824.494699][T15170] Bluetooth: hci0: command 0x0406 tx timeout [ 824.898241][T15170] Bluetooth: hci2: command 0x0406 tx timeout [ 824.942956][T19917] input: syz0 as /devices/virtual/input/input13 [ 824.944661][ T5899] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 824.974668][T15170] Bluetooth: hci3: command 0x0406 tx timeout [ 825.064594][T15170] Bluetooth: hci1: command 0x0405 tx timeout [ 825.101064][ T5899] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 825.101099][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.101121][ T5899] usb 5-1: Product: syz [ 825.101137][ T5899] usb 5-1: Manufacturer: syz [ 825.101154][ T5899] usb 5-1: SerialNumber: syz [ 825.294834][T15170] Bluetooth: hci5: command 0x0406 tx timeout [ 825.344390][T19917] wlan1 speed is unknown, defaulting to 1000 [ 825.561202][T19911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.563008][T19911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.254923][ T5899] rtl8150 5-1:1.0: couldn't reset the device [ 826.255376][ T5899] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 826.325343][ T5899] usb 5-1: USB disconnect, device number 57 [ 826.384638][T12383] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 826.538648][T12383] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 826.538684][T12383] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 826.538707][T12383] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 826.538747][T12383] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 826.538793][T12383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 826.538818][T12383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 826.538842][T12383] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 826.542327][T12383] usb 6-1: string descriptor 0 read error: -22 [ 826.542502][T12383] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 826.542531][T12383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.705905][T15170] Bluetooth: hci0: command 0x0406 tx timeout [ 826.871081][T12383] usb 6-1: config 0 descriptor?? [ 826.878614][T12383] hub 6-1:0.0: bad descriptor, ignoring hub [ 826.878652][T12383] hub 6-1:0.0: probe with driver hub failed with error -5 [ 826.885280][T12383] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 827.015905][T15170] Bluetooth: hci2: command 0x0406 tx timeout [ 827.056799][T15170] Bluetooth: hci3: command 0x0406 tx timeout [ 827.135859][T15170] Bluetooth: hci1: command 0x0405 tx timeout [ 827.674933][T14595] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 827.784222][T19930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.789289][T19930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.916357][T12383] usb 6-1: USB disconnect, device number 82 [ 827.919491][T14595] usb 4-1: Using ep0 maxpacket: 32 [ 827.936614][T14595] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 827.936647][T14595] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 827.936672][T14595] usb 4-1: config 0 interface 0 has no altsetting 0 [ 827.942213][T14595] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 827.942244][T14595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.942266][T14595] usb 4-1: Product: syz [ 827.942283][T14595] usb 4-1: Manufacturer: syz [ 827.942299][T14595] usb 4-1: SerialNumber: syz [ 828.025607][T14595] usb 4-1: config 0 descriptor?? [ 828.144923][T19947] 9p: Bad value for 'rfdno' [ 828.490809][T14595] gs_usb 4-1:0.0: Configuring for 112 interfaces [ 831.079288][ T5797] Bluetooth: hci1: command 0x0405 tx timeout [ 831.094651][T14595] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 831.094741][T14595] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 831.176055][T14595] usb 4-1: USB disconnect, device number 103 [ 831.693438][T19984] batadv0: entered promiscuous mode [ 831.700909][T19984] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 833.837867][ T5797] Bluetooth: hci1: command 0x0405 tx timeout [ 834.880551][T19999] bond12: option tlb_dynamic_lb: invalid value (16) [ 834.930945][T19999] bond12 (unregistering): Released all slaves [ 835.474892][ T5899] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 835.624879][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 835.627224][ T5899] usb 1-1: config 1 has an invalid descriptor of length 20, skipping remainder of the config [ 835.627253][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 835.627316][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 835.627346][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 835.627459][ T5899] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 835.627485][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.718039][ T5899] hub 1-1:1.0: bad descriptor, ignoring hub [ 835.718081][ T5899] hub 1-1:1.0: probe with driver hub failed with error -5 [ 835.719100][ T5899] cdc_wdm 1-1:1.0: skipping garbage [ 835.719115][ T5899] cdc_wdm 1-1:1.0: skipping garbage [ 835.753950][ T5899] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 835.753978][ T5899] cdc_wdm 1-1:1.0: Unknown control protocol [ 835.908867][T20019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.909463][T20019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.063748][ T5803] usb 1-1: USB disconnect, device number 109 [ 836.410250][T20056] IPv6: NLM_F_CREATE should be specified when creating new route [ 836.411082][ T5803] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 836.537391][ T5803] usb 1-1: device descriptor read/64, error -71 [ 836.779049][ T5803] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 836.847945][T20073] FAULT_INJECTION: forcing a failure. [ 836.847945][T20073] name failslab, interval 1, probability 0, space 0, times 0 [ 836.847986][T20073] CPU: 0 UID: 0 PID: 20073 Comm: syz.3.5383 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 836.848015][T20073] Tainted: [L]=SOFTLOCKUP [ 836.848024][T20073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 836.848037][T20073] Call Trace: [ 836.848046][T20073] [ 836.848056][T20073] dump_stack_lvl+0xe8/0x150 [ 836.848108][T20073] should_fail_ex+0x46b/0x600 [ 836.848146][T20073] should_failslab+0xa8/0x100 [ 836.848172][T20073] __kmalloc_cache_noprof+0x84/0x690 [ 836.848195][T20073] ? cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 836.848230][T20073] cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 836.848258][T20073] sta_set_sinfo+0x1e07/0x6bd0 [ 836.848309][T20073] ? rcu_is_watching+0x15/0xb0 [ 836.848343][T20073] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 836.848365][T20073] ? __sta_info_destroy_part2+0x28c/0x440 [ 836.848402][T20073] __sta_info_destroy_part2+0x2a9/0x440 [ 836.848436][T20073] __sta_info_flush+0x5f1/0x720 [ 836.848477][T20073] ? __pfx___sta_info_flush+0x10/0x10 [ 836.848520][T20073] ieee80211_ibss_disconnect+0x2c6/0x800 [ 836.848560][T20073] ieee80211_ibss_leave+0x47/0x150 [ 836.848588][T20073] cfg80211_leave_ibss+0x1d7/0x440 [ 836.848638][T20073] cfg80211_change_iface+0x46e/0xed0 [ 836.848670][T20073] nl80211_set_interface+0x773/0xa90 [ 836.848708][T20073] ? __pfx_nl80211_set_interface+0x10/0x10 [ 836.848732][T20073] ? nl80211_pre_doit+0x281/0x930 [ 836.848759][T20073] ? nl80211_pre_doit+0x4fb/0x930 [ 836.848788][T20073] genl_family_rcv_msg_doit+0x22a/0x330 [ 836.848824][T20073] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 836.848847][T20073] ? rcu_is_watching+0x15/0xb0 [ 836.848885][T20073] ? bpf_lsm_capable+0x9/0x20 [ 836.848908][T20073] ? security_capable+0x7e/0x2c0 [ 836.848945][T20073] genl_rcv_msg+0x61c/0x7a0 [ 836.848978][T20073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 836.849000][T20073] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 836.849022][T20073] ? __pfx_nl80211_set_interface+0x10/0x10 [ 836.849045][T20073] ? __pfx_nl80211_post_doit+0x10/0x10 [ 836.849082][T20073] ? __pfx_ref_tracker_free+0x10/0x10 [ 836.849120][T20073] netlink_rcv_skb+0x232/0x4b0 [ 836.849152][T20073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 836.849177][T20073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 836.849228][T20073] ? netlink_deliver_tap+0x2e/0x1b0 [ 836.849257][T20073] ? netlink_deliver_tap+0x2e/0x1b0 [ 836.849293][T20073] genl_rcv+0x28/0x40 [ 836.849314][T20073] netlink_unicast+0x831/0x9f0 [ 836.849351][T20073] ? __pfx_netlink_unicast+0x10/0x10 [ 836.849382][T20073] ? netlink_sendmsg+0x650/0xb40 [ 836.849412][T20073] ? skb_put+0x11b/0x210 [ 836.849438][T20073] netlink_sendmsg+0x813/0xb40 [ 836.849479][T20073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.849515][T20073] ? unwind_get_return_address+0x4d/0x90 [ 836.849542][T20073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 836.849576][T20073] ____sys_sendmsg+0x94c/0x9c0 [ 836.849608][T20073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 836.849643][T20073] ? import_iovec+0x73/0xa0 [ 836.849680][T20073] ___sys_sendmsg+0x2a5/0x360 [ 836.849712][T20073] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.849778][T20073] ? __fget_files+0x2a/0x420 [ 836.849806][T20073] ? __fget_files+0x3a6/0x420 [ 836.849847][T20073] __x64_sys_sendmsg+0x1c3/0x2a0 [ 836.849876][T20073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 836.849915][T20073] ? __pfx_ksys_write+0x10/0x10 [ 836.849965][T20073] do_syscall_64+0x14d/0xf80 [ 836.849989][T20073] ? trace_irq_disable+0x3b/0x150 [ 836.850013][T20073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.850037][T20073] ? clear_bhb_loop+0x40/0x90 [ 836.850065][T20073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.850098][T20073] RIP: 0033:0x7fe9e7d4c819 [ 836.850121][T20073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.850140][T20073] RSP: 002b:00007fe9e5f9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.850166][T20073] RAX: ffffffffffffffda RBX: 00007fe9e7fc5fa0 RCX: 00007fe9e7d4c819 [ 836.850182][T20073] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 836.850197][T20073] RBP: 00007fe9e5f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 836.850211][T20073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.850225][T20073] R13: 00007fe9e7fc6038 R14: 00007fe9e7fc5fa0 R15: 00007ffc7ead8e38 [ 836.850261][T20073] [ 836.904598][ T5803] usb 1-1: device descriptor read/64, error -71 [ 837.065568][ T5803] usb usb1-port1: attempt power cycle [ 837.074897][T20089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5388'. [ 837.425596][ T5803] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 837.454559][ T5803] usb 1-1: device descriptor read/8, error -71 [ 837.595232][T20100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5391'. [ 837.726223][ T5803] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 837.745680][ T5803] usb 1-1: device descriptor read/8, error -71 [ 839.678801][ T5803] usb usb1-port1: unable to enumerate USB device [ 840.716410][T20144] netlink: 'syz.5.5408': attribute type 10 has an invalid length. [ 840.721356][T20145] netlink: 'syz.5.5408': attribute type 10 has an invalid length. [ 841.272934][T20151] FAULT_INJECTION: forcing a failure. [ 841.272934][T20151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.272976][T20151] CPU: 0 UID: 0 PID: 20151 Comm: syz.0.5410 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 841.273006][T20151] Tainted: [L]=SOFTLOCKUP [ 841.273014][T20151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 841.273028][T20151] Call Trace: [ 841.273037][T20151] [ 841.273047][T20151] dump_stack_lvl+0xe8/0x150 [ 841.273085][T20151] should_fail_ex+0x46b/0x600 [ 841.273128][T20151] _copy_from_user+0x2d/0xb0 [ 841.273151][T20151] __sys_bpf+0x229/0x950 [ 841.273183][T20151] ? __pfx___sys_bpf+0x10/0x10 [ 841.273209][T20151] ? rt_mutex_slowunlock+0x1cb/0x300 [ 841.273268][T20151] ? ksys_write+0x248/0x270 [ 841.273306][T20151] ? __pfx_ksys_write+0x10/0x10 [ 841.273362][T20151] __x64_sys_bpf+0x7c/0x90 [ 841.273389][T20151] do_syscall_64+0x14d/0xf80 [ 841.273412][T20151] ? trace_irq_disable+0x3b/0x150 [ 841.273439][T20151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.273462][T20151] ? clear_bhb_loop+0x40/0x90 [ 841.273489][T20151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.273512][T20151] RIP: 0033:0x7fd4fae9c819 [ 841.273534][T20151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.273553][T20151] RSP: 002b:00007fd4f90ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 841.273578][T20151] RAX: ffffffffffffffda RBX: 00007fd4fb115fa0 RCX: 00007fd4fae9c819 [ 841.273594][T20151] RDX: 000000000000000c RSI: 0000200000000680 RDI: 000000000000000a [ 841.273608][T20151] RBP: 00007fd4f90ee090 R08: 0000000000000000 R09: 0000000000000000 [ 841.273623][T20151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.273637][T20151] R13: 00007fd4fb116038 R14: 00007fd4fb115fa0 R15: 00007ffd192079a8 [ 841.273673][T20151] [ 841.644295][T20144] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 842.027572][T20132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5403'. [ 842.554990][ T5981] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 842.964712][ T5981] usb 4-1: Using ep0 maxpacket: 8 [ 842.984720][ T5981] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 842.984754][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.984776][ T5981] usb 4-1: Product: syz [ 842.984791][ T5981] usb 4-1: Manufacturer: syz [ 842.984806][ T5981] usb 4-1: SerialNumber: syz [ 842.996631][ T5981] usb 4-1: config 0 descriptor?? [ 844.174755][ T5981] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 844.379158][T20159] binder: 20158:20159 ioctl 4018620d 0 returned -22 [ 844.380661][T20159] binder: 20158:20159 ioctl c0306201 0 returned -14 [ 844.612750][T20199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5429'. [ 845.057849][T20215] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 845.074637][T12383] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 845.113684][T20215] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 845.219040][ T5981] usb write operation failed. (-71) [ 845.241371][T12383] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 845.241405][T12383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.241426][T12383] usb 6-1: Product: syz [ 845.241442][T12383] usb 6-1: Manufacturer: syz [ 845.241459][T12383] usb 6-1: SerialNumber: syz [ 845.249762][T12383] usb 6-1: config 0 descriptor?? [ 845.284075][ T5981] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 845.286999][ T5981] dvbdev: DVB: registering new adapter (Terratec H7) [ 845.287055][ T5981] usb 4-1: media controller created [ 845.290046][ T5981] usb read operation failed. (-71) [ 845.315655][ T5981] usb write operation failed. (-71) [ 845.348953][ T5981] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 845.356770][ T5981] usb 4-1: USB disconnect, device number 104 [ 845.879761][T20230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5442'. [ 846.291402][T20237] FAULT_INJECTION: forcing a failure. [ 846.291402][T20237] name failslab, interval 1, probability 0, space 0, times 0 [ 846.291443][T20237] CPU: 0 UID: 0 PID: 20237 Comm: syz.0.5445 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 846.291473][T20237] Tainted: [L]=SOFTLOCKUP [ 846.291481][T20237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 846.291494][T20237] Call Trace: [ 846.291504][T20237] [ 846.291513][T20237] dump_stack_lvl+0xe8/0x150 [ 846.291552][T20237] should_fail_ex+0x46b/0x600 [ 846.291590][T20237] should_failslab+0xa8/0x100 [ 846.291616][T20237] kmem_cache_alloc_noprof+0x87/0x680 [ 846.291651][T20237] ? mas_alloc_nodes+0x291/0x350 [ 846.291683][T20237] mas_alloc_nodes+0x291/0x350 [ 846.291709][T20237] mas_preallocate+0x2d6/0x640 [ 846.291739][T20237] ? __pfx_mas_preallocate+0x10/0x10 [ 846.291774][T20237] ? __mas_set_range+0x12f/0x3c0 [ 846.291810][T20237] __split_vma+0x33d/0xa30 [ 846.291853][T20237] ? __pfx___split_vma+0x10/0x10 [ 846.291912][T20237] ? mas_find+0xb0e/0xd30 [ 846.291934][T20237] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 846.291970][T20237] vms_gather_munmap_vmas+0x4fa/0x1370 [ 846.292018][T20237] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 846.292057][T20237] ? mas_find+0xa7d/0xd30 [ 846.292086][T20237] mmap_region+0x87f/0x2230 [ 846.292123][T20237] ? __lock_acquire+0x6b5/0x2cf0 [ 846.292160][T20237] ? do_raw_spin_lock+0x12b/0x2f0 [ 846.292190][T20237] ? __pfx_mmap_region+0x10/0x10 [ 846.292217][T20237] ? __lock_acquire+0x6b5/0x2cf0 [ 846.292244][T20237] ? __lock_acquire+0x6b5/0x2cf0 [ 846.292270][T20237] ? __lock_acquire+0x6b5/0x2cf0 [ 846.292305][T20237] ? unwind_next_frame+0xa5/0x23c0 [ 846.292390][T20237] ? __lock_acquire+0x6b5/0x2cf0 [ 846.292434][T20237] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 846.292479][T20237] ? __lock_acquire+0x6b5/0x2cf0 [ 846.292498][T20237] ? cap_mmap_addr+0xaf/0x100 [ 846.292525][T20237] ? bpf_lsm_mmap_addr+0x9/0x50 [ 846.292548][T20237] ? security_mmap_addr+0x71/0x240 [ 846.292575][T20237] ? shmem_mapping+0xd/0x50 [ 846.292603][T20237] ? memfd_check_seals_mmap+0xcb/0x210 [ 846.292636][T20237] do_mmap+0xc2f/0x10c0 [ 846.292672][T20237] ? lockdep_hardirqs_on+0x7a/0x110 [ 846.292695][T20237] ? __pfx_do_mmap+0x10/0x10 [ 846.292723][T20237] ? rwbase_write_lock+0x568/0x730 [ 846.292764][T20237] vm_mmap_pgoff+0x2cc/0x4f0 [ 846.292805][T20237] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 846.292845][T20237] ? __fget_files+0x2a/0x420 [ 846.292874][T20237] ? __fget_files+0x3a6/0x420 [ 846.292900][T20237] ? __fget_files+0x2a/0x420 [ 846.292932][T20237] ksys_mmap_pgoff+0x4e8/0x720 [ 846.292965][T20237] ? __x64_sys_mmap+0x7f/0x140 [ 846.293002][T20237] do_syscall_64+0x14d/0xf80 [ 846.293024][T20237] ? trace_irq_disable+0x3b/0x150 [ 846.293051][T20237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.293074][T20237] ? clear_bhb_loop+0x40/0x90 [ 846.293101][T20237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.293123][T20237] RIP: 0033:0x7fd4fae9c819 [ 846.293154][T20237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.293173][T20237] RSP: 002b:00007fd4f90ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 846.293199][T20237] RAX: ffffffffffffffda RBX: 00007fd4fb115fa0 RCX: 00007fd4fae9c819 [ 846.293216][T20237] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 846.293231][T20237] RBP: 00007fd4f90ee090 R08: 0000000000000005 R09: 0000000000002000 [ 846.293243][T20237] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 846.293257][T20237] R13: 00007fd4fb116038 R14: 00007fd4fb115fa0 R15: 00007ffd192079a8 [ 846.293293][T20237] [ 846.361602][T20209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.371579][T20209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.569892][T12383] usb 6-1: Firmware version (0.0) predates our first public release. [ 846.569919][T12383] usb 6-1: Please update to version 0.2 or newer [ 846.783720][T12383] usb 6-1: USB disconnect, device number 83 [ 847.283807][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5450'. [ 847.345052][T20262] netlink: 'syz.4.5450': attribute type 21 has an invalid length. [ 847.345078][T20262] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5450'. [ 847.905854][T20262] netlink: 'syz.4.5450': attribute type 5 has an invalid length. [ 847.905883][T20262] netlink: 'syz.4.5450': attribute type 6 has an invalid length. [ 847.905898][T20262] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5450'. [ 847.949903][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5455'. [ 848.890836][T20283] FAULT_INJECTION: forcing a failure. [ 848.890836][T20283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.890862][T20283] CPU: 1 UID: 0 PID: 20283 Comm: syz.5.5461 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 848.890881][T20283] Tainted: [L]=SOFTLOCKUP [ 848.890886][T20283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 848.890894][T20283] Call Trace: [ 848.890899][T20283] [ 848.890905][T20283] dump_stack_lvl+0xe8/0x150 [ 848.890937][T20283] should_fail_ex+0x46b/0x600 [ 848.890958][T20283] _copy_from_user+0x2d/0xb0 [ 848.890971][T20283] video_usercopy+0x36f/0x14b0 [ 848.890992][T20283] ? smk_tskacc+0x311/0x3a0 [ 848.891010][T20283] ? __pfx___video_do_ioctl+0x10/0x10 [ 848.891034][T20283] ? __pfx_video_usercopy+0x10/0x10 [ 848.891051][T20283] ? smack_file_ioctl+0x2c2/0x360 [ 848.891080][T20283] ? __fget_files+0x2a/0x420 [ 848.891095][T20283] ? __fget_files+0x3a6/0x420 [ 848.891113][T20283] v4l2_ioctl+0x190/0x1e0 [ 848.891131][T20283] ? __pfx_v4l2_ioctl+0x10/0x10 [ 848.891148][T20283] __se_sys_ioctl+0xff/0x170 [ 848.891163][T20283] do_syscall_64+0x14d/0xf80 [ 848.891176][T20283] ? trace_irq_disable+0x3b/0x150 [ 848.891190][T20283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.891203][T20283] ? clear_bhb_loop+0x40/0x90 [ 848.891218][T20283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.891231][T20283] RIP: 0033:0x7f0ffc6ec819 [ 848.891243][T20283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.891254][T20283] RSP: 002b:00007f0ffa93e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 848.891269][T20283] RAX: ffffffffffffffda RBX: 00007f0ffc965fa0 RCX: 00007f0ffc6ec819 [ 848.891279][T20283] RDX: 0000200000000580 RSI: 00000000c02c5638 RDI: 0000000000000003 [ 848.891287][T20283] RBP: 00007f0ffa93e090 R08: 0000000000000000 R09: 0000000000000000 [ 848.891295][T20283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.891302][T20283] R13: 00007f0ffc966038 R14: 00007f0ffc965fa0 R15: 00007ffcf9b2a758 [ 848.891321][T20283] [ 954.904422][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 954.904445][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20283/1:b..l [ 954.904474][ C1] rcu: (detected by 1, t=10502 jiffies, g=84737, q=122 ncpus=2) [ 954.904485][ C1] task:syz.5.5461 state:R running task stack:26880 pid:20283 tgid:20282 ppid:15168 task_flags:0x40044c flags:0x00080000 [ 954.904521][ C1] Call Trace: [ 954.904526][ C1] [ 954.904535][ C1] __schedule+0x1553/0x5240 [ 954.904570][ C1] ? __pfx___schedule+0x10/0x10 [ 954.904590][ C1] preempt_schedule_irq+0x4d/0xa0 [ 954.904603][ C1] irqentry_exit+0x599/0x620 [ 954.904616][ C1] ? trace_irq_disable+0x3b/0x150 [ 954.904634][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 954.904648][ C1] RIP: 0010:kasan_check_range+0x90/0x2c0 [ 954.904662][ C1] Code: 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 <4c> 01 fb 41 80 3b 00 0f 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 [ 954.904673][ C1] RSP: 0018:ffffc90005a9f100 EFLAGS: 00000202 [ 954.904683][ C1] RAX: ffffc90005a9f801 RBX: e00006dfff4ac1af RCX: ffffffff81768c6e [ 954.904692][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90005a9f278 [ 954.904700][ C1] RBP: 0000000000000000 R08: ffffc90005a9f287 R09: 1ffff92000b53e50 [ 954.904708][ C1] R10: dffffc0000000000 R11: fffff52000b53e4f R12: 0000000000000002 [ 954.904716][ C1] R13: 1ffff92000b53e47 R14: fffff52000b53e51 R15: 1ffff92000b53e4f [ 954.904729][ C1] ? unwind_next_frame+0xeae/0x23c0 [ 954.904747][ C1] __asan_memset+0x22/0x50 [ 954.904764][ C1] unwind_next_frame+0xeae/0x23c0 [ 954.904779][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 954.904790][ C1] ? free_pgtables+0x836/0xb70 [ 954.904807][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 954.904823][ C1] arch_stack_walk+0x11b/0x150 [ 954.904839][ C1] ? exit_mmap+0x490/0xa10 [ 954.904852][ C1] stack_trace_save+0xa9/0x100 [ 954.904868][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 954.904884][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 954.904901][ C1] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 954.904911][ C1] ? kmem_cache_free+0x159/0x6b0 [ 954.904922][ C1] ? __put_anon_vma+0x12a/0x310 [ 954.904932][ C1] ? unlink_anon_vmas+0x58b/0x730 [ 954.904942][ C1] ? free_pgtables+0x836/0xb70 [ 954.904954][ C1] ? exit_mmap+0x490/0xa10 [ 954.904964][ C1] ? __mmput+0xcb/0x3d0 [ 954.904980][ C1] kasan_save_stack+0x3e/0x60 [ 954.904996][ C1] ? kasan_save_stack+0x3e/0x60 [ 954.905010][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 954.905023][ C1] ? kmem_cache_free+0x4fb/0x6b0 [ 954.905034][ C1] ? __put_anon_vma+0x12a/0x310 [ 954.905043][ C1] ? unlink_anon_vmas+0x58b/0x730 [ 954.905053][ C1] ? free_pgtables+0x836/0xb70 [ 954.905090][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 954.905105][ C1] kmem_cache_free+0x4fb/0x6b0 [ 954.905116][ C1] ? __put_anon_vma+0x12a/0x310 [ 954.905130][ C1] __put_anon_vma+0x12a/0x310 [ 954.905142][ C1] unlink_anon_vmas+0x58b/0x730 [ 954.905158][ C1] free_pgtables+0x836/0xb70 [ 954.905179][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 954.905195][ C1] ? rwbase_write_lock+0x568/0x730 [ 954.905215][ C1] exit_mmap+0x490/0xa10 [ 954.905228][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 954.905238][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 954.905260][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 954.905279][ C1] ? __pfx_exit_aio+0x10/0x10 [ 954.905301][ C1] ? uprobe_clear_state+0x288/0x2a0 [ 954.905322][ C1] __mmput+0xcb/0x3d0 [ 954.905339][ C1] exit_mm+0x168/0x220 [ 954.905354][ C1] do_exit+0x6a2/0x23c0 [ 954.905368][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 954.905382][ C1] ? __pfx_do_exit+0x10/0x10 [ 954.905411][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 954.905426][ C1] ? reacquire_held_locks+0x104/0x190 [ 954.905439][ C1] ? rt_spin_lock+0x1e0/0x400 [ 954.905461][ C1] do_group_exit+0x21b/0x2d0 [ 954.905474][ C1] ? rt_spin_unlock+0x160/0x200 [ 954.905491][ C1] get_signal+0x125c/0x1310 [ 954.905518][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 954.905536][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 954.905555][ C1] ? fput_close_sync+0x11f/0x240 [ 954.905575][ C1] exit_to_user_mode_loop+0x86/0x480 [ 954.905592][ C1] ? rcu_is_watching+0x15/0xb0 [ 954.905608][ C1] do_syscall_64+0x32d/0xf80 [ 954.905620][ C1] ? trace_irq_disable+0x3b/0x150 [ 954.905633][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.905645][ C1] ? clear_bhb_loop+0x40/0x90 [ 954.905659][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.905670][ C1] RIP: 0033:0x7f0ffc6ec819 [ 954.905681][ C1] RSP: 002b:00007f0ffa93e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 954.905693][ C1] RAX: fffffffffffffe00 RBX: 00007f0ffc965fa8 RCX: 00007f0ffc6ec819 [ 954.905701][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0ffc965fa8 [ 954.905708][ C1] RBP: 00007f0ffc965fa0 R08: 0000000000000000 R09: 0000000000000000 [ 954.905716][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.905723][ C1] R13: 00007f0ffc966038 R14: 00007ffcf9b2a670 R15: 00007ffcf9b2a758 [ 954.905740][ C1] [ 954.905746][ C1] rcu: rcu_preempt kthread starved for 10123 jiffies! g84737 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 954.905759][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 954.905765][ C1] rcu: RCU grace-period kthread stack dump: [ 954.905769][ C1] task:rcu_preempt state:R running task stack:27776 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 954.905801][ C1] Call Trace: [ 954.905805][ C1] [ 954.905811][ C1] __schedule+0x1553/0x5240 [ 954.905825][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 954.905846][ C1] ? __pfx___schedule+0x10/0x10 [ 954.905862][ C1] ? schedule+0x90/0x360 [ 954.905875][ C1] schedule+0x164/0x360 [ 954.905887][ C1] schedule_timeout+0x158/0x2c0 [ 954.905906][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 954.905924][ C1] ? __pfx_process_timeout+0x10/0x10 [ 954.905940][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 954.905953][ C1] ? prepare_to_swait_event+0x340/0x370 [ 954.905974][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 954.905986][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 954.906000][ C1] ? rcu_gp_init+0x1313/0x15b0 [ 954.906012][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 954.906024][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 954.906034][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 954.906049][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 954.906064][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 954.906076][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 954.906086][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 954.906099][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 954.906116][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 954.906136][ C1] kthread+0x388/0x470 [ 954.906148][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 954.906158][ C1] ? __pfx_kthread+0x10/0x10 [ 954.906171][ C1] ret_from_fork+0x51e/0xb90 [ 954.906188][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 954.906203][ C1] ? __switch_to+0xc7d/0x1450 [ 954.906219][ C1] ? __pfx_kthread+0x10/0x10 [ 954.906232][ C1] ret_from_fork_asm+0x1a/0x30 [ 954.906252][ C1] [ 954.906256][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 954.906262][ C1] Sending NMI from CPU 1 to CPUs 0: [ 954.906300][ C0] NMI backtrace for cpu 0 SYZFAIL: failed to send rpc fd=3 want=152 sent=0 n=-1 (errno 32: Broken pipe) [ 954.906317][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 954.906341][ C0] Tainted: [L]=SOFTLOCKUP [ 954.906348][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 954.906358][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 954.906377][ C0] Code: ae 5c 02 e9 13 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 ac 25 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 954.906392][ C0] RSP: 0018:ffffffff8da07dc0 EFLAGS: 00000242 [ 954.906408][ C0] RAX: 0000000000a54173 RBX: ffffffff8199715a RCX: 0000000080000001 [ 954.906421][ C0] RDX: 0000000000000001 RSI: ffffffff8d5648ef RDI: ffffffff8ba67680 [ 954.906433][ C0] RBP: ffffffff8da07eb0 R08: ffff8880b8833e1b R09: 1ffff110171067c3 [ 954.906446][ C0] R10: dffffc0000000000 R11: ffffed10171067c4 R12: 0000000000000000 [ 954.906458][ C0] R13: 1ffffffff1b605d8 R14: 0000000000000000 R15: 1ffffffff1b605d8 [ 954.906472][ C0] FS: 0000000000000000(0000) GS:ffff888126336000(0000) knlGS:0000000000000000 [ 954.906487][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.906499][ C0] CR2: 00007fe9e7d99f00 CR3: 000000002a62a000 CR4: 00000000003526f0 [ 954.906518][ C0] Call Trace: [ 954.906525][ C0] [ 954.906532][ C0] default_idle+0x9/0x20 [ 954.906553][ C0] default_idle_call+0x72/0xb0 [ 954.906574][ C0] do_idle+0x36a/0x5f0 [ 954.906597][ C0] ? __pfx_do_idle+0x10/0x10 [ 954.906622][ C0] cpu_startup_entry+0x43/0x60 [ 954.906656][ C0] rest_init+0x2de/0x300 [ 954.906678][ C0] start_kernel+0x385/0x3d0 [ 954.906834][ C0] x86_64_start_reservations+0x24/0x30 [ 954.906856][ C0] x86_64_start_kernel+0x143/0x1c0 [ 954.906878][ C0] common_startup_64+0x13e/0x147 [ 954.906904][ C0] [ 958.875271][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 958.875350][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 958.879998][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 958.880062][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 961.073538][T18700] bond0: (slave syz_tun): Releasing backup interface [ 961.876771][T13355] syz_tun (unregistering): left allmulticast mode [ 961.914986][T13355] bond8: (slave syz_tun): Releasing backup interface [ 962.417320][T13956] bond0: (slave syz_tun): Releasing backup interface [ 962.993768][ T1362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.993795][ T1362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.209377][ T1362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.209404][ T1362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.417275][ T1362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.417302][ T1362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.627579][ T1362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.627608][ T1362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.973692][ T1362] bridge_slave_1: left allmulticast mode [ 963.973725][ T1362] bridge_slave_1: left promiscuous mode [ 963.973998][ T1362] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.048803][ T1362] bridge_slave_0: left allmulticast mode [ 964.048826][ T1362] bridge_slave_0: left promiscuous mode [ 964.048985][ T1362] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.105318][ T1362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.185805][ T1362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.206588][ T1362] bond0 (unregistering): Released all slaves [ 966.384726][ T1362] hsr_slave_0: left promiscuous mode [ 966.425089][ T1362] hsr_slave_1: left promiscuous mode [ 966.425842][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.425860][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.445716][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.445741][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.511070][ T1362] veth1_macvtap: left promiscuous mode [ 966.511141][ T1362] veth0_macvtap: left promiscuous mode [ 966.511297][ T1362] veth1_vlan: left promiscuous mode [ 966.511403][ T1362] veth0_vlan: left promiscuous mode [ 967.188252][ T1362] team0 (unregistering): Port device team_slave_1 removed [ 967.225037][ T1362] team0 (unregistering): Port device team_slave_0 removed [ 968.252525][ T1362] IPVS: stop unused estimator thread 0...